Function at 0x1001bf5f
Capabilities:
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a8
mov dword [ebp - 0x58], edx
xor edx, edx
mov dword [ebp - 0x10], 0xf29acd40
push ebx
mov dword [ebp - 0xc], 0x9b85
mov ebx, ecx
mov dword [ebp - 0x28], 0x5277
push esi
mov dword [ebp - 0x2c], 0x771b7056
push edi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 8], edx
jmp 0x1001bfa7
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xa0], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x1001bf96
xor ecx, ecx
mov dword [ebp - 8], edx
inc ecx
jmp 0x1001bfc3
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x68], 0x42ff18c9
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x1001bfb5
push 2
mov dword [ebp - 8], edx
pop esi
jmp 0x1001bfdd
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xdc], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x1001bfd0
mov eax, dword [ebp - 0x98]
xor ecx, ecx
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x9c]
cmp eax, 0x9b56
mov eax, dword [ebp - 0x94]
setge cl
imul eax, ecx
xor ecx, ecx
cmp eax, 0x7222
mov eax, dword [ebp - 0xc]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x9c]
sete dl
xor ecx, ecx
cmp eax, 0x252c
setne cl
xor eax, eax
cmp ecx, edx
setge al
xor edi, edi
mov dword [ebp - 0x68], eax
xor ecx, ecx
mov eax, dword [ebp - 0x28]
inc edi
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xdc]
cmp eax, edi
mov eax, dword [ebp - 0x28]
setl cl
add eax, ecx
xor edx, edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x20], 0x394643cd
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edx
jmp 0x1001c0ae
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb4], 0x8bbca631
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001c09d
mov dword [ebp - 4], edi
cmp dword [ebp - 4], edx
jl 0x1001c0dc
mov byte [ebp - 0x15], dl
cmp byte [ebp - 0x15], 0
je 0x1001c0d7
push 0xf7b
push 0x1399
push edx
call dword [sym.imp.USER32.dll_DeleteMenu]
xor edx, edx
dec dword [ebp - 4]
jns 0x1001c0bb
mov dword [ebp - 4], edi
cmp dword [ebp - 4], edx
jl 0x1001c11f
mov dword [ebp - 0x14], 0xeb9ae77a
mov dword [ebp - 0x14], edx
jmp 0x1001c101
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb4], 0x921ded68
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1001c0f0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + eax*4 - 0xb4]
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xb4], ecx
dec dword [ebp - 4]
jns 0x1001c0e4
mov dword [ebp - 4], edx
jmp 0x1001c135
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x198], 0x3b4e
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x1001c124
mov dword [ebp - 4], edx
jmp 0x1001c14e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x78], 0x8628
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x1001c140
mov dword [ebp - 0x20], edx
jmp 0x1001c1d2
mov dword [ebp - 0x24], 0xda8e
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x40], 0x815f8425
mov dword [ebp - 0x10], edx
jmp 0x1001c183
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x140], 0xebb0cb8c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1001c172
mov dword [ebp - 0x134], 0xe17f7596
xor edx, edx
mov eax, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setne dl
cmp edx, dword [ebp - 0x78]
jg 0x1001c1bf
xor edx, edx
cmp dword [ebp - 0x78], edx
je 0x1001c1c1
mov ecx, edi
jmp 0x1001c1c3
xor edx, edx
mov ecx, edx
mov eax, dword [ebp - 0x28]
imul eax, ecx
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x1001c158
push 4
mov dword [ebp - 0x14], 0x9ad59e57
mov dword [ebp - 0x10], edx
pop ecx
jmp 0x1001c1f7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x18c], 0xac204e2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1001c1e6
mov dword [ebp - 0x14], edx
jmp 0x1001c212
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x18c], 0x95e17ca0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001c201
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x15], dl
cmp byte [ebp - 0x15], 0
je 0x1001c241
push edx
push 0x181a
push 0x1ead
push 0x2bc
call esi
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
xor edx, edx
cmp dword [ebx + 0x10], edx
jne 0x1001c24d
xor al, al
jmp 0x1001d13e
push 3
pop edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], 0x9634
mov dword [ebp - 0x28], 0xe035d6df
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x24], 0x68e5b495
mov dword [ebp - 8], edx
