Function at 0x1001ae94
Capabilities:
Connect pipe
Get common file path
Get geographical location
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005b453
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xa4c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x44], 0x2ba39464
mov dword [ebp - 0x640], 1
mov dword [ebp - 0x2d8], 0x24c6
mov dword [ebp - 0x5dc], str.hhfsbk_drzvaaiq_abnkpor_yjhw_asojbrs_fveugkroz_relkygey_cbxzhggha_sdec_wplfejd_zbgor_kfoigpt_dyklsazgb
cmp dword [ebp - 0x2d8], 0x2690
jle 0x1001af61
and dword [ebp - 0x248], 0
jmp 0x1001af00
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x472e
jge 0x1001af61
and dword [ebp - 0x270], 0
jmp 0x1001af22
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x6990
jge 0x1001af5f
mov eax, dword [ebp - 0x248]
and eax, dword [ebp - 0x270]
cdq
mov dword [ebp - 0x654], eax
mov dword [ebp - 0x650], edx
push dword [ebp - 0x650]
push dword [ebp - 0x654]
mov ecx, 0x10073e78
call fcn.1000383a
jmp 0x1001af15
jmp 0x1001aef3
and dword [ebp - 4], 0
cmp dword [ebp - 0x2d8], 0x220a
jge 0x1001af81
mov edx, dword [ebp - 0x5dc]
mov ecx, 0x10073e78
call fcn.100059c3
jmp 0x1001af9d
or dword [ebp - 4], 0xffffffff
jmp 0x1001afa7
mov dword [ebp - 0x278], 0
jmp 0x1001afc0
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 4
jge 0x1001afdc
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0x7a0], 0x10c9
jmp 0x1001afb3
mov dword [ebp - 0x44], 3
jmp 0x1001afec
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1001b0ef
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1001b014
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x7a0]
mov dword [ebp - 0x908], eax
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp + eax*4 - 0x7a0], 0x1e27c
test eax, eax
je 0x1001b043
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x7a0], 0
jne 0x1001b04d
cmp dword [ebp - 0x44], 0
jne 0x1001b04d
xor eax, eax
je 0x1001b069
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7a0], 0
je 0x1001b069
mov dword [ebp - 0x558], 1
jmp 0x1001b070
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x7a0]
cmp dword [ebp - 0x558], eax
jge 0x1001b08e
mov dword [ebp - 0x560], 1
jmp 0x1001b095
and dword [ebp - 0x560], 0
imul eax, dword [ebp - 0x560], 0xfffa
push 4
pop ecx
shl ecx, 1
cmp dword [ebp + ecx - 0x7a0], eax
jge 0x1001b0b9
mov dword [ebp - 0x568], 1
jmp 0x1001b0c0
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x568], eax
jle 0x1001b0d7
mov dword [ebp - 0x574], 1
jmp 0x1001b0de
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x640], eax
jmp 0x1001afe5
cmp dword [0x10139034], 0
jne 0x1001e73c
mov dword [ebp - 0x80], 3
mov dword [ebp - 0x88], 0xffffffff
mov dword [ebp - 0x90], 1
mov dword [ebp - 0x778], 0xc0a1033
mov dword [ebp - 0x8fc], 0x40c88307
mov dword [ebp - 0x8a8], 1
mov dword [ebp - 0x93c], 0xf4fc6a3f
mov dword [ebp - 0x8b0], 0x9c81b934
mov dword [ebp - 0x22c], 0
jmp 0x1001b162
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 4
jge 0x1001b17e
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0xa5c], 0xc927db40
jmp 0x1001b155
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x88], 0
jmp 0x1001b1a0
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xffffffef
je 0x1001b746
mov dword [ebp - 0x56c], 0x32c8
mov dword [ebp - 0x648], str.jnagrufw_biipki_dndsvkqz_izn_eoqjtupl
cmp dword [ebp - 0x56c], 0x3591
jle 0x1001b25f
push 0x5f8
push 0x22bf
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
and dword [ebp - 0x20c], 0
jmp 0x1001b1fe
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x20e1
jge 0x1001b25f
and dword [ebp - 0x15c], 0
jmp 0x1001b220
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x6f84
jge 0x1001b25d
mov eax, dword [ebp - 0x20c]
add eax, dword [ebp - 0x15c]
cdq
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x65c], edx
push dword [ebp - 0x65c]
push dword [ebp - 0x660]
mov ecx, 0x10073e78
call fcn.1000383a
jmp 0x1001b213
jmp 0x1001b1f1
mov dword [ebp - 4], 2
cmp dword [ebp - 0x56c], 0x2ff8
jge 0x1001b282
mov edx, dword [ebp - 0x648]
mov ecx, 0x10073e78
call fcn.100059c3
jmp 0x1001b29e
or dword [ebp - 4], 0xffffffff
jmp 0x1001b2a8
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x904], 0x256fae7a
mov dword [ebp - 0x8b8], 0xfffffff9
mov dword [ebp - 0x250], 0xfffffffe
mov dword [ebp - 0x5d4], 0xffffffff
mov dword [ebp - 0x544], 0x64c11610
mov dword [ebp - 0x150], 0
jmp 0x1001b2fd
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 4
jge 0x1001b319
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x774], 0xfffffff8
jmp 0x1001b2f0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x774]
mov dword [ebp - 0x92c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x774]
cmp eax, dword [ebp - 0x80]
jl 0x1001b349
mov dword [ebp - 0x550], 1
jmp 0x1001b350
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x550], eax
jle 0x1001b367
mov eax, 0xc895
test eax, eax
je 0x1001b383
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x774], 0
je 0x1001b383
mov dword [ebp - 0x2dc], 1
jmp 0x1001b38a
and dword [ebp - 0x2dc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x774]
cmp dword [ebp - 0x2dc], eax
jge 0x1001b3aa
mov dword [ebp - 0x70c], 1
jmp 0x1001b3b1
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x8c0], eax
xor eax, eax
inc eax
je 0x1001b56b
mov dword [ebp - 0x764], 2
mov dword [ebp - 0x164], 0
jmp 0x1001b3e6
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x1001b402
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x724], 0xfffffffa
jmp 0x1001b3d9
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x724]
cmp ecx, dword [ebp + eax - 0x774]
jg 0x1001b429
mov dword [ebp - 0x714], 1
jmp 0x1001b430
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x80]
je 0x1001b44d
mov dword [ebp - 0x75c], 1
jmp 0x1001b454
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x8c8], eax
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x80]
jl 0x1001b477
mov dword [ebp - 0x43c], 1
jmp 0x1001b47e
and dword [ebp - 0x43c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x724]
imul eax, dword [ebp - 0x43c]
test eax, eax
je 0x1001b4b1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x724], 0
je 0x1001b4b1
mov dword [ebp - 0x2e4], 1
jmp 0x1001b4b8
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0
je 0x1001b4d4
cmp dword [ebp - 0x764], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x724]
cmp eax, dword [ebp - 0x88]
jge 0x1001b4f5
mov dword [ebp - 0x2ec], 1
jmp 0x1001b4fc
and dword [ebp - 0x2ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x724]
cmp dword [ebp - 0x2ec], eax
je 0x1001b51d
mov dword [ebp - 0x444], 1
jmp 0x1001b524
and dword [ebp - 0x444], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x774]
imul eax, dword [ebp - 0x444]
test eax, eax
je 0x1001b556
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x774], 0
je 0x1001b556
mov dword [ebp - 0x2f4], 1
jmp 0x1001b55d
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x778], eax
jmp 0x1001b5e2
mov dword [ebp - 0x958], 0x21ddbc75
mov dword [ebp - 0x8d0], 0
mov dword [ebp - 0x914], 3
mov dword [ebp - 0x90], 0
jmp 0x1001b5a2
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jg 0x1001b5e2
mov dword [ebp - 0x8d8], 0
mov dword [ebp - 0x848], 0xfffffffe
mov dword [ebp - 0x89c], 0xe1734826
mov dword [ebp - 0x8a4], 0xffffffff
mov eax, dword [ebp - 0x544]
inc eax
mov dword [ebp - 0x544], eax
jmp 0x1001b595
mov dword [ebp - 0x2fc], 0x700e
mov dword [ebp - 0x638], str.enyajyv_hllzdjbkz_ifcko_cuaav_rfumhsubh_zefdtkq_xyims_qvyuveo_ldyrjbj_etksip_qmnqher_nmkxsxbx
cmp dword [ebp - 0x2fc], 0x7271
jle 0x1001b6ac
and dword [ebp - 0x214], 0
jmp 0x1001b61c
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x5e4c
jge 0x1001b6ac
and dword [ebp - 0x16c], 0
jmp 0x1001b642
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x399
jge 0x1001b6a7
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x16c]
sar eax, cl
cdq
mov dword [ebp - 0x66c], eax
mov dword [ebp - 0x668], edx
push dword [ebp - 0x668]
push dword [ebp - 0x66c]
lea ecx, [ebp - 0x9e0]
call fcn.10001aa4
pop ecx
pop ecx
mov dword [ebp - 0x780], eax
mov ecx, dword [ebp - 0x780]
call fcn.1000381a
push eax
call fcn.10043cef
pop ecx
lea ecx, [ebp - 0x9e0]
call fcn.10003810
jmp 0x1001b635
jmp 0x1001b60f
mov dword [ebp - 0x250], 0
jmp 0x1001b6c5
mov eax, dword [ebp - 0x250]
dec eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0xfffffffa
jge 0x1001b6fc
mov dword [ebp - 0x6f0], 0xfffffffe
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x8ac], eax
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x8b4], eax
mov dword [ebp - 0x5d4], 0
jmp 0x1001b6b8
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2fc], 0x6cab
jge 0x1001b71b
push dword [ebp - 0x638]
call fcn.10043cef
pop ecx
jmp 0x1001b737
or dword [ebp - 4], 0xffffffff
jmp 0x1001b741
jmp 0x1001b193
mov dword [ebp - 0x21c], 0x17571177
mov dword [ebp - 0x174], 0
jmp 0x1001b769
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x1001b785
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x970], 0xffff
jmp 0x1001b75c
mov dword [ebp - 0x21c], 0
jmp 0x1001b79e
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0xe
jge 0x1001bb13
mov dword [ebp - 0xf0], 0xe1e2c0d3
mov dword [ebp - 0xf0], 1
jmp 0x1001b7ce
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jl 0x1001bb03
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x17c], 0
jmp 0x1001b7fe
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jge 0x1001b81a
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x7ac], 0xfffffff9
jmp 0x1001b7f1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7ac], 1
jmp 0x1001b848
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7ac]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7ac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7ac], 0
jl 0x1001b876
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x1001b874
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
jmp 0x1001b82d
mov dword [ebp - 0x744], 0x1412
cmp dword [ebp - 0x744], 0xebb
jge 0x1001ba86
mov dword [ebp - 0x8bc], 0xa
lea eax, [ebp - 0x6d0]
push eax
lea eax, [ebp - 0x5e4]
push eax
push str._d__d
call fcn.10043abb
add esp, 0xc
mov byte [ebp - 0x7dc], 0
xor eax, eax
lea edi, [ebp - 0x7db]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
mov byte [ebp - 0x7e8], 0
xor eax, eax
lea edi, [ebp - 0x7e7]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosb byte es:[edi], al
mov dword [ebp - 0x98], 0xa
mov dword [ebp - 0xa0], 0xa
and dword [ebp - 0x28c], 0
jmp 0x1001b903
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
cmp eax, dword [ebp - 0x5e4]
jge 0x1001b968
lea eax, [ebp - 0x2a8]
push eax
push 0x10063554
call fcn.10043abb
pop ecx
pop ecx
mov eax, dword [ebp - 0x2a8]
mov byte [ebp + eax - 0x7dc], 1
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x2a8]
jge 0x1001b94e
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x44c], eax
jmp 0x1001b95a
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x98], eax
jmp 0x1001b8f6
and dword [ebp - 0x2b0], 0
jmp 0x1001b97e
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0x6d0]
jge 0x1001b9e3
lea eax, [ebp - 0x2c4]
push eax
push 0x10063554
call fcn.10043abb
pop ecx
pop ecx
mov eax, dword [ebp - 0x2c4]
mov byte [ebp + eax - 0x7e8], 1
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x2c4]
jge 0x1001b9c9
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x304], eax
jmp 0x1001b9d5
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0xa0], eax
jmp 0x1001b971
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0xa0]
jle 0x1001ba15
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0xa0], eax
and dword [ebp - 0xc8], 0
jmp 0x1001ba2b
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xa
jge 0x1001ba6c
mov eax, dword [ebp - 0xc8]
movzx eax, byte [ebp + eax - 0x7dc]
test eax, eax
je 0x1001ba6a
mov eax, dword [ebp - 0xc8]
movzx eax, byte [ebp + eax - 0x7e8]
test eax, eax
je 0x1001ba6a
push dword [ebp - 0xc8]
push 0x10062d88
call fcn.10043cef
pop ecx
pop ecx
jmp 0x1001ba1e
imul eax, dword [ebp - 0x98], 0xa
add eax, dword [ebp - 0xa0]
push eax
push 0x10062d88
call fcn.10043cef
pop ecx
pop ecx
mov dword [ebp - 0x258], 0
jmp 0x1001ba9f
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 1
jg 0x1001bafe
mov dword [ebp - 0x184], 0xf6802998
mov dword [ebp - 0x184], 0
jmp 0x1001bacb
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jg 0x1001bafc
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x1001bafa
push 0
push 0x5bd
push 0
push 0xc85
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
jmp 0x1001babe
jmp 0x1001ba92
jmp 0x1001b7c1
cmp dword [ebp - 0xf0], 0
je 0x1001bb0e
jmp 0x1001bb13
jmp 0x1001b791
mov dword [ebp - 0x18c], 0x17571177
mov dword [ebp - 0x224], 0
jmp 0x1001bb36
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 2
jge 0x1001bb52
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x998], 0xffff
jmp 0x1001bb29
mov dword [ebp - 0x18c], 0
jmp 0x1001bb6b
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xe
jge 0x1001bdb0
mov dword [ebp - 0x4f4], 0x2d90
mov dword [ebp - 0x6ec], str.gogksk_qobpyhco_zrr
cmp dword [ebp - 0x4f4], 0x2e06
jle 0x1001bc0f
and dword [ebp - 0x260], 0
jmp 0x1001bbae
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x2b74
jge 0x1001bc0f
and dword [ebp - 0x194], 0
jmp 0x1001bbd0
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x55e2
jge 0x1001bc0d
mov eax, dword [ebp - 0x260]
add eax, dword [ebp - 0x194]
cdq
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x674], edx
push dword [ebp - 0x674]
push dword [ebp - 0x678]
mov ecx, 0x10073e78
call fcn.1000383a
jmp 0x1001bbc3
jmp 0x1001bba1
mov dword [ebp - 0xe8], 0xe1e2c0d3
mov dword [ebp - 4], 6
cmp dword [ebp - 0x4f4], 0x29eb
jge 0x1001bc3c
mov edx, dword [ebp - 0x6ec]
mov ecx, 0x10073e78
call fcn.100059c3
jmp 0x1001bc58
or dword [ebp - 4], 0xffffffff
jmp 0x1001bc62
mov dword [ebp - 0xe8], 1
jmp 0x1001bc7b
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x1001bda0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x268], 0
jmp 0x1001bcab
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 3
jge 0x1001bcc7
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0x7d0], 0xfffffff9
jmp 0x1001bc9e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7d0], 1
jmp 0x1001bcf5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7d0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7d0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7d0], 0
jl 0x1001bd23
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x1001bd21
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
jmp 0x1001bcda
mov dword [ebp - 0x19c], 0
jmp 0x1001bd3c
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jg 0x1001bd9b
mov dword [ebp - 0x26c], 0xf6802998
mov dword [ebp - 0x26c], 0
jmp 0x1001bd68
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 1
jg 0x1001bd99
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1001bd97
push 0
push 0x5bd
push 0
push 0xc85
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
jmp 0x1001bd5b
jmp 0x1001bd2f
jmp 0x1001bc6e
cmp dword [ebp - 0xe8], 0
je 0x1001bdab
jmp 0x1001bdb0
jmp 0x1001bb5e
mov byte [ebp - 0x128], 4
mov byte [ebp - 0x127], 0x3b
mov byte [ebp - 0x126], 3
mov byte [ebp - 0x125], 0xb
mov byte [ebp - 0x124], 0xa
mov byte [ebp - 0x123], 2
mov byte [ebp - 0x122], 2
mov byte [ebp - 0x121], 0x1e
mov byte [ebp - 0x120], 6
mov byte [ebp - 0x11f], 0x41
mov byte [ebp - 0x11e], 9
mov byte [ebp - 0x11d], 0x57
mov byte [ebp - 0x11c], 0xb
mov byte [ebp - 0x11b], 8
mov byte [ebp - 0x11a], 0
mov byte [ebp - 0x119], 0x27
mov byte [ebp - 0x118], 8
mov byte [ebp - 0x117], 0x65
mov byte [ebp - 0x116], 1
mov byte [ebp - 0x115], 0x4b
mov byte [ebp - 0x114], 5
mov byte [ebp - 0x113], 9
mov byte [ebp - 0x112], 7
mov byte [ebp - 0x111], 0x5e
mov dword [ebp - 0x6f4], 0
mov dword [ebp - 0x20], 0
jmp 0x1001be72
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1001be85
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x30], 0
jmp 0x1001be6b
mov dword [ebp - 0x20], 0
jmp 0x1001be95
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1001beab
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x288], 0
jmp 0x1001be8e
mov dword [ebp - 0x20], 0
jmp 0x1001bebb
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x1001bed1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x818], 0x4491d0b
jmp 0x1001beb4
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x288], 0
jmp 0x1001beff
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x288]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x288], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x288], 1
jge 0x1001bf26
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x288]
mov dword [ebp + eax*4 - 0x30], 0
jmp 0x1001bee4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x8c4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x288]
mov dword [ebp - 0x8cc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x288]
mov dword [ebp - 0x8d4], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x288]
cmp ecx, dword [ebp + eax - 0x30]
jg 0x1001bf81
mov dword [ebp - 0x30c], 1
jmp 0x1001bf88
and dword [ebp - 0x30c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x30c], eax
jl 0x1001bfa6
mov dword [ebp - 0x2cc], 1
jmp 0x1001bfad
and dword [ebp - 0x2cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp + eax - 0x288], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x2cc], eax
jge 0x1001bfde
mov dword [ebp - 0x454], 1
jmp 0x1001bfe5
and dword [ebp - 0x454], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x454]
sub ecx, dword [ebp + eax - 0x30]
cmp ecx, 8
jae 0x1001c006
mov dword [ebp - 0x314], 1
jmp 0x1001c00d
and dword [ebp - 0x314], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0x30]
imul edx, dword [ebp - 0x314]
sub edx, dword [ebp + ecx - 0x30]
cmp edx, dword [ebp + eax - 0x30]
jg 0x1001c040
mov dword [ebp - 0x5f4], 1
jmp 0x1001c047
and dword [ebp - 0x5f4], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x288], 0
jne 0x1001c070
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x288], 0
jne 0x1001c070
and dword [ebp - 0x6dc], 0
jmp 0x1001c07a
mov dword [ebp - 0x6dc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x8dc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x288]
mov dword [ebp - 0x8e4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0xfffffff9
je 0x1001c0b6
mov dword [ebp - 0x5fc], 1
jmp 0x1001c0bd
and dword [ebp - 0x5fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x818]
mov dword [ebp - 0x8f8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x818]
mov dword [ebp - 0x900], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x818]
mov dword [ebp - 0x838], eax
push 4
pop eax
imul eax, eax, 0
xor ecx, ecx
add ecx, 0xc8f0
cmp ecx, dword [ebp + eax - 0x818]
jne 0x1001c118
mov dword [ebp - 0x578], 1
jmp 0x1001c11f
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x6f4], eax
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x128]
and eax, 0x5e
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x128]
or ecx, 0x5e
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x128]
mov word [ebp + eax*2 - 0x834], cx
mov dword [ebp - 0x40], 0xfffffff9
mov dword [ebp - 0x31c], 1
mov dword [ebp - 0x1a4], 0
jmp 0x1001c18f
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 4
jge 0x1001c1ab
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x5c0], 7
jmp 0x1001c182
mov dword [ebp - 0x40], 3
jmp 0x1001c1bb
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1001c377
mov dword [ebp - 0x604], 0xa445a8cc
mov dword [ebp - 0x234], 0
jmp 0x1001c1e8
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 2
jge 0x1001c204
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x854], 0x677b568b
jmp 0x1001c1db
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x5c0]
mov dword [ebp - 0x31c], eax
imul eax, dword [ebp - 0x31c], 0xffffffff
test eax, eax
je 0x1001c230
xor eax, eax
inc eax
je 0x1001c230
mov dword [ebp - 0x45c], 1
jmp 0x1001c237
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
add eax, 4
mov ecx, dword [ebp - 0x40]
cmp dword [ebp + ecx*4 - 0x5c0], eax
jl 0x1001c258
mov dword [ebp - 0x324], 1
jmp 0x1001c25f
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x324]
sub ecx, dword [ebp - 0x40]
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0x5c0]
imul edx, ecx
cmp edx, dword [ebp + eax*4 - 0x5c0]
jl 0x1001c290
mov dword [ebp - 0x4fc], 1
jmp 0x1001c297
and dword [ebp - 0x4fc], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x854], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x5c0]
add eax, dword [ebp - 0x4fc]
cmp eax, 1
jge 0x1001c2d5
mov eax, 0xc62bb2c5
test eax, eax
je 0x1001c2d5
mov dword [ebp - 0x32c], 1
jmp 0x1001c2dc
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x5c0]
imul eax, dword [ebp - 0x32c]
mov ecx, dword [ebp - 0x40]
cmp dword [ebp + ecx*4 - 0x5c0], eax
jg 0x1001c305
mov dword [ebp - 0x464], 1
jmp 0x1001c30c
and dword [ebp - 0x464], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5c0]
cmp dword [ebp - 0x464], eax
jge 0x1001c32d
mov dword [ebp - 0x334], 1
jmp 0x1001c334
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x604], eax
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x1001c372
push 0x1bee
push 0x107e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
jmp 0x1001c1b4
mov dword [ebp - 0x4c], 2
and dword [ebp - 0x294], 0
jmp 0x1001c38f
mov eax, dword [ebp - 0x4c]
inc eax
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x18
jae 0x1001c427
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x294]
movzx eax, byte [ebp + eax - 0x12a]
movzx eax, word [ebp + eax*2 - 0x834]
mov ecx, dword [ebp - 0x4c]
movzx ecx, byte [ebp + ecx - 0x127]
and ecx, eax
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x294]
movzx eax, byte [ebp + eax - 0x12a]
movzx eax, word [ebp + eax*2 - 0x834]
mov edx, dword [ebp - 0x4c]
movzx edx, byte [ebp + edx - 0x127]
and edx, eax
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x294]
movzx eax, byte [ebp + eax - 0x12a]
movzx eax, word [ebp + eax*2 - 0x834]
mov esi, dword [ebp - 0x4c]
movzx esi, byte [ebp + esi - 0x127]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x128]
mov word [ebp + eax*2 - 0x834], si
jmp 0x1001c387
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x834], cx
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x50], 0
jmp 0x1001c44e
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1001c464
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x5a0], 2
jmp 0x1001c447
mov dword [ebp - 0x50], 0
jmp 0x1001c474
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1001c48a
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x35c], 0xfffffff7
jmp 0x1001c46d
mov dword [ebp - 0x34], 2
jmp 0x1001c49a
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1001c70f
mov dword [ebp - 0x504], 0x329b3a00
mov dword [ebp - 0x910], 0
mov dword [ebp - 0x918], 0xd54b
mov dword [ebp - 0x1ac], 0
jmp 0x1001c4db
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jge 0x1001c4f7
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0xa4c], 0xffffffff
jmp 0x1001c4ce
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x5a0]
mov dword [ebp - 0x920], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x5a0], 0
jne 0x1001c52d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5a0], 0
jne 0x1001c52d
and dword [ebp - 0x54c], 0
jmp 0x1001c537
mov dword [ebp - 0x54c], 1
cmp dword [ebp - 0x54c], 6
jl 0x1001c55c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5a0], 0
je 0x1001c55c
mov dword [ebp - 0x33c], 1
jmp 0x1001c563
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x5a0]
cmp dword [ebp - 0x33c], eax
jle 0x1001c581
mov dword [ebp - 0x46c], 1
jmp 0x1001c588
and dword [ebp - 0x46c], 0
cmp dword [ebp - 0x46c], 0
jle 0x1001c5a1
push 9
pop eax
test eax, eax
jne 0x1001c5a1
and dword [ebp - 0x344], 0
jmp 0x1001c5ab
mov dword [ebp - 0x344], 1
imul eax, dword [ebp - 0x344], 0
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x34c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x34c]
mov dword [ebp + eax - 0x35c], ecx
cmp dword [ebp - 0x34c], 0xffffffff
jbe 0x1001c5ef
mov dword [ebp - 0x474], 1
jmp 0x1001c5f6
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x5a0]
cmp dword [ebp - 0x474], eax
jl 0x1001c6f0
mov dword [ebp - 0x354], 5
mov dword [ebp - 0x25c], 0xfffffff8
mov dword [ebp - 0x60], 0
jmp 0x1001c630
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1001c646
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x9ec], 0xf803
jmp 0x1001c629
mov dword [ebp - 0x60], 0
jmp 0x1001c656
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1001c66c
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xa40], 0x584502e4
jmp 0x1001c64f
mov dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x354]
cmp ecx, dword [ebp + eax*4 - 0x5a0]
je 0x1001c694
mov dword [ebp - 0x580], 1
jmp 0x1001c69b
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x580]
add eax, 0xe165
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x35c], eax
mov dword [ebp - 0x25c], 0
jmp 0x1001c6cc
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 2
jg 0x1001c6ee
mov dword [ebp - 0x47c], 1
mov eax, dword [ebp - 0x47c]
dec eax
mov dword [ebp - 0x47c], eax
jmp 0x1001c6bf
jmp 0x1001c70a
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1001c70a
push 0
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
jmp 0x1001c493
mov dword [ebp - 0x34], 1
lea eax, [ebp - 0x834]
push eax
lea ecx, [ebp - 0x9b0]
call fcn.10003977
mov dword [ebp - 0x6e8], eax
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x60c], eax
mov dword [ebp - 4], 8
push dword [ebp - 0x60c]
call fcn.100178d8
pop ecx
mov dword [ebp - 0x348], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b0]
call fcn.1000399c
and dword [ebp - 0x1b4], 0
jmp 0x1001c778
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0xd
jae 0x1001c793
xor eax, eax
mov ecx, dword [ebp - 0x1b4]
mov word [ebp + ecx*2 - 0x834], ax
jmp 0x1001c76b
mov dword [ebp - 0x364], 0x2b71
mov dword [ebp - 0x6fc], str.cvafv_buuccgrzw_udmqtwwm_mqmhp_btveumwdd_uustt_tuaqaea_xtbltwz_lwkizw_ktzkd_ffwwqzvz
cmp dword [ebp - 0x364], 0x2d1e
jle 0x1001c830
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
and dword [ebp - 0x23c], 0
jmp 0x1001c7cf
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x2233
jge 0x1001c830
and dword [ebp - 0x1bc], 0
jmp 0x1001c7f1
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x5193
jge 0x1001c82e
mov eax, dword [ebp - 0x23c]
add eax, dword [ebp - 0x1bc]
cdq
mov dword [ebp - 0x684], eax
mov dword [ebp - 0x680], edx
push dword [ebp - 0x680]
push dword [ebp - 0x684]
mov ecx, 0x10073e78
call fcn.1000383a
jmp 0x1001c7e4
jmp 0x1001c7c2
mov dword [ebp - 4], 9
cmp dword [ebp - 0x364], 0x28dd
jge 0x1001c853
mov edx, dword [ebp - 0x6fc]
mov ecx, 0x10073e78
call fcn.100059c3
jmp 0x1001c86f
or dword [ebp - 4], 0xffffffff
jmp 0x1001c879
mov dword [ebp - 0x108], 0x5c8094a
mov dword [ebp - 0x27c], 0
jmp 0x1001c89c
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 2
jge 0x1001c8b8
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0x860], 1
jmp 0x1001c88f
mov dword [ebp - 0x108], 1
jmp 0x1001c8d1
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x1001c8ee
mov eax, dword [ebp - 0x108]
cmp dword [ebp + eax*4 - 0x860], 0
je 0x1001c8ec
jmp 0x1001c8ee
jmp 0x1001c8c4
cmp dword [ebp - 0x348], 0
je 0x1001e73c
mov dword [ebp - 0xe0], 0xf4f46db5
mov dword [ebp - 0x1c4], 0
jmp 0x1001c91e
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jge 0x1001c93a
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x614], 0x2d5e
jmp 0x1001c911
mov dword [ebp - 0xe0], 0
jmp 0x1001c953
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jl 0x1001c970
mov eax, dword [ebp - 0xe0]
cmp dword [ebp + eax*4 - 0x614], 0
je 0x1001c96e
jmp 0x1001c970
jmp 0x1001c946
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x1001c98f
push 0x2653
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
mov dword [ebp - 0xf8], 0x5a136951
mov dword [ebp - 0x244], 0
jmp 0x1001c9b2
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 1
jge 0x1001c9ce
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x50c], 0x8ec0ae97
jmp 0x1001c9a5
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x1001c9e8
push 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0xf8], 0
jmp 0x1001ca01
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x1001cc24
mov dword [ebp - 0x100], 8
mov dword [ebp - 0x484], 0x17ab
mov dword [ebp - 0x61c], str.hpv_ubkcv_dyv_hcz
cmp dword [ebp - 0x484], 0x1abb
jle 0x1001cb26
push 0
push 0
push 0x1b45
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
and dword [ebp - 0x1d4], 0
jmp 0x1001ca65
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x213e
jge 0x1001cb26
and dword [ebp - 0x1cc], 0
jmp 0x1001ca8b
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x5110
jge 0x1001cb21
and dword [ebp - 0x264], 0
jmp 0x1001cab1
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x56bb
jge 0x1001cb1c
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [ebp - 0x264]
shl eax, cl
xor eax, dword [ebp - 0x1d4]
cdq
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x68c], edx
push dword [ebp - 0x68c]
push dword [ebp - 0x690]
lea ecx, [ebp - 0xa1c]
call fcn.10001aa4
pop ecx
pop ecx
mov dword [ebp - 0x704], eax
mov ecx, dword [ebp - 0x704]
call fcn.1000381a
push eax
call fcn.10043cef
pop ecx
lea ecx, [ebp - 0xa1c]
call fcn.10003810
jmp 0x1001caa4
jmp 0x1001ca7e
jmp 0x1001ca58
mov dword [ebp - 0x100], 0
jmp 0x1001cb3f
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jl 0x1001cbda
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp + eax*4 - 0x50c]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax*4 - 0x50c], ecx
cmp dword [ebp - 0x36c], 0
je 0x1001cb9c
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1001cb9a
push 0x1bfa
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
jmp 0x1001cbd5
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1001cbbb
push 0x19d4
push 0
call dword [sym.imp.USER32.dll_GetSubMenu]
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x1001cbd5
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
jmp 0x1001cb32
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x484], 0x1494
jge 0x1001cbf9
push dword [ebp - 0x61c]
call fcn.10043cef
pop ecx
jmp 0x1001cc15
or dword [ebp - 4], 0xffffffff
jmp 0x1001cc1f
jmp 0x1001c9f4
mov byte [ebp - 0x14c], 4
mov byte [ebp - 0x14b], 0xed
mov byte [ebp - 0x14a], 0xb
mov byte [ebp - 0x149], 0x17
mov byte [ebp - 0x148], 6
mov byte [ebp - 0x147], 6
mov byte [ebp - 0x146], 9
mov byte [ebp - 0x145], 7
mov byte [ebp - 0x144], 0xc
mov byte [ebp - 0x143], 0x17
mov byte [ebp - 0x142], 4
mov byte [ebp - 0x141], 0x8c
mov byte [ebp - 0x140], 0xda
mov byte [ebp - 0x13f], 0x8a
mov byte [ebp - 0x13e], 0x72
mov byte [ebp - 0x13d], 0xa
mov byte [ebp - 0x13c], 1
mov byte [ebp - 0x13b], 3
mov byte [ebp - 0x13a], 0x22
mov byte [ebp - 0x139], 0xd
mov byte [ebp - 0x138], 0x23
mov byte [ebp - 0x137], 5
mov byte [ebp - 0x136], 0x1c
mov byte [ebp - 0x135], 2
mov byte [ebp - 0x134], 0x1b
mov byte [ebp - 0x133], 1
mov byte [ebp - 0x132], 0x11
mov byte [ebp - 0x131], 0
mov byte [ebp - 0x130], 0x22
mov byte [ebp - 0x12f], 7
mov byte [ebp - 0x12e], 6
mov byte [ebp - 0x12d], 8
mov byte [ebp - 0x12c], 0x25
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x14c]
and eax, 0x9f
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x14c]
or ecx, 0x9f
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x14c]
mov byte [ebp + eax - 0x5d0], cl
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x928], 1
mov dword [ebp - 0x74], 0
jmp 0x1001cd6a
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffe2
jne 0x1001ce75
mov byte [ebp - 0xc2], 0
mov dword [ebp - 0x374], 0x3fc4
mov dword [ebp - 0x748], str.ttcbpwiud_jednz_rawqi_tmn_pbucdark_dmpoytc
cmp dword [ebp - 0x374], 0x4101
jle 0x1001ce12
and dword [ebp - 0x24c], 0
jmp 0x1001cdb1
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x4252
jge 0x1001ce12
and dword [ebp - 0x1dc], 0
jmp 0x1001cdd3
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x10e3
jge 0x1001ce10
mov eax, dword [ebp - 0x24c]
add eax, dword [ebp - 0x1dc]
cdq
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x698], edx
push dword [ebp - 0x698]
push dword [ebp - 0x69c]
mov ecx, 0x10073e78
call fcn.1000383a
jmp 0x1001cdc6
jmp 0x1001cda4
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x1001ce27
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x374], 0x3c78
jge 0x1001ce4a
mov edx, dword [ebp - 0x748]
mov ecx, 0x10073e78
call fcn.100059c3
jmp 0x1001ce66
or dword [ebp - 4], 0xffffffff
jmp 0x1001ce70
jmp 0x1001cd63
mov dword [ebp - 0x74], 0
jmp 0x1001ce85
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xfffffff3
jne 0x1001cec1
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x1001cea7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1001cebf
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
jmp 0x1001ce7e
mov dword [ebp - 0x1c], 2
and dword [ebp - 0xec], 0
jmp 0x1001ced9
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x21
jae 0x1001d708
mov dword [ebp - 0x594], 0x4039b642
mov dword [ebp - 0x590], 0x4039b642
mov dword [ebp - 0x58c], 0x4039b642
mov dword [ebp - 0x588], 0x4039b642
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x624], 0xc1de
mov dword [ebp - 0x274], 0
jmp 0x1001cf35
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 2
jge 0x1001cf51
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x86c], 0x67f5aee0
jmp 0x1001cf28
mov dword [ebp - 0x3c], 0
jmp 0x1001cf61
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x1001d0bb
mov dword [ebp - 0x554], 0xf7b6fe6d
mov dword [ebp - 0x37c], 0xdbd0176d
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x594], 0
je 0x1001d07d
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ebp + ecx*4 - 0x594]
cmp ecx, dword [ebp + eax*4 - 0x594]
je 0x1001cfb2
mov dword [ebp - 0x48c], 1
jmp 0x1001cfb9
and dword [ebp - 0x48c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x594]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
imul eax, dword [ebp - 0x624]
test eax, eax
je 0x1001d008
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x594], 0
je 0x1001d008
mov dword [ebp - 0x384], 1
jmp 0x1001d00f
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x48c]
add eax, dword [ebp - 0x384]
cmp eax, 0x3b8a277e
jl 0x1001d02e
mov dword [ebp - 0x514], 1
jmp 0x1001d035
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 0x4dde
jle 0x1001d04d
mov dword [ebp - 0x6f8], 1
jmp 0x1001d054
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x594]
mov dword [ebp - 0x930], eax
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x594], 0
je 0x1001d07d
mov dword [ebp - 0x38c], 1
jmp 0x1001d084
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x38c]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x86c], eax
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x1001d0b6
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
jmp 0x1001cf5a
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x14c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x1001d2ba
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x14c]
inc eax
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x14c]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], 0xe1757117
mov dword [ebp - 0xe4], 0xffffffff
mov dword [ebp - 0x62c], 0xfffffffe
mov dword [ebp - 0x2c], 0
jmp 0x1001d128
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1c
jge 0x1001d2b5
mov dword [ebp - 0x1e4], 0xab1d
mov dword [ebp - 0x760], 0xfffffffa
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x1001d15a
push 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x938], eax
mov dword [ebp - 0xe4], 0xffff0001
cmp dword [ebp - 0xe4], 0
je 0x1001d27b
cmp dword [ebp - 0x2c], 1
je 0x1001d18c
mov dword [ebp - 0x494], 1
jmp 0x1001d193
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x494], eax
jl 0x1001d1aa
mov dword [ebp - 0x394], 1
jmp 0x1001d1b1
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0x394], eax
jge 0x1001d1c6
cmp dword [ebp - 0x1e4], 0
cmp dword [ebp - 0xe4], 0
je 0x1001d1d6
cmp dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x62c]
test eax, eax
je 0x1001d1f9
cmp dword [ebp - 0x1e4], 0
je 0x1001d1f9
mov dword [ebp - 0x584], 1
jmp 0x1001d200
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x584], eax
je 0x1001d21a
mov dword [ebp - 0x39c], 1
jmp 0x1001d221
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0x29989d22
jl 0x1001d239
mov dword [ebp - 0x49c], 1
jmp 0x1001d240
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x49c], eax
je 0x1001d257
mov dword [ebp - 0x3a4], 1
jmp 0x1001d25e
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0x3a4]
test eax, eax
je 0x1001d27b
mov dword [ebp - 0x51c], 1
jmp 0x1001d282
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x51c], eax
jge 0x1001d299
mov dword [ebp - 0x3ac], 1
jmp 0x1001d2a0
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x760], eax
jmp 0x1001d121
jmp 0x1001ced1
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x254], 0
jmp 0x1001d2da
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 4
jge 0x1001d2f6
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x790], 0xfffffffd
jmp 0x1001d2cd
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1001d318
push 0x2603
push 0x102a
call dword [sym.imp.KERNEL32.dll_Beep]
mov dword [ebp - 0x48], 0x12
jmp 0x1001d328
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x14
jne 0x1001d62d
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x228], 1
cmp dword [ebp - 0x28], 9
ja 0x1001d355
mov dword [ebp - 0x634], 1
jmp 0x1001d35c
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x940], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x4a4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp + eax - 0x790], ecx
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x4a4], eax
jge 0x1001d3a0
mov dword [ebp - 0x3b4], 1
jmp 0x1001d3a7
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 1
jne 0x1001d3bc
mov dword [ebp - 0x55c], 1
jmp 0x1001d3c3
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x55c]
jl 0x1001d3da
mov dword [ebp - 0x3bc], 1
jmp 0x1001d3e1
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x3bc], eax
jge 0x1001d3f8
mov dword [ebp - 0x4ac], 1
jmp 0x1001d3ff
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x4ac]
jge 0x1001d416
mov dword [ebp - 0x3c4], 1
jmp 0x1001d41d
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0
jmp 0x1001d439
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffff2
je 0x1001d628
mov dword [ebp - 0x2c0], 0xfffffffa
mov dword [ebp - 0x1ec], 0
jmp 0x1001d466
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jge 0x1001d482
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x878], 0
jmp 0x1001d459
xor eax, eax
inc eax
je 0x1001d57d
cmp dword [ebp - 0x2c0], 0
jne 0x1001d4d6
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x944], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x228], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x48]
neg ecx
mov edx, dword [ebp - 0x228]
imul edx, ecx
cmp edx, dword [ebp + eax - 0x790]
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x88c], eax
or eax, 0xffffffff
je 0x1001d4fc
mov eax, 0xa963
test eax, eax
je 0x1001d4fc
mov dword [ebp - 0x524], 1
jmp 0x1001d503
and dword [ebp - 0x524], 0
cmp dword [ebp - 0x524], 0xffffffff
jge 0x1001d518
mov dword [ebp - 0x3cc], 1
jmp 0x1001d51f
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x3cc], eax
jle 0x1001d536
mov dword [ebp - 0x4b4], 1
jmp 0x1001d53d
and dword [ebp - 0x4b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x790]
cmp dword [ebp - 0x4b4], eax
jl 0x1001d55e
mov dword [ebp - 0x3d4], 1
jmp 0x1001d565
and dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x3d4], 0x68927649
jle 0x1001d57d
mov dword [ebp - 0x57c], 1
jmp 0x1001d584
and dword [ebp - 0x57c], 0
cmp dword [ebp - 0x57c], 0xe974
jl 0x1001d59c
mov dword [ebp - 0x3dc], 1
jmp 0x1001d5a3
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x3dc], eax
jne 0x1001d5bd
mov dword [ebp - 0x700], 1
jmp 0x1001d5c4
and dword [ebp - 0x700], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x878]
mov dword [ebp - 0x894], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x790], 0xffffffff
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x228]
cmp ecx, dword [ebp + eax - 0x790]
jg 0x1001d609
mov dword [ebp - 0x4bc], 1
jmp 0x1001d610
and dword [ebp - 0x4bc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp + eax - 0x790], ecx
jmp 0x1001d432
jmp 0x1001d321
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xec]
movzx eax, byte [ebp + eax - 0x14e]
movsx eax, byte [ebp + eax - 0x5d0]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x14b]
and ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xec]
movzx eax, byte [ebp + eax - 0x14e]
movsx eax, byte [ebp + eax - 0x5d0]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0x14b]
and edx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xec]
movzx eax, byte [ebp + eax - 0x14e]
movsx eax, byte [ebp + eax - 0x5d0]
mov esi, dword [ebp - 0x1c]
movzx ebx, byte [ebp + esi - 0x14b]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x14c]
mov byte [ebp + eax - 0x5d0], bl
mov dword [ebp - 0x934], 0xfffffffe
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x1001d6d9
push 0
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x1001d6fc
push 0
push 0
push 0xb06
push 0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
and dword [ebp - 0xec], 0
jmp 0x1001ced1
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0x3e4], 0xb2b74c38
mov dword [ebp - 0x1f4], 0xc044b0bf
mov dword [ebp - 0x2b4], 0xf63069be
mov dword [ebp - 0x29c], 0xbed5
mov dword [ebp - 0x3f4], 0x748abb75
mov dword [ebp - 0x808], 1
mov dword [ebp - 0x804], 1
mov dword [ebp - 0x800], 1
mov dword [ebp - 0x7fc], 1
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1001d80f
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 0
je 0x1001d795
cmp dword [ebp - 0x54], 0
je 0x1001d795
and dword [ebp - 0x52c], 0
jmp 0x1001d79f
mov dword [ebp - 0x52c], 1
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x1f4]
jge 0x1001d7b6
mov dword [ebp - 0x63c], 1
jmp 0x1001d7bd
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x52c]
sub eax, 0x1f413fcb
je 0x1001d7eb
mov eax, 0x26a0
test eax, eax
je 0x1001d7eb
mov dword [ebp - 0x3ec], 1
jmp 0x1001d7f2
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x3ec]
sub eax, dword [ebp - 0x1f4]
je 0x1001d80f
mov dword [ebp - 0x750], 1
jmp 0x1001d816
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x8e0], eax
mov eax, 0xcf86
test eax, eax
jne 0x1001d837
mov dword [ebp - 0x4c4], 1
jmp 0x1001d83e
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0
jne 0x1001d877
mov dword [ebp - 0x564], 1
jmp 0x1001d87e
and dword [ebp - 0x564], 0
cmp dword [ebp - 0x29c], 0
jne 0x1001d894
xor eax, eax
jne 0x1001d894
and dword [ebp - 0x3fc], 0
jmp 0x1001d89e
mov dword [ebp - 0x3fc], 1
mov eax, dword [ebp - 0x564]
imul eax, dword [ebp - 0x3fc]
test eax, eax
je 0x1001d920
mov dword [ebp - 0x230], 0
jmp 0x1001d8c8
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x1001d8e4
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x968], 0xfffffffd
jmp 0x1001d8bb
mov dword [ebp - 0x54], 0
jmp 0x1001d8f4
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x1001d90a
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x808], 6
jmp 0x1001d8ed
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x968], 1
jmp 0x1001db76
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x534], 0x27
mov dword [ebp - 0x4cc], 0x74e4
mov dword [ebp - 0x708], str.rzlkuowj_dpmyxkv_sxkhfys_mriat_ictguipam_oghic_rjxj_gckbed_nqnxolt_znuaojyl_ngoznj
cmp dword [ebp - 0x4cc], 0x7689
jle 0x1001da69
and dword [ebp - 0x204], 0
jmp 0x1001d96e
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x3a78
jge 0x1001da69
and dword [ebp - 0x240], 0
jmp 0x1001d994
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x5642
jge 0x1001da64
and dword [ebp - 0x1fc], 0
jmp 0x1001d9ba
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x8ed
jge 0x1001da5f
and dword [ebp - 0x238], 0
jmp 0x1001d9e0
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x2b43
jge 0x1001da5a
mov eax, dword [ebp - 0x1fc]
sub eax, dword [ebp - 0x238]
mov edx, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x240]
sar edx, cl
mov ecx, eax
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x6a4], edx
push dword [ebp - 0x6a4]
push dword [ebp - 0x6a8]
lea ecx, [ebp - 0x9c8]
call fcn.10001aa4
pop ecx
pop ecx
mov dword [ebp - 0x644], eax
mov ecx, dword [ebp - 0x644]
call fcn.1000381a
push eax
call fcn.10043cef
pop ecx
lea ecx, [ebp - 0x9c8]
call fcn.10003810
jmp 0x1001d9d3
jmp 0x1001d9ad
jmp 0x1001d987
jmp 0x1001d961
mov dword [ebp - 0x77c], 5
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x4cc], 0x736c
jge 0x1001da92
push dword [ebp - 0x708]
call fcn.10043cef
pop ecx
jmp 0x1001daae
or dword [ebp - 4], 0xffffffff
jmp 0x1001dab8
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x64c], eax
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0x64c], 1
jne 0x1001dae6
mov dword [ebp - 0x404], 1
jmp 0x1001daed
and dword [ebp - 0x404], 0
cmp dword [ebp - 0x404], 1
jne 0x1001db1c
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x534]
cmp eax, dword [ebp - 0xf4]
jne 0x1001db1c
mov dword [ebp - 0x40c], 1
jmp 0x1001db23
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x534]
cmp dword [ebp - 0x40c], eax
jge 0x1001db3d
mov dword [ebp - 0x4d4], 1
jmp 0x1001db44
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 0xffffffff
je 0x1001db59
mov dword [ebp - 0x414], 1
jmp 0x1001db60
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x77c], eax
mov dword [ebp - 0x2b4], 0xffffffff
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x5d0], 0
mov dword [ebp - 0x658], 0xffffffff
mov dword [ebp - 0x424], 0x348f
mov dword [ebp - 0x710], 0x7609fa85
mov dword [ebp - 0x2a4], 1
mov eax, dword [ebp - 0x658]
mov dword [ebp - 0x91c], eax
cmp dword [ebp - 0x710], 1
jne 0x1001dbcd
mov dword [ebp - 0x570], 1
jmp 0x1001dbd4
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 0x5a60
jle 0x1001dbec
mov dword [ebp - 0x41c], 1
jmp 0x1001dbf3
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
add eax, 0xffff
jne 0x1001dc12
cmp dword [ebp - 0x424], 0
jne 0x1001dc12
and dword [ebp - 0x4dc], 0
jmp 0x1001dc1c
mov dword [ebp - 0x4dc], 1
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x8e8], eax
mov eax, dword [ebp - 0x2a4]
neg eax
je 0x1001dc6f
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x1001dc6d
push 0xa14
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
jmp 0x1001dca9
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1001dca9
push 0xa24
push 0xe2f
push 0xc8a
push 0xe35
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1001dcd2
push 0xd8b
push 0
push 0x1990
push 0x1ec2
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [ebp - 0x990]
call fcn.10025e51
mov dword [ebp - 4], 0x11
and dword [ebp - 0x154], 0
jmp 0x1001dd01
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0xf
jae 0x1001e08e
mov dword [ebp - 0xa8], 0x6758e356
mov dword [ebp - 0x6c], 0
jmp 0x1001dd28
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1001dd3e
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xcc], 0xffffffff
jmp 0x1001dd21
mov dword [ebp - 0x6c], 0
jmp 0x1001dd4e
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x1001dd64
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x110], 0x32b1cecb
jmp 0x1001dd47
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x110], 0
jmp 0x1001dd92
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x110], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 0
jl 0x1001df6f
mov dword [ebp - 0xd0], 0x4392f209
mov dword [ebp - 0x758], 0xcadd635
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x1001ddce
push 0
call dword [sym.imp.KERNEL32.dll_EncodePointer]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
mov eax, dword [ebp + eax*4 - 0xcc]
mov dword [ebp - 0x87c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp + eax*4 - 0xcc], 0
je 0x1001df2f
mov dword [ebp - 0x4e4], 0x9b2e4145
mov dword [ebp - 0x664], 0x738
mov dword [ebp - 0x42c], 0xffffffff
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 0
je 0x1001dee6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
mov dword [ebp - 0x8ec], eax
push 7
pop eax
test eax, eax
je 0x1001de7f
mov eax, dword [ebp - 0x4e4]
cmp eax, dword [ebp - 0x664]
jl 0x1001de69
mov dword [ebp - 0x53c], 1
jmp 0x1001de70
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
sub eax, 7
sub eax, dword [ebp - 0x42c]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp + eax*4 - 0xcc], 0
je 0x1001deab
cmp dword [ebp - 0x42c], 0
je 0x1001deab
mov dword [ebp - 0x2c8], 1
jmp 0x1001deb2
and dword [ebp - 0x2c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0xcc], ecx
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0x4e4]
je 0x1001dee6
mov dword [ebp - 0x434], 1
jmp 0x1001deed
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
je 0x1001df1a
mov dword [ebp - 0x2d4], 1
jmp 0x1001df21
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x758], eax
jmp 0x1001df6a
mov dword [ebp - 0xd0], 0
jmp 0x1001df48
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 8
jg 0x1001df6a
mov byte [ebp - 0x78], 0
movzx eax, byte [ebp - 0x78]
test eax, eax
je 0x1001df68
push 0x155f
call dword [sym.imp.USER32.dll_GetSysColorBrush]
jmp 0x1001df3b
jmp 0x1001dd77
mov dword [ebp - 0xa8], 1
jmp 0x1001df88
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x1001e07b
mov dword [ebp - 0xd8], 0x881826f
mov dword [ebp - 0x67c], 0x982b357f
mov dword [ebp - 0xd8], 0
jmp 0x1001dfc2
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jg 0x1001e076
mov dword [ebp - 0x718], 0xcd538770
mov eax, dword [ebp - 0xd8]
sub eax, 6
cmp dword [ebp - 0xd8], eax
jne 0x1001dff6
mov dword [ebp - 0x2d0], 1
jmp 0x1001dffd
and dword [ebp - 0x2d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp eax, dword [ebp - 0x2d0]
jg 0x1001e01e
mov dword [ebp - 0x670], 1
jmp 0x1001e025
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0x888], eax
cmp dword [ebp - 0x67c], 0x4d4
jg 0x1001e049
mov dword [ebp - 0x2e0], 1
jmp 0x1001e050
and dword [ebp - 0x2e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
imul eax, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0xa8]
mov dword [ebp + ecx*4 - 0x110], eax
jmp 0x1001dfb5
jmp 0x1001df7b
mov eax, dword [ebp - 0x154]
mov byte [ebp + eax - 0x5d0], 0
jmp 0x1001dcf4
mov dword [ebp - 0xd4], 3
mov dword [ebp - 0x328], 0xffffffff
mov dword [ebp - 0xd4], 0xfffffff7
jmp 0x1001e0bb
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x11
je 0x1001e70f
mov dword [ebp - 0xfc], 0x6d444182
mov dword [ebp - 0xfc], 0x13
jmp 0x1001e0eb
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xfffffff5
je 0x1001e70a
mov dword [ebp - 0x5b0], 0xb29949df
mov dword [ebp - 0x5ac], 0xb29949df
mov dword [ebp - 0x5a8], 0xb29949df
mov dword [ebp - 0x5a4], 0xb29949df
mov dword [ebp - 0x70], 0xfef9d786
mov dword [ebp - 0x2e8], 0x169a
mov dword [ebp - 0x688], str.tnskq_bnc_eigtuqd_hiacmzr_qteyk_trueort_liecken_elygt_lzo_ggqdovv_pqyyphiu_bbzkxbso
cmp dword [ebp - 0x2e8], 0x1710
jle 0x1001e223
and dword [ebp - 0x168], 0
jmp 0x1001e161
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x1ad
jge 0x1001e223
and dword [ebp - 0x158], 0
jmp 0x1001e187
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x4a97
jge 0x1001e21e
and dword [ebp - 0x160], 0
jmp 0x1001e1ad
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x147
jge 0x1001e219
mov eax, dword [ebp - 0x158]
cdq
idiv dword [ebp - 0x160]
add edx, dword [ebp - 0x168]
mov eax, edx
cdq
mov dword [ebp - 0x6b4], eax
mov dword [ebp - 0x6b0], edx
push dword [ebp - 0x6b0]
push dword [ebp - 0x6b4]
lea ecx, [ebp - 0xa04]
call fcn.10001aa4
pop ecx
pop ecx
mov dword [ebp - 0x740], eax
mov ecx, dword [ebp - 0x740]
call fcn.1000381a
push eax
call fcn.10043cef
pop ecx
lea ecx, [ebp - 0xa04]
call fcn.10003810
jmp 0x1001e1a0
jmp 0x1001e17a
jmp 0x1001e154
mov dword [ebp - 0x694], 0xfffffffd
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x2e8], 0x146a
jge 0x1001e249
push dword [ebp - 0x688]
call fcn.10043cef
pop ecx
jmp 0x1001e265
mov dword [ebp - 4], 0x11
jmp 0x1001e275
mov dword [ebp - 0x2f0], 0x6c29
mov dword [ebp - 0x728], str.wfjeneio_iidaj_gvnkc_gufdx_wsdtuzn_eubosz_fzun
cmp dword [ebp - 0x2f0], 0x6f65
jle 0x1001e377
and dword [ebp - 0x180], 0
jmp 0x1001e2af
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x3719
jge 0x1001e377
and dword [ebp - 0x188], 0
jmp 0x1001e2d5
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x6ef2
jge 0x1001e372
and dword [ebp - 0x170], 0
jmp 0x1001e2fb
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x5dab
jge 0x1001e36d
and dword [ebp - 0x178], 0
jmp 0x1001e31d
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x7120
jge 0x1001e36b
mov eax, dword [ebp - 0x170]
cdq
idiv dword [ebp - 0x178]
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x188]
sar eax, cl
xor eax, edx
cdq
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x6bc], edx
push dword [ebp - 0x6bc]
push dword [ebp - 0x6c0]
mov ecx, 0x10073e78
call fcn.1000383a
jmp 0x1001e310
jmp 0x1001e2ee
jmp 0x1001e2c8
jmp 0x1001e2a2
mov dword [ebp - 0x190], 0
jmp 0x1001e390
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x1001e3ac
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x978], 0x5769e8a2
jmp 0x1001e383
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x2f0], 0x68b6
jge 0x1001e3cc
mov edx, dword [ebp - 0x728]
mov ecx, 0x10073e78
call fcn.100059c3
jmp 0x1001e3e8
mov dword [ebp - 4], 0x11
jmp 0x1001e3f8
mov byte [ebp - 0x7a], 0
movzx eax, byte [ebp - 0x7a]
test eax, eax
je 0x1001e415
push 0xa14
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov dword [ebp - 0x70], 3
jmp 0x1001e425
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x1001e705
mov dword [ebp - 0x198], 0
jmp 0x1001e448
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jge 0x1001e464
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x734], 0
jmp 0x1001e43b
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x734], 0
jmp 0x1001e492
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x734]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x734], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x734], 3
jg 0x1001e67e
mov dword [ebp - 0x1a0], 0
jmp 0x1001e4bf
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 1
jge 0x1001e4db
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xb0], 0xfb807cfa
jmp 0x1001e4b2
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb0], 3
jmp 0x1001e509
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb0], 0
jl 0x1001e679
mov dword [ebp - 0x1a8], 0xfffffffa
mov dword [ebp - 0x300], 0
mov dword [ebp - 0x1a8], 3
jmp 0x1001e54a
cmp dword [ebp - 0x1a8], 0
jl 0x1001e674
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
mov eax, dword [ebp + eax*4 - 0x5b0]
inc eax
cmp eax, dword [ebp - 0xd4]
jge 0x1001e580
mov dword [ebp - 0x2f8], 1
jmp 0x1001e587
and dword [ebp - 0x2f8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ebp + ecx*4 - 0x5b0]
imul ecx, dword [ebp - 0x2f8]
imul ecx, dword [ebp + eax - 0x5b0]
imul eax, ecx, 0x76b5
add eax, 0x226519a4
cmp eax, 0x21ad7ba9
je 0x1001e5c4
mov dword [ebp - 0x308], 1
jmp 0x1001e5cb
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0x5b0]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x300]
cmp eax, dword [ebp - 0x308]
jl 0x1001e5f5
mov dword [ebp - 0x310], 1
jmp 0x1001e5fc
and dword [ebp - 0x310], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
mov eax, dword [ebp + eax*4 - 0x5b0]
cmp eax, dword [ebp - 0x310]
jle 0x1001e634
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x1001e634
and dword [ebp - 0x318], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp - 0x318], eax
je 0x1001e65c
jmp 0x1001e4ee
jmp 0x1001e477
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x8f0], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x890], eax
cmp dword [ebp - 0xfc], 1
jge 0x1001e6a8
mov dword [ebp - 0x330], 1
jmp 0x1001e6af
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x330]
jne 0x1001e6c6
mov dword [ebp - 0x338], 1
jmp 0x1001e6cd
and dword [ebp - 0x338], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x734]
cmp dword [ebp - 0x338], eax
jne 0x1001e6ed
mov dword [ebp - 0x340], 1
jmp 0x1001e6f4
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x694], eax
jmp 0x1001e41e
jmp 0x1001e0de
jmp 0x1001e0ae
push 1
push 0
lea eax, [ebp - 0x990]
push eax
push dword [ebp - 0x348]
call fcn.1001f909
add esp, 0x10
mov dword [0x10139034], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x990]
call fcn.10025e80
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0xdc], 0xb9e9d60a
mov dword [ebp - 0x360], 0xee973417
mov dword [ebp - 0x350], 0x160
mov dword [ebp - 0x6a0], str.rrtulrcfh_kkb_akynej_qqzscrbp
cmp dword [ebp - 0x350], 0x203
jle 0x1001e825
and dword [ebp - 0x1b0], 0
jmp 0x1001e791
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x215d
jge 0x1001e81b
and dword [ebp - 0x1b8], 0
jmp 0x1001e7b3
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x15c6
jge 0x1001e816
mov eax, dword [ebp - 0x1b0]
add eax, dword [ebp - 0x1b8]
cdq
mov dword [ebp - 0x6cc], eax
mov dword [ebp - 0x6c8], edx
push dword [ebp - 0x6c8]
push dword [ebp - 0x6cc]
lea ecx, [ebp - 0xa34]
call fcn.10001aa4
pop ecx
pop ecx
mov dword [ebp - 0x73c], eax
mov ecx, dword [ebp - 0x73c]
call fcn.1000381a
push eax
call fcn.10043cef
pop ecx
lea ecx, [ebp - 0xa34]
call fcn.10003810
jmp 0x1001e7a6
jmp 0x1001e784
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x350], 0xfffffd8b
jge 0x1001e844
push dword [ebp - 0x6a0]
call fcn.10043cef
pop ecx
jmp 0x1001e860
or dword [ebp - 4], 0xffffffff
jmp 0x1001e86a
mov dword [ebp - 0x1c0], 0
jmp 0x1001e883
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 4
jge 0x1001e89f
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x7f8], 0xe93d
jmp 0x1001e876
mov dword [ebp - 0x380], 0x3402
mov dword [ebp - 0x74c], str.hegbxnrbw_yvngwzk_wnd_ncedqxod_ndutqodx_egc_eqmaxruz_giclftc_fbmug_xxwlzru_zihnq_aazhfzur
cmp dword [ebp - 0x380], 0x356f
jle 0x1001e96d
and dword [ebp - 0x1d8], 0
jmp 0x1001e8d9
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x73b6
jge 0x1001e96d
and dword [ebp - 0x1c8], 0
jmp 0x1001e8ff
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x3fce
jge 0x1001e968
and dword [ebp - 0x1d0], 0
jmp 0x1001e921
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x299c
jge 0x1001e966
mov ecx, dword [ebp - 0x1c8]
sub ecx, dword [ebp - 0x1d0]
mov eax, dword [ebp - 0x1d8]
shl eax, cl
cdq
mov dword [ebp - 0x6d8], eax
mov dword [ebp - 0x6d4], edx
push dword [ebp - 0x6d4]
push dword [ebp - 0x6d8]
mov ecx, 0x10073e78
call fcn.1000383a
jmp 0x1001e914
jmp 0x1001e8f2
jmp 0x1001e8cc
mov dword [ebp - 0x5c], 0
jmp 0x1001e97d
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 7
jne 0x1001eb37
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x738], 5
mov dword [ebp - 0x6ac], 1
cmp dword [ebp - 0x5c], 0xf934f545
jne 0x1001e9b7
mov dword [ebp - 0x368], 1
jmp 0x1001e9be
and dword [ebp - 0x368], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x58]
cmp ecx, dword [ebp + eax - 0x7f8]
jge 0x1001e9dc
mov dword [ebp - 0x358], 1
jmp 0x1001e9e3
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x368], eax
jg 0x1001ea15
mov dword [ebp - 0x370], 1
jmp 0x1001ea1c
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x370]
sub eax, 0x348f
mov ecx, dword [ebp - 0x738]
imul ecx, eax
cmp dword [ebp - 0x58], ecx
jg 0x1001ea41
mov dword [ebp - 0x378], 1
jmp 0x1001ea48
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x378]
test eax, eax
jne 0x1001ea6a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7f8], 0
je 0x1001eaef
mov dword [ebp - 0x1e0], 0
jmp 0x1001ea83
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 2
jge 0x1001ea9f
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x884], 0
jmp 0x1001ea76
mov dword [ebp - 0xdc], 0xfffffffa
jmp 0x1001eab8
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x18
jle 0x1001eaed
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x884]
mov dword [ebp - 0x6ac], eax
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x1001eaeb
push 0x249
call dword [sym.imp.USER32.dll_GetKeyboardType]
jmp 0x1001eaab
jmp 0x1001eb27
mov dword [ebp - 0x58], 0
jmp 0x1001eaff
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x1001eb15
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x7f8], 3
jmp 0x1001eaf8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7f8], 0
je 0x1001eb27
jmp 0x1001eb37
cmp dword [ebp - 0x58], 0
je 0x1001eb32
jmp 0x1001e976
jmp 0x1001e976
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x380], 0x31f5
jge 0x1001eb5a
mov edx, dword [ebp - 0x74c]
mov ecx, 0x10073e78
call fcn.100059c3
jmp 0x1001eb76
or dword [ebp - 4], 0xffffffff
jmp 0x1001eb80
mov dword [ebp - 0x5c], 0
jmp 0x1001eb90
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x19
jle 0x1001ebb2
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1001ebb0
push 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1001eb89
mov dword [ebp - 0x548], 0x48ef
mov dword [ebp - 0x630], str.pyuvyx_koekxzsi_biirn_eimfaag_vmiotptyl_vzum_dlpgc
cmp dword [ebp - 0x548], 0x4a73
jle 0x1001ecd0
push 0
push 0
push 0x1948
push 0
push 0x1904
push 0
push 0x1db7
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
and dword [ebp - 0x1f8], 0
jmp 0x1001ec0b
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x7d0c
jge 0x1001ecd0
and dword [ebp - 0x1e8], 0
jmp 0x1001ec31
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x327f
jge 0x1001eccb
and dword [ebp - 0x1f0], 0
jmp 0x1001ec57
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x3171
jge 0x1001ecc6
and dword [ebp - 0x200], 0
jmp 0x1001ec79
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x7eaf
jge 0x1001ecc4
mov ecx, dword [ebp - 0x1e8]
sub ecx, dword [ebp - 0x1f0]
mov eax, dword [ebp - 0x1f8]
shl eax, cl
and eax, dword [ebp - 0x200]
cdq
mov dword [ebp - 0x6e4], eax
mov dword [ebp - 0x6e0], edx
push dword [ebp - 0x6e0]
push dword [ebp - 0x6e4]
mov ecx, 0x10073e78
call fcn.1000383a
jmp 0x1001ec6c
jmp 0x1001ec4a
jmp 0x1001ec24
jmp 0x1001ebfe
cmp dword [0x10139034], 0
je 0x1001f820
mov dword [ebp - 0x14], 0x86d6dbc1
mov dword [ebp - 0x388], 0xffffffff
mov dword [ebp - 0x208], 0xffffffff
mov dword [ebp - 0x3e0], 1
mov dword [ebp - 0x754], 0xfb64730e
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x64], 0
jmp 0x1001ed26
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1001ed3c
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x7c4], 7
jmp 0x1001ed1f
mov dword [ebp - 0x64], 0
jmp 0x1001ed4c
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1001ed62
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x840], 7
jmp 0x1001ed45
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x14], 0
jne 0x1001ee36
mov eax, 0xd48a
test eax, eax
je 0x1001ed82
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x388]
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jne 0x1001edb6
cmp dword [ebp - 0x208], 0
jne 0x1001edb6
and dword [ebp - 0x390], 0
jmp 0x1001edc0
mov dword [ebp - 0x390], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x390], eax
jl 0x1001edda
cmp dword [ebp - 0x14], 0
jne 0x1001edda
and dword [ebp - 0x398], 0
jmp 0x1001ede4
mov dword [ebp - 0x398], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x398], eax
jle 0x1001edfb
mov dword [ebp - 0x3a0], 1
jmp 0x1001ee02
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3a0], eax
jle 0x1001ee19
mov dword [ebp - 0x3a8], 1
jmp 0x1001ee20
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3a8]
sub eax, 0xf529
jne 0x1001ee36
and dword [ebp - 0x3b0], 0
jmp 0x1001ee40
mov dword [ebp - 0x3b0], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3b0], eax
jle 0x1001ee57
mov dword [ebp - 0x3b8], 1
jmp 0x1001ee5e
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x3b8]
cmp eax, dword [ebp - 0x14]
jge 0x1001ee78
mov dword [ebp - 0x3c0], 1
jmp 0x1001ee7f
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x3c0]
cmp eax, 0xe13cd4fe
je 0x1001ee9b
mov dword [ebp - 0x6b8], 1
jmp 0x1001eea2
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x208]
cmp eax, dword [ebp - 0x14]
jg 0x1001eeb9
mov dword [ebp - 0x3c8], 1
jmp 0x1001eec0
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x3c8]
jne 0x1001eed7
mov dword [ebp - 0x3d0], 1
jmp 0x1001eede
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3d0], eax
jne 0x1001eef5
mov dword [ebp - 0x3d8], 1
jmp 0x1001eefc
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x3e0]
cmp eax, dword [ebp - 0x14]
jg 0x1001ef1f
mov dword [ebp - 0x2ac], 1
jmp 0x1001ef26
and dword [ebp - 0x2ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2ac]
mov dword [ebp + eax - 0x7c4], ecx
cmp dword [ebp - 0x2ac], 0x7563ffaf
je 0x1001ef51
mov dword [ebp - 0x3e8], 1
jmp 0x1001ef58
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x3e8]
test eax, eax
je 0x1001ef7b
mov eax, 0xfffe
test eax, eax
je 0x1001ef7b
mov dword [ebp - 0x3f0], 1
jmp 0x1001ef82
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3f0], eax
jg 0x1001ef99
mov dword [ebp - 0x3f8], 1
jmp 0x1001efa0
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3f8], eax
jle 0x1001efc4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c4], 0
jne 0x1001efc4
and dword [ebp - 0x400], 0
jmp 0x1001efce
mov dword [ebp - 0x400], 1
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x400]
test eax, eax
jne 0x1001eff5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c4], 0
jne 0x1001eff5
and dword [ebp - 0x408], 0
jmp 0x1001efff
mov dword [ebp - 0x408], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x408], eax
jle 0x1001f01f
mov eax, 0x33db
test eax, eax
je 0x1001f01f
mov dword [ebp - 0x410], 1
jmp 0x1001f026
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x754], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c4]
cmp eax, dword [ebp - 0x14]
jge 0x1001f050
mov dword [ebp - 0x418], 1
jmp 0x1001f057
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x840], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x18], 0xad5a
mov dword [ebp - 0x298], 0x7e434392
mov dword [ebp - 0x290], 0xfffffffa
mov dword [ebp - 0x468], 0xfff06982
mov dword [ebp - 0x5d8], 0xd6cd
mov dword [ebp - 0x5e0], 0x9b96bc71
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x1001f0dd
push 0x876
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
cmp dword [ebp - 0x18], 0x61a6
je 0x1001f0f2
mov dword [ebp - 0x430], 1
jmp 0x1001f0f9
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jl 0x1001f10d
mov dword [ebp - 0x428], 1
jmp 0x1001f114
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
add eax, dword [ebp - 0x428]
add eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jge 0x1001f13d
mov dword [ebp - 0x438], 1
jmp 0x1001f144
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x430]
sub eax, dword [ebp - 0x438]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
cmp ecx, 0x1649
jl 0x1001f16d
mov dword [ebp - 0x440], 1
jmp 0x1001f174
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x440]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
cmp eax, dword [ebp - 0x18]
jne 0x1001f19b
mov dword [ebp - 0x448], 1
jmp 0x1001f1a2
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x448], eax
je 0x1001f1b9
mov dword [ebp - 0x450], 1
jmp 0x1001f1c0
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x450], eax
jge 0x1001f1d7
mov dword [ebp - 0x458], 1
jmp 0x1001f1de
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x458], eax
jge 0x1001f1f5
mov dword [ebp - 0x460], 1
jmp 0x1001f1fc
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0x57f0
jle 0x1001f220
mov dword [ebp - 0x470], 1
jmp 0x1001f227
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 0xd3cd3624
je 0x1001f248
cmp dword [ebp - 0x290], 0
je 0x1001f248
mov dword [ebp - 0x478], 1
jmp 0x1001f24f
and dword [ebp - 0x478], 0
cmp dword [ebp - 0x478], 0x87a9
jle 0x1001f26e
push 5
pop eax
test eax, eax
je 0x1001f26e
mov dword [ebp - 0x6c4], 1
jmp 0x1001f275
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x898], eax
mov eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0x5d8]
je 0x1001f298
mov dword [ebp - 0x480], 1
jmp 0x1001f29f
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x480], eax
jg 0x1001f2b6
mov dword [ebp - 0x488], 1
jmp 0x1001f2bd
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x488], eax
jne 0x1001f2d4
mov dword [ebp - 0x490], 1
jmp 0x1001f2db
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x38], 0xe1757117
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x5f0], 0xfffffffe
mov dword [ebp - 0x38], 0
jmp 0x1001f31e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1c
jge 0x1001f4b1
mov dword [ebp - 0x210], 0xab1d
mov dword [ebp - 0x5f8], 0xfffffffa
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x1001f356
push 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x924], eax
mov dword [ebp - 0x104], 0xffff0001
cmp dword [ebp - 0x104], 0
je 0x1001f477
cmp dword [ebp - 0x38], 1
je 0x1001f388
mov dword [ebp - 0x498], 1
jmp 0x1001f38f
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x498], eax
jl 0x1001f3a6
mov dword [ebp - 0x4a0], 1
jmp 0x1001f3ad
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x4a0], eax
jge 0x1001f3c2
cmp dword [ebp - 0x210], 0
cmp dword [ebp - 0x104], 0
je 0x1001f3d2
cmp dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x5f0]
test eax, eax
je 0x1001f3f5
cmp dword [ebp - 0x210], 0
je 0x1001f3f5
mov dword [ebp - 0x4a8], 1
jmp 0x1001f3fc
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x4a8], eax
je 0x1001f416
mov dword [ebp - 0x4b0], 1
jmp 0x1001f41d
and dword [ebp - 0x4b0], 0
cmp dword [ebp - 0x4b0], 0x29989d22
jl 0x1001f435
mov dword [ebp - 0x4b8], 1
jmp 0x1001f43c
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x4b8], eax
je 0x1001f453
mov dword [ebp - 0x4c0], 1
jmp 0x1001f45a
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x104]
imul eax, dword [ebp - 0x4c0]
test eax, eax
je 0x1001f477
mov dword [ebp - 0x4c8], 1
jmp 0x1001f47e
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x4c8], eax
jge 0x1001f495
mov dword [ebp - 0x4d0], 1
jmp 0x1001f49c
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x5f8], eax
jmp 0x1001f317
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x218], 0x74be
mov dword [ebp - 0x2a0], 0x3c10b42b
mov dword [ebp - 0x68], 0
jmp 0x1001f4e8
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1001f4fe
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x2bc], 0x6af1124f
jmp 0x1001f4e1
mov dword [ebp - 0x68], 0
jmp 0x1001f50e
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1001f524
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x7b8], 0x9ec6
jmp 0x1001f507
mov dword [ebp - 0x24], 0
jmp 0x1001f534
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x1001f683
mov dword [ebp - 0x4e0], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x2bc]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp + eax*4 - 0x2bc], ecx
mov eax, dword [ebp - 0x4d8]
sub eax, 0x41449c9f
je 0x1001f620
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ebp + ecx*4 - 0x2bc]
cmp ecx, dword [ebp + eax*4 - 0x2bc]
je 0x1001f59b
mov dword [ebp - 0x4e8], 1
jmp 0x1001f5a2
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x2bc]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x4e0]
sub eax, dword [ebp - 0x4e8]
cmp eax, dword [ebp - 0x218]
jge 0x1001f5d2
mov dword [ebp - 0x608], 1
jmp 0x1001f5d9
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x8a0], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp + eax*4 - 0x2bc], 0xa4d3
cmp eax, dword [ebp - 0x218]
jl 0x1001f607
mov dword [ebp - 0x610], 1
jmp 0x1001f60e
and dword [ebp - 0x610], 0
cmp dword [ebp - 0x24], 0
je 0x1001f620
mov dword [ebp - 0x4f0], 1
jmp 0x1001f627
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x4f0]
sub eax, 0x203c1732
je 0x1001f65f
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x1001f65d
push 0
push 0
push 0
push 0
push 0x236d
push 1
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
jmp 0x1001f676
mov dword [ebp - 0x4f8], 9
mov eax, dword [ebp - 0x4f8]
dec eax
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x24], 0
je 0x1001f67e
jmp 0x1001f683
jmp 0x1001f52d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2bc], 0xffff0009
je 0x1001f6a2
mov dword [ebp - 0x500], 1
jmp 0x1001f6a9
and dword [ebp - 0x500], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7b8], 0x1aedf47
jle 0x1001f6c8
mov dword [ebp - 0x508], 1
jmp 0x1001f6cf
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x508]
je 0x1001f6ef
mov dword [ebp - 0x528], 1
jmp 0x1001f6f6
and dword [ebp - 0x528], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7b8]
cmp eax, dword [ebp - 0x2a0]
jge 0x1001f717
mov dword [ebp - 0x510], 1
jmp 0x1001f71e
and dword [ebp - 0x510], 0
cmp dword [ebp - 0x510], 0xfffe
jbe 0x1001f736
mov dword [ebp - 0x518], 1
jmp 0x1001f73d
and dword [ebp - 0x518], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7b8]
imul eax, dword [ebp - 0x518]
cmp eax, 0xe49ce570
jae 0x1001f764
mov dword [ebp - 0x520], 1
jmp 0x1001f76b
and dword [ebp - 0x520], 0
imul eax, dword [ebp - 0x520], 0xffff
cmp eax, dword [ebp - 0x218]
je 0x1001f789
mov dword [ebp - 0x530], 1
jmp 0x1001f790
and dword [ebp - 0x530], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x528]
add ecx, dword [ebp - 0x530]
cmp ecx, dword [ebp + eax - 0x7b8]
jne 0x1001f7b7
mov dword [ebp - 0x538], 1
jmp 0x1001f7be
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x538], eax
jne 0x1001f7e7
mov eax, 0xff9752ee
test eax, eax
jne 0x1001f7e7
mov eax, 0x203f
test eax, eax
jne 0x1001f7e7
and dword [ebp - 0x540], 0
jmp 0x1001f7f1
mov dword [ebp - 0x540], 1
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x2a0], eax
push dword [ebp - 0x618]
push dword [ebp - 0x620]
call dword [0x10139034]
mov dword [ebp - 0x628], eax
mov eax, dword [ebp - 0x628]
jmp 0x1001f8f8
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x548], 0x45d6
jge 0x1001f843
mov edx, dword [ebp - 0x630]
mov ecx, 0x10073e78
call fcn.100059c3
jmp 0x1001f85f
or dword [ebp - 4], 0xffffffff
jmp 0x1001f869
mov dword [ebp - 0x954], 0xfffffffe
mov dword [ebp - 0x950], 0xfffffffe
mov dword [ebp - 0x94c], 0xfffffffe
mov dword [ebp - 0x948], 0xfffffffe
mov dword [ebp - 0x220], 0xe97eede0
mov dword [ebp - 0x220], 3
jmp 0x1001f8b4
mov eax, dword [ebp - 0x220]
dec eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
jl 0x1001f8d7
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x1001f8d5
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
jmp 0x1001f8a7
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x1001f8f6
push 0
push 0x267
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret