Function at 0x1001a028
Capabilities:
Check os version
Extract resource via kernel32 functions
Get disk information

Disassembly:
mov eax, 0x1005b520
call fcn.1005a9e0
sub esp, 0x290
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x24], 0xfffffffc
push edi
mov dword [ebp - 0x30], 0xffff
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x180], edx
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0x1b8], ebx
mov dword [ebp - 0x24], ebx
jmp 0x1001a0af
mov dword [ebp - 0x1c], 0x1f665683
mov dword [ebp - 0x1c], 2
jmp 0x1001a0a6
mov dword [ebp - 0x28], 0xfa831eb2
cmp dword [ebp - 0x1c], ebx
jne 0x1001a09d
mov ecx, dword [ebp - 0x28]
imul ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
sub eax, ecx
je 0x1001a09a
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1c], eax
jge 0x1001a09a
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff1
je 0x1001a075
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xb
jg 0x1001a065
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1001a0c4
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0x61
pop eax
push 3
lea ecx, [ebp - 0x174]
mov dword [ebp - 0x7c], 0xd05a804
mov dword [ebp - 0x78], 0xe030001
mov dword [ebp - 0x74], 0xf1033e06
mov dword [ebp - 0x70], 0x1b00313f
mov word [ebp - 0x6c], 0x2802
mov word [ebp - 0x1a0], ax
call fcn.10001b45
push 3
pop esi
push esi
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], ebx
call fcn.10001b45
mov dword [ebp - 0x3c], 0xe2b79dc8
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1001a131
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], 0xf5540d7f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1001a11e
mov dword [ebp - 0x18], ebx
jmp 0x1001a14e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1001a13b
xor esi, esi
mov dword [ebp - 0x18], ebx
inc esi
jmp 0x1001a168
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x168], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1001a15b
cmp dword [ebp - 0x158], 0
mov edi, dword [ebp - 0x174]
mov dword [edi + 4], 0xfffffff8
je 0x1001a1a1
push dword [ebp - 0x158]
call fcn.10044367
pop ecx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
or dword [ebp - 4], 0xffffffff
push edi
call fcn.10044367
pop ecx
push 2
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x170], ebx
mov dword [ebp - 0x16c], ebx
pop edi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x2c], edi
cmp edi, 0x12
jae 0x1001ac04
movzx eax, byte [ebp - 0x7c]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x1001a73e
movzx edi, byte [ebp + edi - 0x7c]
lea ecx, [ebp - 0xbc]
push 2
mov dword [ebp - 0x44], edi
lea eax, [edi + 1]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x88], eax
call fcn.10001b45
mov dword [ebp - 0x1c], 0x13532fe2
mov dword [ebp - 0x38], 0x74498b94
mov dword [ebp - 0x1c], ebx
jmp 0x1001a227
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xbc]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001a217
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x1001a2a2
mov edi, dword [ebp - 0xbc]
mov dword [ebp - 0x34], 0xfffffffc
mov dword [ebp - 0x30], esi
cmp dword [ebp - 0x1c], ebx
jne 0x1001a276
mov eax, dword [ebp - 0x1c]
add eax, dword [edi + 4]
je 0x1001a265
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [edi + 4]
cmp ecx, dword [eax + edx*4]
mov ecx, esi
jle 0x1001a267
mov ecx, ebx
xor eax, eax
cmp ecx, 8
mov ecx, ebx
setne al
cmp eax, 0xfffffffa
je 0x1001a278
mov ecx, esi
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp ecx, dword [edi + 4]
setle al
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0xbc]
mov dword [eax], esi
dec dword [ebp - 0x1c]
jns 0x1001a23b
mov edi, dword [ebp - 0x44]
cmp dword [ebp - 0xbc], 0
je 0x1001a2c9
push dword [ebp - 0xbc]
call fcn.10044367
pop ecx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], 0xb4074dd
dec eax
mov dword [ebp - 0x1c], 0xfffffffd
add eax, edi
mov dword [ebp - 0x18], 0xa4137d6c
mov edi, eax
mov dword [ebp - 0x48], 0xfffffffa
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x38], 0x8c8
cmp dword [ebp - 0x38], 0xc62
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], edi
jle 0x1001a376
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x44], esi
mov eax, edi
cdq
idiv esi
mov esi, 0x70f
mov edi, edx
mov ecx, edi
mov eax, ebx
sar eax, cl
mov ecx, 0x10076818
cdq
push edx
push eax
call fcn.10001a30
dec edi
dec esi
jne 0x1001a32d
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x6bee
jl 0x1001a321
inc edi
mov dword [ebp - 0x24], edi
push 0
pop ebx
cmp edi, 0x50ef
jl 0x1001a319
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x70bb
jl 0x1001a314
