Function at 0x1004123f
Capabilities:
Create pipe
Delete file
Delete registry value
Extract resource via kernel32 functions
Get common file path
Get disk information
Get keyboard layout
Identify system language via api
Set registry value

Disassembly:
mov eax, 0x10068720
call fcn.10067390
sub esp, 0xaa0
movdqa xmm0, xmmword [0x1000c9e0]
lea eax, [ebp - 0x6d4]
push ebx
push esi
push edi
mov dword [ebp - 0x68], ecx
lea ecx, [ebp - 0x6e4]
mov dword [ebp - 0x10], esp
push ecx
push eax
push ecx
lea ecx, [ebp - 0x220]
mov byte [ebp - 0x78], dl
movdqu xmmword [ebp - 0x6e4], xmm0
call fcn.100133bf
xor ebx, ebx
xor edi, edi
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0x220]
mov esi, dword [sym.imp.KERNEL32.dll_Beep]
mov dword [ebp - 0x54], 0x5a1fa147
mov dword [eax], ebx
or eax, 0xffffffff
inc edi
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x14], ebx
jmp 0x100412be
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1f8], 0x869e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100412ad
mov dword [ebp - 0x54], ebx
jmp 0x100412d4
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x1f8], eax
dec dword [ebp - 0x54]
cmp dword [ebp - 0x54], 0xfffffff4
jl 0x100412c8
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], bl
je 0x100412ee
push 0xf62
push 0x179c
call esi
mov eax, dword [ebp - 0x220]
push 0xffffffffffffffff
inc dword [eax]
cmp dword [eax], 0xb
pop eax
jl 0x100412a5
mov dword [ebp - 0x54], 0xfffffff2
cmp dword [ebp - 0x54], 6
jl 0x10041392
push 3
pop esi
push esi
lea ecx, [ebp - 0x150]
call fcn.10013363
mov dword [ebp - 0x14], ebx
jmp 0x10041336
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x150]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10041323
cmp dword [ebp - 0x54], ebx
mov edx, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x150]
je 0x1004136b
cmp dword [edx], 0xfc60
jne 0x1004135b
mov esi, edi
cmp dword [ecx + 8], ebx
jne 0x1004135d
mov esi, ebx
xor eax, eax
cmp dword [ecx + 8], edi
setge al
cmp eax, esi
mov eax, edi
je 0x1004136d
mov eax, ebx
mov dword [ecx + 8], eax
lea ecx, [ebp - 0x150]
cmp dword [edx], ebx
jne 0x1004138d
call fcn.100133e5
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 6
push 3
pop esi
jge 0x10041312
jmp 0x10041392
call fcn.100133e5
or esi, 0xffffffff
lea ecx, [ebp - 0x220]
mov dword [ebp - 4], esi
call fcn.100133e5
mov dword [ebp - 0x38], 0x5c68ec0a
lea ecx, [ebp - 0x590]
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x3c], 0xfffffffd
mov dword [ebp - 0x2c], esi
push edi
call fcn.10013363
mov dword [ebp - 4], edi
mov dword [ebp - 0x4c], 0x6e69
cmp dword [ebp - 0x4c], 0x6fc1
jle 0x10041406
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10611478
or eax, esi
cdq
push edx
push eax
call fcn.10013138
inc edi
cmp edi, 0x4c45
jl 0x100413dd
inc esi
cmp esi, 0x5a51
jl 0x100413db
xor edi, edi
inc edi
or esi, 0xffffffff
mov dword [ebp - 0x30], 0xd6b9ec49
mov byte [ebp - 4], 2
cmp dword [ebp - 0x4c], 0x6e2f
jge 0x1004144d
mov edx, 0x1000b538
mov ecx, 0x10611478
call fcn.10015a5f
jmp 0x1004144d
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], 0x38d7
mov dword [ebp - 0x18], ebx
jmp 0x10041469
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1004145c
mov dword [ebp - 0x18], ebx
jmp 0x10041485
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x800], 0x2499e68f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10041474
mov dword [ebp - 0x18], ebx
jmp 0x1004149f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x590]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10041490
mov dword [ebp - 0x38], 0xffffffef
jmp 0x10041555
mov dword [ebp - 0x3c], esi
lea ecx, [ebp - 0x4f8]
push 2
call fcn.10013363
mov dword [ebp - 0x14], ebx
jmp 0x100414d4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4f8]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100414c5
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xe0]
cmp ecx, eax
mov esi, dword [ebp - 0x4f8]
mov eax, dword [ebp - 0xe0]
sete dl
inc edx
neg edx
mov dword [esi + 4], ecx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, 0xddd9cd4
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
mov ecx, 0xffff7b65
setle dl
sub ecx, edx
add eax, ecx
lea ecx, [ebp - 0x4f8]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0xe4]
mov eax, dword [esi + 4]
mov dword [ebp - 0x3c], eax
call fcn.100133e5
dec dword [ebp - 0x38]
push 0xffffffffffffffff
pop esi
cmp dword [ebp - 0x38], 0xffffffe5
jge 0x100414b0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x24]
cmp eax, ecx
jne 0x10041596
mov dword [ebp - 0x34], edi
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], 0
je 0x1004158e
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 3
pop esi
jmp 0x10041637
push 3
mov dword [ebp - 0x4c], 0xa623b0d7
pop esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x20], ebx
jmp 0x1004162e
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x24], 0x2b33
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x38], 0xdfa8
mov eax, dword [ebp - 0x800]
cmp eax, dword [ebp - 0x38]
je 0x100415de
mov ecx, ebx
cmp dword [ebp - 0x38], ebx
je 0x100415e0
mov ecx, edi
mov eax, dword [ebp - 0x4c]
sub ecx, eax
je 0x100415ea
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x38]
cmp eax, 0x7345
mov eax, dword [ebp - 0x4c]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], ebx
jl 0x1004162b
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], 0
je 0x10041626
push 0x2076
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
dec dword [ebp - 0x38]
jns 0x1004160f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x100415ab
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x590]
call fcn.100133e5
movdqa xmm0, xmmword [0x1000c9e0]
lea ecx, [ebp - 0x714]
push ecx
lea eax, [ebp - 0x704]
push eax
push ecx
lea ecx, [ebp - 0x210]
movdqu xmmword [ebp - 0x714], xmm0
call fcn.100133bf
mov dword [ebp - 4], 4
mov dword [ebp - 0x54], 0x5a1fa147
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x14], ebx
jmp 0x10041697
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x84], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10041686
mov dword [ebp - 0x84], ebx
jmp 0x100416c3
mov dword [ebp - 0x24], edi
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4c]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
dec dword [ebp - 0x84]
cmp dword [ebp - 0x84], 0xffffffe3
je 0x100416a4
mov dword [ebp - 0x38], 0xffffffff
lea ecx, [ebp - 0x238]
push esi
call fcn.10013363
mov byte [ebp - 4], 5
mov dword [ebp - 0x14], ebx
jmp 0x100416fb
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x238]
mov dword [eax + ecx*4], 0xa29822cb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100416e8
mov dword [ebp - 0x38], ebx
jmp 0x10041894
mov dword [ebp - 0x40], 0xfffffffb
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x40], 0xffffffe6
cmp dword [ebp - 0x40], 0xffffffee
je 0x10041891
mov eax, dword [ebp - 0x238]
lea esi, [ebp - 0x5c4]
mov dword [ebp - 0x34], eax
push 4
lea ecx, [ebp - 0x42c]
call fcn.10013363
push ecx
lea eax, [ebp - 0x5b4]
mov byte [ebp - 4], 6
movdqa xmm0, xmmword [0x1000c9a0]
lea ecx, [ebp - 0x5a8]
push eax
push esi
movdqu xmmword [ebp - 0x5c4], xmm0
call fcn.100133bf
mov dword [ebp - 0x14], ebx
jmp 0x1004177f
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x42c]
mov dword [eax + ecx*4], 0xeafd94fe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1004176c
mov esi, dword [ebp - 0x42c]
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x60], eax
mov dword [esi + 0xc], 0x1b
mov dword [ebp - 0x28], 0x1bca9d69
mov dword [ebp - 0x58], 0xfffd
mov dword [ebp - 0x28], 0xd
jmp 0x100417f1
mov dword [ebp - 0x54], 5
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], 0
je 0x100417d0
push ebx
push edi
push 0x14d9
push ebx
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
mov dword [ebp - 0x54], ebx
jmp 0x100417e8
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x238]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 3
jl 0x100417d5
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x10
jl 0x100417b2
mov eax, dword [ebp - 0x38]
cmp eax, dword [esi + 8]
jle 0x10041802
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
sub ecx, eax
mov eax, dword [ebp - 0x40]
cmp ecx, 0xfffffffd
setne dl
xor ecx, ecx
sub edx, 0x7c9b7427
cmp edx, eax
mov eax, dword [ebp - 0x34]
setne cl
xor edx, edx
cmp dword [eax + 8], ecx
mov eax, dword [ebp - 0x58]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 0x4f2a
mov ecx, dword [ebp - 0x60]
setne al
inc eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ecx + 4], eax
dec dword [esi + 0xc]
cmp dword [esi + 0xc], 0xffffffeb
jg 0x1004179b
lea ecx, [ebp - 0x5a8]
call fcn.100133e5
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 5
call fcn.100133e5
inc dword [ebp - 0x40]
lea esi, [ebp - 0x5c4]
cmp dword [ebp - 0x40], 0xffffffee
jne 0x10041732
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xb
jge 0x10041708
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 4
call fcn.100133e5
mov eax, dword [ebp - 0x210]
mov dword [eax], ebx
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x100418d2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1b8], 0x869e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100418c1
mov dword [ebp - 0x54], ebx
jmp 0x100418e8
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x1b8], eax
dec dword [ebp - 0x54]
cmp dword [ebp - 0x54], 0xfffffff4
jl 0x100418dc
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], 0
je 0x10041907
push 0xf62
push 0x179c
call dword [sym.imp.KERNEL32.dll_Beep]
mov eax, dword [ebp - 0x210]
inc dword [eax]
cmp dword [eax], 0xb
jl 0x100418b5
push 2
lea ecx, [ebp - 0x1d0]
call fcn.10013363
mov byte [ebp - 4], 7
mov dword [ebp - 0x38], 0xf2f4a8b1
mov dword [ebp - 0x60], 0x79c63c40
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x58], 0x8ed4a55f
mov dword [ebp - 0x14], ebx
jmp 0x10041955
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1d0]
mov dword [eax + ecx*4], 0xea75c96
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10041942
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], edi
jg 0x10041a15
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x4e0]
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], ebx
push 2
call fcn.10013363
mov dword [ebp - 0x14], ebx
jmp 0x10041995
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4e0]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10041982
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x4e0]
mov ecx, dword [ebp - 0x1d0]
mov edx, dword [esi + 4]
mov ecx, dword [ecx + eax*4]
cmp ecx, edx
cmove ebx, edi
lea eax, [edx + 1]
mov dword [esi + 4], eax
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x38]
mov edx, dword [ebp - 0x1d0]
mov eax, dword [ebp - 0x34]
mov ecx, dword [edx]
add ecx, ebx
xor ebx, ebx
sub ecx, eax
mov eax, dword [ebp - 0x58]
cmp ecx, eax
setne bl
xor ecx, ecx
sub ebx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x38]
cmp dword [edx + esi*4], eax
mov eax, dword [ebp - 0x1d0]
setle cl
xor edx, edx
cmp ecx, ebx
lea ecx, [ebp - 0x4e0]
setl dl
mov dword [eax + edi*4], edx
call fcn.100133e5
inc dword [ebp - 0x38]
xor edi, edi
inc edi
push 0
pop ebx
cmp dword [ebp - 0x38], edi
jle 0x10041967
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 4
call fcn.100133e5
mov dword [ebp - 0x54], 0xfffffff2
jmp 0x10041aa0
push 3
pop esi
push esi
lea ecx, [ebp - 0x138]
call fcn.10013363
mov dword [ebp - 0x14], ebx
jmp 0x10041a54
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x138]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10041a41
cmp dword [ebp - 0x54], ebx
mov edx, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x138]
je 0x10041a89
cmp dword [edx], 0xfc60
jne 0x10041a79
mov esi, edi
cmp dword [ecx + 8], ebx
jne 0x10041a7b
mov esi, ebx
xor eax, eax
cmp dword [ecx + 8], edi
setge al
cmp eax, esi
mov eax, edi
je 0x10041a8b
mov eax, ebx
mov dword [ecx + 8], eax
lea ecx, [ebp - 0x138]
cmp dword [edx], ebx
jne 0x10041aa8
call fcn.100133e5
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 6
jge 0x10041a2d
jmp 0x10041aad
call fcn.100133e5
or esi, 0xffffffff
lea ecx, [ebp - 0x210]
mov dword [ebp - 4], esi
call fcn.100133e5
mov dword [ebp - 0x5c], 0x26a0
cmp dword [ebp - 0x5c], 0x28bd
jle 0x10041b17
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov edi, ebx
mov ebx, dword [ebp - 0x24]
mov eax, esi
mov ecx, 0x10611478
cdq
idiv edi
or edx, ebx
mov eax, edx
cdq
push edx
push eax
call fcn.10013138
inc edi
cmp edi, 0x4ced
jl 0x10041ad8
inc esi
push 0
pop ebx
cmp esi, 0x4e86
jl 0x10041ad3
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x6221
jl 0x10041ad1
xor edi, edi
inc edi
or esi, 0xffffffff
movdqa xmm0, xmmword [0x1000c9e0]
lea ecx, [ebp - 0x754]
push ecx
lea eax, [ebp - 0x744]
push eax
push ecx
lea ecx, [ebp - 0x1a0]
movdqu xmmword [ebp - 0x754], xmm0
call fcn.100133bf
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x5f8]
mov dword [ebp - 0x38], 0x5c68ec0a
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x3c], 0xfffffffd
mov dword [ebp - 0x2c], esi
push edi
call fcn.10013363
mov byte [ebp - 4], 9
mov dword [ebp - 0x30], 0xd6b9ec49
mov dword [ebp - 0x24], 0x38d7
mov dword [ebp - 0x18], ebx
jmp 0x10041b8f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xdc], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10041b82
mov dword [ebp - 0x18], ebx
jmp 0x10041bab
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x820], 0x2499e68f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10041b9a
mov dword [ebp - 0x18], ebx
jmp 0x10041bc5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x5f8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10041bb6
mov dword [ebp - 0x38], 0xffffffef
jmp 0x10041c7b
mov dword [ebp - 0x3c], esi
lea ecx, [ebp - 0x354]
push 2
call fcn.10013363
mov dword [ebp - 0x14], ebx
jmp 0x10041bfa
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x354]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10041beb
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xd8]
cmp ecx, eax
mov esi, dword [ebp - 0x354]
mov eax, dword [ebp - 0xd8]
sete dl
inc edx
neg edx
mov dword [esi + 4], ecx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, 0xddd9cd4
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
mov ecx, 0xffff7b65
setle dl
sub ecx, edx
add eax, ecx
lea ecx, [ebp - 0x354]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0xdc]
mov eax, dword [esi + 4]
mov dword [ebp - 0x3c], eax
call fcn.100133e5
dec dword [ebp - 0x38]
push 0xffffffffffffffff
pop esi
cmp dword [ebp - 0x38], 0xffffffe5
jge 0x10041bd6
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x24]
cmp eax, ecx
jne 0x10041cd8
mov dword [ebp - 0x34], edi
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], 0
je 0x10041cb4
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 3
pop esi
lea ecx, [ebp - 0x5f8]
mov byte [ebp - 4], 8
call fcn.100133e5
mov dword [ebp - 0x40], 0x5a1fa147
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x14], ebx
jmp 0x10041d8c
push 3
mov dword [ebp - 0x4c], 0xa623b0d7
pop esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x20], ebx
jmp 0x10041d70
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x24], 0x2b33
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x38], 0xdfa8
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x820], eax
je 0x10041d20
mov ecx, ebx
cmp dword [ebp - 0x38], ebx
je 0x10041d22
mov ecx, edi
mov eax, dword [ebp - 0x4c]
sub ecx, eax
je 0x10041d2c
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x38]
cmp eax, 0x7345
mov eax, dword [ebp - 0x4c]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], ebx
jl 0x10041d6d
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], 0
je 0x10041d68
push 0x2076
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
dec dword [ebp - 0x38]
jns 0x10041d51
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x10041ced
jmp 0x10041cb7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x80], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10041d7e
mov dword [ebp - 0x80], ebx
jmp 0x10041db2
mov dword [ebp - 0x24], edi
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4c]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
dec dword [ebp - 0x80]
cmp dword [ebp - 0x80], 0xffffffe3
je 0x10041d96
mov eax, dword [ebp - 0x1a0]
mov dword [eax], ebx
cmp dword [eax], 0xb
jge 0x10042782
push 2
lea ecx, [ebp - 0x1e8]
call fcn.10013363
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x38], 0xf2f4a8b1
mov dword [ebp - 0x60], 0x79c63c40
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x58], 0x8ed4a55f
mov dword [ebp - 0x14], ebx
jmp 0x10041e0a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1e8]
mov dword [eax + ecx*4], 0xea75c96
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10041df7
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], edi
jg 0x10041eca
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x4a4]
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], ebx
push 2
call fcn.10013363
mov dword [ebp - 0x14], ebx
jmp 0x10041e4a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4a4]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10041e37
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x4a4]
mov ecx, dword [ebp - 0x1e8]
mov edx, dword [esi + 4]
mov ecx, dword [ecx + eax*4]
cmp ecx, edx
cmove ebx, edi
lea eax, [edx + 1]
mov dword [esi + 4], eax
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x38]
mov edx, dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x34]
mov ecx, dword [edx]
add ecx, ebx
xor ebx, ebx
sub ecx, eax
mov eax, dword [ebp - 0x58]
cmp ecx, eax
setne bl
xor ecx, ecx
sub ebx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x38]
cmp dword [edx + esi*4], eax
mov eax, dword [ebp - 0x1e8]
setle cl
xor edx, edx
cmp ecx, ebx
lea ecx, [ebp - 0x4a4]
setl dl
mov dword [eax + edi*4], edx
call fcn.100133e5
inc dword [ebp - 0x38]
xor edi, edi
inc edi
push 0
pop ebx
cmp dword [ebp - 0x38], edi
jle 0x10041e1c
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 8
call fcn.100133e5
movdqa xmm0, xmmword [0x1000ca00]
lea ecx, [ebp - 0x734]
push ecx
lea eax, [ebp - 0x724]
mov dword [ebp - 0x2c], 0xffffffff
push eax
push ecx
lea ecx, [ebp - 0x534]
movdqu xmmword [ebp - 0x734], xmm0
call fcn.100133bf
mov eax, dword [ebp - 0x534]
lea ecx, [ebp - 0x534]
mov dword [eax], ebx
call fcn.100133e5
mov dword [ebp - 0x18], 0xde19d29b
mov dword [ebp - 0x14], 0xfffffff6
push 3
mov dword [ebp - 0x24], 0x6d64bda9
mov dword [ebp - 0x14], ebx
pop esi
jmp 0x10041f47
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb4], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10041f3a
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x10042026
push esi
lea ecx, [ebp - 0x36c]
call fcn.10013363
mov dword [ebp - 0x14], ebx
jmp 0x10041f7c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x36c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10041f6d
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0xb4], ebx
jne 0x10041ff8
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], 0xd5
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xb4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
neg eax
jne 0x10041fd0
mov eax, ebx
cmp dword [ebp - 0x14], ebx
je 0x10041fd2
mov eax, edi
mov ecx, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0xb0]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xb4]
imul eax, ecx
mov ecx, ebx
sub eax, dword [ebp - 0x18]
jne 0x10041ffa
mov ecx, edi
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xb4]
add eax, ecx
lea ecx, [ebp - 0x36c]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xb4], ebx
call fcn.100133e5
dec dword [ebp - 0x18]
jns 0x10041f5c
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x14], ebx
jmp 0x1004203f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x224], 0x869e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1004202e
mov dword [ebp - 0x4c], 0x77f9
cmp dword [ebp - 0x4c], 0x7a6a
jle 0x100420df
mov dword [ebp - 0x3c], ebx
mov edx, ebx
mov dword [ebp - 0x14], ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov ecx, esi
shl eax, cl
lea ecx, [ebp - 0x980]
and eax, edx
or eax, dword [ebp - 0x3c]
cdq
push edx
push eax
call fcn.1000de7e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10042088
mov eax, dword [eax]
push eax
call fcn.100520df
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x980]
call fcn.100138e3
mov eax, dword [ebp - 0x24]
inc esi
mov edx, dword [ebp - 0x14]
cmp esi, 0x39b0
jl 0x10042067
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x1a7d
jl 0x10042065
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 0x39dd
jl 0x10042060
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp eax, 0x5eb3
jl 0x1004205b
push ebx
push 0x15dd
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
push 3
pop esi
cmp dword [ebp - 0x4c], 0x7508
jge 0x100420f3
push 0x1000b5b8
call fcn.100520df
pop ecx
push edi
lea ecx, [ebp - 0x25c]
mov dword [ebp - 4], 8
call fcn.10013363
mov dword [ebp - 0x14], 0xac12265e
mov dword [ebp - 0x34], 0xfffffffd
mov dword [ebp - 0x14], ebx
jmp 0x10042128
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x25c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10042119
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], 0
je 0x1004213d
push ebx
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
mov eax, dword [ebp - 0x25c]
mov dword [eax], 0xffffffed
mov dword [ebp - 0x28], 0x665683c8
mov dword [ebp - 0x28], ebx
jmp 0x10042184
mov dword [ebp - 0x4c], 0xf72b5725
mov dword [ebp - 0x14], edi
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
sub eax, 0x342f3d47
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff6
jge 0x10042155
mov eax, dword [ebp - 0x25c]
inc dword [eax]
cmp dword [eax], 6
jle 0x10042149
lea ecx, [ebp - 0x25c]
call fcn.100133e5
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 0xfffffff4
jge 0x10042423
mov dword [ebp - 0x20], 0x2c70bb74
mov dword [ebp - 0x17c], ebx
mov dword [ebp - 0x178], ebx
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x170], ebx
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x14], ebx
jmp 0x100421eb
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8c], 0x8206
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100421da
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x1004221b
mov dword [ebp - 0x14], 9
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jl 0x10042216
mov dword [ebp - 0x4c], 0xa1fa
inc dword [ebp - 0x4c]
dec dword [ebp - 0x14]
jns 0x10042207
dec dword [ebp - 0x20]
jns 0x100421f8
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xb
jl 0x10042412
mov dword [ebp - 0x38], 0xf1860ec0
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], ebx
jg 0x1004240a
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x18], ebx
jmp 0x10042312
mov dword [ebp - 0x54], 0xc7c6f1fd
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x178], ebx
jne 0x1004231b
mov dword [ebp - 0x54], ebx
jmp 0x10042306
cmp dword [ebp - 0x54], ebx
jle 0x10042269
cmp dword [ebp - 0x18], ebx
jle 0x1004224a
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jg 0x10042402
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], ebx
jl 0x100423f7
inc dword [ebp - 0x38]
jmp 0x10042232
inc dword [ebp - 0x20]
jmp 0x1004221e
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x224], eax
dec dword [ebp - 0x2c]
jmp 0x100421a5
push edi
lea ecx, [ebp - 0x2a4]
call fcn.10013363
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x18], 0x5252cb13
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x4c], 0x46e6
cmp dword [ebp - 0x4c], 0x4725
jle 0x100424aa
push ebx
push ebx
push 0xabf
call dword [sym.imp.USER32.dll_SetPropA]
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
add eax, esi
lea ecx, [ebp - 0xa34]
cdq
push edx
push eax
call fcn.1000de7e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1004247f
mov eax, dword [eax]
push eax
call fcn.100520df
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xa34]
call fcn.100138e3
mov eax, dword [ebp - 0x24]
inc esi
cmp esi, 0x78bc
jl 0x10042465
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x4593
jl 0x10042463
cmp dword [ebp - 0x4c], 0x4484
jge 0x100424be
push 0x1000b638
call fcn.100520df
pop ecx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x14], ebx
jmp 0x100424dd
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2a4]
mov dword [eax + ecx*4], 0xc03342eb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100424ca
mov dword [ebp - 0x18], ebx
jmp 0x100424fa
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2a4]
mov dword [eax + ecx*4], 0x8ecf54c3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100424e7
mov dword [ebp - 0x18], ebx
jmp 0x10042513
mov eax, dword [ebp - 0x2a4]
mov dword [eax], 0x2263126f
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe4
jge 0x10042504
lea ecx, [ebp - 0x2a4]
mov byte [ebp - 4], 8
call fcn.100133e5
mov dword [ebp - 0x18], 0xa41449c9
lea ecx, [ebp - 0x444]
mov dword [ebp - 0x24], 0x93876a47
push 4
call fcn.10013363
push 0xfffffffffffffff8
pop edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x4c], 0x663c10b4
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], ebx
jmp 0x10042567
mov dword [ebp - 0x38], 0xffffffff
lea ecx, [ebp - 0x274]
push esi
call fcn.10013363
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x14], ebx
jmp 0x100427b1
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x274]
mov dword [eax + ecx*4], 0xa29822cb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1004279e
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], 0xb
jl 0x10042a10
mov dword [ebp - 0x40], 0xfffffffb
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x40], 0xffffffe6
cmp dword [ebp - 0x40], 0xffffffee
je 0x10042a08
push 4
lea ecx, [ebp - 0x194]
call fcn.10013363
lea ecx, [ebp - 0x6f4]
mov byte [ebp - 4], 0x13
movdqa xmm0, xmmword [0x1000c9a0]
lea eax, [ebp - 0x6e4]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x544]
movdqu xmmword [ebp - 0x6f4], xmm0
call fcn.100133bf
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x14], ebx
jmp 0x10042835
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x194]
mov dword [eax + ecx*4], 0xeafd94fe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10042822
mov eax, dword [ebp - 0x194]
add eax, 0xc
mov dword [eax], 0x1b
cmp dword [eax], 0xffffffeb
jle 0x100429e6
mov dword [ebp - 0x28], 0x1bca9d69
mov dword [ebp - 0x34], 0xfffd
mov dword [ebp - 0x28], 0xd
cmp dword [ebp - 0x28], 0x10
jge 0x1004296a
mov dword [ebp - 0x54], 5
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10042890
push ebx
push edi
push 0x14d9
push ebx
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
mov dword [ebp - 0x20], 0x6107
cmp dword [ebp - 0x20], 0x63c1
jle 0x1004292a
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edx, eax
mov esi, ebx
and edx, ecx
mov dword [ebp - 0x14], edx
mov eax, ebx
mov dword [ebp - 0x3c], 0x1ee
mov dword [ebp - 0x4c], eax
xor eax, edx
lea ecx, [ebp - 0x8f0]
cdq
push edx
push eax
call fcn.1000de7e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100428dd
mov eax, dword [eax]
push eax
call fcn.100520df
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x8f0]
call fcn.100138e3
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x14]
add eax, esi
dec dword [ebp - 0x3c]
mov dword [ebp - 0x4c], eax
jne 0x100428c3
inc esi
cmp esi, 0x30b9
jl 0x100428b7
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x1e5f
jl 0x100428ae
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x5ac6
jl 0x100428a9
push 3
pop esi
mov dword [ebp - 0x54], ebx
jmp 0x10042942
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x274]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], esi
jl 0x1004292f
cmp dword [ebp - 0x20], 0x60e6
jge 0x1004295b
push 0x1000b6a8
call fcn.100520df
pop ecx
mov dword [ebp - 4], 0x14
inc dword [ebp - 0x28]
jmp 0x10042868
mov ecx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x38]
cmp eax, dword [ecx + 8]
jle 0x1004297b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
sub ecx, eax
mov eax, dword [ebp - 0x40]
cmp ecx, 0xfffffffd
setne dl
xor ecx, ecx
sub edx, 0x7c9b7427
cmp edx, eax
mov eax, dword [ebp - 0x274]
setne cl
xor edx, edx
cmp dword [eax + 8], ecx
mov eax, dword [ebp - 0x34]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 0x4f2a
setne al
inc eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x544]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x194]
add eax, 0xc
dec dword [eax]
jmp 0x1004284a
lea ecx, [ebp - 0x544]
call fcn.100133e5
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x12
call fcn.100133e5
inc dword [ebp - 0x40]
jmp 0x100427d4
inc dword [ebp - 0x38]
jmp 0x100427b9
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 8
call fcn.100133e5
mov dword [ebp - 0x40], 0xfffffff2
jmp 0x10043086
push 2
lea ecx, [ebp - 0x384]
call fcn.10013363
mov dword [ebp - 0x14], ebx
jmp 0x10042a50
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x384]
mov dword [eax + ecx*4], 0x256
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10042a3d
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10042a6a
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov eax, dword [ebp - 0x384]
lea ecx, [ebp - 0x384]
mov dword [eax + 4], 0xfffffff6
call fcn.100133e5
push esi
lea ecx, [ebp - 0x15c]
call fcn.10013363
mov byte [ebp - 4], 0x17
xor ecx, ecx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], edi
push 8
pop eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], 0xfffffffd
mov dword [ebp - 0x2c], 0x37f1
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x58], 0x65522591
mov dword [ebp - 0x48], 0xffffffff
mov eax, dword [ebp - 0x38]
test eax, eax
setns cl
add ecx, 0x17be
jne 0x10042add
mov eax, ebx
cmp dword [ebp - 0x38], ebx
je 0x10042adf
mov eax, edi
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
inc ecx
add ecx, eax
mov eax, dword [ebp - 0x38]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
imul eax, eax, 0x5498
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], ebx
jne 0x10042b1d
cmp dword [ebp - 0x14], ebx
jne 0x10042b1d
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], ebx
je 0x10042b34
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, 0x94592404
setne cl
neg ecx
sub ecx, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, 0x172
jl 0x10042b5a
mov eax, edi
cmp dword [ebp - 0x28], ebx
jne 0x10042b5c
mov eax, ebx
imul eax, eax, 0xab0c
test eax, eax
jne 0x10042b6d
mov esi, ebx
cmp dword [ebp - 0x2c], ebx
je 0x10042b6f
mov esi, edi
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
cmp edx, esi
jne 0x10042bc7
mov dword [ebp - 0x38], ebx
jmp 0x10042bbc
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10042b9f
push 0x1ab0
push ebx
push 0xe8
call dword [sym.imp.USER32.dll_GetClassNameW]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10042bb9
push 0x975
push edi
push 0x19a1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x34
jge 0x10042b85
jmp 0x10042d82
push 3
pop esi
mov dword [ebp - 0x4c], 0xd0c6
lea ecx, [ebp - 0x2bc]
push esi
call fcn.10013363
lea ecx, [ebp - 0x704]
mov byte [ebp - 4], 0x18
movdqa xmm0, xmmword [0x1000ca10]
lea eax, [ebp - 0x6f4]
push ecx
push eax
push ecx
mov dword [ebp - 0x34], 6
lea ecx, [ebp - 0x504]
movdqu xmmword [ebp - 0x704], xmm0
call fcn.100133bf
mov dword [ebp - 0x18], ebx
jmp 0x10042c25
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x70], 0xe33a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10042c17
mov dword [ebp - 0x18], ebx
jmp 0x10042c42
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2bc]
mov dword [eax + ecx*4], 0xb5841ec3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10042c2f
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jg 0x10042d6c
mov esi, dword [ebp - 0x504]
mov dword [ebp - 0x60], 0x285618a3
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x2bc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x70]
xor eax, eax
add ecx, dword [ebp - 0x34]
neg ecx
cmp ecx, 0x2f0819d5
setne al
xor edx, edx
lea ecx, [eax - 0xb115]
mov eax, dword [ebp - 0x18]
mov dword [esi + 4], ecx
mov eax, dword [ebp + eax*4 - 0x70]
cmp eax, ecx
mov eax, dword [ebp - 0x58]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge bl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x70]
cmp ebx, eax
setne cl
xor ebx, ebx
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x70], ebx
je 0x10042d4d
mov dword [ebp - 0x6c], 5
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x504]
mov ecx, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x14]
imul eax, dword [edx + 8]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x48]
setl dl
cmp edx, edi
setle bl
xor ecx, ecx
cmp eax, 0xb5db
mov eax, dword [ebp - 0x2bc]
setge cl
xor edx, edx
cmp ecx, ebx
setg dl
xor ebx, ebx
mov dword [eax], edx
jmp 0x10042d60
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x10042d60
push 0xcf
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10042c6b
lea ecx, [ebp - 0x504]
call fcn.100133e5
lea ecx, [ebp - 0x2bc]
call fcn.100133e5
mov dword [ebp - 0x20], 0x4801
mov dword [ebp - 0x4c], 0x6e74a6e8
dec dword [ebp - 0x20]
mov dword [ebp - 0x20], 0xffffffea
jmp 0x10042edf
mov dword [ebp - 0x18], 0x2edc7555
mov dword [ebp - 0x38], 0x283bc1b0
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x10042dca
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2dc], 0xfffffffa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10042db9
mov dword [ebp - 0x18], 0x19
jmp 0x10042ed2
mov dword [ebp - 0x14], 0xba75a592
mov dword [ebp - 0x24], 0xb5009892
cmp dword [ebp - 0x20], ebx
jne 0x10042df6
mov esi, ebx
cmp dword [ebp - 0x14], ebx
je 0x10042df8
mov esi, edi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, 0xcf04
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
cmp ecx, 0x6fe5
setge dl
imul eax, esi
add edx, eax
mov eax, dword [ebp - 0x2d4]
neg edx
sbb edx, edx
inc edx
cmp edx, 2
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
cmp ecx, 0xffffffff
jbe 0x10042e3c
mov eax, ebx
cmp dword [ebp - 0x14], ebx
je 0x10042e3e
mov eax, edi
mov dword [ebp - 0x38], eax
xor edx, edx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], 3
cmp dword [ebp - 0x38], ebx
jl 0x10042ecf
cmp dword [ebp - 0x18], 0xffffffe2
jg 0x10042ddc
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x2f
jle 0x10042d9f
push 3
mov dword [ebp - 0x14], ebx
pop esi
jmp 0x10042f04
cmp dword [ebp - 0x14], esi
jl 0x10042ef1
cmp dword [ebp - 0x40], 6
jge 0x10042a2b
jmp 0x10043097
lea ecx, [ebp - 0x1a0]
call fcn.100133e5
mov dword [ebp - 4], 0x19
cmp dword [ebp - 0x5c], 0x24ce
jge 0x100430c1
mov edx, 0x1000b59c
mov ecx, 0x10611478
call fcn.10015a5f
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], edi
lea ecx, [ebp - 0x520]
push edi
call fcn.10013363
mov dword [ebp - 0x30], 0x963a
mov dword [ebp - 0x4c], 0x3d7f1912
mov dword [ebp - 0x14], ebx
jmp 0x1004311f
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x520]
mov dword [eax + ecx*4], 0xb7c7ce53
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1004310c
dec dword [ebp - 0x4c]
mov esi, dword [sym.imp.USER32.dll_DestroyIcon]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10043139
push ebx
call esi
lea ecx, [ebp - 0x520]
call fcn.100133e5
mov eax, 0x1006f89c
mov dword [ebp - 0x30], edi
push edi
lea ecx, [ebp - 0x554]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x38], eax
call fcn.10013363
mov dword [ebp - 0x30], 0x963a
mov dword [ebp - 0x4c], 0x3d7f1912
mov dword [ebp - 0x14], ebx
jmp 0x10043184
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x554]
mov dword [eax + ecx*4], 0xb7c7ce53
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10043171
dec dword [ebp - 0x4c]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10043198
push ebx
call esi
lea ecx, [ebp - 0x554]
call fcn.100133e5
push 3
mov dword [ebp - 0x30], 0x3b3152c5
lea ecx, [ebp - 0x658]
pop esi
mov dword [ebp - 0x30], 0x9e95d1c5
mov dword [ebp - 0x14], 0xf6285890
mov dword [ebp - 0x30], 0x364d64ea
push esi
mov dword [ebp - 0x54], 4
call fcn.10013363
mov dword [ebp - 0x18], ebx
jmp 0x100431e7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa8c], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100431da
mov dword [ebp - 0x18], ebx
jmp 0x100431ff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x124], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100431f2
mov dword [ebp - 0x18], ebx
or edx, 0xffffffff
cmp dword [ebp - 0x18], esi
jge 0x10043221
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x658]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
jmp 0x1004320b
mov dword [ebp - 0x124], esi
cmp dword [ebp - 0x124], ebx
jl 0x100432c9
mov dword [ebp - 0x28], 0x48afa2fa
mov dword [ebp - 0x30], 0xc7b5c6ef
mov dword [ebp - 0x30], 0x69bd697e
mov dword [ebp - 0x30], 0xacde9e84
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0x30], 0x8b15e31
mov dword [ebp - 0x30], 0x4a90c6d2
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x30], 0x44653ff
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x14], ebx
jmp 0x10043286
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xaac], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10043279
dec dword [ebp - 0x28]
mov dword [ebp - 0x28], ebx
jmp 0x100432b8
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x14], ebx
jmp 0x100432ad
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x568], 0x9642e40c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1004329c
dec dword [ebp - 0x4c]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jle 0x10043294
dec dword [ebp - 0x124]
jns 0x10043233
mov dword [ebp - 0x14], 2
cmp dword [ebp - 0x14], ebx
jl 0x100432f5
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100432f0
push edi
push ebx
push 0xfaf
push 0xc9f
call dword [sym.imp.USER32.dll_GetDlgItemInt]
dec dword [ebp - 0x14]
jns 0x100432d5
lea ecx, [ebp - 0x658]
call fcn.100133e5
mov dword [ebp - 0x30], 0x3b3152c5
lea ecx, [ebp - 0x564]
mov dword [ebp - 0x30], 0x9e95d1c5
mov dword [ebp - 0x14], 0xf6285890
mov dword [ebp - 0x30], 0x364d64ea
push esi
call fcn.10013363
mov dword [ebp - 0x18], ebx
jmp 0x1004333a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa7c], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1004332d
mov dword [ebp - 0x18], ebx
jmp 0x10043352
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x11c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10043345
mov dword [ebp - 0x18], ebx
or edx, 0xffffffff
cmp dword [ebp - 0x18], esi
jge 0x10043374
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x564]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
jmp 0x1004335e
mov dword [ebp - 0x11c], esi
cmp dword [ebp - 0x11c], ebx
jl 0x1004341c