jmp 0x1001c27e
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x4c], 0x8bbca631
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001c270
xor ecx, ecx
mov dword [ebp - 8], edx
inc ecx
jmp 0x1001c29a
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x30], 0xa439beb0
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x1001c28c
mov dword [ebp - 8], edx
jmp 0x1001c2b2
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x60], 0x9e2a8d3a
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x1001c2a4
mov dword [ebp - 8], edx
jmp 0x1001c2cd
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xe4], 0xfe8f1e0e
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001c2bc
mov dword [ebp - 8], edx
jmp 0x1001c2e9
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x15c], 0xfffffff6
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x1001c2d8
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], edx
jl 0x1001c3bd
mov eax, 0x33582f80
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x24], 0x6497
mov dword [ebp - 0x10], edx
jmp 0x1001c331
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7c], 0xffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1001c323
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x4c], edx
jne 0x1001c362
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
push edx
push 0x52cf
push 0x4ec8
mov eax, dword [ebp + eax*4 - 0x4c]
dec dword [ebp - 0x7c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc4], eax
call fcn.1001e1b3
add esp, 0xc
mov eax, 0x33582f80
dec dword [ebp - 0x30]
push 0
pop edx
push 1
pop ecx
jns 0x1001c2ff
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x60], ecx
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
sete cl
xor eax, eax
cmp ecx, 0xfffa
setne al
xor edx, edx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
cmp ecx, eax
setne dl
mov dword [ebp - 0x30], edx
test edx, edx
je 0x1001c412
xor edx, edx
cmp dword [ebp - 4], edx
je 0x1001c414
xor edi, edi
push 3
lea eax, [edi + 1]
pop edi
jmp 0x1001c416
xor edx, edx
mov eax, edx
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov edx, dword [ebp - 0x28]
imul edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp edx, eax
setge cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
sub eax, 0x8fb8aaa8
neg eax
sbb eax, eax
xor edx, edx
inc eax
inc edx
cmp edx, eax
sbb eax, eax
xor ecx, ecx
neg eax
sub eax, dword [ebp - 0xc]
cmp eax, 0xff44
setl cl
xor eax, eax
cmp ecx, 0x8fdc
setl al
xor ecx, ecx
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x154]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], 0x5020f89b
mov dword [ebp - 4], ecx
jmp 0x1001c49e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1a8], 0x70ad
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x1001c48d
mov dword [ebp - 4], ecx
jmp 0x1001c4ba
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x110], 0xca9f8d1
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x1001c4a9
mov dword [ebp - 0x1c], ecx
jmp 0x1001c51f
mov dword [ebp - 0x14], 0xfffffffd
mov dword [ebp - 0x10], ecx
jmp 0x1001c4de
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x44], 0xd3b3152c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001c4d0
mov dword [ebp - 0x44], edi
cmp dword [ebp - 0x44], ecx
jl 0x1001c502
mov dword [ebp - 0x24], 0xfffffffc
cmp dword [ebp - 0x24], ecx
jne 0x1001c502
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], eax
dec dword [ebp - 0x44]
jns 0x1001c4eb
mov dword [ebp - 0x14], ecx
jmp 0x1001c517
mov dword [ebp - 0x2c], 2
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x1001c507
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jle 0x1001c4c4
mov eax, dword [ebp - 0x58]
mov dword [eax], ecx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], 0x55e00fe1
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x34], 0xca9869ec
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], ecx
jmp 0x1001c563
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x120], 5
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x1001c552
mov dword [ebp - 4], ecx
jmp 0x1001c57e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x150], 0xa277
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x1001c56d
mov byte [ebp - 0x15], cl
cmp byte [ebp - 0x15], cl
je 0x1001c5a6
push 0x569
push 0x5d8b
push ecx
push 0x4c2e
call fcn.1001e976
add esp, 0x10
xor ecx, ecx
inc dword [ebp - 0x150]
push 9
mov dword [ebp - 0x1c], 0x4ec2e0cf
mov dword [ebp - 0x1c], ecx
pop eax
jmp 0x1001c606
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 0x11
cmp dword [ebp - 0x14], 0x1d
jl 0x1001c603
mov dword [ebp - 0x10], 0x23afc371
mov dword [ebp - 0x10], ecx
jmp 0x1001c5f1
mov byte [ebp - 0x15], cl
cmp byte [ebp - 0x15], 0
je 0x1001c5ee
push ecx
push 0x13e6
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
xor ecx, ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xc
jle 0x1001c5d7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1d
jge 0x1001c5cb
push 9
pop eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff5
je 0x1001c5bb
mov byte [ebp - 0x15], cl
cmp byte [ebp - 0x15], 0
je 0x1001c631
push 0x2661
push ecx
push ecx
push ecx
push ecx
push 0xff1
push 0x123c
call esi
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
cmp dword [ebx + 0x14], 0x10
jb 0x1001c63e
mov esi, dword [ebx]
mov dword [ebp - 0x28], esi
jmp 0x1001c643
mov esi, ebx
mov dword [ebp - 0x28], ebx
cmp dword [ebx + 0x14], 0x10
jb 0x1001c64d
mov ecx, dword [ebx]
jmp 0x1001c64f
mov ecx, ebx
mov eax, dword [ebx + 0x10]
add eax, ecx
cmp esi, eax
je 0x1001cfa7
mov dword [ebp - 4], 0x143e
xor edi, edi
mov dword [ebp - 0x2c], 0xebf889e0
inc edi
mov dword [ebp - 0x20], edi
xor ebx, ebx
push 5
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0xd66de6b9
mov dword [ebp - 0x40], 0xe834ab46
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0x76e8d2ca
mov dword [ebp - 0x14], 0x47f2
mov dword [ebp - 0x1c], ebx
jmp 0x1001c6aa
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64], 0x8604
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1001c69c
cmp dword [ebp - 4], ebx
jne 0x1001c720
mov edi, dword [ebp - 4]
mov eax, dword [ebp - 4]
neg edi
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
sbb edi, edi
mov eax, dword [ebp - 4]
xor ebx, ebx
neg edi
cmp ecx, eax
mov eax, dword [ebp - 4]
setne bl
add ebx, 0xffff
neg ebx
sbb ebx, ebx
xor edx, edx
neg ebx
cmp ebx, eax
mov eax, dword [ebp - 4]
setle dl
xor ecx, ecx
cmp eax, edi
setg cl
xor eax, eax
cmp ecx, edx
setg al
xor edx, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, 7
mov eax, dword [ebp - 4]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edi, edi
xor ebx, ebx
inc edi
cmp ecx, dword [ebp - 4]
jl 0x1001c720
mov edx, ebx
cmp dword [ebp - 0x2c], ebx
je 0x1001c722
mov edx, edi
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x40], 3
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], 0xe32883e7
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xfffffff3
jl 0x1001c9e4
push 9
pop esi
mov dword [ebp - 8], 5
mov dword [ebp - 0xc], 0x8b88ead4
mov dword [ebp - 0xc], ebx
jmp 0x1001c77a
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x90], 0xfffffff8
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x1001c769
mov eax, dword [ebp - 8]
xor ecx, ecx
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 8]
cmp eax, 0x6bc59458
mov eax, dword [ebp - 0x1c]
setl cl
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 8]
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 8]
mov eax, dword [ebp - 8]
neg edx
sbb edx, edx
neg edx
neg edx
sub eax, edx
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x10]
jne 0x1001c7da
mov eax, ebx
cmp dword [ebp - 0xc], ebx
je 0x1001c7dc
mov eax, edi
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1c], eax
jne 0x1001c871
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xc], 0x93a78091
mov dword [ebp - 0x10c], ebx
cmp dword [ebp - 0xc], ebx
je 0x1001c822
mov eax, edi
cmp dword [ebp - 0x10], ebx
jne 0x1001c824
mov eax, ebx
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 4]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x90]
push 0xfffffffffffffffa
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0xc]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setge dl
xor ecx, ecx
cmp edx, eax
pop eax
setg cl
xor edx, edx
cmp ecx, 0x7f595c98
setl dl
sub eax, edx
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0xc], eax
jmp 0x1001c956
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x34], 0xf9805026
cmp dword [ebp - 0x14], edi
jne 0x1001c88e
mov edx, edi
cmp dword [ebp - 0x8c], ebx
jne 0x1001c890
mov edx, ebx
mov eax, dword [ebp - 8]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x8c], ecx
mov eax, dword [ebp - 0x10]
imul eax, ecx
xor ecx, ecx
cmp eax, 0x97e7
setg cl
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x20], 3
cmp dword [ebp - 0x20], ebx
jl 0x1001c956
mov dword [ebp - 0xc], 0x36b0
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x8c]
neg ecx
sbb ecx, ecx
neg ecx
sub eax, ecx
xor ecx, ecx
cmp eax, 0x5540566f
mov eax, dword [ebp - 0x2c]
setne cl
add eax, ecx
jne 0x1001c8ef
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x64]
xor ecx, ecx
cmp eax, 0xbd8e
mov eax, dword [ebp - 0xc]
setne cl
xor edx, edx
add ecx, 0xc112
cmp ecx, eax
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
setl dl
sub ecx, edx
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setge dl
mov dword [ebp + eax*4 - 0x90], edx
cmp edx, 0xfffd
je 0x1001c93b
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x90], ebx
mov eax, edi
jne 0x1001c93d
mov eax, ebx
push 0x764e
mov dword [ebp - 0xc], eax
push ebx
call fcn.1001d183
dec dword [ebp - 0x20]
pop ecx
pop ecx
jns 0x1001c8c3
mov dword [ebp - 0x14], ebx
jmp 0x1001c9cf
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0xfc], esi
mov dword [ebp - 0xf8], esi
mov dword [ebp - 0xf4], esi
mov dword [ebp - 0xf0], esi
cmp dword [ebp - 0x90], ebx
je 0x1001c98e
mov ecx, dword [ebp - 0xc]
mov edx, edi
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x64], ecx
test ecx, ecx
jne 0x1001c990
mov edx, ebx
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x84]
cmp eax, 0x7910a939
setge cl
imul ecx, edx
cmp dword [ebp - 0xc], edi
sbb eax, eax
inc eax
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xf0], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001c9cc
push ebx
call fcn.1001e66b
pop ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x1001c95b
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff3
jge 0x1001c756
mov esi, dword [ebp - 0x28]
mov al, byte [esi]
cmp al, 0x30
jl 0x1001ccca
cmp al, 0x39
jg 0x1001ccca
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], 0xfffffff8
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], 0xededc87a
mov dword [ebp - 0x34], 8
push 3
mov dword [ebp - 0x28], 0x344157f0
mov dword [ebp - 8], ebx
pop edi
jmp 0x1001ca38
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x74], 0xa6f
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x1001ca2a
mov dword [ebp - 8], ebx
jmp 0x1001ca50
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x80], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x1001ca42
mov dword [ebp - 8], ebx
jmp 0x1001ca68
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x5c], 0xfff8
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x1001ca5a
cmp dword [ebp - 0x20], ebx
je 0x1001cafc
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
cmp dword [ebp - 4], eax
jl 0x1001ca89
cmp dword [ebp - 4], ebx
jne 0x1001ca90
cmp dword [ebp - 0x74], ebx
jne 0x1001ca90
mov ecx, ebx
mov eax, dword [ebp - 4]
xor edx, edx
imul eax, ecx
imul eax, eax, 0xa40f
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x74]
imul ecx, eax
mov eax, dword [ebp - 0x74]
cmp ecx, eax
mov eax, dword [ebp - 0x74]
setl dl
sub edx, 5
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, eax
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 4]
cmp edx, eax
mov eax, dword [ebp - 0x74]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 4]
setge dl
imul eax, edx
cmp dword [ebp - 0x20], eax
jl 0x1001caed
cmp dword [ebp - 0x74], ebx
jne 0x1001caed
xor ecx, ecx
mov eax, ebx
inc ecx
jmp 0x1001caf2
xor ecx, ecx
inc ecx
mov eax, ecx
mov dword [ebp - 0x20], eax
mov eax, ecx
cmp dword [ebp - 0x20], ebx
jne 0x1001cafe
mov eax, ebx
mov dword [ebp - 0xc], eax
inc dword [ebp - 0x14]
je 0x1001cc04
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0xc]
test eax, eax
jne 0x1001cb21
mov eax, dword [ebp - 0x5c]
dec dword [ebp - 0x5c]
test eax, eax
mov eax, ebx
je 0x1001cb23
mov eax, ecx
cmp dword [ebp - 4], eax
jne 0x1001cc04
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0x57b790eb
mov dword [ebp - 0x24], 0x4d024bfc
mov dword [ebp - 0x24], 0x759719bd
mov dword [ebp - 8], ebx
jmp 0x1001cb57
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x3c], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x1001cb4d
mov dword [ebp - 8], ebx
jmp 0x1001cb72
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x174], 8
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x1001cb61
mov eax, dword [ebp - 0x74]
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x174]
cmp eax, ecx
setle dl
xor eax, eax
test edx, edx
sets al
xor edx, edx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setge dl
mov dword [ebp - 0x24], edx
xor edx, edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xc]
cmp eax, ecx
setl dl
cmp edx, dword [ebp - 0x24]
jle 0x1001cbd4
cmp dword [ebp - 0x20], ebx
jne 0x1001cbd4
xor edi, edi
mov ecx, ebx
inc edi
jmp 0x1001cbd9
xor edi, edi
inc edi
mov ecx, edi
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x3c]
add eax, ecx
imul edx, eax
xor ecx, ecx
mov eax, dword [ebp - 4]
cmp edx, eax
setne cl
cmp ecx, 0xfffffff9
jb 0x1001cbfa
mov eax, edi
cmp dword [ebp - 0x3c], ebx
jne 0x1001cbfc
mov eax, ebx
mov dword [ebp - 0x24], eax
jmp 0x1001ccab
mov dword [ebp - 0xc], ebx
jmp 0x1001cc16
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xd4], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x1001cc09
mov ecx, dword [ebp - 0xd4]
xor edx, edx
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setge dl
mov dword [ebp - 0x20], edx
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], 0xffffffe6
jg 0x1001ccae
xor edi, edi
mov dword [ebp - 0xc], ebx
jmp 0x1001cc4f
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xec], 0x149c
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x1001cc3e
mov dword [ebp - 0x14], ebx
jmp 0x1001cc9c
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x80], ebx
je 0x1001cc75
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp ecx, eax
lea ecx, [edi + 1]
sbb eax, eax
neg eax
cmp eax, 0xfffffff7
jne 0x1001cc77
mov ecx, ebx
mov eax, dword [ebp - 0xe8]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0xe8]
setne dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x24]
cmp eax, edx
setl cl
mov dword [ebp - 0xc], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xa
jl 0x1001cc5a
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffe6
jle 0x1001cc39
push 3
pop edi
mov edx, dword [ebp - 0x58]
movsx eax, byte [esi]
mov ebx, dword [ebp - 0x38]
imul ecx, dword [edx], 0xa
add ecx, 0xffffffd0
add eax, ecx
inc esi
mov dword [edx], eax
mov dword [ebp - 0x28], esi
jmp 0x1001c643
mov dword [ebp - 8], 0x90f9
push 2
mov dword [ebp - 4], 0xe022a5bc
mov dword [ebp - 8], ebx
pop esi
jmp 0x1001ccee
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x54], 0xbea12209
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x1001cce0
mov dword [ebp - 8], ebx
jmp 0x1001cd09
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x168], 0xef3c
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x1001ccf8
mov eax, dword [ebp - 0x50]
xor ecx, ecx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
cmp eax, edi
push 9
setg cl
xor edx, edx
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x50]
cmp eax, ecx
mov ecx, dword [ebp - 0x50]
setg dl
pop eax
cmp eax, edx
sbb eax, eax
xor edx, edx
inc eax
sub ecx, eax
mov eax, dword [ebp - 4]
cmp ecx, eax
setl dl
xor eax, eax
test edx, edx
mov dword [ebp - 0x54], edx
sete al
sub eax, dword [ebp - 4]
add eax, esi
cmp eax, 0xfffffffc
je 0x1001cd7b
mov dword [ebp - 4], 0xffffffe7
jmp 0x1001cd70
push ebx
call fcn.1001e6c6
inc dword [ebp - 4]
pop ecx
cmp dword [ebp - 4], 0x32
je 0x1001cd66
jmp 0x1001ce18
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 8], ebx
jmp 0x1001cd95
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x54], 0xe7b1b0ca
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x1001cd87
push 7
pop eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], eax
jl 0x1001ce18
mov dword [ebp - 0x38], 0xfffffff9
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x14], eax
mov dword [ebp - 8], 0xfffffffc
jmp 0x1001ce09
mov dword [ebp - 0x28], edi
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setle dl
cmp edx, 0xd2570d97
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setne cl
cmp ecx, dword [ebp - 0x38]
jg 0x1001cdea
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
cmp eax, edi
setl cl
mov dword [ebp - 0x50], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jle 0x1001cdbe
dec dword [ebp - 4]
cmp dword [ebp - 4], 7
jge 0x1001cda5
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001ce28
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
lea eax, [ebp - 0x58]
push ebx
push eax
call fcn.1001e355
pop ecx
mov dword [ebp - 0x38], 0xffffffff
mov eax, 0x5881f6c9
mov dword [ebp - 0x1c], ebx
pop ecx
push 9
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x34], 0xabb25a59
mov dword [ebp - 0xc], ebx
jmp 0x1001ce81
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xd0], edi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x1001ce74
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x38], 0xfffffff7
mov dword [ebp - 0x40], 0x8ee08a9c
mov dword [ebp - 0x1c], ebx
jmp 0x1001cf80
mov dword [ebp - 0x14], 0xfffffff6
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x20], ebx
jmp 0x1001cf07
mov dword [ebp - 0x38], 0xb47d
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0xd0], ebx
je 0x1001cef4
mov dword [ebp - 0x38], edi
xor edx, edx
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], ebx
mov eax, dword [ebp - 0x10]
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x38], ecx
jmp 0x1001cf01
push 0x15a2
push ebx
call fcn.1001e04d
pop ecx
pop ecx
inc dword [ebp - 0x20]
push 9
pop ecx
cmp dword [ebp - 0x20], esi
jle 0x1001ceb6
mov dword [ebp - 0x14], ebx
jmp 0x1001cf75
mov dword [ebp - 0x38], 7
mov eax, dword [ebp - 0x14]
add eax, 0x96dc
sub eax, dword [ebp - 0x40]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xd0]
cmp eax, dword [ebp - 0x10]
jne 0x1001cf4a
mov eax, dword [ebp - 0x28]
mov esi, edi
cmp dword [ebp - 0x40], ebx
jne 0x1001cf4c
mov esi, ebx
mov eax, dword [ebp - 0x1c]
xor edx, edx
push 2
mov ecx, dword [ebp + eax*4 - 0xd0]
mov eax, dword [ebp - 0x20]
cmp esi, eax
mov eax, dword [ebp - 0x28]
sete dl
sub edx, ecx
xor ecx, ecx
cmp edx, eax
pop esi
setge cl
mov dword [ebp - 0x38], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jle 0x1001cf11
inc dword [ebp - 0x1c]
push 9
pop ecx
cmp dword [ebp - 0x1c], esi
jle 0x1001cea3
mov dword [ebp - 0x20], 0xd0a5
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xd0]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x34], eax
jmp 0x1001c246
xor edx, edx
mov dword [ebp - 4], edx
mov dword [ebp - 0xc], edx
jmp 0x1001cfc2
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x11c], 0x29ed
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x1001cfb1
push 0x13
xor ebx, ebx
mov dword [ebp - 4], 0xffffffef
pop ecx
inc ebx
cmp dword [ebp - 4], ecx
jle 0x1001d04a
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], 0x18
jmp 0x1001d03f
mov dword [ebp - 0x14], 0x80849f84
mov dword [ebp - 0x14], edx
jmp 0x1001d037
mov dword [ebp - 0x10], 0xc3938dd4
mov dword [ebp - 0x38], 5
mov dword [ebp - 0xc], edx
jmp 0x1001d015
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x17c], 4
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x1001d004
cmp dword [ebp - 0x10], edx
jne 0x1001d03c
mov dword [ebp - 0x10], edx
jmp 0x1001d02f
mov dword [ebp - 0x38], 0x7213ec75
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x1001d025
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jg 0x1001cff1
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xe
jne 0x1001cfe5
inc dword [ebp - 4]
jmp 0x1001cfd4
mov dword [ebp - 4], edx
jmp 0x1001d080
mov dword [ebp - 0x10], 0x515466bc
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x11c], edx
jne 0x1001d086
mov dword [ebp - 0x10], edx
jmp 0x1001d078
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x11c], 0x7e3b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1001d067
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jle 0x1001d04f
mov dword [ebp - 4], edx
mov dword [ebp - 0x10], 0xfffb
mov dword [ebp - 0x24], 0x748bbe26
mov dword [ebp - 0xc], edx
jmp 0x1001d0ad
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xac], 0x2fd41e55
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x1001d09c
mov dword [ebp - 4], edx
jmp 0x1001d0c8
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xac], 0x20398070
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x1001d0b7
cmp dword [ebp - 0xac], edx
jne 0x1001d107
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xac]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add eax, ecx
jne 0x1001d107
mov ecx, edx
cmp dword [ebp - 4], edx
je 0x1001d109
mov ecx, ebx
neg ecx
xor eax, eax
cmp ecx, 0xffffffff
setle al
add eax, dword [ebp - 0x10]
je 0x1001d11b
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xa8], edx
xor eax, eax
mov ecx, dword [ebp - 0x24]
cmp ecx, 8
mov ecx, dword [ebp - 4]
setge al
xor edx, edx
cmp ecx, eax
mov al, bl
setle dl
mov dword [ebp - 4], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret