Function at 0x3325b0
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x70
push 0xffffffffffffffff
push 0x359b16
mov eax, dword fs:[0]
push eax
sub esp, 0x25c
mov eax, dword [0x368218]
xor eax, ebp
mov dword [ebp + 0x6c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x7c]
mov dword [0x36913c], eax
mov ecx, 8
shl ecx, 0
mov edx, dword [ebp + 0x78]
lea eax, [edx + ecx + 0x78]
mov dword [ebp - 0x224], eax
mov ecx, dword [ebp - 0x224]
mov edx, dword [ebp + 0x7c]
add edx, dword [ecx]
mov dword [ebp - 0x30], edx
jmp 0x332616
mov eax, dword [ebp - 0x30]
add eax, 0x14
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
cmp dword [ecx + 0xc], 0
je 0x333c76
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp + 0x7c]
add eax, dword [edx + 0xc]
mov dword [ebp + 0x2c], eax
mov ecx, dword [ebp + 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp + 0x28], eax
push str.OLEAUT32.dll
lea ecx, [ebp + 0x3c]
call fcn.003382c0
mov dword [ebp - 4], 0
push 0x35b508
lea ecx, [ebp + 0x54]
call fcn.003382c0
mov byte [ebp - 4], 1
push str.izeof
lea ecx, [ebp + 0x54]
call fcn.003390c0
push str.Resource
lea ecx, [ebp + 0x54]
call fcn.003390c0
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp + 0x7c]
add eax, dword [edx + 0x10]
mov dword [ebp + 0x30], eax
jmp 0x332692
mov ecx, dword [ebp + 0x30]
add ecx, 4
mov dword [ebp + 0x30], ecx
mov edx, dword [ebp + 0x30]
cmp dword [edx], 0
je 0x333c56
mov eax, dword [ebp + 0x30]
mov ecx, dword [ebp + 0x7c]
add ecx, dword [eax]
mov dword [ebp - 0x260], ecx
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
and eax, 0x80000000
je 0x3326be
mov byte [ebp + 0x27], 1
jmp 0x3326c2
mov byte [ebp + 0x27], 0
mov cl, byte [ebp + 0x27]
mov byte [ebp + 0x3b], cl
movzx edx, byte [ebp + 0x3b]
test edx, edx
je 0x3326e0
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax]
and ecx, 0xffff
mov dword [ebp + 0x34], ecx
jmp 0x3326ec
mov edx, dword [ebp - 0x260]
add edx, 2
mov dword [ebp + 0x34], edx
mov eax, dword [ebp + 0x34]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp + 0x30]
mov dword [edx], eax
movzx eax, byte [ebp + 0x3b]
test eax, eax
jne 0x332837
mov dword [ebp - 0x148], 0x35b528
mov ecx, dword [ebp + 0x2c]
mov dword [ebp - 0xb4], ecx
mov edx, dword [ebp - 0xb4]
mov al, byte [edx]
mov byte [ebp - 0x19], al
mov ecx, dword [ebp - 0x148]
cmp al, byte [ecx]
jne 0x332770
cmp byte [ebp - 0x19], 0
je 0x332764
mov edx, dword [ebp - 0xb4]
mov al, byte [edx + 1]
mov byte [ebp - 0x20], al
mov ecx, dword [ebp - 0x148]
cmp al, byte [ecx + 1]
jne 0x332770
add dword [ebp - 0xb4], 2
add dword [ebp - 0x148], 2
cmp byte [ebp - 0x20], 0
jne 0x33271e
mov dword [ebp - 0x1cc], 0
jmp 0x33277b
sbb edx, edx
or edx, 1
mov dword [ebp - 0x1cc], edx
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
jne 0x332837
mov dword [ebp - 0x140], str.CoRegisterClassObject
mov ecx, dword [ebp + 0x34]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x3c]
mov al, byte [edx]
mov byte [ebp - 0x22], al
mov ecx, dword [ebp - 0x140]
cmp al, byte [ecx]
jne 0x3327ed
cmp byte [ebp - 0x22], 0
je 0x3327e1
mov edx, dword [ebp - 0x3c]
mov al, byte [edx + 1]
mov byte [ebp - 0x24], al
mov ecx, dword [ebp - 0x140]
cmp al, byte [ecx + 1]
jne 0x3327ed
add dword [ebp - 0x3c], 2
add dword [ebp - 0x140], 2
cmp byte [ebp - 0x24], 0
jne 0x3327a4
mov dword [ebp - 0x1d4], 0
jmp 0x3327f8
sbb edx, edx
or edx, 1
mov dword [ebp - 0x1d4], edx
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jne 0x332837
mov ecx, dword [ebp + 0x34]
push ecx
mov edx, dword [ebp + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369130
call fcn.00336e20
add esp, 8
mov eax, dword [ebp + 0x30]
mov dword [eax], 0x332040
jmp 0x333c51
movzx ecx, byte [ebp + 0x3b]
test ecx, ecx
jne 0x332963
mov dword [ebp - 0x44], str.ole32.dll
mov edx, dword [ebp + 0x2c]
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0xc4]
mov cl, byte [eax]
mov byte [ebp - 0x26], cl
mov edx, dword [ebp - 0x44]
cmp cl, byte [edx]
jne 0x33289c
cmp byte [ebp - 0x26], 0
je 0x332890
mov eax, dword [ebp - 0xc4]
mov cl, byte [eax + 1]
mov byte [ebp - 0x2b], cl
mov edx, dword [ebp - 0x44]
cmp cl, byte [edx + 1]
jne 0x33289c
add dword [ebp - 0xc4], 2
add dword [ebp - 0x44], 2
cmp byte [ebp - 0x2b], 0
jne 0x332853
mov dword [ebp - 0x1d0], 0
jmp 0x3328a7
sbb eax, eax
or eax, 1
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1e4], ecx
cmp dword [ebp - 0x1e4], 0
jne 0x332963
mov dword [ebp - 0x4c], str.CoCreateInstance
mov edx, dword [ebp + 0x34]
mov dword [ebp - 0x144], edx
mov eax, dword [ebp - 0x144]
mov cl, byte [eax]
mov byte [ebp - 0x2a], cl
mov edx, dword [ebp - 0x4c]
cmp cl, byte [edx]
jne 0x332919
cmp byte [ebp - 0x2a], 0
je 0x33290d
mov eax, dword [ebp - 0x144]
mov cl, byte [eax + 1]
mov byte [ebp - 0x1b], cl
mov edx, dword [ebp - 0x4c]
cmp cl, byte [edx + 1]
jne 0x332919
add dword [ebp - 0x144], 2
add dword [ebp - 0x4c], 2
cmp byte [ebp - 0x1b], 0
jne 0x3328d0
mov dword [ebp - 0x14c], 0
jmp 0x332924
sbb eax, eax
or eax, 1
mov dword [ebp - 0x14c], eax
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x264], ecx
cmp dword [ebp - 0x264], 0
jne 0x332963
mov edx, dword [ebp + 0x34]
push edx
mov eax, dword [ebp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x36912c
call fcn.00336e10
add esp, 8
mov ecx, dword [ebp + 0x30]
mov dword [ecx], 0x331fc0
jmp 0x333c51
movzx edx, byte [ebp + 0x3b]
test edx, edx
jne 0x332a8f
mov dword [ebp - 0x54], 0x35b56c
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 0xcc]
mov dl, byte [ecx]
mov byte [ebp + 0x23], dl
mov eax, dword [ebp - 0x54]
cmp dl, byte [eax]
jne 0x3329c8
cmp byte [ebp + 0x23], 0
je 0x3329bc
mov ecx, dword [ebp - 0xcc]
mov dl, byte [ecx + 1]
mov byte [ebp + 1], dl
mov eax, dword [ebp - 0x54]
cmp dl, byte [eax + 1]
jne 0x3329c8
add dword [ebp - 0xcc], 2
add dword [ebp - 0x54], 2
cmp byte [ebp + 1], 0
jne 0x33297f
mov dword [ebp - 0x158], 0
jmp 0x3329d3
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x158], ecx
mov edx, dword [ebp - 0x158]
mov dword [ebp - 0x1ec], edx
cmp dword [ebp - 0x1ec], 0
jne 0x332a8f
mov dword [ebp - 0x5c], str.LoadIconW
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
mov dl, byte [ecx]
mov byte [ebp + 0x21], dl
mov eax, dword [ebp - 0x5c]
cmp dl, byte [eax]
jne 0x332a45
cmp byte [ebp + 0x21], 0
je 0x332a39
mov ecx, dword [ebp - 0x10c]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x28], dl
mov eax, dword [ebp - 0x5c]
cmp dl, byte [eax + 1]
jne 0x332a45
add dword [ebp - 0x10c], 2
add dword [ebp - 0x5c], 2
cmp byte [ebp - 0x28], 0
jne 0x3329fc
mov dword [ebp - 0x198], 0
jmp 0x332a50
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x198]
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 0
jne 0x332a8f
mov eax, dword [ebp + 0x34]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369124
call fcn.00336e80
add esp, 8
mov edx, dword [ebp + 0x30]
mov dword [edx], 0x331d00
jmp 0x333c51
movzx eax, byte [ebp + 0x3b]
test eax, eax
jne 0x332bbb
mov dword [ebp - 0x64], 0x35b584
mov ecx, dword [ebp + 0x2c]
mov dword [ebp - 0xd4], ecx
mov edx, dword [ebp - 0xd4]
mov al, byte [edx]
mov byte [ebp + 0x1f], al
mov ecx, dword [ebp - 0x64]
cmp al, byte [ecx]
jne 0x332af4
cmp byte [ebp + 0x1f], 0
je 0x332ae8
mov edx, dword [ebp - 0xd4]
mov al, byte [edx + 1]
mov byte [ebp - 0xd], al
mov ecx, dword [ebp - 0x64]
cmp al, byte [ecx + 1]
jne 0x332af4
add dword [ebp - 0xd4], 2
add dword [ebp - 0x64], 2
cmp byte [ebp - 0xd], 0
jne 0x332aab
mov dword [ebp - 0x160], 0
jmp 0x332aff
sbb edx, edx
or edx, 1
mov dword [ebp - 0x160], edx
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
jne 0x332bbb
mov dword [ebp - 0x6c], str.LoadIconA
mov ecx, dword [ebp + 0x34]
mov dword [ebp - 0x12c], ecx
mov edx, dword [ebp - 0x12c]
mov al, byte [edx]
mov byte [ebp + 0x1d], al
mov ecx, dword [ebp - 0x6c]
cmp al, byte [ecx]
jne 0x332b71
cmp byte [ebp + 0x1d], 0
je 0x332b65
mov edx, dword [ebp - 0x12c]
mov al, byte [edx + 1]
mov byte [ebp - 0x1d], al
mov ecx, dword [ebp - 0x6c]
cmp al, byte [ecx + 1]
jne 0x332b71
add dword [ebp - 0x12c], 2
add dword [ebp - 0x6c], 2
cmp byte [ebp - 0x1d], 0
jne 0x332b28
mov dword [ebp - 0x1b8], 0
jmp 0x332b7c
sbb edx, edx
or edx, 1
mov dword [ebp - 0x1b8], edx
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jne 0x332bbb
mov ecx, dword [ebp + 0x34]
push ecx
mov edx, dword [ebp + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369120
call fcn.00336e70
add esp, 8
mov eax, dword [ebp + 0x30]
mov dword [eax], 0x331cc0
jmp 0x333c51
movzx ecx, byte [ebp + 0x3b]
test ecx, ecx
jne 0x332ce7
mov dword [ebp - 0x74], 0x35b59c
mov edx, dword [ebp + 0x2c]
mov dword [ebp - 0xdc], edx
mov eax, dword [ebp - 0xdc]
mov cl, byte [eax]
mov byte [ebp + 0x1b], cl
mov edx, dword [ebp - 0x74]
cmp cl, byte [edx]
jne 0x332c20
cmp byte [ebp + 0x1b], 0
je 0x332c14
mov eax, dword [ebp - 0xdc]
mov cl, byte [eax + 1]
mov byte [ebp - 0xf], cl
mov edx, dword [ebp - 0x74]
cmp cl, byte [edx + 1]
jne 0x332c20
add dword [ebp - 0xdc], 2
add dword [ebp - 0x74], 2
cmp byte [ebp - 0xf], 0
jne 0x332bd7
mov dword [ebp - 0x168], 0
jmp 0x332c2b
sbb eax, eax
or eax, 1
mov dword [ebp - 0x168], eax
mov ecx, dword [ebp - 0x168]
mov dword [ebp - 0x1fc], ecx
cmp dword [ebp - 0x1fc], 0
jne 0x332ce7
mov dword [ebp - 0x7c], 0x35b5ac
mov edx, dword [ebp + 0x34]
mov dword [ebp - 0x114], edx
mov eax, dword [ebp - 0x114]
mov cl, byte [eax]
mov byte [ebp + 0x19], cl
mov edx, dword [ebp - 0x7c]
cmp cl, byte [edx]
jne 0x332c9d
cmp byte [ebp + 0x19], 0
je 0x332c91
mov eax, dword [ebp - 0x114]
mov cl, byte [eax + 1]
mov byte [ebp - 0x25], cl
mov edx, dword [ebp - 0x7c]
cmp cl, byte [edx + 1]
jne 0x332c9d
add dword [ebp - 0x114], 2
add dword [ebp - 0x7c], 2
cmp byte [ebp - 0x25], 0
jne 0x332c54
mov dword [ebp - 0x1a0], 0
jmp 0x332ca8
sbb eax, eax
or eax, 1
mov dword [ebp - 0x1a0], eax
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp - 0x234], ecx
cmp dword [ebp - 0x234], 0
jne 0x332ce7
mov edx, dword [ebp + 0x34]
push edx
mov eax, dword [ebp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369180
call fcn.00336eb0
add esp, 8
mov ecx, dword [ebp + 0x30]
mov dword [ecx], 0x331c30
jmp 0x333c51
movzx edx, byte [ebp + 0x3b]
test edx, edx
jne 0x332e2f
mov dword [ebp - 0x84], 0x35b5bc
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xe4], eax
mov ecx, dword [ebp - 0xe4]
mov dl, byte [ecx]
mov byte [ebp + 0x17], dl
mov eax, dword [ebp - 0x84]
cmp dl, byte [eax]
jne 0x332d58
cmp byte [ebp + 0x17], 0
je 0x332d4c
mov ecx, dword [ebp - 0xe4]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x11], dl
mov eax, dword [ebp - 0x84]
cmp dl, byte [eax + 1]
jne 0x332d58
add dword [ebp - 0xe4], 2
add dword [ebp - 0x84], 2
cmp byte [ebp - 0x11], 0
jne 0x332d06
mov dword [ebp - 0x170], 0
jmp 0x332d63
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x170], ecx
mov edx, dword [ebp - 0x170]
mov dword [ebp - 0x204], edx
cmp dword [ebp - 0x204], 0
jne 0x332e2f
lea ecx, [ebp + 0x54]
call fcn.0033bda0
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
mov dl, byte [ecx]
mov byte [ebp + 0x15], dl
mov eax, dword [ebp - 0x8c]
cmp dl, byte [eax]
jne 0x332de5
cmp byte [ebp + 0x15], 0
je 0x332dd9
mov ecx, dword [ebp - 0x13c]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x1f], dl
mov eax, dword [ebp - 0x8c]
cmp dl, byte [eax + 1]
jne 0x332de5
add dword [ebp - 0x13c], 2
add dword [ebp - 0x8c], 2
cmp byte [ebp - 0x1f], 0
jne 0x332d93
mov dword [ebp - 0x1c8], 0
jmp 0x332df0
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x1c8], ecx
mov edx, dword [ebp - 0x1c8]
mov dword [ebp - 0x25c], edx
cmp dword [ebp - 0x25c], 0
jne 0x332e2f
mov eax, dword [ebp + 0x34]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369184
call fcn.00336e40
add esp, 8
mov edx, dword [ebp + 0x30]
mov dword [edx], 0x331c70
jmp 0x333c51
movzx eax, byte [ebp + 0x3b]
test eax, eax
jne 0x332f73
mov dword [ebp - 0x94], 0x35b5cc
mov ecx, dword [ebp + 0x2c]
mov dword [ebp - 0xec], ecx
mov edx, dword [ebp - 0xec]
mov al, byte [edx]
mov byte [ebp + 0x13], al
mov ecx, dword [ebp - 0x94]
cmp al, byte [ecx]
jne 0x332ea0
cmp byte [ebp + 0x13], 0
je 0x332e94
mov edx, dword [ebp - 0xec]
mov al, byte [edx + 1]
mov byte [ebp - 0x13], al
mov ecx, dword [ebp - 0x94]
cmp al, byte [ecx + 1]
jne 0x332ea0
add dword [ebp - 0xec], 2
add dword [ebp - 0x94], 2
cmp byte [ebp - 0x13], 0
jne 0x332e4e
mov dword [ebp - 0x178], 0
jmp 0x332eab
sbb edx, edx
or edx, 1
mov dword [ebp - 0x178], edx
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jne 0x332f73
mov dword [ebp - 0x9c], str.FindResourceA
mov ecx, dword [ebp + 0x34]
mov dword [ebp - 0x11c], ecx
mov edx, dword [ebp - 0x11c]
mov al, byte [edx]
mov byte [ebp + 0x11], al
mov ecx, dword [ebp - 0x9c]
cmp al, byte [ecx]
jne 0x332f29
cmp byte [ebp + 0x11], 0
je 0x332f1d
mov edx, dword [ebp - 0x11c]
mov al, byte [edx + 1]
mov byte [ebp - 0x29], al
mov ecx, dword [ebp - 0x9c]
cmp al, byte [ecx + 1]
jne 0x332f29
add dword [ebp - 0x11c], 2
add dword [ebp - 0x9c], 2
cmp byte [ebp - 0x29], 0
jne 0x332ed7
mov dword [ebp - 0x1a8], 0
jmp 0x332f34
sbb edx, edx
or edx, 1
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
jne 0x332f73
mov ecx, dword [ebp + 0x34]
push ecx
mov edx, dword [ebp + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369150
call fcn.00336ea0
add esp, 8
mov eax, dword [ebp + 0x30]
mov dword [eax], 0x331770
jmp 0x333c51
movzx ecx, byte [ebp + 0x3b]
test ecx, ecx
jne 0x3330b7
mov dword [ebp - 0xa4], 0x35b5ec
mov edx, dword [ebp + 0x2c]
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0xf4]
mov cl, byte [eax]
mov byte [ebp + 0xf], cl
mov edx, dword [ebp - 0xa4]
cmp cl, byte [edx]
jne 0x332fe4
cmp byte [ebp + 0xf], 0
je 0x332fd8
mov eax, dword [ebp - 0xf4]
mov cl, byte [eax + 1]
mov byte [ebp - 0x15], cl
mov edx, dword [ebp - 0xa4]
cmp cl, byte [edx + 1]
jne 0x332fe4
add dword [ebp - 0xf4], 2
add dword [ebp - 0xa4], 2
cmp byte [ebp - 0x15], 0
jne 0x332f92
mov dword [ebp - 0x180], 0
jmp 0x332fef
sbb eax, eax
or eax, 1
mov dword [ebp - 0x180], eax
mov ecx, dword [ebp - 0x180]
mov dword [ebp - 0x214], ecx
cmp dword [ebp - 0x214], 0
jne 0x3330b7
mov dword [ebp - 0xac], str.FindResourceW
mov edx, dword [ebp + 0x34]
mov dword [ebp - 0x134], edx
mov eax, dword [ebp - 0x134]
mov cl, byte [eax]
mov byte [ebp + 0xd], cl
mov edx, dword [ebp - 0xac]
cmp cl, byte [edx]
jne 0x33306d
cmp byte [ebp + 0xd], 0
je 0x333061
mov eax, dword [ebp - 0x134]
mov cl, byte [eax + 1]
mov byte [ebp - 0x21], cl
mov edx, dword [ebp - 0xac]
cmp cl, byte [edx + 1]
jne 0x33306d
add dword [ebp - 0x134], 2
add dword [ebp - 0xac], 2
cmp byte [ebp - 0x21], 0
jne 0x33301b
mov dword [ebp - 0x1c0], 0
jmp 0x333078
sbb eax, eax
or eax, 1
mov dword [ebp - 0x1c0], eax
mov ecx, dword [ebp - 0x1c0]
mov dword [ebp - 0x254], ecx
cmp dword [ebp - 0x254], 0
jne 0x3330b7
mov edx, dword [ebp + 0x34]
push edx
mov eax, dword [ebp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369154
call fcn.00336ea0
add esp, 8
mov ecx, dword [ebp + 0x30]
mov dword [ecx], 0x3317b0
jmp 0x333c51
movzx edx, byte [ebp + 0x3b]
test edx, edx
jne 0x3331ef
mov dword [ebp - 0x34], 0x35b60c
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xfc], eax
mov ecx, dword [ebp - 0xfc]
mov dl, byte [ecx]
mov byte [ebp + 0xb], dl
mov eax, dword [ebp - 0x34]
cmp dl, byte [eax]
jne 0x33311c
cmp byte [ebp + 0xb], 0
je 0x333110
mov ecx, dword [ebp - 0xfc]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x17], dl
mov eax, dword [ebp - 0x34]
cmp dl, byte [eax + 1]
jne 0x33311c
add dword [ebp - 0xfc], 2
add dword [ebp - 0x34], 2
cmp byte [ebp - 0x17], 0
jne 0x3330d3
mov dword [ebp - 0x188], 0
jmp 0x333127
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x188], ecx
mov edx, dword [ebp - 0x188]
mov dword [ebp - 0x21c], edx
cmp dword [ebp - 0x21c], 0
jne 0x3331ef
mov dword [ebp - 0xbc], str.CreateFileA
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x124]
mov dl, byte [ecx]
mov byte [ebp + 9], dl
mov eax, dword [ebp - 0xbc]
cmp dl, byte [eax]
jne 0x3331a5
cmp byte [ebp + 9], 0
je 0x333199
mov ecx, dword [ebp - 0x124]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x27], dl
mov eax, dword [ebp - 0xbc]
cmp dl, byte [eax + 1]
jne 0x3331a5
add dword [ebp - 0x124], 2
add dword [ebp - 0xbc], 2
cmp byte [ebp - 0x27], 0
jne 0x333153
mov dword [ebp - 0x1b0], 0
jmp 0x3331b0
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x1b0], ecx
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0
jne 0x3331ef
mov eax, dword [ebp + 0x34]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369164
call fcn.00336ec0
add esp, 8
mov edx, dword [ebp + 0x30]
mov dword [edx], 0x331990
jmp 0x333c51
movzx eax, byte [ebp + 0x3b]
test eax, eax
jne 0x33330f
mov dword [ebp - 0x38], 0x35b628
mov ecx, dword [ebp + 0x2c]
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x104]
mov al, byte [edx]
mov byte [ebp + 7], al
mov ecx, dword [ebp - 0x38]
cmp al, byte [ecx]
jne 0x333254
cmp byte [ebp + 7], 0
je 0x333248
mov edx, dword [ebp - 0x104]
mov al, byte [edx + 1]
mov byte [ebp + 0x26], al
mov ecx, dword [ebp - 0x38]
cmp al, byte [ecx + 1]
jne 0x333254
add dword [ebp - 0x104], 2
add dword [ebp - 0x38], 2
cmp byte [ebp + 0x26], 0
jne 0x33320b
mov dword [ebp - 0x190], 0
jmp 0x33325f
sbb edx, edx
or edx, 1
mov dword [ebp - 0x190], edx
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
jne 0x33330f
mov dword [ebp - 0x48], 0x35b638
mov ecx, dword [ebp + 0x34]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x40]
mov al, byte [edx]
mov byte [ebp + 5], al
mov ecx, dword [ebp - 0x48]
cmp al, byte [ecx]
jne 0x3332c5
cmp byte [ebp + 5], 0
je 0x3332b9
mov edx, dword [ebp - 0x40]
mov al, byte [edx + 1]
mov byte [ebp - 0x23], al
mov ecx, dword [ebp - 0x48]
cmp al, byte [ecx + 1]
jne 0x3332c5
add dword [ebp - 0x40], 2
add dword [ebp - 0x48], 2
cmp byte [ebp - 0x23], 0
jne 0x333285
mov dword [ebp - 0x150], 0
jmp 0x3332d0
sbb edx, edx
or edx, 1
mov dword [ebp - 0x150], edx
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jne 0x33330f
mov ecx, dword [ebp + 0x34]
push ecx
mov edx, dword [ebp + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369160
call fcn.00336ed0
add esp, 8
mov eax, dword [ebp + 0x30]
mov dword [eax], 0x331890
jmp 0x333c51
movzx ecx, byte [ebp + 0x3b]
test ecx, ecx
jne 0x333423
mov dword [ebp - 0x58], 0x35b644
mov edx, dword [ebp + 0x2c]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x50]
mov cl, byte [eax]
mov byte [ebp + 3], cl
mov edx, dword [ebp - 0x58]
cmp cl, byte [edx]
jne 0x333368
cmp byte [ebp + 3], 0
je 0x33335c
mov eax, dword [ebp - 0x50]
mov cl, byte [eax + 1]
mov byte [ebp + 0x25], cl
mov edx, dword [ebp - 0x58]
cmp cl, byte [edx + 1]
jne 0x333368
add dword [ebp - 0x50], 2
add dword [ebp - 0x58], 2
cmp byte [ebp + 0x25], 0
jne 0x333328
mov dword [ebp - 0x154], 0
jmp 0x333373
sbb eax, eax
or eax, 1
mov dword [ebp - 0x154], eax
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x1e8], ecx
cmp dword [ebp - 0x1e8], 0
jne 0x333423
mov dword [ebp - 0x68], str.SetFilePointer
mov edx, dword [ebp + 0x34]
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x60]
mov cl, byte [eax]
mov byte [ebp + 0x24], cl
mov edx, dword [ebp - 0x68]
cmp cl, byte [edx]
jne 0x3333d9
cmp byte [ebp + 0x24], 0
je 0x3333cd
mov eax, dword [ebp - 0x60]
mov cl, byte [eax + 1]
mov byte [ebp + 0x22], cl
mov edx, dword [ebp - 0x68]
cmp cl, byte [edx + 1]
jne 0x3333d9
add dword [ebp - 0x60], 2
add dword [ebp - 0x68], 2
cmp byte [ebp + 0x22], 0
jne 0x333399
mov dword [ebp - 0x15c], 0
jmp 0x3333e4
sbb eax, eax
or eax, 1
mov dword [ebp - 0x15c], eax
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x1f0], ecx
cmp dword [ebp - 0x1f0], 0
jne 0x333423
mov edx, dword [ebp + 0x34]
push edx
mov eax, dword [ebp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369148
call fcn.00336e60
add esp, 8
mov ecx, dword [ebp + 0x30]
mov dword [ecx], 0x3316a0
jmp 0x333c51
movzx edx, byte [ebp + 0x3b]
test edx, edx
jne 0x333543
mov dword [ebp - 0x78], 0x35b664
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x70]
mov dl, byte [ecx]
mov byte [ebp + 0x20], dl
mov eax, dword [ebp - 0x78]
cmp dl, byte [eax]
jne 0x33347c
cmp byte [ebp + 0x20], 0
je 0x333470
mov ecx, dword [ebp - 0x70]
mov dl, byte [ecx + 1]
mov byte [ebp + 0x1e], dl
mov eax, dword [ebp - 0x78]
cmp dl, byte [eax + 1]
jne 0x33347c
add dword [ebp - 0x70], 2
add dword [ebp - 0x78], 2
cmp byte [ebp + 0x1e], 0
jne 0x33343c
mov dword [ebp - 0x164], 0
jmp 0x333487
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x164], ecx
mov edx, dword [ebp - 0x164]
mov dword [ebp - 0x1f8], edx
cmp dword [ebp - 0x1f8], 0
jne 0x333543
mov dword [ebp - 0x88], 0x35b674
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x80]
mov dl, byte [ecx]
mov byte [ebp + 0x1c], dl
mov eax, dword [ebp - 0x88]
cmp dl, byte [eax]
jne 0x3334f9
cmp byte [ebp + 0x1c], 0
je 0x3334ed
mov ecx, dword [ebp - 0x80]
mov dl, byte [ecx + 1]
mov byte [ebp + 0x1a], dl
mov eax, dword [ebp - 0x88]
cmp dl, byte [eax + 1]
jne 0x3334f9
add dword [ebp - 0x80], 2
add dword [ebp - 0x88], 2
cmp byte [ebp + 0x1a], 0
jne 0x3334b0
mov dword [ebp - 0x16c], 0
jmp 0x333504
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x16c], ecx
mov edx, dword [ebp - 0x16c]
mov dword [ebp - 0x200], edx
cmp dword [ebp - 0x200], 0
jne 0x333543
mov eax, dword [ebp + 0x34]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x36916c
call fcn.00336e00
add esp, 8
mov edx, dword [ebp + 0x30]
mov dword [edx], 0x331b40
jmp 0x333c51
movzx eax, byte [ebp + 0x3b]
test eax, eax
jne 0x333687
mov dword [ebp - 0x98], 0x35b680
mov ecx, dword [ebp + 0x2c]
mov dword [ebp - 0x90], ecx
mov edx, dword [ebp - 0x90]
mov al, byte [edx]
mov byte [ebp + 0x18], al
mov ecx, dword [ebp - 0x98]
cmp al, byte [ecx]
jne 0x3335b4
cmp byte [ebp + 0x18], 0
je 0x3335a8
mov edx, dword [ebp - 0x90]
mov al, byte [edx + 1]
mov byte [ebp + 0x16], al
mov ecx, dword [ebp - 0x98]
cmp al, byte [ecx + 1]
jne 0x3335b4
add dword [ebp - 0x90], 2
add dword [ebp - 0x98], 2
cmp byte [ebp + 0x16], 0
jne 0x333562
mov dword [ebp - 0x174], 0
jmp 0x3335bf
sbb edx, edx
or edx, 1
mov dword [ebp - 0x174], edx
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jne 0x333687
mov dword [ebp - 0xa8], str.ReadFile
mov ecx, dword [ebp + 0x34]
mov dword [ebp - 0xa0], ecx
mov edx, dword [ebp - 0xa0]
mov al, byte [edx]
mov byte [ebp + 0x14], al
mov ecx, dword [ebp - 0xa8]
cmp al, byte [ecx]
jne 0x33363d
cmp byte [ebp + 0x14], 0
je 0x333631
mov edx, dword [ebp - 0xa0]
mov al, byte [edx + 1]
mov byte [ebp + 0x12], al
mov ecx, dword [ebp - 0xa8]
cmp al, byte [ecx + 1]
jne 0x33363d
add dword [ebp - 0xa0], 2
add dword [ebp - 0xa8], 2
cmp byte [ebp + 0x12], 0
jne 0x3335eb
mov dword [ebp - 0x17c], 0
jmp 0x333648
sbb edx, edx
or edx, 1
mov dword [ebp - 0x17c], edx
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
jne 0x333687
mov ecx, dword [ebp + 0x34]
push ecx
mov edx, dword [ebp + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369168
call fcn.00336df0
add esp, 8
mov eax, dword [ebp + 0x30]
mov dword [eax], 0x331a80
jmp 0x333c51
movzx ecx, byte [ebp + 0x3b]
test ecx, ecx
jne 0x3337cb
mov dword [ebp - 0xb8], 0x35b69c
mov edx, dword [ebp + 0x2c]
mov dword [ebp - 0xb0], edx
mov eax, dword [ebp - 0xb0]
mov cl, byte [eax]
mov byte [ebp + 0x10], cl
mov edx, dword [ebp - 0xb8]
cmp cl, byte [edx]
jne 0x3336f8
cmp byte [ebp + 0x10], 0
je 0x3336ec
mov eax, dword [ebp - 0xb0]
mov cl, byte [eax + 1]
mov byte [ebp + 0xe], cl
mov edx, dword [ebp - 0xb8]
cmp cl, byte [edx + 1]
jne 0x3336f8
add dword [ebp - 0xb0], 2
add dword [ebp - 0xb8], 2
cmp byte [ebp + 0xe], 0
jne 0x3336a6
mov dword [ebp - 0x184], 0
jmp 0x333703
sbb eax, eax
or eax, 1
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x184]
mov dword [ebp - 0x218], ecx
cmp dword [ebp - 0x218], 0
jne 0x3337cb
mov dword [ebp - 0xc8], str.GetModuleHandleA
mov edx, dword [ebp + 0x34]
mov dword [ebp - 0xc0], edx
mov eax, dword [ebp - 0xc0]
mov cl, byte [eax]
mov byte [ebp + 0xc], cl
mov edx, dword [ebp - 0xc8]
cmp cl, byte [edx]
jne 0x333781
cmp byte [ebp + 0xc], 0
je 0x333775
mov eax, dword [ebp - 0xc0]
mov cl, byte [eax + 1]
mov byte [ebp + 0xa], cl
mov edx, dword [ebp - 0xc8]
cmp cl, byte [edx + 1]
jne 0x333781
add dword [ebp - 0xc0], 2
add dword [ebp - 0xc8], 2
cmp byte [ebp + 0xa], 0
jne 0x33372f
mov dword [ebp - 0x18c], 0
jmp 0x33378c
sbb eax, eax
or eax, 1
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x220], ecx
cmp dword [ebp - 0x220], 0
jne 0x3337cb
mov edx, dword [ebp + 0x34]
push edx
mov eax, dword [ebp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369188
call fcn.00336e90
add esp, 8
mov ecx, dword [ebp + 0x30]
mov dword [ecx], 0x331c00
jmp 0x333c51
movzx edx, byte [ebp + 0x3b]
test edx, edx
jne 0x33390f
mov dword [ebp - 0xd8], 0x35b6c0
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0xd0]
mov dl, byte [ecx]
mov byte [ebp + 8], dl
mov eax, dword [ebp - 0xd8]
cmp dl, byte [eax]
jne 0x33383c
cmp byte [ebp + 8], 0
je 0x333830
mov ecx, dword [ebp - 0xd0]
mov dl, byte [ecx + 1]
mov byte [ebp + 6], dl
mov eax, dword [ebp - 0xd8]
cmp dl, byte [eax + 1]
jne 0x33383c
add dword [ebp - 0xd0], 2
add dword [ebp - 0xd8], 2
cmp byte [ebp + 6], 0
jne 0x3337ea
mov dword [ebp - 0x194], 0
jmp 0x333847
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x194], ecx
mov edx, dword [ebp - 0x194]
mov dword [ebp - 0x228], edx
cmp dword [ebp - 0x228], 0
jne 0x33390f
mov dword [ebp - 0xe8], 0x35b6d0
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebp - 0xe0]
mov dl, byte [ecx]
mov byte [ebp + 4], dl
mov eax, dword [ebp - 0xe8]
cmp dl, byte [eax]
jne 0x3338c5
cmp byte [ebp + 4], 0
je 0x3338b9
mov ecx, dword [ebp - 0xe0]
mov dl, byte [ecx + 1]
mov byte [ebp + 2], dl
mov eax, dword [ebp - 0xe8]
cmp dl, byte [eax + 1]
jne 0x3338c5
add dword [ebp - 0xe0], 2
add dword [ebp - 0xe8], 2
cmp byte [ebp + 2], 0
jne 0x333873
mov dword [ebp - 0x19c], 0
jmp 0x3338d0
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x19c], ecx
mov edx, dword [ebp - 0x19c]
mov dword [ebp - 0x230], edx
cmp dword [ebp - 0x230], 0
jne 0x33390f
mov eax, dword [ebp + 0x34]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x36914c
call fcn.00336e90
add esp, 8
mov edx, dword [ebp + 0x30]
mov dword [edx], 0x331720
jmp 0x333c51
movzx eax, byte [ebp + 0x3b]
test eax, eax
jne 0x333a53
mov dword [ebp - 0xf8], 0x35b6e4
mov ecx, dword [ebp + 0x2c]
mov dword [ebp - 0xf0], ecx
mov edx, dword [ebp - 0xf0]
mov al, byte [edx]
mov byte [ebp], al
mov ecx, dword [ebp - 0xf8]
cmp al, byte [ecx]
jne 0x333980
cmp byte [ebp], 0
je 0x333974
mov edx, dword [ebp - 0xf0]
mov al, byte [edx + 1]
mov byte [ebp - 0xe], al
mov ecx, dword [ebp - 0xf8]
cmp al, byte [ecx + 1]
jne 0x333980
add dword [ebp - 0xf0], 2
add dword [ebp - 0xf8], 2
cmp byte [ebp - 0xe], 0
jne 0x33392e
mov dword [ebp - 0x1a4], 0
jmp 0x33398b
sbb edx, edx
or edx, 1
mov dword [ebp - 0x1a4], edx
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jne 0x333a53
mov dword [ebp - 0x108], 0x35b6f4
mov ecx, dword [ebp + 0x34]
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0x100]
mov al, byte [edx]
mov byte [ebp - 0x10], al
mov ecx, dword [ebp - 0x108]
cmp al, byte [ecx]
jne 0x333a09
cmp byte [ebp - 0x10], 0
je 0x3339fd
mov edx, dword [ebp - 0x100]
mov al, byte [edx + 1]
mov byte [ebp - 0x12], al
mov ecx, dword [ebp - 0x108]
cmp al, byte [ecx + 1]
jne 0x333a09
add dword [ebp - 0x100], 2
add dword [ebp - 0x108], 2
cmp byte [ebp - 0x12], 0
jne 0x3339b7
mov dword [ebp - 0x1ac], 0
jmp 0x333a14
sbb edx, edx
or edx, 1
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jne 0x333a53
mov ecx, dword [ebp + 0x34]
push ecx
mov edx, dword [ebp + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x36915c
call fcn.00336e30
add esp, 8
mov eax, dword [ebp + 0x30]
mov dword [eax], 0x331840
jmp 0x333c51
movzx ecx, byte [ebp + 0x3b]
test ecx, ecx
jne 0x333b97
mov dword [ebp - 0x118], 0x35b708
mov edx, dword [ebp + 0x2c]
mov dword [ebp - 0x110], edx
mov eax, dword [ebp - 0x110]
mov cl, byte [eax]
mov byte [ebp - 0x14], cl
mov edx, dword [ebp - 0x118]
cmp cl, byte [edx]
jne 0x333ac4
cmp byte [ebp - 0x14], 0
je 0x333ab8
mov eax, dword [ebp - 0x110]
mov cl, byte [eax + 1]
mov byte [ebp - 0x16], cl
mov edx, dword [ebp - 0x118]
cmp cl, byte [edx + 1]
jne 0x333ac4
add dword [ebp - 0x110], 2
add dword [ebp - 0x118], 2
cmp byte [ebp - 0x16], 0
jne 0x333a72
mov dword [ebp - 0x1b4], 0
jmp 0x333acf
sbb eax, eax
or eax, 1
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x248], ecx
cmp dword [ebp - 0x248], 0
jne 0x333b97
mov dword [ebp - 0x128], 0x35b718
mov edx, dword [ebp + 0x34]
mov dword [ebp - 0x120], edx
mov eax, dword [ebp - 0x120]
mov cl, byte [eax]
mov byte [ebp - 0x18], cl
mov edx, dword [ebp - 0x128]
cmp cl, byte [edx]
jne 0x333b4d
cmp byte [ebp - 0x18], 0
je 0x333b41
mov eax, dword [ebp - 0x120]
mov cl, byte [eax + 1]
mov byte [ebp - 0x1a], cl
mov edx, dword [ebp - 0x128]
cmp cl, byte [edx + 1]
jne 0x333b4d
add dword [ebp - 0x120], 2
add dword [ebp - 0x128], 2
cmp byte [ebp - 0x1a], 0
jne 0x333afb
mov dword [ebp - 0x1bc], 0
jmp 0x333b58
sbb eax, eax
or eax, 1
mov dword [ebp - 0x1bc], eax
mov ecx, dword [ebp - 0x1bc]
mov dword [ebp - 0x250], ecx
cmp dword [ebp - 0x250], 0
jne 0x333b97
mov edx, dword [ebp + 0x34]
push edx
mov eax, dword [ebp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push 0x369158
call fcn.00336e50
add esp, 8
mov ecx, dword [ebp + 0x30]
mov dword [ecx], 0x3317f0
jmp 0x333c51
movzx edx, byte [ebp + 0x3b]
test edx, edx
je 0x333c51
lea ecx, [ebp + 0x3c]
call fcn.0033bda0
mov dword [ebp - 0x138], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x130], eax
mov ecx, dword [ebp - 0x130]
mov dl, byte [ecx]
mov byte [ebp - 0x1c], dl
mov eax, dword [ebp - 0x138]
cmp dl, byte [eax]
jne 0x333c0c
cmp byte [ebp - 0x1c], 0
je 0x333c00
mov ecx, dword [ebp - 0x130]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x1e], dl
mov eax, dword [ebp - 0x138]
cmp dl, byte [eax + 1]
jne 0x333c0c
add dword [ebp - 0x130], 2
add dword [ebp - 0x138], 2
cmp byte [ebp - 0x1e], 0
jne 0x333bba
mov dword [ebp - 0x1c4], 0
jmp 0x333c17
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x1c4], ecx
mov edx, dword [ebp - 0x1c4]
mov dword [ebp - 0x258], edx
cmp dword [ebp - 0x258], 0
jne 0x333c51
cmp dword [ebp + 0x34], 0xa1
jne 0x333c51
mov eax, dword [ebp + 0x34]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x369128], eax
mov edx, dword [ebp + 0x30]
mov dword [edx], 0x331df0
jmp 0x332689
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x54]
call fcn.003387d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x3c]
call fcn.003387d0
jmp 0x33260d
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp + 0x6c]
xor ecx, ebp
call fcn.003414d3
add ebp, 0x70
mov esp, ebp
pop ebp
ret