mov edi, dword [ebp - 0x2c]
mov dword [ebp - 4], 1
cmp dword [ebp - 0x38], 0x84f
jge 0x1001a395
mov edx, str.webdiznd_rrli_itdpbvhi_nvejcg_qfnxhly_dmprrz_eta_zka_txpw_tow
mov ecx, 0x10076818
call fcn.1000349f
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2c], 0xc01f903a
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x30], 0xa7d8
mov dword [ebp - 0x44], 1
push 2
call fcn.10001b45
mov dword [ebp - 4], 3
mov dword [ebp - 0x24], ebx
jmp 0x1001a406
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x110], 0xfffffff8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1001a3f5
mov dword [ebp - 0x24], ebx
jmp 0x1001a424
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001a411
mov dword [ebp - 0x24], 0xc7ce53d8
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x24]
je 0x1001a4db
mov dword [ebp - 0x38], 0x5a3d7f19
mov dword [ebp - 0x28], 0xe7c14ab6
mov dword [ebp - 0x88], 0x6ef3
mov dword [ebp - 0x54], 0x1c84132d
mov dword [ebp - 0x24], ebx
jmp 0x1001a486
mov dword [ebp - 0x1c], 4
jmp 0x1001a47d
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001a47a
push ebx
call dword [sym.imp.KERNEL32.dll_LockResource]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff9
jge 0x1001a46a
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff2
jle 0x1001a461
mov dword [ebp - 0x38], 0xfa3dfad5
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
je 0x1001a4b2
xor edx, edx
inc edx
jmp 0x1001a4b4
mov edx, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
jmp 0x1001a670
mov dword [ebp - 0x38], 6
lea ecx, [ebp - 0x134]
push 4
call fcn.10001b45
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x28], 0x2b46fac5
mov dword [ebp - 0x18], 0x2d778712
push 3
call fcn.10001b45
push 4
pop edx
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x18], ebx
jmp 0x1001a52a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa4], 0x9643747c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001a519
mov dword [ebp - 0x18], ebx
jmp 0x1001a545
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x134]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001a535
mov dword [ebp - 0x18], ebx
jmp 0x1001a562
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001a54f
inc dword [ebp - 0x28]
mov ecx, dword [ebp - 0x134]
cmp dword [ecx + 8], ebx
je 0x1001a619
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xa0], eax
test eax, eax
jne 0x1001a5ec
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x44], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xa4], eax
cmp eax, 0xb759721c
jne 0x1001a5b6
cmp dword [ebp - 0x38], ebx
je 0x1001a5b6
xor edx, edx
inc edx
jmp 0x1001a5b8
mov edx, ebx
xor eax, eax
cmp edx, dword [ecx + 8]
setg al
cmp eax, dword [ebp - 0x34]
jg 0x1001a5ca
cmp dword [ebp - 0x18], ebx
jne 0x1001a5d0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x24], ebx
je 0x1001a5dd
cmp dword [ebp - 0xa4], ebx
jne 0x1001a5ec
mov dword [ebp - 0x110], ebx
cmp dword [ebp - 0x28], ebx
jne 0x1001a5f6
mov edx, ebx
jmp 0x1001a5f9
mov dword [ebp - 0x110], 1
xor edx, edx
inc edx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xf8]
setle cl
mov dword [eax + 8], ecx
test ecx, ecx
jne 0x1001a616
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0xa0]
neg eax
sbb eax, eax
neg eax
cmp dword [ebp - 0xf8], 0
mov dword [ebp - 0x54], eax
je 0x1001a652
push dword [ebp - 0xf8]
call fcn.10044367
pop ecx
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], ebx
push dword [ebp - 0x134]
call fcn.10044367
pop ecx
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x12c], ebx
mov ecx, dword [ebp - 0x48]
xor edx, edx
sub ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0x108]
mov dword [ebp - 0x48], edx
xor edx, edx
mov ecx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x44]
cmp eax, ecx
mov ecx, 0xffff
setl dl
xor eax, eax
cmp edx, 0xffffffff
setne al
cmp eax, 0xfff9
sbb eax, eax
add eax, 0xdddc55a6
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10c]
sub ecx, eax
je 0x1001a6c8
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
xor esi, esi
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
cmp eax, esi
mov eax, dword [ebp - 0x14c]
setle cl
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x34]
setl dl
xor ecx, ecx
cmp eax, edx
setl cl
cmp ecx, dword [ebp - 0x3c]
je 0x1001a70a
mov ecx, esi
cmp dword [ebp - 0x2c], ebx
jne 0x1001a70c
mov ecx, ebx
mov eax, dword [ebp - 0x44]
sub ecx, eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x34], esi
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x14c]
call fcn.10044367
pop ecx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], ebx
jmp 0x1001abfc
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x3c], 0x6ea0e402
mov dword [ebp - 0x1c], ebx
jmp 0x1001a762
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x228], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001a751
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0x15
jl 0x1001a9ce
mov dword [ebp - 0x18], 0xc4d8e5cc
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1001a795
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x17c], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1001a788
mov dword [ebp - 0x18], ebx
jmp 0x1001a92d
push 2
lea ecx, [ebp - 0x11c]
call fcn.10001b45
mov dword [ebp - 4], 5
mov dword [ebp - 0x1c], ebx
jmp 0x1001a7ca
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001a7bb
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x34], eax
mov dword [eax + 4], 0xfffffffb
push 3
lea ecx, [ebp - 0x104]
call fcn.10001b45
mov dword [ebp - 0x1c], ebx
jmp 0x1001a802
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x104]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001a7f2
mov edi, dword [ebp - 0x104]
mov dword [edi + 8], 0x1a
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0x3c], 0xfffffff9
mov dword [ebp - 0x1c], ebx
jmp 0x1001a8c4
mov dword [ebp - 0x30], 0xfffffff7
xor ecx, ecx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x228], 0x57a10dd6
mov eax, dword [ebp - 0x24]
cmp dword [edi + 8], eax
setge cl
xor edx, edx
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x11c]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x104]
cmp ecx, esi
setg dl
imul edx, dword [eax]
test edx, edx
jne 0x1001a882
mov eax, dword [ebp - 0x34]
mov ecx, ebx
cmp dword [eax + 4], ebx
je 0x1001a884
mov ecx, esi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x17c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001a8c1
push 0xbe9
push 0x2060
push 0xc1f
push 0x858
push ebx
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x1001a82b
dec dword [edi + 8]
cmp dword [edi + 8], 0xffffffe8
jge 0x1001a815
push dword [ebp - 0x104]
call fcn.10044367
mov edi, dword [ebp - 0x34]
pop ecx
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x100], ebx
dec dword [edi + 4]
cmp dword [edi + 4], 0xffffffed
mov dword [ebp - 0xfc], ebx
jge 0x1001a7e0
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x11c]
call fcn.10044367
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], ebx
dec dword [ebp - 0x18]
pop ecx
cmp dword [ebp - 0x18], 0xfffffff7
je 0x1001a7a2
mov dword [ebp - 0x34], 0x2bf9
cmp dword [ebp - 0x34], 0x2ebe
jle 0x1001a999
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x30], 0x2c19
mov eax, edi
lea ecx, [ebp - 0x280]
cdq
push edx
push eax
call fcn.10003aad
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001a970
mov eax, dword [eax]
push eax
call fcn.100445e8
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x280]
call fcn.10001e5d
dec edi
dec dword [ebp - 0x30]
jne 0x1001a956
mov edi, dword [ebp - 0x38]
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x7e4a
jl 0x1001a94c
mov byte [ebp - 0x1d], bl
cmp dword [ebp - 0x34], 0x2aef
jge 0x1001a9b0
push str.fswglp_qfb_fcubbggl_szftpoqs_xefse_wwr_xifqr_tjba_zpieb
call fcn.100445e8
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x1d], 0
je 0x1001a9c6
push esi
push 0x22a2
call dword [sym.imp.USER32.dll_EnableWindow]
inc dword [ebp - 0x24]
jmp 0x1001a76b
mov edi, dword [ebp - 0x2c]
mov eax, edi
sub eax, dword [ebp - 0x40]
push esi
movzx edx, byte [ebp + edi - 0x7b]
movzx eax, byte [ebp + eax - 0x7e]
movzx ecx, word [ebp + eax*2 - 0x1a8]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x7c]
add ecx, edx
mov word [ebp + eax*2 - 0x1a8], cx
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x18], ebx
call fcn.10001b45
mov dword [ebp - 0x3c], 0x7b8a5f0
mov dword [ebp - 0x18], ebx
jmp 0x1001aa24
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x68], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1001aa1a
mov dword [ebp - 0x18], ebx
jmp 0x1001aa42
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 0x92fe2ccf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1001aa2f
mov dword [ebp - 0x18], ebx
jmp 0x1001aa5d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x21c], 0x9098934e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001aa4c
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1001abc8
mov dword [ebp - 0x2c], ebx
jmp 0x1001aa88
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x238], 0x1939efd9
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 4
jl 0x1001aa77
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x68], ebx
je 0x1001aab1
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x68], ebx
je 0x1001aab1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x68], ecx
xor eax, eax
cmp ecx, 9
setg al
cmp eax, 2
je 0x1001aaf1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x18], ebx
je 0x1001ab14
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001abb6
push ebx
push 0xe7a
call dword [sym.imp.USER32.dll_DrawFocusRect]
jmp 0x1001abb6
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], 0x56014efc
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x60], ebx
jle 0x1001ab29
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xe4]
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp eax, esi
setge cl
add ecx, 0x7e8b
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x30], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x238], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setle cl
xor edx, edx
cmp ecx, 0x2ff5ff74
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setne cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
add eax, edx
cmp eax, 0x9548
setge cl
imul ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
sub ecx, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0xe4]
mov dword [eax], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x1001aa72
cmp dword [ebp - 0xe4], 0
je 0x1001abf9
push dword [ebp - 0xe4]
call fcn.10044367
pop ecx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0x40], ebx
add edi, 2
jmp 0x1001a1c4
mov dword [ebp - 0x1c], 0xb18d4081
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x24], 0x2f63069b
push 2
call fcn.10001b45
mov dword [ebp - 4], 8
mov dword [ebp - 0x2c], ebx
jmp 0x1001ac45
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xb0]
mov dword [eax + ecx*4], 0x5e0e2bf3
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x1001ac32
cmp dword [ebp - 0x1c], ebx
jne 0x1001ac57
mov edx, ebx
cmp dword [ebp - 0x18], ebx
je 0x1001ac59
mov edx, esi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, 0xfffffff6
jge 0x1001ac6f
mov edx, ebx
cmp dword [ebp - 0x18], ebx
je 0x1001ac71
mov edx, esi
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg dl
xor eax, eax
test edx, edx
setg al
sub eax, dword [ebp - 0x18]
je 0x1001aca6
cmp dword [ebp - 0x24], ebx
je 0x1001aca6
mov ecx, esi
cmp dword [ebp - 0x1c], ebx
jne 0x1001aca8
mov ecx, ebx
mov eax, dword [ebp - 0xb0]
neg ecx
sub ecx, dword [eax + 4]
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
inc ecx
imul eax, ecx
test eax, eax
je 0x1001aeac
mov dword [ebp - 0x30], 0x16b8
cmp dword [ebp - 0x30], 0x1981
jle 0x1001ad30
push 0x6e5
call dword [sym.imp.GDI32.dll_DeleteDC]
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov eax, edi
xor eax, ecx
lea ecx, [ebp - 0x250]
cdq
push edx
push eax
call fcn.10003aad
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001ad04
mov eax, dword [eax]
push eax
call fcn.100445e8
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x250]
call fcn.10001e5d
mov ecx, dword [ebp - 0x34]
inc edi
cmp edi, 0x4270
jl 0x1001ace8
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x6f08
jl 0x1001ace6
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x30], 0x140a
jge 0x1001ad47
push str.dpqcttv_blmwsls_lpw_lsv_blvdlkcsm_nlraigea
call fcn.100445e8
pop ecx
xor eax, eax
mov dword [ebp - 4], 8
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jl 0x1001aec7
jmp 0x1001ad62
xor eax, eax
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x30], 0xcc027682
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jl 0x1001ae93
push dword [ebp - 0x168]
lea eax, [ebp - 0x200]
mov dword [ebp - 0x40], ebx
push eax
lea eax, [ebp - 0x210]
mov dword [ebp - 0x34], 0xfefd5227
push eax
xorps xmm0, xmm0
mov dword [ebp - 0xc8], ebx
push ebx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc4], ebx
movdqu xmmword [ebp - 0x210], xmm0
mov dword [ebp - 0xc0], ebx
call fcn.10019a9d
cmp dword [ebp - 0x48], ebx
je 0x1001adc7
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x40]
xor ecx, ecx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x40]
cmp eax, 0xfffffffe
setne cl
cmp dword [ebp - 0x48], ecx
jle 0x1001aded
cmp dword [ebp - 0x38], ebx
je 0x1001aded
xor eax, eax
inc eax
jmp 0x1001adef
mov eax, ebx
mov ecx, dword [ebp - 0x34]
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setg dl
sub edx, dword [ebp - 0x48]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 0x82bc
setg al
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
cmp eax, dword [ecx + 8]
je 0x1001ae38
mov dword [ebp - 0x34], 1
cmp dword [ebp - 0x30], ebx
jne 0x1001ae3b
mov dword [ebp - 0x34], ebx
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xb0]
mov edx, dword [ebp - 0xb0]
push dword [ebp - 0xc8]
mov edi, dword [eax + ecx*4]
xor ecx, ecx
cmp dword [ebp - 0x34], 0x7c3cb878
mov dword [edx + esi*4], edi
setl cl
xor eax, eax
cmp edi, ecx
mov ecx, dword [ebp - 0x3c]
sete al
mov dword [ecx + 8], eax
call fcn.10044367
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
dec dword [ebp - 0x1c]
pop ecx
jns 0x1001ad78
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xb0]
cmp dword [eax + ecx*4], ebx
jne 0x1001aec7
dec dword [ebp - 0x24]
jns 0x1001ad5f
jmp 0x1001aec7
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001aec7
push ebx
push 0x2062
push ebx
push 0x14a2
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0xb0]
call fcn.10044367
pop ecx
xor eax, eax
mov dword [ebp - 0xb0], ebx
mov word [ebp - 0x19a], ax
lea ecx, [ebp - 0xd4]
push 4
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
pop eax
mov dword [ebp - 0x1c], 0xbacd7953
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x18], ebx
push eax
call fcn.10001b45
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x2c], ebx
jmp 0x1001af34
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xd4]
mov dword [eax + ecx*4], 0x1e1d82c3
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 4
jl 0x1001af21
mov esi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg esi
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
sbb esi, esi
mov dword [ebp - 0x24], eax
neg esi
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x1c]
sub edx, eax
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp esi, ecx
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setne cl
mov dword [ebp - 0x3c], ecx
xor ecx, ecx
cmp eax, dword [ebp - 0x3c]
setl cl
xor eax, eax
cmp ecx, 0x1d91e66c
setge al
imul eax, dword [ebp - 0x1c]
test eax, eax
je 0x1001afa3
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
jmp 0x1001b11f
push 3
mov dword [ebp - 0x24], ebx
pop esi
cmp dword [ebp - 0x24], esi
jg 0x1001b0fc
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ecx]
mov dword [ecx + edx*4], eax
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], esi
jg 0x1001b0f4
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x1001b0ec
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x1001b0c5
mov dword [ebp - 0x40], 0x4fe6
cmp dword [ebp - 0x40], 0x51c7
jle 0x1001b07d
push ebx
push ebx
push 0x1517
call dword [sym.imp.USER32.dll_SetPropA]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x44], 0x4f77
mov ecx, edi
mov dword [ebp - 0x38], 0xecf
mov dword [ebp - 0x30], ecx
mov eax, ecx
lea ecx, [ebp - 0x268]
cdq
push edx
push eax
call fcn.10003aad
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001b039
mov eax, dword [eax]
push eax
call fcn.100445e8
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x268]
call fcn.10001e5d
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
add ecx, eax
dec dword [ebp - 0x38]
mov dword [ebp - 0x30], ecx
jne 0x1001b01f
add eax, esi
dec dword [ebp - 0x44]
mov dword [ebp - 0x34], eax
jne 0x1001b013
inc esi
cmp esi, 0x3adc
jl 0x1001b009
inc edi
cmp edi, 0x6c73
jl 0x1001b007
push 3
pop esi
mov dword [ebp - 0x28], 1
cmp dword [ebp - 0x40], 0x4c62
jge 0x1001b098
push str.dhhzqx_ngzntx_dfvdmih_zav_spt_vkneaah_lofm_qodslh_fru_lqklb_cea_ddlporxh
call fcn.100445e8
pop ecx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x28], ebx
jmp 0x1001b0b5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd4]
cmp dword [eax + ecx*4], ebx
jne 0x1001b0ba
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jle 0x1001b0a4
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x1c]
jmp 0x1001afdb
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001b0e4
push 0x229a
push ebx
push 0x1160
push 0x4c7
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
dec dword [ebp - 0x18]
jmp 0x1001afcf
inc dword [ebp - 0x2c]
jmp 0x1001afc3
inc dword [ebp - 0x24]
jmp 0x1001afa9
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001b11f
push ebx
push ebx
push 0x28a
push ebx
push 0x2081
push ebx
push ebx
push 0x1d22
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xd4], 0
je 0x1001b14a
push dword [ebp - 0xd4]
call fcn.10044367
pop ecx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
xor eax, eax
mov dword [ebp - 0x1bc], 7
mov word [ebp - 0x1d0], ax
lea ecx, [ebp - 0x1d0]
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1c0], ebx
push eax
call fcn.100189fa
mov dword [ebp - 4], 0xe
xor esi, esi
mov dword [ebp - 0x1c], 0x1e559696
inc esi
mov dword [ebp - 0x28], ebx
jmp 0x1001b19c
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x178], 0xffffffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x1001b18b
mov dword [ebp - 0x1c], ebx
jmp 0x1001b1ab
jne 0x1001b1b0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x1001b1a6
mov eax, dword [ebp - 0x178]
lea edi, [ebp - 0x1a8]
push dword [ebp - 0x180]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x200]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.100185ae
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x38], 0x356b
cmp dword [ebp - 0x38], 0x3866
jle 0x1001b239
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 0x30], ecx
lea eax, [edi + ebx]
and eax, ecx
mov ecx, 0x10076818
cdq
push edx
push eax
call fcn.10001a30
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0xc11
jl 0x1001b1f7
inc edi
push 0
pop ebx
cmp edi, 0x7bf1
jl 0x1001b1ef
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x5db5
jl 0x1001b1ed
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x38], 0x31b8
jge 0x1001b276
mov edx, str.uoxmshoi_lcly_npubj_hla_xcd_qpcdvywg_jvzjmx_igsf_lhw_slz_bjcw_kfjvh
mov ecx, 0x10076818
call fcn.1000349f
jmp 0x1001b276
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x44], 2
mov dword [ebp - 0x34], 0x2e0f6194
mov dword [ebp - 0x28], ebx
jmp 0x1001b2a4
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x94], 0xffffffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1001b293
mov dword [ebp - 0x18], ebx
jmp 0x1001b3e7
mov dword [ebp - 0x1c], 0x32bb11ac
mov dword [ebp - 0x3c], 0xfe511bd7
mov dword [ebp - 0x3c], 0xfffffff9
mov dword [ebp - 0x1c], ebx
jmp 0x1001b3da
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xf495
jge 0x1001b37a
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x94]
cmp eax, 0x65bc8114
mov eax, dword [ebp - 0x18]
setge cl
cmp ecx, 0xfff7
mov eax, dword [ebp + eax*4 - 0x94]
sbb edx, edx
inc edx
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x94]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x94]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x94]
mov eax, dword [ebp - 0x44]
cmp eax, ecx
setle dl
sub edx, 0x7180
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
inc edx
cmp edx, dword [ebp + eax*4 - 0x94]
jle 0x1001b36e
mov eax, esi
cmp dword [ebp - 0x34], ebx
jne 0x1001b370
mov eax, ebx
mov dword [ebp - 0x34], eax
mov ecx, ebx
cmp dword [ebp - 0x34], ebx
je 0x1001b37c
mov ecx, esi
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x94]
imul eax, ecx
test eax, eax
jne 0x1001b397
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x94]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x94]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x3c], esi
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001b3d7
push 0x172b
push 0xd26
push 0xd10
call dword [sym.imp.KERNEL32.dll_MulDiv]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x1001b2cf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x1001b2b2
mov dword [ebp - 0x18], ebx
jmp 0x1001b40a
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001b407
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetRgnBox]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x12
jg 0x1001b3f6
mov dword [ebp - 0x30], esi
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x2c], 0x1fc80ae7
mov dword [ebp - 0x30], 0x92079655
push esi
call fcn.10001b45
mov dword [ebp - 0x28], ebx
jmp 0x1001b44b
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x164]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x1001b43c
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001b45f
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
test eax, eax
setg cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
imul ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], ecx
xor ecx, ecx
cmp eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x164]
setge cl
mov dword [eax], ecx
xor ecx, ecx
mov dword [ebp - 0x30], esi
mov eax, dword [ebp - 0x1c]
cmp eax, esi
mov eax, dword [ebp - 0x30]
setg cl
xor edx, edx
cmp eax, ecx
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x164]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x1c], ecx
call fcn.10044367
pop ecx
push 3
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov byte [ebp - 0x98], bl
mov byte [ebp - 0x97], 0x9c
call fcn.10001b45
mov dword [ebp - 0x40], 0xba2afe01
mov dword [ebp - 0x28], ebx
jmp 0x1001b54b
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0x33a4a9bd
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1001b538
mov dword [ebp - 0x40], 2
cmp dword [ebp - 0x40], ebx
jl 0x1001b576
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001b571
push 0x4e7
call dword [sym.imp.USER32.dll_HideCaret]
dec dword [ebp - 0x40]
jns 0x1001b55d
cmp dword [ebp - 0x128], 0
je 0x1001b59d
push dword [ebp - 0x128]
call fcn.10044367
pop ecx
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x120], ebx
push 0x5c
pop eax
mov word [ebp - 0x9c], ax
lea ecx, [ebp - 0x198]
xor eax, eax
mov dword [ebp - 0x184], 7
mov word [ebp - 0x9a], ax
mov word [ebp - 0x198], ax
lea eax, [ebp - 0x9c]
push eax
mov dword [ebp - 0x188], ebx
call fcn.100189fa
mov byte [ebp - 4], 0x12
mov edi, ebx
mov dword [ebp - 0x44], ebx
cmp edi, 2
jae 0x1001b6b1
mov dword [ebp - 0x48], 0x3e97
cmp dword [ebp - 0x48], 0x40c6
jle 0x1001b657
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], 0x7734
mov edi, ebx
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x30], 0x2290
mov eax, ebx
mov ecx, 0x10076818
cdq
push edx
push eax
call fcn.10001a30
add ebx, edi
dec dword [ebp - 0x30]
jne 0x1001b617
mov ebx, dword [ebp - 0x34]
dec edi
cmp edi, 0xffffb674
jg 0x1001b60d
mov eax, dword [ebp - 0x40]
add ebx, eax
dec dword [ebp - 0x38]
push 0
mov dword [ebp - 0x34], ebx
pop ebx
jne 0x1001b608
inc eax
mov dword [ebp - 0x40], eax
cmp eax, 0x5029
jl 0x1001b5fe
mov edi, dword [ebp - 0x44]
xor eax, eax
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x48], 0x3bbb
mov word [ebp + edi*2 - 0x9c], ax
jge 0x1001b6a1
mov edx, str.jtcxtwoif_kewwedovp_vrayz_ryyv_vxgllctpg_hube_ochwb
mov ecx, 0x10076818
call fcn.1000349f
jmp 0x1001b6a1
inc edi
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x44], edi
jmp 0x1001b5e2
push 3
pop edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x3c], 0x6e6a3735
mov dword [ebp - 0x3c], 0x88047d20
mov dword [ebp - 0x18], 0x7b051af7
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x3c], 4
cmp dword [ebp - 0x24], ebx
je 0x1001b6e2
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
je 0x1001b767
mov dword [ebp - 0x3c], edx
lea ecx, [ebp - 0x140]
push 2
call fcn.10001b45
mov dword [ebp - 0x28], ebx
jmp 0x1001b712
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], 0x36b16b47
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1001b6ff
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001b734
push 0x215a
push ebx
push ebx
push 0x1df8
push ebx
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x140], 0
je 0x1001b984
push dword [ebp - 0x140]
call fcn.10044367
pop ecx
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x138], ebx
jmp 0x1001b984
mov dword [ebp - 0x54], 0xffff
mov dword [ebp - 0x38], 0x319f
cmp dword [ebp - 0x38], 0x3277
jle 0x1001b7e0
mov ecx, ebx
mov dword [ebp - 0x40], ebx
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x30], ebx
add eax, edi
xor eax, ecx
lea ecx, [ebp - 0x298]
cdq
push edx
push eax
call fcn.10003aad
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001b7a6
mov eax, dword [eax]
push eax
call fcn.100445e8
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x298]
call fcn.10001e5d
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x7b9f
jl 0x1001b78a
inc edi
cmp edi, 0x381d
jl 0x1001b785
inc ecx
mov dword [ebp - 0x40], ecx
cmp ecx, 0x6d8
jl 0x1001b783
cmp dword [ebp - 0x38], 0x2fbe
jge 0x1001b7f4
push str.asffx_zcpthxsm_lraiy_szdsit_jnr_tmnnxpb_qgdxxjimh_uti_bqosk
call fcn.100445e8
pop ecx
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x28], ebx
jmp 0x1001b811
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x84], 0x9fe57f6c
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1001b800
mov dword [ebp - 0x24], ebx
jmp 0x1001b959
mov dword [ebp - 0x2c], 0x469209a4
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001b836
push ebx
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov dword [ebp - 0x1c], ebx
jmp 0x1001b94d
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x84]
setne cl
sub ecx, eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x84]
sub ecx, eax
add ecx, 0x9469
jne 0x1001b86c
mov ecx, ebx
cmp dword [ebp - 0x18], ebx
je 0x1001b86e
mov ecx, esi
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp + eax*4 - 0x84]
mov eax, dword [ebp - 0x2c]
sub ecx, eax
mov eax, dword [ebp - 0x24]
add edx, ecx
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x2c]
test ecx, ecx
jne 0x1001b89b
mov eax, ebx
cmp dword [ebp - 0x84], ebx
je 0x1001b89d
mov eax, esi
xor ecx, ecx
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x18]
setne cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x84]
setg dl
add edx, 7
imul edx, eax
mov eax, dword [ebp - 0x2c]
sub edx, eax
mov dword [ebp - 0x18], edx
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setl dl
sub edx, 0xfc5a
jne 0x1001b8e6
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x84], ebx
mov eax, ebx
je 0x1001b8e8
mov eax, esi
mov ecx, dword [ebp - 0x1c]
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0x3c]
add ecx, 0x5eac
cmp ecx, eax
mov eax, dword [ebp - 0x54]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setg cl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x84]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x84]
test eax, eax
mov eax, dword [ebp - 0x1c]
sete cl
mov eax, dword [ebp + eax*4 - 0x84]
sub eax, ecx
xor ecx, ecx
cmp eax, edx
setge cl
cmp ecx, 0xeeb303a6
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x1001b83e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x1001b81f
mov dword [ebp - 0x18], 5
jmp 0x1001b97e
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001b97b
push ebx
call dword [sym.imp.GDI32.dll_GetObjectType]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff3
jl 0x1001b96b
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001b994
push ebx
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
mov dword [ebp - 0x18], 0x77862fd4
mov dword [ebp - 0x28], ebx
jmp 0x1001b9b1
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xec], 0x3367
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1001b9a0
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xfffffff4
jg 0x1001ba63
mov dword [ebp - 0x2c], 0x70ade21
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 0x15
jl 0x1001ba4d
xor edx, edx
inc edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], ebx
jl 0x1001ba44
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x1c], ebx
jmp 0x1001ba05
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0xec]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xec], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jle 0x1001b9ee
mov dword [ebp - 0x1c], ebx
jmp 0x1001ba3a
mov dword [ebp - 0x28], 0x6de0184d
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], ebx
jl 0x1001ba37
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0xec]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xec], ecx
dec dword [ebp - 0x28]
jns 0x1001ba1e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jle 0x1001ba0f
dec dword [ebp - 0x24]
jns 0x1001b9e2
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x15
jge 0x1001b9d7
mov eax, dword [ebp - 0xe8]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff4
jle 0x1001b9c4
xor esi, esi
inc esi
push 0x5f
pop eax
push 2
mov byte [ebp - 0x50], bl
mov ecx, ebx
mov dword [ebp - 0x4f], 0xfbc00213
mov word [ebp - 0x58], ax
pop edi
cmp edi, 2
jne 0x1001ba85
push 3
pop ecx
push ecx
pop edi
jmp 0x1001baad
movzx edx, byte [ebp + edi - 0x4f]
lea eax, [ebp - 0x50]
sub eax, ecx
mov ecx, edx
movzx eax, byte [eax + edi - 2]
movzx eax, word [ebp + eax*2 - 0x58]
or ecx, eax
and edx, eax
movzx eax, byte [ebp + edi - 0x50]
sub ecx, edx
mov word [ebp + eax*2 - 0x58], cx
mov ecx, ebx
add edi, 2
cmp edi, 5
jb 0x1001ba79
xor eax, eax
lea ecx, [ebp - 0x1b4]
mov word [ebp - 0x56], ax
or edi, 0xffffffff
mov dword [ebp - 0x3c], 0xb0f73838
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x28], esi
push 3
call fcn.10001b45
mov dword [ebp - 0x3c], 0xfffffffb
push 3
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x28], ebx
pop edx
jmp 0x1001bafd
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1b4]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x1001baea
inc dword [ebp - 0x30]
mov dword [ebp - 0x28], ebx
jmp 0x1001bb20
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001bb1d
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x1b
jl 0x1001bb0a
cmp dword [ebp - 0x1b4], 0
je 0x1001bb3b
push dword [ebp - 0x1b4]
call fcn.10044367
pop ecx
xor eax, eax
mov dword [ebp - 0x1d4], 7
mov word [ebp - 0x1e8], ax
lea ecx, [ebp - 0x1e8]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x1d8], ebx
push eax
call fcn.100189fa
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x58], ebx
push dword [ebp - 0x188]
cmp dword [ebp - 0x184], 8
lea eax, [ebp - 0x198]
push ebx
cmovae eax, dword [ebp - 0x198]
lea ecx, [ebp - 0x200]
push eax
call fcn.1001c169
cmp eax, edi
je 0x1001bbad
push edi
push ebx
lea ecx, [ebp - 0x1e8]
push ecx
push esi
push eax
lea ecx, [ebp - 0x200]
call fcn.1001be75
jmp 0x1001bb6a
mov ecx, dword [ebp - 0xd8]
lea eax, [ebp - 0x200]
push eax
lea edx, [ebp - 0x1d0]
call fcn.1001c20c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1e8]
call fcn.10018a82
push ebx
push esi
lea ecx, [ebp - 0x198]
call fcn.10018a82
push ebx
push esi
lea ecx, [ebp - 0x200]
call fcn.10018a82
push ebx
push esi
lea ecx, [ebp - 0x1d0]
call fcn.10018a82
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xd8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret