Function at 0x10001bfd
Capabilities:
Check os version
Get session user name
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005b9dc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x4f4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x304], 0xffffffff
mov dword [ebp - 0x118], 0
jmp 0x10001c6d
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jge 0x10001c86
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x34], 0xfffffffa
jmp 0x10001c60
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x34], 0
jmp 0x10001cab
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x34], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34], 3
jg 0x10001fe1
mov dword [ebp - 0x28c], 0xfffffffc
mov dword [ebp - 0x174], 0x19d2
mov dword [ebp - 0x2f4], str.ammkv_ynk_vsuegf_nlglxixw_yavdnjqrc_alpkex_rnttb
cmp dword [ebp - 0x174], 0x19e7
jle 0x10001dc1
and dword [ebp - 0x120], 0
jmp 0x10001d00
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x659e
jge 0x10001dc1
and dword [ebp - 0x128], 0
jmp 0x10001d26
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x711d
jge 0x10001dbc
and dword [ebp - 0xa4], 0
jmp 0x10001d4c
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x4288
jge 0x10001db7
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x128]
sar eax, cl
xor eax, dword [ebp - 0xa4]
cdq
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], edx
push dword [ebp - 0x324]
push dword [ebp - 0x328]
lea ecx, [ebp - 0x464]
call fcn.10001af4
pop ecx
pop ecx
mov dword [ebp - 0x350], eax
mov ecx, dword [ebp - 0x350]
call fcn.1000e8bf
push eax
call fcn.1004677c
pop ecx
lea ecx, [ebp - 0x464]
call fcn.1000e8a1
jmp 0x10001d3f
jmp 0x10001d19
jmp 0x10001cf3
and dword [ebp - 4], 0
cmp dword [ebp - 0x174], 0x17c9
jge 0x10001ddd
push dword [ebp - 0x2f4]
call fcn.1004677c
pop ecx
jmp 0x10001df9
or dword [ebp - 4], 0xffffffff
jmp 0x10001e03
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x138]
mov dword [ebp - 0x3b0], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
mov ecx, dword [ebp + ecx*4 - 0x138]
cmp ecx, dword [ebp + eax - 0x138]
jl 0x10001e42
mov dword [ebp - 0x2fc], 1
jmp 0x10001e49
and dword [ebp - 0x2fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
mov eax, dword [ebp + eax*4 - 0x138]
mov dword [ebp - 0x3fc], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
mov ecx, dword [ebp + ecx*4 - 0x138]
cmp ecx, dword [ebp + eax - 0x34]
jge 0x10001e89
mov dword [ebp - 0x27c], 1
jmp 0x10001e90
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x27c], 0x162f6306
jge 0x10001ebd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34], 0
je 0x10001ebd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp + eax*4 - 0x138], 0
jne 0x10001eda
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp + eax*4 - 0x138], 0
jne 0x10001eda
and dword [ebp - 0x284], 0
jmp 0x10001ee4
mov dword [ebp - 0x284], 1
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x424], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x138]
cmp ecx, dword [ebp + eax*4 - 0x138]
je 0x10001f28
mov dword [ebp - 0x2a4], 1
jmp 0x10001f2f
and dword [ebp - 0x2a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
mov eax, dword [ebp + eax*4 - 0x138]
cmp eax, dword [ebp - 0x2a4]
je 0x10001f54
mov dword [ebp - 0x168], 1
jmp 0x10001f5b
and dword [ebp - 0x168], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
push 4
pop edx
shl edx, 0
mov edx, dword [ebp + edx - 0x34]
mov edx, dword [ebp + edx*4 - 0x138]
add edx, dword [ebp - 0x168]
imul edx, dword [ebp + ecx*4 - 0x138]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
mov ecx, dword [ebp + ecx*4 - 0x138]
add ecx, edx
sub ecx, dword [ebp + eax - 0x34]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp + eax*4 - 0x138], ecx
jge 0x10001fc9
mov eax, 0xcd04cd02
test eax, eax
je 0x10001fc9
mov dword [ebp - 0x274], 1
jmp 0x10001fd0
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x304], eax
jmp 0x10001c96
mov dword [ebp - 0x2ec], 0xfffffff8
mov dword [ebp - 0x220], 0x19003123
mov dword [ebp - 0x2c], 0
jmp 0x10002005
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1000201b
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x15c], 0xfffffffd
jmp 0x10001ffe
mov dword [ebp - 0x2c], 0
jmp 0x1000202b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10002041
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xe4], 0xf603fa75
jmp 0x10002024
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x15c], 0
jmp 0x1000206f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x15c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x15c], 0xffffffe4
jne 0x10002880
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x30c], 0x1d35
cmp dword [ebp - 0x30c], 0x9bf
jge 0x100022bc
mov byte [ebp - 0x5e], 0x57
lea eax, [ebp - 0x5e]
push eax
mov ecx, 0x100d8930
call fcn.1000f064
movsd xmm0, qword [0x10069678]
movsd qword [eax], xmm0
mov byte [ebp - 0x4a], 0x48
lea eax, [ebp - 0x4a]
push eax
mov ecx, 0x100d8930
call fcn.1000f064
movsd xmm0, qword [0x10069670]
movsd qword [eax], xmm0
mov byte [ebp - 0x4e], 0x51
lea eax, [ebp - 0x4e]
push eax
mov ecx, 0x100d8930
call fcn.1000f064
movsd xmm0, qword [0x10069668]
movsd qword [eax], xmm0
mov byte [ebp - 0x50], 0x45
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x100d8930
call fcn.1000f064
movsd xmm0, qword [0x10069660]
movsd qword [eax], xmm0
mov byte [ebp - 0x42], 0x53
lea eax, [ebp - 0x42]
push eax
mov ecx, 0x100d8930
call fcn.1000f064
movsd xmm0, qword [0x10069660]
movsd qword [eax], xmm0
mov byte [ebp - 0x43], 0x54
lea eax, [ebp - 0x43]
push eax
mov ecx, 0x100d8930
call fcn.1000f064
movsd xmm0, qword [0x10069660]
movsd qword [eax], xmm0
mov byte [ebp - 0x45], 0x58
lea eax, [ebp - 0x45]
push eax
mov ecx, 0x100d8930
call fcn.1000f064
movsd xmm0, qword [0x10069660]
movsd qword [eax], xmm0
xor eax, eax
inc eax
je 0x100022bc
lea ecx, [ebp - 0x39c]
call fcn.1000e819
mov dword [ebp - 4], 2
lea edx, [ebp - 0x39c]
mov ecx, 0x10075d10
call fcn.10013785
mov edx, 0x10063968
lea ecx, [ebp - 0x39c]
call fcn.1001378a
movzx eax, al
test eax, eax
je 0x100021cc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x39c]
call fcn.1000e8a1
jmp 0x100022bc
movsd xmm0, qword [0x10069640]
movsd qword [ebp - 0x2b0], xmm0
and dword [ebp - 0x148], 0
mov dword [ebp - 0x80], 1
lea ecx, [ebp - 0x39c]
call fcn.1000e8ca
mov dword [ebp - 0x314], eax
jmp 0x10002204
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x314]
jge 0x1000228c
push dword [ebp - 0x80]
lea ecx, [ebp - 0x39c]
call fcn.1000e8ab
movsx eax, byte [eax]
cmp eax, 0x2f
jne 0x1000225a
movsd xmm0, qword [ebp - 0x2b0]
ucomisd xmm0, qword [0x10069678]
lahf
test ah, 0x44
jp 0x10002248
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
movsd xmm0, qword [0x10069640]
movsd qword [ebp - 0x2b0], xmm0
jmp 0x10002287
push dword [ebp - 0x80]
lea ecx, [ebp - 0x39c]
call fcn.1000e8ab
push eax
mov ecx, 0x100d8930
call fcn.1000f064
movsd xmm0, qword [ebp - 0x2b0]
addsd xmm0, qword [eax]
movsd qword [ebp - 0x2b0], xmm0
jmp 0x100021fd
push fcn.100137e8
push dword [ebp - 0x148]
mov ecx, 0x10075c58
call fcn.1000ec6c
mov ecx, eax
call fcn.1000ec60
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x39c]
call fcn.1000e8a1
jmp 0x10002176
mov dword [ebp - 0xb4], 0xffffffff
mov dword [ebp - 0x40], 0xfffffffe
mov dword [ebp - 0x384], 0x26d5d64f
mov byte [ebp - 0x47], 0
movzx eax, byte [ebp - 0x47]
test eax, eax
je 0x100022f0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
mov dword [ebp - 0x70], 0
jmp 0x10002300
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jg 0x1000287b
mov dword [ebp - 0x38], 0xdf82d83d
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x38]
jne 0x10002328
mov dword [ebp - 0x31c], 1
jmp 0x1000232f
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x42c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0xb4], 0
jne 0x1000236d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x15c], 0
jne 0x1000236d
and dword [ebp - 0x29c], 0
jmp 0x10002377
mov dword [ebp - 0x29c], 1
cmp dword [ebp - 0x29c], 9
jne 0x1000238c
mov dword [ebp - 0x170], 1
jmp 0x10002393
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x40], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x15c], 0
jne 0x100023be
cmp dword [ebp - 0x384], 0
jne 0x100023be
and dword [ebp - 0x210], 0
jmp 0x100023c8
mov dword [ebp - 0x210], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x210], eax
jg 0x100023e9
mov dword [ebp - 0x178], 1
jmp 0x100023f0
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 1
jne 0x10002405
mov dword [ebp - 0x2c8], 1
jmp 0x1000240c
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x38]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xe4]
lea eax, [ecx + eax - 7]
test eax, eax
jne 0x10002442
mov eax, 0x121589af
test eax, eax
jne 0x10002442
and dword [ebp - 0x260], 0
jmp 0x1000244c
mov dword [ebp - 0x260], 1
mov eax, dword [ebp - 0x2ec]
imul eax, dword [ebp - 0x260]
add eax, dword [ebp - 0x38]
cmp eax, 0x85b6
jle 0x1000246f
mov dword [ebp - 0x2c4], 1
jmp 0x10002476
and dword [ebp - 0x2c4], 0
mov eax, 0xf890ba5f
test eax, eax
je 0x1000248f
xor eax, eax
je 0x1000248f
mov dword [ebp - 0x180], 1
jmp 0x10002496
and dword [ebp - 0x180], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x15c]
cmp dword [ebp - 0x180], eax
jle 0x100024b6
mov dword [ebp - 0x218], 1
jmp 0x100024bd
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], 0
jle 0x100024d2
mov dword [ebp - 0x188], 1
jmp 0x100024d9
and dword [ebp - 0x188], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
cmp dword [ebp - 0x188], eax
jl 0x100024fa
mov dword [ebp - 0x288], 1
jmp 0x10002501
and dword [ebp - 0x288], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15c]
cmp dword [ebp - 0x288], eax
jne 0x10002522
mov dword [ebp - 0x318], 1
jmp 0x10002529
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x38], 0
je 0x10002550
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15c]
mov dword [ebp - 0x220], eax
jmp 0x10002861
mov dword [ebp - 0x190], 0x1d16
mov dword [ebp - 0x2bc], str.ath_tnct_bux_yfoz_ewdijei_dkh
cmp dword [ebp - 0x190], 0x1fdf
jle 0x10002649
and dword [ebp - 0x84], 0
jmp 0x1000258a
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x4ddc
jge 0x10002649
and dword [ebp - 0x90], 0
jmp 0x100025b0
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x1931
jge 0x10002644
and dword [ebp - 0xac], 0
jmp 0x100025d6
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x79f4
jge 0x1000263f
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0xac]
and eax, dword [ebp - 0x84]
cdq
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x330], edx
push dword [ebp - 0x330]
push dword [ebp - 0x334]
lea ecx, [ebp - 0x47c]
call fcn.10001af4
pop ecx
pop ecx
mov dword [ebp - 0x2d0], eax
mov ecx, dword [ebp - 0x2d0]
call fcn.1000e8bf
push eax
call fcn.1004677c
pop ecx
lea ecx, [ebp - 0x47c]
call fcn.1000e8a1
jmp 0x100025c9
jmp 0x100025a3
jmp 0x1000257d
mov dword [ebp - 0x2a0], 0x348f
mov dword [ebp - 4], 3
cmp dword [ebp - 0x190], 0x1ada
jge 0x10002672
push dword [ebp - 0x2bc]
call fcn.1004677c
pop ecx
jmp 0x1000268e
or dword [ebp - 4], 0xffffffff
jmp 0x10002698
mov dword [ebp - 0x54], 0x821d2a6a
mov dword [ebp - 0x40], 0
jmp 0x100026af
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x10002861
mov dword [ebp - 0x2d8], 0xf937b1bd
mov eax, dword [ebp - 0x70]
cmp dword [ebp + eax*4 - 0xe4], 0
jne 0x100027fb
mov dword [ebp - 0x38], 0xffff
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x220]
jne 0x100026f2
mov dword [ebp - 0x198], 1
jmp 0x100026f9
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0xe4]
cmp eax, dword [ebp - 0x198]
jge 0x10002721
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0xe4], 0
jne 0x10002721
and dword [ebp - 0x268], 0
jmp 0x1000272b
mov dword [ebp - 0x268], 1
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0xe4]
add eax, dword [ebp - 0x268]
je 0x10002750
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10002750
mov dword [ebp - 0x1a0], 1
jmp 0x10002757
and dword [ebp - 0x1a0], 0
cmp dword [ebp - 0x1a0], 0xfffffff8
jne 0x1000276c
mov dword [ebp - 0x228], 1
jmp 0x10002773
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0xe4]
cmp eax, dword [ebp - 0x228]
jl 0x10002791
mov dword [ebp - 0x1a8], 1
jmp 0x10002798
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0xffffffff
ja 0x100027bc
cmp dword [ebp - 0x54], 0
jne 0x100027bc
and dword [ebp - 0x1b0], 0
jmp 0x100027c6
mov dword [ebp - 0x1b0], 1
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x1b0], eax
jg 0x100027e0
mov dword [ebp - 0x230], 1
jmp 0x100027e7
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
sub eax, dword [ebp - 0x54]
jne 0x100027fb
and dword [ebp - 0x1b8], 0
jmp 0x10002805
mov dword [ebp - 0x1b8], 1
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x1b8], eax
jge 0x1000281c
mov dword [ebp - 0x270], 1
jmp 0x10002823
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x54], 1
jmp 0x1000283f
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x1000285c
mov dword [ebp - 0x320], 0xfffffffc
cmp dword [ebp - 0x320], 0
je 0x1000285a
jmp 0x1000285c
jmp 0x10002838
jmp 0x100026a8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe4], 0
je 0x10002876
jmp 0x100022f9
jmp 0x100022f9
jmp 0x10002054
mov dword [ebp - 0x3b4], 0xa6318529
mov dword [ebp - 0x3bc], 0x9beb0647
mov dword [ebp - 0x3c4], 0xffffffff
mov dword [ebp - 0x3cc], 2
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0x3dc], 0xfffffff8
mov dword [ebp - 0x1c0], 0
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x100028d8
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x14], 0xa5b7d8cf
mov dword [ebp - 0x20], 0xc345fe46
mov dword [ebp - 0x13c], 0xffffffff
mov dword [ebp - 0xa0], 0
jmp 0x10002916
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x1000292f
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x68], 0xe446df3
jmp 0x10002909
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
je 0x10002954
mov dword [ebp - 0x238], 1
jmp 0x1000295b
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 0xe7ccc895
je 0x1000298b
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp + eax - 0x68]
test ecx, ecx
jne 0x1000298b
mov eax, 0x555145cc
test eax, eax
jne 0x1000298b
and dword [ebp - 0x1c8], 0
jmp 0x10002995
mov dword [ebp - 0x1c8], 1
cmp dword [ebp - 0x1c8], 0x725245f5
je 0x100029ad
mov dword [ebp - 0x290], 1
jmp 0x100029b4
and dword [ebp - 0x290], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
imul eax, dword [ebp - 0x290]
test eax, eax
jne 0x100029d8
cmp dword [ebp - 0x14], 0
jne 0x100029d8
and dword [ebp - 0x1d0], 0
jmp 0x100029e2
mov dword [ebp - 0x1d0], 1
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x13c], eax
xor eax, eax
jne 0x10002a89
cmp dword [ebp - 0x14], 0x1aa12afd
jl 0x10002a0b
mov dword [ebp - 0x240], 1
jmp 0x10002a12
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x20], 0
jne 0x10002a3c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3e4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x13c]
cmp ecx, dword [ebp + eax - 0x68]
jl 0x10002a3c
and dword [ebp - 0x1d8], 0
jmp 0x10002a46
mov dword [ebp - 0x1d8], 1
mov eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x1d8]
jg 0x10002a60
mov dword [ebp - 0x2e0], 1
jmp 0x10002a67
and dword [ebp - 0x2e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0x3ec], eax
mov eax, 0xfad0d727
test eax, eax
jne 0x10002a89
and dword [ebp - 0x278], 0
jmp 0x10002a93
mov dword [ebp - 0x278], 1
mov eax, dword [ebp - 0x278]
sub eax, 0x3bd791f9
cmp eax, 0xf4d4e2
jge 0x10002ab1
mov dword [ebp - 0x380], 1
jmp 0x10002ab8
and dword [ebp - 0x380], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0x434], eax
or eax, 0xffffffff
je 0x10002afe
mov byte [ebp - 0x4b], 0
movzx eax, byte [ebp - 0x4b]
test eax, eax
je 0x10002af9
push 0
push 0xf9d
push 0x2f6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
jmp 0x10002efc
mov dword [ebp - 0x78], 0xba889b05
mov dword [ebp - 0x20], 0xffffffff
cmp dword [ebp - 0x20], 0
jne 0x10002e93
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x1e0], 0x228b
mov dword [ebp - 0x2e8], str.fypbj_hzcw_xbwlakbn_fdb_omdrt_lwpg_yvxhoydhy_spbf_ryfnnnazf_gcwwjkjl_udx
cmp dword [ebp - 0x1e0], 0x2465
jle 0x10002be9
and dword [ebp - 0x124], 0
jmp 0x10002b57
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x891
jge 0x10002be9
and dword [ebp - 0xa8], 0
jmp 0x10002b7d
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xf57
jge 0x10002be4
and dword [ebp - 0xec], 0
jmp 0x10002b9f
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x667e
jge 0x10002be2
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0xa8]
xor eax, dword [ebp - 0xec]
cdq
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], edx
push dword [ebp - 0x33c]
push dword [ebp - 0x340]
mov ecx, 0x10075c58
call fcn.1000ed7e
jmp 0x10002b92
jmp 0x10002b70
jmp 0x10002b4a
mov dword [ebp - 4], 5
cmp dword [ebp - 0x1e0], 0x212b
jge 0x10002c0c
mov edx, dword [ebp - 0x2e8]
mov ecx, 0x10075c58
call fcn.1001381a
jmp 0x10002c28
or dword [ebp - 4], 0xffffffff
jmp 0x10002c32
mov dword [ebp - 0xb0], 0
jmp 0x10002c4b
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x10002c67
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x3f8], 0xfffffff8
jmp 0x10002c3e
mov dword [ebp - 0x14], 1
jmp 0x10002c77
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10002e7d
mov dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x74]
jne 0x10002c9f
mov dword [ebp - 0x248], 1
jmp 0x10002ca6
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x68]
imul eax, dword [ebp - 0x248]
cmp eax, dword [ebp - 0x78]
jle 0x10002cc5
mov dword [ebp - 0x32c], 1
jmp 0x10002ccc
and dword [ebp - 0x32c], 0
push 0xfffffffffffffffd
pop eax
cmp eax, 0x3668f781
jge 0x10002ce2
mov dword [ebp - 0x2f0], 1
jmp 0x10002ce9
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1e8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e8]
cmp ecx, dword [ebp + eax - 0x68]
jl 0x10002d10
mov dword [ebp - 0x2a8], 1
jmp 0x10002d17
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x2a8], eax
jge 0x10002d2e
mov dword [ebp - 0x1f0], 1
jmp 0x10002d35
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x68]
cmp eax, dword [ebp - 0x1f0]
jl 0x10002d50
mov dword [ebp - 0x250], 1
jmp 0x10002d57
and dword [ebp - 0x250], 0
cmp dword [ebp - 0x250], 0x6825
je 0x10002d7e
cmp dword [ebp - 0x78], 0
je 0x10002d7e
mov eax, 0x3bbe7568
test eax, eax
je 0x10002d7e
mov dword [ebp - 0x1f8], 1
jmp 0x10002d85
and dword [ebp - 0x1f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
imul eax, dword [ebp - 0x1f8]
test eax, eax
jne 0x10002dac
mov eax, 0xdcbc3393
test eax, eax
jne 0x10002dac
and dword [ebp - 0x280], 0
jmp 0x10002db6
mov dword [ebp - 0x280], 1
cmp dword [ebp - 0x280], 0x8e7d
jne 0x10002dce
mov dword [ebp - 0x200], 1
jmp 0x10002dd5
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x74]
sub ecx, dword [ebp - 0x200]
cmp ecx, dword [ebp + eax*4 - 0x68]
jge 0x10002df3
mov dword [ebp - 0x258], 1
jmp 0x10002dfa
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x258], eax
jge 0x10002e11
mov dword [ebp - 0x208], 1
jmp 0x10002e18
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x74]
imul eax, dword [ebp - 0x208]
cmp dword [ebp - 0x13c], eax
jg 0x10002e39
cmp dword [ebp - 0x74], 0
jne 0x10002e39
and dword [ebp - 0x164], 0
jmp 0x10002e43
mov dword [ebp - 0x164], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x68]
cmp eax, dword [ebp - 0x164]
jge 0x10002e5e
mov dword [ebp - 0x16c], 1
jmp 0x10002e65
and dword [ebp - 0x16c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x16c]
mov dword [ebp + eax - 0x3f8], ecx
jmp 0x10002c70
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x10002e91
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
jmp 0x10002ee3
mov dword [ebp - 0x20], 0
jmp 0x10002ea3
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffffd
jne 0x10002ee3
mov dword [ebp - 0x35c], 0xfffffffb
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax - 0x68]
jne 0x10002ece
mov dword [ebp - 0x160], 1
jmp 0x10002ed5
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x35c], eax
jmp 0x10002e9c
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x10002efc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x184], 0x545d
mov dword [ebp - 0x338], str.vlsmaf_byjtbm_hen_xlpcyda_tpkfmwvtw_kukbzgqv_kwwopa_pnws_iudh_pbq_cdeoj_lgt
cmp dword [ebp - 0x184], 0x54ae
jle 0x10003032
and dword [ebp - 0xc0], 0
jmp 0x10002f36
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x3dca
jge 0x10003028
and dword [ebp - 0xf4], 0
jmp 0x10002f5c
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x6beb
jge 0x10003023
and dword [ebp - 0x10c], 0
jmp 0x10002f82
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x101b
jge 0x1000301e
and dword [ebp - 0xb8], 0
jmp 0x10002fa8
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x4846
jge 0x10003019
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0xb8]
shl eax, cl
and eax, dword [ebp - 0xf4]
or eax, dword [ebp - 0xc0]
cdq
mov dword [ebp - 0x34c], eax
mov dword [ebp - 0x348], edx
push dword [ebp - 0x348]
push dword [ebp - 0x34c]
lea ecx, [ebp - 0x494]
call fcn.10001af4
pop ecx
pop ecx
mov dword [ebp - 0x2f8], eax
mov ecx, dword [ebp - 0x2f8]
call fcn.1000e8bf
push eax
call fcn.1004677c
pop ecx
lea ecx, [ebp - 0x494]
call fcn.1000e8a1
jmp 0x10002f9b
jmp 0x10002f75
jmp 0x10002f4f
jmp 0x10002f29
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x11c], 0
jmp 0x1000304b
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x10003067
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x298], 0xf0ea75c9
jmp 0x1000303e
mov byte [ebp - 0x4c], 0
movzx eax, byte [ebp - 0x4c]
test eax, eax
je 0x10003087
push 0x103c
push 0
push 0
push 0x1386
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x298], 0
jmp 0x100030b5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x298]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x298], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x298], 8
jle 0x10003115
mov dword [ebp - 0x144], 0x6801fc3e
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x43c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x298], 0
jne 0x100030fd
cmp dword [ebp - 0x144], 1
jle 0x100030fd
and dword [ebp - 0x17c], 0
jmp 0x10003107
mov dword [ebp - 0x17c], 1
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x144], eax
jmp 0x1000309a
mov dword [ebp - 4], 7
cmp dword [ebp - 0x184], 0x5409
jge 0x10003134
push dword [ebp - 0x338]
call fcn.1004677c
pop ecx
jmp 0x10003150
or dword [ebp - 4], 0xffffffff
jmp 0x1000315a
movzx eax, byte [0x10076d88]
test eax, eax
je 0x10003178
mov esi, 0x10072990
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10003f72
mov dword [ebp - 0x18c], 0x4b34
mov dword [ebp - 0x374], str.ryzvf_bpolvzh_xicytj
cmp dword [ebp - 0x18c], 0x4b82
jle 0x1000323c
and dword [ebp - 0xc8], 0
jmp 0x100031b2
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x71c6
jge 0x1000323c
and dword [ebp - 0xfc], 0
jmp 0x100031d4
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x49e7
jge 0x10003237
mov eax, dword [ebp - 0xc8]
or eax, dword [ebp - 0xfc]
cdq
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], edx
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea ecx, [ebp - 0x4b8]
call fcn.10001af4
pop ecx
pop ecx
mov dword [ebp - 0x300], eax
mov ecx, dword [ebp - 0x300]
call fcn.1000e8bf
push eax
call fcn.1004677c
pop ecx
lea ecx, [ebp - 0x4b8]
call fcn.1000e8a1
jmp 0x100031c7
jmp 0x100031a5
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x3c], 0xa
jmp 0x10003253
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jne 0x10003313
mov dword [ebp - 0x114], 0x7b1891f7
mov dword [ebp - 0xd0], 0
jmp 0x10003280
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 4
jge 0x1000329c
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x504], 0x6df251d6
jmp 0x10003273
mov dword [ebp - 0x114], 3
jmp 0x100032b5
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x1000330e
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x1000330c
push 0x650
push 0x259a
push 0x52
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x76a
push 0x3af
push 0x2420
push 0x15d9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x100032a8
jmp 0x1000324c
mov dword [ebp - 0x3c], 0x17
jmp 0x10003323
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffffc
je 0x100033f5
mov dword [ebp - 0xd8], 0xfffffffd
mov dword [ebp - 0xd8], 1
jmp 0x10003350
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 6
je 0x100033f0
mov dword [ebp - 0x104], 0
jmp 0x10003376
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 2
jge 0x10003392
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x2b8], 0x3717be9f
jmp 0x10003369
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2b8], 0
jmp 0x100033c0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2b8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2b8], 0x16
je 0x100033eb
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x100033e9
push 0x16bb
push 0
call dword [sym.imp.USER32.dll_GetSubMenu]
jmp 0x100033a5
jmp 0x10003343
jmp 0x1000331c
mov dword [ebp - 4], 9
cmp dword [ebp - 0x18c], 0x4a09
jge 0x10003414
push dword [ebp - 0x374]
call fcn.1004677c
pop ecx
jmp 0x10003430
or dword [ebp - 4], 0xffffffff
jmp 0x1000343a
mov dword [ebp - 0x420], 0x10072990
mov dword [ebp - 0x3a8], 0x10072994
mov dword [ebp - 0x6c], 3
mov dword [ebp - 0x14c], 0x1647
mov dword [ebp - 0x1a4], 0xd35da2
mov dword [ebp - 0x310], 0xdc705be7
mov dword [ebp - 0x430], 1
mov dword [ebp - 0x3a0], 0xffffffff
mov dword [ebp - 0x410], 0x429adbd3
mov dword [ebp - 0x3b8], 1
mov dword [ebp - 0x428], 0xfffffff8
mov dword [ebp - 0x24], 0
jmp 0x100034b5
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x100034c8
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x28], 0x94f3
jmp 0x100034ae
mov dword [ebp - 0x24], 0
jmp 0x100034d8
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x100034ee
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3c0], 0xb460d54b
jmp 0x100034d1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x6c], 0
jmp 0x1000350b
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffffd
jne 0x10003a37
mov dword [ebp - 0x1c], 0xc23afc37
mov dword [ebp - 0x194], 0x4805
mov dword [ebp - 0x308], str.borzjd_nbyboje_qvvgjc_xaj_ovgg_egbr_nsuk_gas_jhhn_sftqmfmcw_enu_afhqyqge
cmp dword [ebp - 0x194], 0x49c5
jle 0x1000361e
and dword [ebp - 0x88], 0
jmp 0x10003556
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x3fff
jge 0x1000361e
and dword [ebp - 0x98], 0
jmp 0x1000357c
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x4ea8
jge 0x10003619
and dword [ebp - 0x9c], 0
jmp 0x100035a2
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x1e52
jge 0x10003614
and dword [ebp - 0x8c], 0
jmp 0x100035c4
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x22d0
jge 0x10003612
mov eax, dword [ebp - 0x98]
cdq
idiv dword [ebp - 0x9c]
add edx, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x8c]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], edx
push dword [ebp - 0x360]
push dword [ebp - 0x364]
mov ecx, 0x10075c58
call fcn.1000ed7e
jmp 0x100035b7
jmp 0x10003595
jmp 0x1000356f
jmp 0x10003549
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x194], 0x4757
jge 0x10003641
mov edx, dword [ebp - 0x308]
mov ecx, 0x10075c58
call fcn.1001381a
jmp 0x1000365d
or dword [ebp - 4], 0xffffffff
jmp 0x10003667
mov dword [ebp - 0x94], 0
jmp 0x10003680
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1000369c
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x4a0], 0xda314325
jmp 0x10003673
mov dword [ebp - 0x1c], 0
jmp 0x100036ac
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x10003a32
mov dword [ebp - 0x7c], 0x416db6d0
mov dword [ebp - 0x5c], 0xb79f6a71
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x3c8], 0xfffffffd
mov dword [ebp - 0x204], 0xfffffff8
mov dword [ebp - 0x7c], 0
jmp 0x100036f2
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x10003a20
mov dword [ebp - 0x1bc], 6
mov dword [ebp - 0x1fc], 0xa3c
mov dword [ebp - 0x368], str.fnqwtm_xtoqdgxhh_bvdzwuvzs
cmp dword [ebp - 0x1fc], 0xdf7
jle 0x10003801
and dword [ebp - 0xcc], 0
jmp 0x10003740
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x5eef
jge 0x10003801
and dword [ebp - 0xbc], 0
jmp 0x10003766
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x7d12
jge 0x100037fc
and dword [ebp - 0xc4], 0
jmp 0x1000378c
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x73b0
jge 0x100037f7
mov ecx, dword [ebp - 0xbc]
add ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xcc]
shl eax, cl
cdq
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], edx
push dword [ebp - 0x36c]
push dword [ebp - 0x370]
lea ecx, [ebp - 0x4f4]
call fcn.10001af4
pop ecx
pop ecx
mov dword [ebp - 0x344], eax
mov ecx, dword [ebp - 0x344]
call fcn.1000e8bf
push eax
call fcn.1004677c
pop ecx
lea ecx, [ebp - 0x4f4]
call fcn.1000e8a1
jmp 0x1000377f
jmp 0x10003759
jmp 0x10003733
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
je 0x10003966
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x28]
mov dword [ebp - 0x438], eax
push 3
pop eax
cmp eax, 1
jne 0x10003835
mov dword [ebp - 0x19c], 1
jmp 0x1000383c
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
neg eax
mov ecx, dword [ebp - 0x1c]
cmp dword [ebp + ecx*4 - 0x28], eax
jge 0x10003859
mov dword [ebp - 0x1ac], 1
jmp 0x10003860
and dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a4], 1
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x1ac]
jl 0x1000388a
cmp dword [ebp - 0x7c], 0
je 0x1000388a
mov dword [ebp - 0x1b4], 1
jmp 0x10003891
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1bc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1bc]
cmp ecx, dword [ebp + eax - 0x28]
jl 0x100038be
cmp dword [ebp - 0x1c], 0
jne 0x100038be
and dword [ebp - 0x1c4], 0
jmp 0x100038c8
mov dword [ebp - 0x1c4], 1
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c4]
jge 0x100038df
mov dword [ebp - 0x1cc], 1
jmp 0x100038e6
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1cc]
sub ecx, 0x589d3895
mov edx, dword [ebp - 0x1c]
mov edx, dword [ebp + edx*4 - 0x28]
sub edx, ecx
cmp edx, dword [ebp + eax*4 - 0x28]
je 0x10003920
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x10003920
cmp dword [ebp - 0x5c], 0
jne 0x10003920
and dword [ebp - 0x1d4], 0
jmp 0x1000392a
mov dword [ebp - 0x1d4], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1d4]
sub ecx, dword [ebp + eax*4 - 0x28]
cmp ecx, 0xfffffff7
jne 0x10003948
mov dword [ebp - 0x1dc], 1
jmp 0x1000394f
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x1dc], eax
jl 0x10003966
mov dword [ebp - 0x1e4], 1
jmp 0x1000396d
and dword [ebp - 0x1e4], 0
cmp dword [ebp - 0x1e4], 1
jb 0x10003982
mov dword [ebp - 0x1ec], 1
jmp 0x10003989
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1ec], eax
jl 0x100039a0
mov dword [ebp - 0x1f4], 1
jmp 0x100039a7
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x310], eax
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x1fc], 0x6b3
jge 0x100039d2
push dword [ebp - 0x368]
call fcn.1004677c
pop ecx
jmp 0x100039ee
or dword [ebp - 4], 0xffffffff
jmp 0x100039f8
mov dword [ebp - 0x5c], 0
jmp 0x10003a08
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10003a1b
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x28], 0xfffffff9
jmp 0x10003a01
jmp 0x100036eb
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
jmp 0x100036a5
jmp 0x10003504
mov byte [0x10076d88], 1
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x100725d0
mov dword [ebp - 0x224], eax
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd4], 0
jmp 0x10003a75
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xfffffffe
jne 0x10003afa
mov dword [ebp - 0xe8], 0x29bf39
mov dword [ebp - 0xdc], 0
jmp 0x10003aa1
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x10003abd
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x444], 0xfffffffd
jmp 0x10003a94
mov dword [ebp - 0xe8], 0
jmp 0x10003ad6
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jg 0x10003af5
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x10003af3
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
jmp 0x10003ac9
jmp 0x10003a68
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x10003b10
push 0
push 0
call dword [sym.imp.USER32.dll_LoadIconA]
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x100725d0
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x224]
mov dword [0x10072990], eax
mov dword [ebp - 0x21c], 0x4bb9
mov dword [ebp - 0x2cc], str.ovhve_cmezg_ucwek_kbgpwpoyf_sfvvqjl_mly_xamc_fwpc_ezqo_rld_tbs_cbsc
cmp dword [ebp - 0x21c], 0x4bfd
jle 0x10003bf0
and dword [ebp - 0xf0], 0
jmp 0x10003b66
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x6aa0
jge 0x10003bf0
and dword [ebp - 0xf8], 0
jmp 0x10003b88
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xd8b
jge 0x10003beb
mov eax, dword [ebp - 0xf0]
or eax, dword [ebp - 0xf8]
cdq
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x378], edx
push dword [ebp - 0x378]
push dword [ebp - 0x37c]
lea ecx, [ebp - 0x4dc]
call fcn.10001af4
pop ecx
pop ecx
mov dword [ebp - 0x2c0], eax
mov ecx, dword [ebp - 0x2c0]
call fcn.1000e8bf
push eax
call fcn.1004677c
pop ecx
lea ecx, [ebp - 0x4dc]
call fcn.1000e8a1
jmp 0x10003b7b
jmp 0x10003b59
mov dword [ebp - 0x108], 0x8ec0ae97
mov dword [ebp - 0x3d0], 0x6cce57bf
mov dword [ebp - 0x400], 0xaa0d7227
mov dword [ebp - 0x3d8], 0xfc9a57b5
mov dword [ebp - 0x20c], 0xe885
mov dword [ebp - 0x100], 0
jmp 0x10003c3b
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x10003c57
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x44c], 0x5047c4d1
jmp 0x10003c2e
mov dword [ebp - 0x108], 0
jmp 0x10003c70
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xffffffee
jne 0x10003d0d
mov dword [ebp - 0x404], 0
mov dword [ebp - 0x3e0], 0xeec54165
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x3e8], 1
mov dword [ebp - 0x414], 0xffffffff
mov dword [ebp - 0x214], 0xfe44
mov dword [ebp - 0x110], 0
jmp 0x10003cd2
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jge 0x10003cee
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x4c4], 0xea53061e
jmp 0x10003cc5
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
jmp 0x10003c63
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x21c], 0x4b17
jge 0x10003d2c
push dword [ebp - 0x2cc]
call fcn.1004677c
pop ecx
jmp 0x10003d48
or dword [ebp - 4], 0xffffffff
jmp 0x10003d52
mov eax, dword [ebp - 0x140]
mov dword [0x10072994], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x140]
push dword [ecx + eax]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x224]
push dword [ecx + eax]
call fcn.10001b2c
pop ecx
pop ecx
mov dword [ebp - 0x2d4], eax
push dword [ebp - 0x140]
mov edx, 0x100729bc
mov ecx, dword [ebp - 0x2d4]
call fcn.10001bc6
pop ecx
mov dword [ebp - 0x18], 0x7ca0029b
mov dword [ebp - 0x150], 7
mov dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jg 0x10003dce
mov dword [ebp - 0x22c], 1
jmp 0x10003dd5
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x22c], eax
jge 0x10003dec
mov dword [ebp - 0x234], 1
jmp 0x10003df3
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x234], eax
je 0x10003e0a
mov dword [ebp - 0x23c], 1
jmp 0x10003e11
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x23c], eax
jne 0x10003e28
mov dword [ebp - 0x2dc], 1
jmp 0x10003e2f
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x18], 0x2ef7
jne 0x10003e4d
mov dword [ebp - 0x244], 1
jmp 0x10003e54
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x244], eax
jge 0x10003e6b
mov dword [ebp - 0x24c], 1
jmp 0x10003e72
and dword [ebp - 0x24c], 0
imul eax, dword [ebp - 0x24c], 0xffffffff
cmp dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xadfb1af9
je 0x10003e9d
mov dword [ebp - 0x2e4], 1
jmp 0x10003ea4
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x150], 0
ja 0x10003ec8
cmp dword [ebp - 0x254], 0
jne 0x10003ec8
and dword [ebp - 0x25c], 0
jmp 0x10003ed2
mov dword [ebp - 0x25c], 1
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x25c], eax
je 0x10003eec
mov dword [ebp - 0x264], 1
jmp 0x10003ef3
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x264]
je 0x10003f1d
mov dword [ebp - 0x26c], 0xdc10
mov eax, dword [ebp - 0x26c]
dec eax
mov dword [ebp - 0x26c], eax
jmp 0x10003f3f
mov byte [ebp - 0x48], 0
movzx eax, byte [ebp - 0x48]
test eax, eax
je 0x10003f3f
push 0
push 0
push 0xb57
push 0x1e30
push 0
call dword [sym.imp.USER32.dll_InsertMenuW]
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x10003f64
push 0x173
push 0
push 0xf61
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov esi, 0x10072990
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret