Function at 0x10018b51
Capabilities:
Create thread
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b0
mov dword [ebp - 0x40], edx
mov eax, 0x6bbb3073
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 4], 1
mov dword [ebp - 0x20], 0xce01153a
push ebx
mov dword [ebp - 0x114], eax
xor ebx, ebx
mov dword [ebp - 0x110], eax
push esi
mov dword [ebp - 0x10c], eax
push edi
mov dword [ebp - 0x108], eax
mov edi, ecx
mov dword [ebp - 0x18], ebx
jmp 0x10018bc1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc0], 0x1f94964a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10018bb0
push 3
mov dword [ebp - 0xbc], ebx
pop esi
jmp 0x10018c14
mov dword [ebp - 0x18], ebx
jmp 0x10018be5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x34], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10018bd7
mov dword [ebp - 0x34], ebx
jmp 0x10018c09
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10018c06
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jle 0x10018bf0
inc dword [ebp - 0xbc]
cmp dword [ebp - 0xbc], esi
jle 0x10018bd2
mov dword [ebp - 4], esi
push 5
pop ecx
cmp dword [ebp - 4], ebx
jl 0x10018d32
mov dword [ebp - 8], 0xcafe8b0d
mov dword [ebp - 0xc], 4
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x1c], 0x57a772be
mov dword [ebp - 8], ebx
cmp dword [ebp - 8], esi
jg 0x10018d0f
mov dword [ebp - 0xc], 0xfffffffc
cmp dword [ebp - 8], ebx
jne 0x10018cb6
mov eax, dword [ebp - 8]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 8]
cmp eax, 0x509b9552
mov eax, dword [ebp - 4]
setne cl
mov dword [ebp + eax*4 - 0xc0], ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
sub edx, 0xc010
cmp edx, eax
setne cl
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], ebx
jne 0x10018cb6
mov eax, ebx
jmp 0x10018cb9
xor eax, eax
inc eax
imul eax, eax, 0xfff9
sub eax, dword [ebp - 8]
je 0x10018cce
cmp dword [ebp - 8], ebx
je 0x10018cce
xor eax, eax
inc eax
jmp 0x10018cd0
mov eax, ebx
mov dword [ebp - 0xc], eax
xor edx, edx
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0xc]
cmp ecx, eax
setne dl
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1c], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jle 0x10018c52
push 5
pop ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
dec eax
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x10c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
dec dword [ebp - 4]
jns 0x10018c2b
cmp dword [edi + 0x10], ebx
jne 0x10018d3e
xor al, al
jmp 0x10019ad0
mov eax, dword [ebp - 0x40]
mov edx, ebx
mov dword [eax], ebx
xor eax, eax
inc eax
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x10], ebx
je 0x10018d55
mov edx, eax
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x10]
mov byte [ebp - 0x11], bl
je 0x10018d81
cmp byte [ebp - 0x11], bl
je 0x10018d8e
push ebx
push 0x2654
push ebx
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
jmp 0x10018d8e
cmp byte [ebp - 0x11], bl
je 0x10018d8e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x10], 0xb733c633
mov dword [ebp - 0xc], 8
mov dword [ebp - 0x1c], 0xfffffffa
mov dword [ebp - 0x20], 0x9d70cadd
mov dword [ebp - 4], 0xbc00eadd
mov dword [ebp - 0x24], 0x901516ea
mov dword [ebp - 0x18], ebx
jmp 0x10018dd5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x13c], 0xb6eb6b9d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10018dc4
mov eax, dword [ebp - 0xc]
inc dword [ebp - 0xc]
cmp eax, esi
jae 0x10018dea
xor esi, esi
inc esi
jmp 0x10018dec
mov esi, ebx
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setge dl
add edx, dword [ebp - 0x10]
je 0x10018e1c
mov eax, dword [ebp - 0x20]
xor edx, edx
inc dword [ebp - 0x20]
inc edx
mov dword [ebp - 0x10], edx
xor ecx, ecx
mov eax, dword [ebp - 0x10]
cmp eax, 0xe889
setl cl
cmp ecx, dword [ebp - 4]
jge 0x10018e1e
mov edx, ebx
mov eax, dword [ebp - 4]
xor ecx, ecx
cmp edx, eax
push 0xfffffffffffffff7
setl cl
imul ecx, esi
pop esi
sub ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 4], esi
mov dword [ebp - 0xc], 0x16f93bd5
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0x9f486485
mov dword [ebp - 4], ebx
jmp 0x10018e66
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x134], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x10018e55
mov dword [ebp - 4], ebx
jmp 0x10018e7b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x54], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x10018e71
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10018e90
push ebx
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
mov eax, dword [ebp - 0x134]
xor edx, edx
mov eax, dword [ebp - 0x128]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setge dl
mov dword [ebp - 0xc], edx
xor edx, edx
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0xc]
cmp eax, ecx
mov eax, dword [ebp - 0x54]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x54]
setl cl
xor edx, edx
add ecx, 0xffff0a5e
cmp ecx, eax
mov eax, dword [ebp - 0x134]
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x20]
setl cl
add eax, ecx
xor ecx, ecx
cmp eax, 6
setne cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], 0x1b76e1ee
mov dword [ebp - 8], 0xed9ba07e
mov dword [ebp - 0x10], 0xd9ee1c97
mov dword [ebp - 4], 0xfd77ccca
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 0xfffffffe
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10018f41
push ebx
push 0x9c
push ebx
push ebx
push 0x474
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [ebp - 0x10], 0x85faafe3
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp ecx, eax
setne dl
cmp edx, dword [ebp - 8]
jl 0x10018f66
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 4]
sub eax, 0x1af6658d
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc], 0xc9bf5e4d
mov dword [ebp - 0x10], 0x22e9
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0xc], 0xfffe
mov dword [ebp - 4], ebx
jmp 0x10018fd4
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x30], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], 1
jl 0x10018fca
push 3
mov dword [ebp - 4], ebx
pop esi
jmp 0x10018ff3
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x170], 0xfffffff6
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10018fe2
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x168], eax
mov ecx, dword [ebp - 0x30]
imul ecx, eax
mov eax, dword [ebp - 0x30]
sub ecx, 0x36efa05e
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, 0xc576
sete dl
xor ecx, ecx
sub edx, 0x61a6b719
imul edx, eax
mov eax, dword [ebp - 0x10]
sub edx, eax
mov eax, dword [ebp - 0x10]
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
dec dword [ebp - 0xc]
inc edx
mov dword [ebp - 0x28], 0x2542
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], 0x70c3099c
mov dword [ebp - 0x1c], 0xfd9d0890
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x20], 0x9b69
mov dword [ebp - 0xc], 0xdad816f9
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], ebx
jmp 0x100190b5
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xf8], 0x3718bd85
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x100190a4
mov dword [ebp - 4], ebx
jmp 0x100190cc
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xcc], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x100190bf
mov dword [ebp - 0xc], 0xfffffff9
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
dec dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xc4]
jne 0x10019146
cmp dword [ebp - 0xf4], ebx
jne 0x10019148
mov eax, ebx
imul eax, eax, 0xf455
push 4
pop ecx
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], ebx
jmp 0x10019170
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x198], 0xe48d327c
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001915f
mov dword [ebp - 4], ebx
jmp 0x1001918b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa0], 0xdb505206
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001917a
mov dword [ebp - 0x9c], ebx
jmp 0x100191ab
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x198], ebx
inc dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], ecx
jl 0x10019198
mov dword [ebp - 0x18], 0xfffffff8
cmp dword [ebp - 0x18], 0xfffffffa
jne 0x100191ec
mov dword [ebp - 0x1c], 0x3707
cmp dword [ebp - 0x1c], ebx
jne 0x100191e6
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x100191dd
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffa
je 0x100191c0
xor edx, edx
push 4
inc edx
pop ecx
mov dword [ebp - 0x1c], 0x4aca62e2
mov dword [ebp - 8], 0x32b1cecb
mov dword [ebp - 0xc], 0xfffffffa
mov dword [ebp - 4], ebx
jmp 0x10019210
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x38], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10019206
mov dword [ebp - 4], ebx
jmp 0x1001922b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x188], 0x8d239be9
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001921a
mov dword [ebp - 8], ebx
cmp dword [ebp - 8], ebx
jl 0x10019375
mov dword [ebp - 0x18], 0x9f7fd1e8
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], 0x145c
mov dword [ebp - 0x1c], 0xa4087b33
mov dword [ebp - 0x18], ebx
jmp 0x10019266
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x164], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10019259
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x100192ea
mov dword [ebp - 4], 0xb9dd952e
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0x253a34c8
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], ebx
jl 0x100192a6
mov dword [ebp - 0x20], 0xffffffff
inc dword [ebp - 0x20]
dec dword [ebp - 4]
jns 0x10019297
mov dword [ebp - 0x10], ebx
jmp 0x100192dd
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], ebx
jl 0x100192da
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x100192d5
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x100192d0
push ebx
push 0x1981
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
dec dword [ebp - 0x20]
jns 0x100192bb
dec dword [ebp - 4]
jns 0x100192b3
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x100192ab
dec dword [ebp - 0x18]
jns 0x10019273
xor edx, edx
inc edx
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x164], eax
test eax, eax
je 0x10019306
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xc], eax
jge 0x10019308
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0xc]
setl cl
xor edx, edx
cmp ecx, 0xb2bc
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, 7
sbb eax, eax
neg eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x38]
imul eax, dword [ebp - 0x38], 0xc28c
test eax, eax
jne 0x10019352
cmp dword [ebp - 0x18], ebx
jne 0x10019352
xor edx, edx
mov eax, ebx
inc edx
jmp 0x10019357
xor edx, edx
inc edx
mov eax, edx
mov dword [ebp - 0x17c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, eax
mov eax, dword [ebp - 8]
push 4
mov dword [ebp + eax*4 - 0x38], ecx
dec dword [ebp - 8]
pop ecx
jns 0x1001923c
mov dword [ebp - 0x1c], 0x18e8dce9
mov dword [ebp - 0x1c], 0x8acc4b7c
mov dword [ebp - 0x10], ebx
jmp 0x10019396
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x4c], 0x7ddc85f7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10019388
mov dword [ebp - 0x44], ebx
jmp 0x100193e6
mov dword [ebp - 0x24], edx
xor ecx, ecx
mov dword [ebp - 0x1c], 0xc58bdfad
mov eax, dword [ebp - 0x44]
cmp eax, 0xfffffffd
setge cl
cmp dword [ebp - 0x44], ecx
jne 0x100193c7
mov eax, dword [ebp - 0x44]
mov ecx, ebx
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
je 0x100193c9
mov ecx, edx
mov eax, dword [ebp - 0x44]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
push 1
setge dl
xor ecx, ecx
cmp eax, edx
pop edx
setg cl
mov dword [ebp - 0x1c], ecx
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xfffffff4
jl 0x100193a0
mov dword [ebp - 0x1c], 0xfffffffb
xor edx, edx
push 4
pop ecx
mov dword [ebp - 0x1c], ecx
inc edx
mov dword [ebp - 0x1c], edx
push 5
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0xe7924a04
mov dword [ebp - 0x1c], 0xe0ad50a0
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x1c], 0x48eca1ae
mov dword [ebp - 0x1c], 0xd2d97b6e
mov dword [ebp - 0x1c], 0xc31937da
mov dword [ebp - 0x1c], 0x43232af7
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], 0xad706983
mov dword [ebp - 0x1c], 0xff0f9ab1
mov dword [ebp - 0x1c], 0xc7d87010
mov dword [ebp - 0x1c], 0x61f0846d
mov dword [ebp - 8], ebx
jmp 0x1001946b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x124], 0x327c
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x1001945a
mov dword [ebp - 8], ebx
jmp 0x10019486
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x148], 0x44d9913d
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x10019475
mov dword [ebp - 8], ebx
jmp 0x100194a1
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x178], 0xaa3630dd
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x10019490
mov dword [ebp - 8], ebx
jmp 0x100194b6
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x5c], ebx
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x100194ac
mov dword [ebp - 4], esi
cmp dword [ebp - 4], ebx
jl 0x100195ee
mov dword [ebp - 0x18], 0x3edb3952
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x100194f2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x158], 0xc40a98ce
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100194e1
mov eax, dword [ebp - 4]
push 0xfffffffffffffff7
pop ecx
mov eax, dword [ebp + eax*4 - 0x124]
mov dword [ebp - 0x10], 0x74d
mov eax, dword [ebp - 0x158]
sub ecx, eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
add edx, ecx
dec dword [ebp - 0xc]
cmp eax, edx
jge 0x10019529
xor edx, edx
inc edx
mov ecx, edx
jmp 0x1001952e
xor edx, edx
mov ecx, ebx
inc edx
mov eax, 0xc193
sub eax, ecx
xor ecx, ecx
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x124]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x124]
cmp eax, edx
sete cl
cmp ecx, 0x66593c39
jg 0x10019571
mov eax, edx
cmp dword [ebp - 0x20], ebx
jne 0x10019573
mov eax, ebx
cmp eax, dword [ebp - 0x18]
jne 0x10019587
cmp dword [ebp - 0x14c], ebx
je 0x10019587
mov ecx, edx
cmp dword [ebp - 0x20], ebx
jne 0x10019589
mov ecx, ebx
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x124]
add eax, ecx
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x100195e2
mov dword [ebp - 0x1c], 0xfffffffd
mov dword [ebp - 0x10], ebx
jmp 0x100195cf
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x90], 5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x100195be
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x18]
jns 0x100195b2
dec dword [ebp - 4]
push 4
pop ecx
jns 0x100194c7
dec dword [ebp - 0x5c]
mov dword [ebp - 0x18], 8
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x20], 0x76270e7a
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1001969a
mov dword [ebp - 4], 0xa8fecf79
mov dword [ebp - 8], 0x84edc022
mov dword [ebp - 0x10], ebx
jmp 0x10019632
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x58], 0x41fd9d08
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10019624
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x58], eax
imul eax, dword [ebp - 0x58], 0x3b6f
mov edx, dword [ebp - 4]
push 1
dec eax
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
imul edx, eax
mov eax, dword [ebp - 0xc]
cmp edx, eax
setge cl
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
mov dword [ebp - 4], ecx
xor ecx, ecx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x20]
sub edx, eax
mov eax, dword [ebp - 8]
cmp edx, eax
pop edx
setl cl
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x13
jle 0x10019611
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x100196b8
push 0x162b
push ebx
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
cmp dword [edi + 0x14], 0x10
jb 0x100196c2
mov ecx, dword [edi]
jmp 0x100196c4
mov ecx, edi
cmp dword [edi + 0x14], 0x10
mov dword [ebp - 0x3c], ecx
jb 0x100196d1
mov edx, dword [edi]
jmp 0x100196d3
mov edx, edi
mov eax, dword [edi + 0x10]
add eax, edx
cmp ecx, eax
je 0x100197bd
mov al, byte [ecx]
cmp al, 0x30
jl 0x10019701
cmp al, 0x39
jg 0x10019701
push ebx
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.1001af99
mov ecx, dword [ebp - 0x3c]
add esp, 0xc
inc ecx
jmp 0x100196c4
mov eax, dword [ebp - 0x40]
mov dword [eax], ebx
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0x20], 0x4d0289a6
mov dword [ebp - 0x28], 0xa75a
mov dword [ebp - 0xc], 0x89b4
mov dword [ebp - 8], ebx
jmp 0x10019738
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x104], 0x9d19ac19
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10019727
mov dword [ebp - 8], ebx
jmp 0x1001974f
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x144], ebx
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x10019742
mov dword [ebp - 8], ebx
jmp 0x1001976b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xec], 0xd3ecf04b
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x1001975a
mov eax, dword [ebp - 0xc]
push 5
pop ecx
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x140], eax
jne 0x10019787
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0x100]
dec dword [ebp - 0xec]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], 1
jmp 0x10018d37
mov dword [ebp - 4], 0x4cd
xor edx, edx
mov dword [ebp - 0x20], 0xffffffff
inc edx
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], 2
jge 0x100197e6
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x8c], edx
inc dword [ebp - 4]
jmp 0x100197d1
mov dword [ebp - 4], ebx
jmp 0x100197fc
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xd8], 6
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x100197eb
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], ebx
jmp 0x10019923
mov dword [ebp - 0xc], 0x4d513c61
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x10], 0xaf072071
mov dword [ebp - 0x28], 0x46a1c17c
mov dword [ebp - 8], ebx
jmp 0x1001983e
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xe0], 0x7ab61b58
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001982d
mov dword [ebp - 8], ebx
jmp 0x10019856
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1b0], esi
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10019849
mov dword [ebp - 8], ebx
jmp 0x10019871
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x84], 0xcdd7
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x10019860
cmp dword [ebp - 0x88], ebx
je 0x100198b4
mov ecx, dword [ebp - 0xd0]
neg ecx
sbb ecx, ecx
xor eax, eax
add ecx, 0xac0be208
cmp ecx, 4
setle al
xor edx, edx
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xd8]
cmp eax, ecx
setne dl
cmp edx, dword [ebp - 0x10]
jge 0x100198b4
xor edx, edx
inc edx
jmp 0x100198b6
mov edx, ebx
mov eax, dword [ebp - 0xd8]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xe0]
setg cl
sub ecx, eax
xor eax, eax
cmp ecx, 0xfffffff6
setne al
add eax, eax
cmp eax, dword [ebp - 0x88]
jne 0x100198e0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x80]
dec dword [ebp - 0x80]
cmp eax, 1
je 0x100198f0
xor eax, eax
inc eax
jmp 0x100198f2
mov eax, ebx
mov dword [ebp - 0xdc], eax
xor ecx, ecx
add eax, 0xfffffffc
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x8c]
cmp eax, edx
sete cl
xor edx, edx
sub ecx, esi
mov dword [ebp - 0x10], ecx
inc dword [ebp - 4]
inc edx
cmp dword [ebp - 4], edx
jle 0x10019810
mov dword [ebp - 8], 0xcb363f9e
mov dword [ebp - 0xc], 0x7909
mov dword [ebp - 0x18], 0x27f08e22
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x24], 0xb6890635
mov dword [ebp - 4], ebx
jmp 0x1001995e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x68], 0x9d221e9c
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10019950
mov dword [ebp - 4], ebx
jmp 0x10019976
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x7c], 8
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10019968
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
inc dword [ebp - 0x68]
mov esi, dword [ebp - 0x68]
cmp dword [ebp - 8], 0x9beab1d6
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
mov eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
setl cl
xor edx, edx
cmp esi, ecx
setle dl
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 8]
add eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x24]
jg 0x10019a6b
mov dword [ebp - 4], 0xfffffffe
push 3
pop esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0xc], 0x7ad46d2
mov dword [ebp - 0x28], 0x2129e5e2
mov dword [ebp - 0x1c], 0xd96456cf
mov dword [ebp - 0x10], ebx
jmp 0x10019a05
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1a4], 1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100199f4
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xc]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
add edx, 0xbc66c7
cmp edx, eax
mov eax, dword [ebp - 0xc]
setg cl
xor edx, edx
cmp ecx, eax
setne dl
add edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
neg edx
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x20], edx
inc dword [ebp - 0x1c]
jmp 0x10019ace
xor ecx, ecx
mov dword [ebp - 0x20], ebx
inc ecx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x68]
jg 0x10019a8b
cmp dword [ebp - 0x18], ebx
je 0x10019a8b
mov edx, ecx
cmp dword [ebp - 0xc], ebx
jne 0x10019a8d
mov edx, ebx
mov eax, dword [ebp - 0x68]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x7c]
setne cl
xor edx, edx
sub ecx, eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
imul ecx, dword [ebp - 0x20], 0xffa2
mov eax, dword [ebp - 0x28]
cmp ecx, eax
lea ecx, [ebp - 0x29]
push ecx
setle dl
push 0x746e
mov dword [ebp - 0x20], edx
push ebx
mov byte [ebp - 0x29], bl
call fcn.1001b04d
add esp, 0xc
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret