Function at 0x10006cb0
Capabilities:
Get common file path
Get graphical window text
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x140c
call fcn.10062cf0
push esi
push edi
mov dword [ebp - 0x318], 0
jmp 0x10006cd8
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 3
jge 0x10006cf4
mov eax, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0x1400], 0x61f9
jmp 0x10006ccb
mov byte [ebp - 0x102], 0
movzx eax, byte [ebp - 0x102]
test eax, eax
je 0x10006d11
push 0x2019
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov byte [ebp - 0x190], 0
movzx eax, byte [ebp - 0x190]
test eax, eax
je 0x10006d2e
push 0x2019
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [ebp - 0x350], 0
jmp 0x10006d47
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 3
jge 0x10006d63
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0x13f4], 0x61f9
jmp 0x10006d3a
mov byte [ebp - 0xe4], 0
movzx eax, byte [ebp - 0xe4]
test eax, eax
je 0x10006d80
push 0x2019
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov byte [ebp - 0x165], 0
movzx eax, byte [ebp - 0x165]
test eax, eax
je 0x10006d9d
push 0x2019
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [ebp - 0xf8], 0xfffffff6
mov dword [ebp - 0x3f4], 0xffffffff
mov dword [ebp - 0x244], 0xa023703a
mov dword [ebp - 0x3cc], 1
mov dword [ebp - 0xc88], 0x8ef8a6eb
mov dword [ebp - 0x370], 0
jmp 0x10006de8
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 2
jge 0x10006e04
mov eax, dword [ebp - 0x370]
mov dword [ebp + eax*4 - 0xf28], 0xa11600d5
jmp 0x10006ddb
mov dword [ebp - 0xf8], 0
jmp 0x10006e1d
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xfffffff2
jge 0x10007027
mov dword [ebp - 0x1a0], 0x2d9e
mov dword [ebp - 0xd34], 0
mov dword [ebp - 0x378], 0
jmp 0x10006e57
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 3
jge 0x10006e73
mov eax, dword [ebp - 0x378]
mov dword [ebp + eax*4 - 0x11e0], 0xfffffff8
jmp 0x10006e4a
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x10f0], eax
mov eax, dword [ebp - 0xd34]
mov dword [ebp - 0x10a4], eax
cmp dword [ebp - 0xf8], 0x289fff12
jne 0x10006ea3
mov dword [ebp - 0xb1c], 1
jmp 0x10006eaa
and dword [ebp - 0xb1c], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xb1c], eax
jl 0x10006ec4
mov dword [ebp - 0x3fc], 1
jmp 0x10006ecb
and dword [ebp - 0x3fc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp + eax - 0xf28], ecx
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x3fc], eax
jle 0x10006ef8
mov dword [ebp - 0xc78], 1
jmp 0x10006eff
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 0xc78]
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0
je 0x10006f1b
cmp dword [ebp - 0x1a0], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf28], 0xffffffff
jge 0x10006f37
mov dword [ebp - 0x3ec], 1
jmp 0x10006f3e
and dword [ebp - 0x3ec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp + eax - 0x11e0], ecx
cmp dword [ebp - 0x3ec], 0
je 0x10006f6f
mov eax, 0xccae
test eax, eax
je 0x10006f6f
mov dword [ebp - 0xc80], 1
jmp 0x10006f76
and dword [ebp - 0xc80], 0
mov eax, dword [ebp - 0x1a0]
add eax, dword [ebp - 0xc80]
cmp eax, dword [ebp - 0x244]
jle 0x10006f96
mov dword [ebp - 0xdd0], 1
jmp 0x10006f9d
and dword [ebp - 0xdd0], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x10ac], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x10b4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x11e0]
mov dword [ebp - 0x10bc], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0xc88], eax
mov dword [ebp - 0x244], 0
jmp 0x10006ff9
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x1e
jne 0x10007022
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x10007020
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
jmp 0x10006fec
jmp 0x10006e10
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x10c4], eax
mov eax, dword [ebp - 0xc88]
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x24c], 0xa115252c
mov dword [ebp - 0x380], 0
jmp 0x10007062
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 3
jge 0x1000707e
mov eax, dword [ebp - 0x380]
mov dword [ebp + eax*4 - 0x13b0], 0xfffffffd
jmp 0x10007055
mov byte [ebp - 0x192], 0
movzx eax, byte [ebp - 0x192]
test eax, eax
je 0x100070a1
push 0
push 1
push 0x22a2
push 0
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
mov dword [ebp - 0x24c], 0
jmp 0x100070ba
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x100070d6
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x13b0], 0
jmp 0x100070ad
mov dword [ebp - 0x54], 0xb21a35ca
mov dword [ebp - 0xbc], 0x2a26f3f1
mov dword [ebp - 0x58], 0x37c1
mov dword [ebp - 0x254], 4
mov dword [ebp - 0x21c], 2
mov dword [ebp - 0xdf0], 0x174a
mov dword [ebp - 0xe00], 0x2679f1a7
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
je 0x10007143
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x10cc], eax
cmp dword [ebp - 0x58], 0
je 0x10007143
mov dword [ebp - 0xc98], 1
jmp 0x1000714a
and dword [ebp - 0xc98], 0
push 3
pop eax
test eax, eax
je 0x10007163
cmp dword [ebp - 0x54], 0
je 0x10007163
mov dword [ebp - 0xc90], 1
jmp 0x1000716a
and dword [ebp - 0xc90], 0
cmp dword [ebp - 0xc90], 0xd5d7
je 0x10007182
mov dword [ebp - 0xca0], 1
jmp 0x10007189
and dword [ebp - 0xca0], 0
imul eax, dword [ebp - 0xc98], 9
cmp eax, dword [ebp - 0xca0]
jle 0x100071a4
mov dword [ebp - 0xca8], 1
jmp 0x100071ab
and dword [ebp - 0xca8], 0
mov eax, dword [ebp - 0xca8]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x254], eax
jge 0x100071ce
mov dword [ebp - 0xcb0], 1
jmp 0x100071d5
and dword [ebp - 0xcb0], 0
cmp dword [ebp - 0xcb0], 0x2f14
jle 0x100071ed
mov dword [ebp - 0xcb8], 1
jmp 0x100071f4
and dword [ebp - 0xcb8], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xcb8], eax
jge 0x1000720b
mov dword [ebp - 0xcc0], 1
jmp 0x10007212
and dword [ebp - 0xcc0], 0
cmp dword [ebp - 0xcc0], 0
jl 0x10007227
mov dword [ebp - 0xcc8], 1
jmp 0x1000722e
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x254]
add eax, dword [ebp - 0x54]
cmp eax, 0xffff
ja 0x1000724d
mov dword [ebp - 0xcd0], 1
jmp 0x10007254
and dword [ebp - 0xcd0], 0
mov eax, dword [ebp - 0xcd0]
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x254], 0
je 0x1000735f
mov dword [ebp - 0x1a8], 0xf585950c
mov dword [ebp - 0x33c], 0
jmp 0x10007290
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 1
jge 0x100072ac
mov eax, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0xdd8], 0
jmp 0x10007283
mov dword [ebp - 0x58], 0
jmp 0x100072bc
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x33
jne 0x10007301
mov dword [ebp - 0x10d4], 0xfffffff6
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x100072ff
push 0
push 0x2020
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
jmp 0x100072b5
mov dword [ebp - 0x1a8], 0x15
jmp 0x1000731a
mov eax, dword [ebp - 0x1a8]
dec eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xb
jg 0x1000735a
mov dword [ebp - 0xbc], 0
jmp 0x1000733c
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xb
je 0x10007358
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xdd8], 0x1d976d99
jmp 0x1000732f
jmp 0x1000730d
jmp 0x10007528
mov dword [ebp - 0xde0], 0x7b1aa435
mov dword [ebp - 0x404], 8
mov eax, dword [ebp - 0xde0]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0
je 0x1000745f
mov dword [ebp - 0xbc], 0xfffffff7
cmp dword [ebp - 0xbc], 0
jne 0x100073b1
cmp dword [ebp - 0x54], 0
je 0x100073b1
mov dword [ebp - 0xcd8], 1
jmp 0x100073b8
and dword [ebp - 0xcd8], 0
cmp dword [ebp - 0xcd8], 0
jae 0x100073cd
mov dword [ebp - 0xde8], 1
jmp 0x100073d4
and dword [ebp - 0xde8], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x10dc], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x10e4], eax
cmp dword [ebp - 0x21c], 0xfffffff8
jne 0x100073fe
mov dword [ebp - 0xce0], 1
jmp 0x10007405
and dword [ebp - 0xce0], 0
mov eax, dword [ebp - 0xce0]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0xdf0]
add eax, dword [ebp - 0x21c]
mov dword [ebp - 0x21c], eax
je 0x1000743d
mov eax, 0xd1843ad3
test eax, eax
je 0x1000743d
mov dword [ebp - 0xdf8], 1
jmp 0x10007444
and dword [ebp - 0xdf8], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x10ec], eax
cmp dword [ebp - 0x58], 0
je 0x1000745f
mov dword [ebp - 0xce8], 1
jmp 0x10007466
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xce8], eax
jne 0x1000747d
mov dword [ebp - 0xcf0], 1
jmp 0x10007484
and dword [ebp - 0xcf0], 0
imul eax, dword [ebp - 0xcf0], 0xffff
cmp eax, 0xf606
je 0x100074a1
mov dword [ebp - 0xcf8], 1
jmp 0x100074a8
and dword [ebp - 0xcf8], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xcf8], eax
jge 0x100074bf
mov dword [ebp - 0xd00], 1
jmp 0x100074c6
and dword [ebp - 0xd00], 0
cmp dword [ebp - 0xd00], 0
jbe 0x100074db
mov dword [ebp - 0xd08], 1
jmp 0x100074e2
and dword [ebp - 0xd08], 0
cmp dword [ebp - 0xd08], 0xfffffffb
jbe 0x100074f7
mov dword [ebp - 0xd10], 1
jmp 0x100074fe
and dword [ebp - 0xd10], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xd10], eax
je 0x10007515
mov dword [ebp - 0xd18], 1
jmp 0x1000751c
and dword [ebp - 0xd18], 0
mov eax, dword [ebp - 0xd18]
mov dword [ebp - 0xe00], eax
mov dword [ebp - 0xdc], 0xfffffffe
mov dword [ebp - 0x1b0], 0x1647c2c9
mov dword [ebp - 0x100], 5
mov dword [ebp - 0x1c8], 0x82c4475e
mov dword [ebp - 0x1d0], 0x2487223b
mov dword [ebp - 0x348], 0
jmp 0x10007573
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 4
jge 0x1000758f
mov eax, dword [ebp - 0x348]
mov dword [ebp + eax*4 - 0x13e8], 0
jmp 0x10007566
mov eax, dword [ebp - 0xdc]
sub eax, 0x5184860a
cmp eax, 1
jge 0x100075ab
mov dword [ebp - 0xd20], 1
jmp 0x100075b2
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0xd20]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jne 0x100075e5
cmp dword [ebp - 0x100], 0
jne 0x100075e5
and dword [ebp - 0xd28], 0
jmp 0x100075ef
mov dword [ebp - 0xd28], 1
cmp dword [ebp - 0xd28], 0xb979cd32
jne 0x10007607
mov dword [ebp - 0xd30], 1
jmp 0x1000760e
and dword [ebp - 0xd30], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xd30], eax
je 0x10007628
mov dword [ebp - 0xc84], 1
jmp 0x1000762f
and dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0xc84]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1c8]
imul eax, dword [ebp - 0xdc]
mov dword [ebp - 0x500], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x500]
mov dword [ebp + eax - 0x13e8], ecx
cmp dword [ebp - 0x500], 0
je 0x1000767f
mov eax, 0x34859bb
test eax, eax
je 0x1000767f
mov dword [ebp - 0x9a0], 1
jmp 0x10007686
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0x9a0]
mov dword [ebp - 0x1d0], eax
imul eax, dword [ebp - 0x1d0], 0xffff
sub eax, 0xc715
mov ecx, dword [ebp - 0xdc]
add ecx, eax
je 0x100077ab
mov dword [ebp - 0x1d0], 0
jmp 0x100076c8
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x11
jne 0x1000778a
mov dword [ebp - 0x100], 0xfffffff1
jmp 0x100076ee
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x12
jge 0x10007785
mov dword [ebp - 0x10f4], 0x5ca2589d
mov dword [ebp - 0x508], 0x511bd77d
mov dword [ebp - 0x1b0], 0x14
jmp 0x10007728
mov eax, dword [ebp - 0x1b0]
dec eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0xfffffffb
jg 0x10007780
mov byte [ebp - 0x16d], 0
movzx eax, byte [ebp - 0x16d]
test eax, eax
je 0x1000774d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov dword [ebp - 0x1c8], 0x19
jmp 0x10007766
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0xfffffff8
jl 0x1000777e
mov eax, dword [ebp - 0x508]
inc eax
mov dword [ebp - 0x508], eax
jmp 0x10007759
jmp 0x1000771b
jmp 0x100076e1
jmp 0x100076bb
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x100077a9
push 0
push 0x2339
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
jmp 0x100077f3
mov dword [ebp - 0xdc], 8
jmp 0x100077c4
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xf
je 0x100077f3
mov byte [ebp - 0x194], 0
movzx eax, byte [ebp - 0x194]
test eax, eax
je 0x100077f1
push 0x1d49
push 0x2034
push 0
call dword [sym.imp.USER32.dll_RemoveMenu]
jmp 0x100077b7
mov byte [ebp - 0xec], 0
movzx eax, byte [ebp - 0xec]
test eax, eax
je 0x1000780d
push 0
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0xc4], 0xffffffff
mov dword [ebp - 0xe08], 0x40c8e82b
mov dword [ebp - 0xa0], 0
jmp 0x1000783a
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x10007856
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x20c], 0
jmp 0x1000782d
mov dword [ebp - 0xa0], 0
jmp 0x1000786f
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x1000788b
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xec0], 0x9884cb8
jmp 0x10007862
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x20c]
cmp dword [ebp + eax - 0x20c], ecx
je 0x100078b2
mov dword [ebp - 0x9a8], 1
jmp 0x100078b9
and dword [ebp - 0x9a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp eax, dword [ebp - 0x9a8]
jne 0x100078da
mov dword [ebp - 0x510], 1
jmp 0x100078e1
and dword [ebp - 0x510], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp eax, dword [ebp - 0x510]
je 0x10007902
mov dword [ebp - 0x9b0], 1
jmp 0x10007909
and dword [ebp - 0x9b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x9b0], eax
jg 0x1000793a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x20c], 0
je 0x1000793a
mov dword [ebp - 0x518], 1
jmp 0x10007941
and dword [ebp - 0x518], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x518]
imul ecx, dword [ebp + eax - 0x20c]
mov dword [ebp - 0x9b8], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9b8]
mov dword [ebp + eax - 0xec0], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x9b8], eax
jge 0x1000798f
mov dword [ebp - 0x520], 1
jmp 0x10007996
and dword [ebp - 0x520], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x520], eax
jne 0x100079b7
mov dword [ebp - 0x9c0], 1
jmp 0x100079be
and dword [ebp - 0x9c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x9c0], eax
jle 0x100079df
mov dword [ebp - 0x528], 1
jmp 0x100079e6
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0xc4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20c]
mov dword [ebp - 0x9c8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c8]
mov dword [ebp + eax - 0xec0], ecx
cmp dword [ebp - 0x9c8], 0
je 0x10007c10
push 9
pop eax
test eax, eax
je 0x10007a41
cmp dword [ebp - 0xc4], 0
je 0x10007a41
mov dword [ebp - 0x530], 1
jmp 0x10007a48
and dword [ebp - 0x530], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec0]
cmp dword [ebp - 0x530], eax
jge 0x10007a69
mov dword [ebp - 0x9d0], 1
jmp 0x10007a70
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x9d0]
sub eax, 0x1b0ce7ae
cmp eax, 0x5835
jge 0x10007a8e
mov dword [ebp - 0x538], 1
jmp 0x10007a95
and dword [ebp - 0x538], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x538], eax
jg 0x10007ab6
mov dword [ebp - 0x40c], 1
jmp 0x10007abd
and dword [ebp - 0x40c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x40c]
mov dword [ebp + eax - 0xec0], ecx
cmp dword [ebp - 0x40c], 0xfffffff6
ja 0x10007ae4
mov dword [ebp - 0x9d8], 1
jmp 0x10007aeb
and dword [ebp - 0x9d8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc4]
add edx, dword [ebp - 0x9d8]
add ecx, edx
imul ecx, ecx, 0x9773
cmp dword [ebp + eax - 0x20c], ecx
je 0x10007b20
mov dword [ebp - 0x540], 1
jmp 0x10007b27
and dword [ebp - 0x540], 0
cmp dword [ebp - 0x540], 0xb705
jle 0x10007b3f
mov dword [ebp - 0x9e0], 1
jmp 0x10007b46
and dword [ebp - 0x9e0], 0
cmp dword [ebp - 0x9e0], 0x8d7c584e
jb 0x10007b5e
mov dword [ebp - 0x548], 1
jmp 0x10007b65
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x548], eax
je 0x10007b7f
mov dword [ebp - 0x9e8], 1
jmp 0x10007b86
and dword [ebp - 0x9e8], 0
cmp dword [ebp - 0x9e8], 2
je 0x10007b9b
mov dword [ebp - 0x550], 1
jmp 0x10007ba2
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x550], eax
je 0x10007bbc
mov dword [ebp - 0x9f0], 1
jmp 0x10007bc3
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x9f0]
add eax, 0xa
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x20c]
jne 0x10007be7
mov dword [ebp - 0x558], 1
jmp 0x10007bee
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
neg eax
je 0x10007c10
mov dword [ebp - 0x9f8], 1
jmp 0x10007c17
and dword [ebp - 0x9f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x9f8], eax
jne 0x10007c3a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20c], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x20c]
cmp dword [ebp + eax - 0x20c], ecx
jl 0x10007c61
mov dword [ebp - 0x560], 1
jmp 0x10007c68
and dword [ebp - 0x560], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x560], eax
jle 0x10007c89
mov dword [ebp - 0xa00], 1
jmp 0x10007c90
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0xa00]
mov dword [ebp - 0xe08], eax
mov dword [ebp - 0x26c], 0
jmp 0x10007cb5
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jge 0x10007cd1
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x140c], 0x61f9
jmp 0x10007ca8
mov byte [ebp - 0x175], 0
movzx eax, byte [ebp - 0x175]
test eax, eax
je 0x10007cee
push 0x2019
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [ebp - 0x10], 0xe0648261
mov dword [ebp - 0xe10], 1
mov dword [ebp - 0x10], 0
jmp 0x10007d0f
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe3
jne 0x10007d36
mov byte [ebp - 0xee], 0
movzx eax, byte [ebp - 0xee]
test eax, eax
je 0x10007d34
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowCaret]
jmp 0x10007d08
mov dword [ebp - 0x10], 0
jmp 0x10007d46
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x10007e63
mov dword [ebp - 0x310], 0
jmp 0x10007d69
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 1
jge 0x10007d85
mov eax, dword [ebp - 0x310]
mov dword [ebp + eax*4 - 0x47c], 0xffff
jmp 0x10007d5c
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jne 0x10007d99
mov dword [ebp - 0xa08], 1
jmp 0x10007da0
and dword [ebp - 0xa08], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x47c]
mov dword [ebp - 0x10fc], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1104], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x47c]
imul eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jne 0x10007dde
mov dword [ebp - 0x568], 1
jmp 0x10007de5
and dword [ebp - 0x568], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x47c]
cmp dword [ebp - 0x568], eax
jge 0x10007e06
mov dword [ebp - 0x570], 1
jmp 0x10007e0d
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0xa08]
cmp eax, dword [ebp - 0x570]
jne 0x10007e27
mov dword [ebp - 0xa10], 1
jmp 0x10007e2e
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xa10]
jg 0x10007e4b
cmp dword [ebp - 0x10], 0
je 0x10007e4b
mov dword [ebp - 0x578], 1
jmp 0x10007e52
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0xe10], eax
jmp 0x10007d3f
mov byte [ebp - 0x196], 0
movzx eax, byte [ebp - 0x196]
test eax, eax
je 0x10007e80
push 0x2019
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x1088], 0xe7aebb1b
mov dword [ebp - 0x1084], 0xe7aebb1b
mov dword [ebp - 0x1080], 0xe7aebb1b
mov dword [ebp - 0x107c], 0xe7aebb1b
mov dword [ebp - 0xe20], 0
mov dword [ebp - 0xfa8], 9
mov dword [ebp - 0xfa4], 9
mov dword [ebp - 0xfa0], 9
mov dword [ebp - 0xf9c], 9
mov dword [ebp - 0x7c], 0
jmp 0x10007ef4
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10007f0a
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x418], 0xffffffff
jmp 0x10007eed
mov dword [ebp - 0x7c], 0
jmp 0x10007f1a
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x10007f30
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x11f0], 0x637b3047
jmp 0x10007f13
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x418], 0
je 0x10008013
mov dword [ebp - 0x25c], 0xffffffff
mov dword [ebp - 0x274], 0
jmp 0x10007f67
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 4
jge 0x10007f83
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0xf10], 0
jmp 0x10007f5a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf10], 0
jmp 0x10007fb1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf10]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf10], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf10], 2
jge 0x10007fdb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf10]
mov dword [ebp + eax*4 - 0x418], 0xfffffffe
jmp 0x10007f96
mov dword [ebp - 0x25c], 0
jmp 0x10007ff4
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 1
jg 0x10008011
mov eax, dword [ebp - 0x25c]
cmp dword [ebp + eax*4 - 0x418], 0
je 0x1000800f
jmp 0x10008011
jmp 0x10007fe7
jmp 0x10008035
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1000802b
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov dword [ebp - 0x484], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x418]
mov dword [ebp - 0x110c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x11f0], 0x9bdd7770
jb 0x10008067
mov dword [ebp - 0xa18], 1
jmp 0x1000806e
and dword [ebp - 0xa18], 0
cmp dword [ebp - 0xa18], 0x7201
jle 0x10008086
mov dword [ebp - 0x580], 1
jmp 0x1000808d
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x580]
sub eax, dword [ebp - 0x484]
mov dword [ebp - 0xa20], 1
jmp 0x100080ac
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1088]
cmp dword [ebp - 0xa20], eax
jne 0x100080cd
mov dword [ebp - 0x588], 1
jmp 0x100080d4
and dword [ebp - 0x588], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11f0]
cmp dword [ebp - 0x588], eax
jge 0x100080f5
mov dword [ebp - 0xa28], 1
jmp 0x100080fc
and dword [ebp - 0xa28], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa28]
sub ecx, dword [ebp + eax - 0x418]
cmp ecx, dword [ebp - 0x484]
jl 0x10008123
mov dword [ebp - 0xe18], 1
jmp 0x1000812a
and dword [ebp - 0xe18], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x418]
mov dword [ebp - 0x1114], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe20]
cmp dword [ebp + eax - 0x418], ecx
jle 0x1000815e
mov dword [ebp - 0x590], 1
jmp 0x10008165
and dword [ebp - 0x590], 0
cmp dword [ebp - 0x590], 0x895c
jle 0x10008186
mov eax, 0x79a9
test eax, eax
je 0x10008186
mov dword [ebp - 0xa30], 1
jmp 0x1000818d
and dword [ebp - 0xa30], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xa30]
mov dword [ebp + eax - 0xfa8], ecx
mov dword [ebp - 0x10c], 0xfffffff6
mov dword [ebp - 0x49c], 0xffffffff
mov dword [ebp - 0x240], 0xa023703a
mov dword [ebp - 0x4a4], 1
mov dword [ebp - 0xa40], 0x8ef8a6eb
mov dword [ebp - 0x304], 0
jmp 0x100081ea
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 2
jge 0x10008206
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0xf58], 0xa11600d5
jmp 0x100081dd
mov dword [ebp - 0x10c], 0
jmp 0x1000821f
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xfffffff2
jge 0x10008429
mov dword [ebp - 0x1b8], 0x2d9e
mov dword [ebp - 0xe28], 0
mov dword [ebp - 0x27c], 0
jmp 0x10008259
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 3
jge 0x10008275
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0x1200], 0xfffffff8
jmp 0x1000824c
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x111c], eax
mov eax, dword [ebp - 0xe28]
mov dword [ebp - 0x1124], eax
cmp dword [ebp - 0x10c], 0x289fff12
jne 0x100082a5
mov dword [ebp - 0x598], 1
jmp 0x100082ac
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x598], eax
jl 0x100082c6
mov dword [ebp - 0x48c], 1
jmp 0x100082cd
and dword [ebp - 0x48c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x48c]
mov dword [ebp + eax - 0xf58], ecx
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x48c], eax
jle 0x100082fa
mov dword [ebp - 0xa38], 1
jmp 0x10008301
and dword [ebp - 0xa38], 0
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 0
je 0x1000831d
cmp dword [ebp - 0x1b8], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf58], 0xffffffff
jge 0x10008339
mov dword [ebp - 0x494], 1
jmp 0x10008340
and dword [ebp - 0x494], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x494]
mov dword [ebp + eax - 0x1200], ecx
cmp dword [ebp - 0x494], 0
je 0x10008371
mov eax, 0xccae
test eax, eax
je 0x10008371
mov dword [ebp - 0x5a0], 1
jmp 0x10008378
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x1b8]
add eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x240]
jle 0x10008398
mov dword [ebp - 0xe30], 1
jmp 0x1000839f
and dword [ebp - 0xe30], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x112c], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1178], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1200]
mov dword [ebp - 0x1180], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0xa40], eax
mov dword [ebp - 0x240], 0
jmp 0x100083fb
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x1e
jne 0x10008424
mov byte [ebp - 0xf0], 0
movzx eax, byte [ebp - 0xf0]
test eax, eax
je 0x10008422
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
jmp 0x100083ee
jmp 0x10008212
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x1188], eax
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x4ac], 0
mov dword [ebp - 0x1028], 0xe7aebb1b
mov dword [ebp - 0x1024], 0xe7aebb1b
mov dword [ebp - 0x1020], 0xe7aebb1b
mov dword [ebp - 0x101c], 0xe7aebb1b
mov dword [ebp - 0xe58], 0
mov dword [ebp - 0xfc8], 9
mov dword [ebp - 0xfc4], 9
mov dword [ebp - 0xfc0], 9
mov dword [ebp - 0xfbc], 9
mov dword [ebp - 0x64], 0
jmp 0x100084b5
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x100084cb
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x424], 0xffffffff
jmp 0x100084ae
mov dword [ebp - 0x64], 0
jmp 0x100084db
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x100084f1
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x1210], 0x637b3047
jmp 0x100084d4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x424], 0
je 0x100085d4
mov dword [ebp - 0x23c], 0xffffffff
mov dword [ebp - 0x360], 0
jmp 0x10008528
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 4
jge 0x10008544
mov eax, dword [ebp - 0x360]
mov dword [ebp + eax*4 - 0xf20], 0
jmp 0x1000851b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf20], 0
jmp 0x10008572
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf20]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf20], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf20], 2
jge 0x1000859c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf20]
mov dword [ebp + eax*4 - 0x424], 0xfffffffe
jmp 0x10008557
mov dword [ebp - 0x23c], 0
jmp 0x100085b5
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 1
jg 0x100085d2
mov eax, dword [ebp - 0x23c]
cmp dword [ebp + eax*4 - 0x424], 0
je 0x100085d0
jmp 0x100085d2
jmp 0x100085a8
jmp 0x100085f6
mov byte [ebp - 0x17d], 0
movzx eax, byte [ebp - 0x17d]
test eax, eax
je 0x100085ec
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov dword [ebp - 0x4ac], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x424]
mov dword [ebp - 0x1190], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1210], 0x9bdd7770
jb 0x10008628
mov dword [ebp - 0x5a8], 1
jmp 0x1000862f
and dword [ebp - 0x5a8], 0
cmp dword [ebp - 0x5a8], 0x7201
jle 0x10008647
mov dword [ebp - 0xa48], 1
jmp 0x1000864e
and dword [ebp - 0xa48], 0
mov eax, dword [ebp - 0xa48]
sub eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x5b0], 1
jmp 0x1000866d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1028]
cmp dword [ebp - 0x5b0], eax
jne 0x1000868e
mov dword [ebp - 0xa50], 1
jmp 0x10008695
and dword [ebp - 0xa50], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1210]
cmp dword [ebp - 0xa50], eax
jge 0x100086b6
mov dword [ebp - 0x5b8], 1
jmp 0x100086bd
and dword [ebp - 0x5b8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5b8]
sub ecx, dword [ebp + eax - 0x424]
cmp ecx, dword [ebp - 0x4ac]
jl 0x100086e4
mov dword [ebp - 0xe50], 1
jmp 0x100086eb
and dword [ebp - 0xe50], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x424]
mov dword [ebp - 0x1198], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe58]
cmp dword [ebp + eax - 0x424], ecx
jle 0x1000871f
mov dword [ebp - 0xa58], 1
jmp 0x10008726
and dword [ebp - 0xa58], 0
cmp dword [ebp - 0xa58], 0x895c
jle 0x10008747
mov eax, 0x79a9
test eax, eax
je 0x10008747
mov dword [ebp - 0x5c0], 1
jmp 0x1000874e
and dword [ebp - 0x5c0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp + eax - 0xfc8], ecx
mov dword [ebp - 0x114], 0xfffffff6
mov dword [ebp - 0x3d8], 0xffffffff
mov dword [ebp - 0x228], 0xa023703a
mov dword [ebp - 0x46c], 1
mov dword [ebp - 0x5d0], 0x8ef8a6eb
mov dword [ebp - 0x284], 0
jmp 0x100087ab
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x100087c7
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0xf40], 0xa11600d5
jmp 0x1000879e
mov dword [ebp - 0x114], 0
jmp 0x100087e0
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xfffffff2
jge 0x100089ea
mov dword [ebp - 0x1d8], 0x2d9e
mov dword [ebp - 0xe60], 0
mov dword [ebp - 0x30c], 0
jmp 0x1000881a
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 3
jge 0x10008836
mov eax, dword [ebp - 0x30c]
mov dword [ebp + eax*4 - 0x1220], 0xfffffff8
jmp 0x1000880d
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x11a0], eax
mov eax, dword [ebp - 0xe60]
mov dword [ebp - 0x11a8], eax
cmp dword [ebp - 0x114], 0x289fff12
jne 0x10008866
mov dword [ebp - 0xa60], 1
jmp 0x1000886d
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0xa60], eax
jl 0x10008887
mov dword [ebp - 0x460], 1
jmp 0x1000888e
and dword [ebp - 0x460], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x460]
mov dword [ebp + eax - 0xf40], ecx
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x460], eax
jle 0x100088bb
mov dword [ebp - 0x5c8], 1
jmp 0x100088c2
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0
je 0x100088de
cmp dword [ebp - 0x1d8], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf40], 0xffffffff
jge 0x100088fa
mov dword [ebp - 0x458], 1
jmp 0x10008901
and dword [ebp - 0x458], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x458]
mov dword [ebp + eax - 0x1220], ecx
cmp dword [ebp - 0x458], 0
je 0x10008932
mov eax, 0xccae
test eax, eax
je 0x10008932
mov dword [ebp - 0xa68], 1
jmp 0x10008939
and dword [ebp - 0xa68], 0
mov eax, dword [ebp - 0x1d8]
add eax, dword [ebp - 0xa68]
cmp eax, dword [ebp - 0x228]
jle 0x10008959
mov dword [ebp - 0xe68], 1
jmp 0x10008960
and dword [ebp - 0xe68], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x11b0], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x11b8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1220]
mov dword [ebp - 0x11c0], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x228], 0
jmp 0x100089bc
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x1e
jne 0x100089e5
mov byte [ebp - 0xf2], 0
movzx eax, byte [ebp - 0xf2]
test eax, eax
je 0x100089e3
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
jmp 0x100089af
jmp 0x100087d3
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x11c8], eax
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x11c], 0x4fd3df75
mov dword [ebp - 0x5f8], 0xfffffff7
mov dword [ebp - 0x3e0], 0x402e31d8
mov dword [ebp - 0xa70], 0xffff
mov dword [ebp - 0x11c], 0xffffffea
jmp 0x10008a43
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xffffffec
jle 0x10008c29
mov dword [ebp - 0x1c0], 0xc157
mov dword [ebp - 0xe78], 0
mov dword [ebp - 0x28c], 0xfffffffd
mov dword [ebp - 0xe80], 1
mov eax, dword [ebp - 0xa70]
dec eax
mov dword [ebp - 0xa70], eax
cmp dword [ebp - 0x11c], 0xfffffffa
jge 0x10008a9a
mov dword [ebp - 0xa78], 1
jmp 0x10008aa1
and dword [ebp - 0xa78], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x11d0], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1268], eax
mov eax, 0x3046
cmp eax, 0xffff
je 0x10008ad1
mov dword [ebp - 0x5d8], 1
jmp 0x10008ad8
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 3
jl 0x10008af9
mov dword [ebp - 0xe70], 1
jmp 0x10008b00
and dword [ebp - 0xe70], 0
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x1270], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1278], eax
mov dword [ebp - 0xe78], 0
cmp dword [ebp - 0x3e0], 0
je 0x10008b32
cmp dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x11c]
add eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0xa78], eax
jge 0x10008b52
mov dword [ebp - 0x5e0], 1
jmp 0x10008b59
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x5e0], eax
jg 0x10008b73
mov dword [ebp - 0xa80], 1
jmp 0x10008b7a
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0xa80]
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0
jne 0x10008ba1
cmp dword [ebp - 0x28c], 0
jne 0x10008ba1
and dword [ebp - 0x5e8], 0
jmp 0x10008bab
mov dword [ebp - 0x5e8], 1
mov eax, dword [ebp - 0x5e8]
sub eax, dword [ebp - 0xe80]
cmp eax, 0xb085bb31
jae 0x10008bca
mov dword [ebp - 0xa88], 1
jmp 0x10008bd1
and dword [ebp - 0xa88], 0
cmp dword [ebp - 0xa88], 0xfffffffb
je 0x10008be6
mov dword [ebp - 0x5f0], 1
jmp 0x10008bed
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
dec eax
cmp dword [ebp - 0x1c0], eax
jl 0x10008c11
cmp dword [ebp - 0x28c], 0
je 0x10008c11
mov dword [ebp - 0xa90], 1
jmp 0x10008c18
and dword [ebp - 0xa90], 0
mov eax, dword [ebp - 0xa90]
mov dword [ebp - 0x5f8], eax
jmp 0x10008a36
mov dword [ebp - 0x124], 0x6d444182
mov dword [ebp - 0xaa0], 0x465ee6d5
mov dword [ebp - 0xa4], 0
jmp 0x10008c56
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x10008c72
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x1068], 0x7fd5464b
jmp 0x10008c49
mov dword [ebp - 0xa4], 0
jmp 0x10008c8b
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10008ca7
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xac8], 0xe29ac92d
jmp 0x10008c7e
mov dword [ebp - 0x124], 0
jmp 0x10008cc0
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 3
jg 0x10008f22
mov dword [ebp - 0x44], 0xfffffff9
mov dword [ebp - 0x600], 0x3650dfa0
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x10008cff
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapDialogRect]
mov dword [ebp - 0x44], 0
jmp 0x10008d0f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jg 0x10008f1d
mov dword [ebp - 0x474], 0xffffffff
mov eax, 0x70669599
test eax, eax
je 0x10008e6d
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x1068]
mov dword [ebp - 0x1280], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x1068]
sub eax, 0x22704732
cmp eax, 0x660d64c9
jg 0x10008d62
mov dword [ebp - 0xea4], 1
jmp 0x10008d69
and dword [ebp - 0xea4], 0
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x1288], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1068]
mov dword [ebp - 0xa98], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xa98]
mov dword [ebp + eax*4 - 0x1068], ecx
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0xaa0], eax
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0xaa0], eax
jne 0x10008dca
mov dword [ebp - 0x608], 1
jmp 0x10008dd1
and dword [ebp - 0x608], 0
cmp dword [ebp - 0x608], 0x8b474307
ja 0x10008de9
mov dword [ebp - 0xaa8], 1
jmp 0x10008df0
and dword [ebp - 0xaa8], 0
cmp dword [ebp - 0xaa8], 0xdd9ae65c
jae 0x10008e08
mov dword [ebp - 0x610], 1
jmp 0x10008e0f
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x610], eax
jge 0x10008e29
mov dword [ebp - 0xab0], 1
jmp 0x10008e30
and dword [ebp - 0xab0], 0
mov eax, dword [ebp - 0x474]
cmp dword [ebp - 0xab0], eax
je 0x10008e4a
mov dword [ebp - 0xeac], 1
jmp 0x10008e51
and dword [ebp - 0xeac], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1290], eax
push 5
pop eax
test eax, eax
je 0x10008e6d
mov dword [ebp - 0x618], 1
jmp 0x10008e74
and dword [ebp - 0x618], 0
cmp dword [ebp - 0x618], 1
jne 0x10008e89
mov dword [ebp - 0xab8], 1
jmp 0x10008e90
and dword [ebp - 0xab8], 0
cmp dword [ebp - 0xab8], 2
jae 0x10008ea5
mov dword [ebp - 0x620], 1
jmp 0x10008eac
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x620]
cmp eax, 0x106ec6e5
jg 0x10008ec8
mov dword [ebp - 0xac0], 1
jmp 0x10008ecf
and dword [ebp - 0xac0], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0xac0]
sub eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x124]
mov dword [ebp - 0x628], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x628]
mov dword [ebp + eax - 0xac8], ecx
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0x474], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xac8], 0
je 0x10008f18
jmp 0x10008f1d
jmp 0x10008d08
jmp 0x10008cb3
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x10008f41
push 0x17c9
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 0xfe8], 0xe7aebb1b
mov dword [ebp - 0xfe4], 0xe7aebb1b
mov dword [ebp - 0xfe0], 0xe7aebb1b
mov dword [ebp - 0xfdc], 0xe7aebb1b
mov dword [ebp - 0xea0], 0
mov dword [ebp - 0x1048], 9
mov dword [ebp - 0x1044], 9
mov dword [ebp - 0x1040], 9
mov dword [ebp - 0x103c], 9
mov dword [ebp - 0x84], 0
jmp 0x10008fbe
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x10008fda
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x430], 0xffffffff
jmp 0x10008fb1
mov dword [ebp - 0x84], 0
jmp 0x10008ff3
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x1000900f
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x1230], 0x637b3047
jmp 0x10008fe6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x430], 0
je 0x100090f2
mov dword [ebp - 0x250], 0xffffffff
mov dword [ebp - 0x344], 0
jmp 0x10009046
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 4
jge 0x10009062
mov eax, dword [ebp - 0x344]
mov dword [ebp + eax*4 - 0xf38], 0
jmp 0x10009039
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf38], 0
jmp 0x10009090
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf38]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf38], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf38], 2
jge 0x100090ba
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf38]
mov dword [ebp + eax*4 - 0x430], 0xfffffffe
jmp 0x10009075
mov dword [ebp - 0x250], 0
jmp 0x100090d3
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 1
jg 0x100090f0
mov eax, dword [ebp - 0x250]
cmp dword [ebp + eax*4 - 0x430], 0
je 0x100090ee
jmp 0x100090f0
jmp 0x100090c6
jmp 0x10009114
mov byte [ebp - 0x103], 0
movzx eax, byte [ebp - 0x103]
test eax, eax
je 0x1000910a
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov dword [ebp - 0x3e8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x430]
mov dword [ebp - 0x1298], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1230], 0x9bdd7770
jb 0x10009146
mov dword [ebp - 0x630], 1
jmp 0x1000914d
and dword [ebp - 0x630], 0
cmp dword [ebp - 0x630], 0x7201
jle 0x10009165
mov dword [ebp - 0xad0], 1
jmp 0x1000916c
and dword [ebp - 0xad0], 0
mov eax, dword [ebp - 0xad0]
sub eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x638], 1
jmp 0x1000918b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfe8]
cmp dword [ebp - 0x638], eax
jne 0x100091ac
mov dword [ebp - 0xad8], 1
jmp 0x100091b3
and dword [ebp - 0xad8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1230]
cmp dword [ebp - 0xad8], eax
jge 0x100091d4
mov dword [ebp - 0x640], 1
jmp 0x100091db
and dword [ebp - 0x640], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x640]
sub ecx, dword [ebp + eax - 0x430]
cmp ecx, dword [ebp - 0x3e8]
jl 0x10009202
mov dword [ebp - 0xeb4], 1
jmp 0x10009209
and dword [ebp - 0xeb4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x430]
mov dword [ebp - 0x12a0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xea0]
cmp dword [ebp + eax - 0x430], ecx
jle 0x1000923d
mov dword [ebp - 0xae0], 1
jmp 0x10009244
and dword [ebp - 0xae0], 0
cmp dword [ebp - 0xae0], 0x895c
jle 0x10009265
mov eax, 0x79a9
test eax, eax
je 0x10009265
mov dword [ebp - 0x648], 1
jmp 0x1000926c
and dword [ebp - 0x648], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x648]
mov dword [ebp + eax - 0x1048], ecx
mov dword [ebp - 0x314], 0xf9c28ade
mov dword [ebp - 0x12a8], 1
mov dword [ebp - 0x12b0], 1
mov dword [ebp - 0x12b8], 0xef8a6ebb
mov dword [ebp - 0xae8], 0xfffffff8
mov dword [ebp - 0x294], 0
jmp 0x100092c9
cmp dword [ebp - 0x294], 2
jge 0x100092e5