Function at 0x1000d105
Capabilities:
Allocate thread local storage
Delete file
Encode data using xor
Encrypt data using speck
Get common file path
Get disk information
Get file size
Get graphical window text
Query environment variable
Query or enumerate registry value

Disassembly:
mov eax, 0x10066f55
call fcn.100668e8
sub esp, 0x930
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor edi, edi
mov dword [ebp - 0x3c], 7
inc edi
push 3
mov dword [ebp - 0x48], edi
pop esi
mov dword [ebp - 0x6c], ecx
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x28], 0xab3921de
mov dword [ebp - 0x20], 0x9507
mov dword [ebp - 0x50], 0xffffffff
push esi
mov byte [ebp - 0x74], dl
call fcn.10019f2a
xor ebx, ebx
mov dword [ebp - 0x24], ebx
jmp 0x1000d168
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000d159
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
setne dl
mov dword [ebp - 0x50], edx
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x50]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x10c]
setne dl
mov dword [eax], edx
cmp dword [ebp - 0x3c], edx
jl 0x1000d40f
mov dword [ebp - 0x60], 0xae07ea4c
mov dword [ebp - 0x68], 0xffffffff
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0x18
jg 0x1000d41f
push 6
pop esi
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x40], 0x4b7c80bf
mov dword [ebp - 0x54], 0xd3f7cc82
mov dword [ebp - 0x3c], ebx
jmp 0x1000d3f6
mov dword [ebp - 0x18], 0x1d4c3f1
mov dword [ebp - 0x1c], 0x5d7d231d
mov dword [ebp - 0x5c], ebx
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
je 0x1000d33c
mov dword [ebp - 0x34], 0xe526954e
mov dword [ebp - 0x4c], 0xbb265d63
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x44], 0xd9cc1323
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 2
jg 0x1000d3a1
mov esi, dword [ebp - 0x10c]
mov dword [ebp - 0x58], 0xadaf8d98
mov dword [ebp - 0x50], ebx
cmp dword [esi + 8], ebx
je 0x1000d2fc
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0x5e0e
mov eax, dword [ebp - 0x4c]
setle dl
xor ecx, ecx
cmp eax, edx
setl cl
xor edx, edx
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setle dl
xor eax, eax
cmp edx, 0xffff
mov edx, dword [ebp - 0x34]
setne al
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x18]
cmp edx, eax
setge cl
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, 0xcc68
setg cl
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], ebx
jne 0x1000d2e9
mov edx, ebx
cmp dword [ebp - 0x4c], ebx
je 0x1000d2eb
mov edx, edi
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp edx, eax
mov edx, edi
setl cl
add ecx, dword [ebp - 0x58]
jne 0x1000d2fe
mov edx, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x5c], ecx
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], edx
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
cmp edx, eax
setne cl
mov dword [ebp - 0x68], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x1000d25f
push 6
pop esi
jmp 0x1000d3a1
mov dword [ebp - 0x34], 0x8dbec8b2
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x68]
cmp dword [eax], 7
sbb eax, eax
xor edx, edx
inc eax
add ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x5c]
setge dl
sub edx, 0xfffffff6
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setl dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x5c], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x60], ebx
je 0x1000d3bb
cmp dword [ebp - 0x60], 0x225765c9
jle 0x1000d3b7
cmp dword [ebp - 0x40], ebx
je 0x1000d3bb
mov edx, edi
jmp 0x1000d3bd
mov edx, ebx
mov eax, dword [ebp - 0x68]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, esi
setne cl
xor eax, eax
cmp ecx, edx
setge al
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x50], eax
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0x30
jle 0x1000d214
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x18
jle 0x1000d1f7
jmp 0x1000d41f
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x1000d41f
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
lea ecx, [ebp - 0x10c]
call fcn.10019fac
mov dword [ebp - 0x54], 0x4d17
cmp dword [ebp - 0x54], 0x4db0
jle 0x1000d495
push 0x1d8d
push ebx
push ebx
push 0xf5c
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x884]
cdq
push edx
push eax
call fcn.1000d08a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000d46e
mov eax, dword [eax]
push eax
call fcn.10051966
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x884]
call fcn.1001a37a
inc esi
cmp esi, 0x6773
jl 0x1000d450
inc edi
cmp edi, 0x18ac
jl 0x1000d44e
mov dword [ebp - 0x34], 0x28ce
cmp dword [ebp - 0x34], 0x2ae8
jle 0x1000d4dc
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
lea eax, [esi + edi]
mov ecx, 0x10610418
xor eax, ebx
cdq
push edx
push eax
call fcn.10019cf9
inc ebx
cmp ebx, 0x16ef
jl 0x1000d4ac
inc esi
push 0
pop ebx
cmp esi, 0x318e
jl 0x1000d4a9
inc edi
cmp edi, 0x36db
jl 0x1000d4a7
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x34], 0x27e8
jge 0x1000d4f7
mov edx, 0x10007690
mov ecx, 0x10610418
call fcn.1001c204
or dword [ebp - 4], 0xffffffff
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], 0x7e434392
mov dword [ebp - 0x30], 0x26fbd10c
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x34], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffd
push 3
sbb eax, eax
neg eax
sub eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
pop esi
cmp dword [ebp - 0x1c], eax
je 0x1000d561
mov eax, edi
cmp dword [ebp - 0x20], ebx
jne 0x1000d563
mov eax, ebx
cmp eax, dword [ebp - 0x20]
je 0x1000d56b
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
push esi
setl cl
cmp ecx, edi
lea ecx, [ebp - 0x118]
sbb eax, eax
neg eax
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x34]
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x28], 0xab3921de
mov dword [ebp - 0x20], 0x9507
mov dword [ebp - 0x50], 0xffffffff
call fcn.10019f2a
mov dword [ebp - 0x24], ebx
jmp 0x1000d5f8
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x118]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000d5e9
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
setne dl
mov dword [ebp - 0x50], edx
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x50]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x118]
setne dl
mov dword [eax], edx
cmp dword [ebp - 0x3c], edx
jl 0x1000d89d
mov dword [ebp - 0x60], 0xae07ea4c
mov dword [ebp - 0x68], 0xffffffff
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0x18
jg 0x1000d8ae
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x40], 0x4b7c80bf
mov dword [ebp - 0x38], 0xd3f7cc82
mov dword [ebp - 0x3c], ebx
jmp 0x1000d881
mov dword [ebp - 0x18], 0x1d4c3f1
mov dword [ebp - 0x1c], 0x5d7d231d
mov dword [ebp - 0x5c], ebx
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
je 0x1000d7c6
mov dword [ebp - 0x34], 0xe526954e
mov dword [ebp - 0x4c], 0xbb265d63
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x44], 0xd9cc1323
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 2
jg 0x1000d82b
mov esi, dword [ebp - 0x118]
mov dword [ebp - 0x58], 0xadaf8d98
mov dword [ebp - 0x50], ebx
cmp dword [esi + 8], ebx
je 0x1000d789
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0x5e0e
mov eax, dword [ebp - 0x4c]
setle dl
xor ecx, ecx
cmp eax, edx
setl cl
xor edx, edx
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setle dl
xor eax, eax
cmp edx, 0xffff
mov edx, dword [ebp - 0x34]
setne al
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x18]
cmp edx, eax
setge cl
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, 0xcc68
setg cl
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], ebx
jne 0x1000d776
mov edx, ebx
cmp dword [ebp - 0x4c], ebx
je 0x1000d778
mov edx, edi
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp edx, eax
mov edx, edi
setl cl
add ecx, dword [ebp - 0x58]
jne 0x1000d78b
mov edx, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x5c], ecx
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x118]
mov dword [eax + ecx*4], edx
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
cmp edx, eax
setne cl
mov dword [ebp - 0x68], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x1000d6ec
jmp 0x1000d82b
mov dword [ebp - 0x34], 0x8dbec8b2
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x118]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x68]
cmp dword [eax], 7
sbb eax, eax
xor edx, edx
inc eax
add ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x5c]
setge dl
sub edx, 0xfffffff6
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setl dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x5c], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x60], ebx
je 0x1000d845
cmp dword [ebp - 0x60], 0x225765c9
jle 0x1000d841
cmp dword [ebp - 0x40], ebx
je 0x1000d845
mov edx, edi
jmp 0x1000d847
mov edx, ebx
mov eax, dword [ebp - 0x68]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, 6
setne cl
xor eax, eax
cmp ecx, edx
setge al
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x50], eax
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0x30
jle 0x1000d6a1
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x18
jle 0x1000d684
push 3
pop esi
jmp 0x1000d8ae
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000d8ae
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
lea ecx, [ebp - 0x118]
call fcn.10019fac
cmp dword [ebp - 0x54], 0x4a61
jge 0x1000d8cd
push 0x10007670
call fcn.10051966
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0x50ba1bf2
mov dword [ebp - 0x24], ebx
jmp 0x1000d8f1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x100], 0xfffffffd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1000d8e0
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], ebx
jl 0x1000d9b1
push esi
lea ecx, [ebp - 0x390]
call fcn.10019f2a
mov dword [ebp - 0x24], ebx
jmp 0x1000d927
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x390]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000d914
mov dword [ebp - 0x2c], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov edx, 0x70669599
mov eax, dword [ebp + eax*4 - 0x100]
cmp eax, 0x12af048
mov eax, dword [ebp - 0x1c]
sete cl
sub edx, ecx
imul edx, dword [ebp + eax*4 - 0x100]
mov eax, dword [ebp - 0x1c]
imul ecx, edx, 3
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle dl
sub edx, dword [ebp + eax*4 - 0x100]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
inc edx
mov ecx, dword [ebp + eax*4 - 0x100]
mov eax, dword [ebp - 0x1c]
add ecx, 0x86a1283a
add ecx, edx
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x100]
cmp ecx, eax
mov eax, dword [ebp - 0x390]
lea ecx, [ebp - 0x390]
setle dl
mov dword [eax + 8], edx
call fcn.10019fac
dec dword [ebp - 0x1c]
jns 0x1000d903
mov dword [ebp - 0x20], 7
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x18], ebx
push edi
call fcn.10019f2a
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x378]
mov dword [ebp - 0x24], 0xa6d0811
push esi
call fcn.10019f2a
mov dword [ebp - 0x58], 0xf7935db5
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1000da0d
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x154]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1000d9fa
mov dword [ebp - 0x1c], ebx
jmp 0x1000da2a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x378]
mov dword [eax + ecx*4], 0xa77b69c9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1000da17
mov eax, ebx
cmp dword [ebp - 0x20], ebx
je 0x1000da38
mov eax, edi
neg eax
jne 0x1000daaf
mov eax, dword [ebp - 0x154]
mov eax, dword [eax]
add dword [ebp - 0x18], eax
jne 0x1000da56
mov eax, dword [ebp - 0x154]
cmp dword [eax], ebx
jne 0x1000da56
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], ebx
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x154]
mov esi, dword [ebp - 0x24]
sub ecx, dword [eax]
neg ecx
sbb ecx, ecx
inc ecx
imul esi, ecx
sub esi, dword [ebp - 0x20]
neg esi
sbb esi, esi
sub esi, 0xfffffffb
add esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
neg esi
sbb esi, esi
xor edx, edx
add esi, 0xb5d0
cmp esi, eax
mov eax, dword [ebp - 0x154]
setg dl
xor ecx, ecx
add edx, dword [eax]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setle cl
imul ecx, dword [ebp - 0x20]
test ecx, ecx
mov ecx, ebx
je 0x1000dab1
mov ecx, edi
mov eax, dword [ebp - 0x378]
mov dword [eax], ecx
test ecx, ecx
jne 0x1000dac4
mov eax, ebx
cmp dword [ebp - 0x40], ebx
je 0x1000dac6
mov eax, edi
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0x378]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
imul eax, eax, 0x505c
mov dword [ebp - 0x18], eax
call fcn.10019fac
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x154]
call fcn.10019fac
mov dword [ebp - 0x3c], 7
lea ecx, [ebp - 0x328]
push 4
call fcn.10019f2a
mov dword [ebp - 4], 5
mov dword [ebp - 0x30], 0xeb32a831
mov dword [ebp - 0x24], ebx
jmp 0x1000db45
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x328]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1000db36
mov eax, dword [ebp - 0x328]
add eax, 4
mov dword [eax], ebx
cmp dword [eax], 7
jg 0x1000dc5b
mov dword [ebp - 0x24], 0x8f8256a9
mov dword [ebp - 0x58], 0x2d17
cmp dword [ebp - 0x58], 0x2f00
jle 0x1000dbba
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov eax, edi
mov edi, 0x5cea
cdq
idiv esi
mov ebx, edx
mov eax, ebx
mov ecx, 0x10610418
cdq
push edx
push eax
call fcn.10019cf9
dec ebx
dec edi
jne 0x1000db89
mov edi, dword [ebp - 0x34]
inc esi
cmp esi, 0x520e
jl 0x1000db7d
inc edi
mov dword [ebp - 0x34], edi
push 0
pop ebx
cmp edi, 0x16c4
jl 0x1000db7b
xor edi, edi
inc edi
push 6
mov dword [ebp - 0x30], 0xf7d65121
pop eax
mov byte [ebp - 4], al
cmp dword [ebp - 0x58], 0x2a46
jge 0x1000dc03
mov edx, 0x1000770c
mov ecx, 0x10610418
call fcn.1001c204
jmp 0x1000dc00
push 6
pop eax
push 9
pop ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0x24], ecx
jmp 0x1000dc1b
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x34]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
je 0x1000dc12
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000dc4b
push ebx
push 0x96b
push ebx
push ebx
push 0x144
push 0x2a6
push 0x1580
push 0x25eb
call dword [sym.imp.GDI32.dll_ExtTextOutA]
mov eax, dword [ebp - 0x328]
add eax, 4
inc dword [eax]
jmp 0x1000db56
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000dc70
push ebx
push 0x47c
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x328]
call fcn.10019fac
movdqa xmm0, xmmword [0x1000bc50]
lea ecx, [ebp - 0x68c]
push ecx
lea eax, [ebp - 0x67c]
mov dword [ebp - 0x24], edi
push eax
push ecx
lea ecx, [ebp - 0x4ec]
movdqu xmmword [ebp - 0x68c], xmm0
call fcn.10019f86
mov dword [ebp - 4], 8
mov dword [ebp - 0x1c], 0x184c506d
mov dword [ebp - 0x18], 0x11b9c6fe
mov dword [ebp - 0x34], 0xfffffffa
push 3
mov dword [ebp - 0x30], ebx
pop esi
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x1000dd97
push edi
lea ecx, [ebp - 0x598]
call fcn.10019f2a
mov dword [ebp - 0x28], ebx
jmp 0x1000dcfc
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x604], 0xfffffff6
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x1000dceb
mov dword [ebp - 0x28], ebx
jmp 0x1000dd17
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x354], 0x74adf298
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1000dd06
mov dword [ebp - 0x28], ebx
jmp 0x1000dd31
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x598]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1000dd22
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4ec]
cmp dword [eax + ecx*4], ebx
jne 0x1000dd68
mov eax, dword [ebp - 0x354]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x4ec]
mov eax, dword [ecx + 8]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x354]
mov eax, dword [ebp - 0x604]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x598]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x604], eax
call fcn.10019fac
dec dword [ebp - 0x1c]
jns 0x1000dcda
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4ec]
call fcn.10019fac
mov dword [ebp - 0x60], 0xab3921de
mov dword [ebp - 0x1c], 0xfffffff9
mov dword [ebp - 0x24], ebx
jmp 0x1000ddca
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x738], 0xfffb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000ddb9
mov dword [ebp - 0x1c], ebx
jmp 0x1000dde3
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x738], ebx
jne 0x1000dde9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x1000ddd4
mov dword [ebp - 0x1c], 0x8fc558ba
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x38], 0x9507
mov dword [ebp - 0x5c], 0xffffffff
push esi
call fcn.10019f2a
push 9
pop edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x30], ebx
push 6
pop eax
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x24], ebx
jmp 0x1000de55
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x93c], 0x5db34e6d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1000de44
inc dword [ebp - 0x360]
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x34], 0xc345fe46
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], 0xf3c34eea
push 2
call fcn.10019f2a
lea ecx, [ebp - 0x69c]
mov byte [ebp - 4], 0xa
movdqa xmm0, xmmword [0x1000bc60]
lea eax, [ebp - 0x68c]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x13c]
movdqu xmmword [ebp - 0x69c], xmm0
call fcn.10019f86
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x54], 0x51b6
cmp dword [ebp - 0x54], 0x5564
jle 0x1000df2d
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x34], 0x3d0f
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x7c4]
cdq
push edx
push eax
call fcn.1000d08a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000defa
mov eax, dword [eax]
push eax
call fcn.10051966
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x7c4]
call fcn.1001a37a
dec esi
dec dword [ebp - 0x34]
jne 0x1000dedc
mov esi, dword [ebp - 0x58]
inc esi
mov dword [ebp - 0x58], esi
cmp esi, 0x485c
jl 0x1000ded2
inc edi
cmp edi, 0x484c
jl 0x1000decd
cmp dword [ebp - 0x54], 0x519c
jge 0x1000df41
push 0x1000777c
call fcn.10051966
pop ecx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x50], 0xcc21d2cf
mov dword [ebp - 0x2c], 0x8394
mov dword [ebp - 0x1c], ebx
jmp 0x1000df6e
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1d8]
mov dword [eax + ecx*4], 0x8716
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1000df5b
mov dword [ebp - 0x1c], ebx
jmp 0x1000df8a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x6ac], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1000df79
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x13c]
cmp dword [edi], 0xf86f25db
setne cl
mov dword [eax], ecx
mov esi, dword [edi]
lea eax, [ecx - 0xab56]
xor ecx, ecx
imul eax, dword [edi + 4]
imul edx, eax, 0xe215
mov eax, dword [ebp - 0x28]
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, 8
setle al
xor ecx, ecx
sub eax, esi
imul eax, eax, 9
add eax, esi
cmp eax, 5
setne cl
xor eax, eax
sub ecx, dword [edi + 4]
cmp ecx, esi
setg al
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1d8]
cmp dword [eax], ebx
je 0x1000e1a4
push 3
mov dword [ebp - 0x20], 0xd1a6
lea ecx, [ebp - 0x244]
pop esi
mov dword [ebp - 0x48], 0xb8fba323
mov dword [ebp - 0x34], 0x6c34309e
mov dword [ebp - 0x40], ebx
push esi
call fcn.10019f2a
mov dword [ebp - 0x24], ebx
jmp 0x1000e042
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x244]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000e02f
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
neg edx
mov esi, dword [ebp - 0x13c]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setg cl
imul ecx, dword [esi + 0xc]
test ecx, ecx
je 0x1000e077
mov eax, dword [ebp - 0x13c]
cmp dword [eax], ebx
je 0x1000e077
xor ecx, ecx
inc ecx
jmp 0x1000e079
mov ecx, ebx
mov eax, dword [ebp - 0x20]
sub ecx, eax
jne 0x1000e08a
mov eax, dword [ebp - 0x13c]
cmp dword [eax], ebx
je 0x1000e08d
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, ebx
setle cl
xor ebx, ebx
sub ecx, dword [ebp - 0x20]
cmp ecx, dword [edi + 4]
mov eax, dword [ebp - 0x20]
setg bl
xor edx, edx
cmp ebx, eax
mov dword [esi + 0xc], ebx
mov eax, dword [ebp - 0x6ac]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6ac]
mov eax, dword [ebp - 0x50]
add eax, 2
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x1d8]
setg dl
xor ebx, ebx
cmp dword [eax], edx
jne 0x1000e0f7
cmp dword [ebp - 0x20], ebx
je 0x1000e0f7
xor eax, eax
inc eax
jmp 0x1000e0f9
mov eax, ebx
mov dword [ebp - 0x40], eax
xor ecx, ecx
mov eax, dword [ebp - 0x244]
mov edx, dword [eax]
mov eax, dword [ebp - 0x40]
cmp eax, 0xfefe6b3e
mov eax, dword [ebp - 0x244]
setne cl
add ecx, edx
cmp ecx, 0xffff
sbb ecx, ecx
neg ecx
add ecx, dword [eax + 4]
cmp ecx, edx
jle 0x1000e143
mov dword [ebp - 0x34], 0x4aeca2a4
xor edx, edx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setl dl
mov dword [ebp - 0x34], edx
jmp 0x1000e194
mov dword [ebp - 0x40], 4
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], 0xfffffffe
jmp 0x1000e18e
cmp dword [ebp - 0x48], ebx
jne 0x1000e194
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000e18b
push ebx
push 0xf3
push 0x174b
push ebx
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff7
jge 0x1000e16b
lea ecx, [ebp - 0x244]
call fcn.10019fac
jmp 0x1000e261
mov dword [ebp - 0x50], ebx
cmp dword [ebp - 0x50], 3
jg 0x1000e250
mov dword [ebp - 0x34], 0x1fbb
cmp dword [ebp - 0x34], 0x2022
jle 0x1000e21f
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x854]
xor eax, edi
cdq
push edx
push eax
call fcn.1000d08a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000e1e1
mov eax, dword [eax]
push eax
call fcn.10051966
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x854]
call fcn.1001a37a
inc esi
cmp esi, 0x2bc1
jl 0x1000e1c5
inc edi
cmp edi, 0x607d
jl 0x1000e1c3
push ebx
push ebx
push 0x11e5
push 0x1aa7
push 0x1a8d
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp dword [ebp - 0x34], 0x1f01
jge 0x1000e233
push 0x100077b4
call fcn.10051966
pop ecx
mov dword [ebp - 4], 0xb
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x13c]
cmp dword [eax + ecx*4], ebx
jne 0x1000e250
inc dword [ebp - 0x50]
jmp 0x1000e1a7
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000e261
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x13c]
call fcn.10019fac
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 9
call fcn.10019fac
push 3
mov dword [ebp - 0x24], ebx
pop esi
jmp 0x1000e292
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x124]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000e283
mov dword [ebp - 0x20], 6
lea ecx, [ebp - 0x1f8]
push esi
call fcn.10019f2a
push 2
lea ecx, [ebp - 0x3b4]
mov byte [ebp - 4], 0x10
call fcn.10019f2a
mov dword [ebp - 0x34], 0xa72d50fa
mov dword [ebp - 0x2c], 0x6d7d0454
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1000e2e4
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1f8]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1000e2d1
mov dword [ebp - 0x1c], ebx
jmp 0x1000e301
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3b4]
mov dword [eax + ecx*4], 0x4137d6c5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1000e2ee
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setl dl
xor edi, edi
xor ebx, ebx
inc edi
cmp edx, edi
setge bl
xor ecx, ecx
cmp ebx, eax
setg cl
xor ebx, ebx
cmp ecx, dword [ebp - 0x20]
jne 0x1000e337
cmp dword [ebp - 0x20], ebx
je 0x1000e33a
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, 0x866193f
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x1f8]
sub ecx, eax
je 0x1000e356
cmp dword [esi + 4], ebx
je 0x1000e356
mov ebx, edi
mov eax, dword [ebp - 0x3b4]
xor ecx, ecx
cmp ebx, 0x8ca8c98a
sete cl
mov dword [eax + 4], ebx
xor eax, eax
cmp ecx, dword [esi + 4]
setg al
xor ebx, ebx
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
setge bl
sub ebx, dword [esi + 8]
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
imul edx, ebx
cmp eax, edx
setne cl
xor ebx, ebx
cmp ecx, dword [esi + 8]
je 0x1000e3ad
mov eax, dword [ebp - 0x1f8]
cmp dword [eax], ebx
mov eax, edi
jne 0x1000e3af
mov eax, ebx
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x3b4]
call fcn.10019fac
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 9
call fcn.10019fac
mov eax, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
setne dl
mov dword [ebp - 0x5c], edx
xor edx, edx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x5c]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x124]
setne dl
mov dword [eax], edx
cmp dword [ebp - 0x3c], edx
jl 0x1000ff0f
mov dword [ebp - 0x28], 0xf89b546
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x1000e452
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xa8], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1000e445
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
cmp eax, 0x697e780c
setge cl
xor edx, edx
cmp ecx, 0x8d19
setg dl
sub edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setl cl
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], 0xfffffff9
cmp dword [ebp - 0x28], 0x1c
jl 0x1000e66f
mov dword [ebp - 0x58], 0x7bb6
cmp dword [ebp - 0x58], 0x7eac
jle 0x1000e529
mov eax, ebx
mov dword [ebp - 0x40], ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov ecx, edi
mov dword [ebp - 0x2c], eax
mov edi, eax
mov esi, ebx
sar edi, cl
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x7f4]
cdq
push edx
push eax
call fcn.1000d08a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000e4eb
mov eax, dword [eax]
push eax
call fcn.10051966
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x7f4]
call fcn.1001a37a
inc esi
cmp esi, 0x3e4b
jl 0x1000e4cd
mov edi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x4bab
jl 0x1000e4c2
inc eax
mov dword [ebp - 0x40], eax
cmp eax, 0x3295
jl 0x1000e4bd
xor edi, edi
inc edi
mov dword [ebp - 0x60], 0x78e60d74
cmp dword [ebp - 0x58], 0x791b
jge 0x1000e544
push 0x10007820
call fcn.10051966
pop ecx
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x63c]
push 2
mov dword [ebp - 0x40], edi
pop esi
mov dword [ebp - 0x34], 0x8bfa0855
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x58], 0xfffffffb
push esi
call fcn.10019f2a
mov dword [ebp - 0x24], ebx
jmp 0x1000e586
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x63c]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000e573
cmp dword [ebp - 0x60], ebx
jne 0x1000e5a5
mov eax, dword [ebp - 0x28]
mov ecx, edi
mov dword [ebp - 0x60], 0xffffffff
cmp dword [ebp - 0x60], 0x90ef874a
jne 0x1000e5a7
mov ecx, ebx
mov eax, dword [ebp - 0x40]
imul eax, ecx
test eax, eax
jne 0x1000e5b6
cmp dword [ebp - 0x60], ebx
je 0x1000e5bd
mov eax, edi
cmp dword [ebp - 0x28], ebx
jne 0x1000e5bf
mov eax, ebx
cmp eax, dword [ebp - 0x28]
jl 0x1000e5cb
mov eax, ebx
cmp dword [ebp - 0x28], ebx
je 0x1000e5cd
mov eax, edi
cmp eax, 0xffffffff
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa8]
imul eax, eax, 0x79a2
cmp eax, edi
mov dword [ebp - 0xa8], eax
setle cl
xor eax, eax
cmp ecx, edi
setg al
xor edx, edx
imul eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x44]
cmp eax, 0x2544b987
mov eax, dword [ebp - 0x58]
setne dl
xor ecx, ecx
cmp eax, 0x4ce9d061
setne cl
xor eax, eax
cmp edx, esi
setge al
add ecx, eax
add ecx, dword [ebp - 0x58]
mov dword [ebp - 0xa8], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0x431bb57c
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000e656
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x63c]
mov dword [ebp - 0x60], eax
call fcn.10019fac
inc dword [ebp - 0x28]
jmp 0x1000e49e
mov dword [ebp - 0x18], 0xae07ea4c
mov dword [ebp - 0x24], 0xac64a684
mov dword [ebp - 0x24], 0x13
jmp 0x1000e695
mov dword [ebp - 0x2c], 8
cmp dword [ebp - 0x2c], ebx
jne 0x1000e69b
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffffd
je 0x1000e686
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000e6b5
push 0x13f4
push ebx
push 0xd82
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov dword [ebp - 0x34], 0xffffffff
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x68], 0x29be
cmp dword [ebp - 0x68], 0x2ba5
jle 0x1000e72f
mov dword [ebp - 0x54], ebx
mov ecx, ebx
mov dword [ebp - 0x58], 0x53a4
mov dword [ebp - 0x40], ecx
mov esi, ebx
mov edi, ebx
mov ebx, ecx
mov ecx, esi
sar ebx, cl
mov eax, edi
mov ecx, 0x10610418
or eax, ebx
cdq
push edx
push eax
call fcn.10019cf9
inc edi
cmp edi, 0x3ad3
jl 0x1000e6eb
mov ecx, dword [ebp - 0x40]
inc esi
push 0
pop ebx
cmp esi, 0x15b0
jl 0x1000e6e3
mov eax, dword [ebp - 0x54]
add ecx, eax
dec dword [ebp - 0x58]
mov dword [ebp - 0x40], ecx
jne 0x1000e6e1
inc eax
mov dword [ebp - 0x54], eax
cmp eax, 0x35e3
jl 0x1000e6d5
xor edi, edi
inc edi
mov dword [ebp - 0x60], ebx
lea ecx, [ebp - 0x48c]
mov dword [ebp - 0x58], 0x97e780ca
push 2
call fcn.10019f2a
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], ebx
jmp 0x1000e761
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48c]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1000e74e
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000e781
push ebx
push 0x1956
push 0x8f
call dword [sym.imp.USER32.dll_GetScrollInfo]
cmp dword [ebp - 0x60], ebx
je 0x1000e7bb
mov eax, dword [ebp - 0x60]
mov ecx, 0xf8c7b5c6
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xfffffffb
setl cl
sub ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
neg ecx
sbb ecx, ecx
add eax, 0xce1e616b
inc ecx
add ecx, eax
mov eax, dword [ebp - 0x48c]
mov dword [eax], ecx
cmp dword [ebp - 0x60], 0x8acc4b7c
lea ecx, [ebp - 0x48c]
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
call fcn.10019fac
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x68], 0x270a
jge 0x1000e811
mov edx, 0x10007870
mov ecx, 0x10610418
call fcn.1001c204
jmp 0x1000e811
mov dword [ebp - 4], 9
mov dword [ebp - 0x2c], 0x7bec
cmp dword [ebp - 0x2c], 0x7da4
mov dword [ebp - 0x30], 0x100078d8
jle 0x1000e898
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov eax, esi
mov dword [ebp - 0x54], 0x360d
mov dword [ebp - 0x58], eax
mov edi, eax
mov esi, 0x6f3f
mov eax, edi
lea ecx, [ebp - 0x8b4]
cdq
push edx
push eax
call fcn.1000d08a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000e861
mov eax, dword [eax]
push eax
call fcn.10051966
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x8b4]
call fcn.1001a37a
dec edi
dec esi
jne 0x1000e847
mov eax, dword [ebp - 0x58]
dec eax
dec dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
jne 0x1000e840
mov esi, dword [ebp - 0x40]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x53dc
jl 0x1000e834
xor edi, edi
inc edi
mov dword [ebp - 0x60], ebx
cmp dword [ebp - 0x60], 0x18
jg 0x1000fef4
mov dword [ebp - 0x28], 0xffffffff
lea ecx, [ebp - 0x54c]
push 4
call fcn.10019f2a
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x24], ebx
jmp 0x1000e8d5
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x54c]
mov dword [eax + ecx*4], 0x27eed050
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1000e8c2
mov dword [ebp - 0x28], 8
cmp dword [ebp - 0x28], 0xa
jne 0x1000ea45
push 3
pop esi
mov dword [ebp - 0x1c], 0xfffb
lea ecx, [ebp - 0x3cc]
mov dword [ebp - 0x58], 0x9ca4f067
push esi
call fcn.10019f2a
mov dword [ebp - 0x24], ebx
jmp 0x1000e91d
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3cc]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000e90e
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000e941
push ebx
push 0xaee
push 0x1fda
push 0x19e9
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
push 7
pop edx
mov ecx, edx
sub ecx, eax
je 0x1000ea1b
mov dword [ebp - 0x5c], 0x35f19716
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x24], ebx
jmp 0x1000e990
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x8fc], 0x5fef4072
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1000e97f
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
push 6
setge dl
mov dword [ebp - 0x58], edx
xor edx, edx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
pop eax
setl dl
cmp eax, edx
mov eax, dword [ebp - 0x1c]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x1c]
jle 0x1000e9e3
mov ecx, ebx
cmp dword [ebp - 0x5c], ebx
je 0x1000e9e5
mov ecx, edi
mov eax, dword [ebp - 0x5c]
imul eax, ecx
cmp eax, 0xffff
ja 0x1000e9f9
mov ecx, edi
cmp dword [ebp - 0x5c], ebx
jne 0x1000e9fb
mov ecx, ebx
mov eax, 0x5320
sub eax, ecx
je 0x1000ea0b
mov ecx, edi
cmp dword [ebp - 0x28], ebx
jne 0x1000ea0d
mov ecx, ebx
mov eax, dword [ebp - 0x54c]
mov dword [eax + 4], ecx
dec dword [ebp - 0x54]
jmp 0x1000ea20
cmp dword [ebp - 0x28], ebx
jne 0x1000ea3a
lea ecx, [ebp - 0x3cc]
call fcn.10019fac
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xa
je 0x1000e8ef
jmp 0x1000ea45
lea ecx, [ebp - 0x3cc]
call fcn.10019fac
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000ea55
push ebx
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 9
call fcn.10019fac
mov dword [ebp - 0x48], 0xffffffff
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x20], 0x6318
push edi
call fcn.10019f2a
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x44], 0x2a6f944d
mov dword [ebp - 0x1c], ebx
jmp 0x1000eaa7
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1b0]
mov dword [eax + ecx*4], 0xe05dae5a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1000ea94
mov dword [ebp - 0x1c], ebx
jmp 0x1000eabe
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1e0], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1000eab1
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1b0]
imul edx, ecx
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
cmp eax, edx
setle cl
cmp dword [ebp - 0x48], 8
sbb eax, eax
neg eax
cmp ecx, eax
jge 0x1000eb16
cmp dword [ebp - 0x20], ebx
jne 0x1000eb16
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000eba1
push 0x192a
push 0x140c
push 0x125b
call dword [sym.imp.USER32.dll_EnableScrollBar]
jmp 0x1000eba1
mov dword [ebp - 0x40], 0xfffffffa
mov dword [ebp - 0x58], 0x5ecce35a
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x1000eba1
mov eax, dword [ebp - 0x48]
xor ecx, ecx
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x40]
test eax, eax
setg cl
xor ebx, ebx
mov dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1e0], 0x55f9
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x44]
cmp eax, dword [ecx + edx*4]
mov eax, dword [ebp - 0x48]
setle bl
xor ecx, ecx
cmp eax, ebx
setle cl
xor eax, eax
cmp ecx, 0xffffffff
mov ecx, dword [ebp - 0x1b0]
setne al
add eax, dword [ecx + esi*4]
cmp eax, edi
sbb eax, eax
lea eax, [eax*2 - 0x41e3104c]
mov dword [ecx], eax
dec dword [ebp - 0x20]
jns 0x1000eb2c
xor ebx, ebx
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x68], eax
call fcn.10019fac
mov dword [ebp - 0x58], 0x4b7c80bf
mov dword [ebp - 0x5c], 0xffffffff
push 9
mov dword [ebp - 0x4c], 0xf5ed9a92
pop ecx
mov dword [ebp - 0x50], 0x6de0
mov dword [ebp - 0x54], edi
push 3
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x24], ebx
pop esi
jmp 0x1000ebec
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3e4], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000ebdf
mov dword [ebp - 0x5c], ebx
jmp 0x1000ec66
mov dword [ebp - 0x48], 0x70ade216
lea ecx, [ebp - 0x5b0]
mov dword [ebp - 0x64], ebx
push esi
call fcn.10019f2a
mov dword [ebp - 0x24], ebx
jmp 0x1000ec24
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x5b0]
mov dword [eax + ecx*4], 0xba095a97
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000ec11
mov dword [ebp - 0x48], 2
cmp dword [ebp - 0x48], ebx
jl 0x1000ec58
mov dword [ebp - 0x24], ebx
jmp 0x1000ec4b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5f8], 0xfffffffe
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1000ec3a
inc dword [ebp - 0x50]
dec dword [ebp - 0x48]
jns 0x1000ec35
lea ecx, [ebp - 0x5b0]
call fcn.10019fac
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 2
jle 0x1000ebf6
mov eax, dword [ebp - 0x50]
xor edx, edx
inc eax
imul eax, dword [ebp - 0x4c]
cmp eax, 0x487972e7
mov eax, dword [ebp - 0x4c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x50]
setge cl
xor edx, edx
cmp ecx, 0x93d
setne dl
imul eax, dword [ebp - 0x3e4]
mov ecx, dword [ebp - 0x54]
sub eax, edx
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x3dc]
mov eax, dword [ebp - 0x3dc]
neg edx
sbb edx, edx
inc edx
imul ecx, edx, 0xde45
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x50]
setg dl
sub eax, edx
add eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
jle 0x1000ecdf
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp eax, 0xfffffffb
setg cl
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x64], 0xd3f7cc82
mov dword [ebp - 0x20], 0xb26bdde0
mov dword [ebp - 0x48], 0x707e294b
mov dword [ebp - 0x54], 5
mov dword [ebp - 0x44], 0x82ade89b
mov dword [ebp - 0x20], ebx
jmp 0x1000edf8
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 9
jle 0x1000eddc
push esi
lea ecx, [ebp - 0x4a4]
call fcn.10019f2a
mov dword [ebp - 0x44], 0xf8abff5e
mov dword [ebp - 0x24], ebx
jmp 0x1000ed4f
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x4a4]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000ed40
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000ed65
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x4a4]
xor eax, eax
cmp dword [esi + 4], edi
sete al
add eax, 0x3c62a49f
imul eax, dword [esi + 8]
cmp eax, 0xfff7
jne 0x1000ed8d
mov eax, ebx
cmp dword [ebp - 0x1c], ebx
je 0x1000ed8f
mov eax, edi
xor edx, edx
cmp eax, dword [esi + 8]
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0x4015fb26
setge al
xor ecx, ecx
cmp eax, 0x5a60
setge cl
xor eax, eax
cmp ecx, dword [esi + 8]
lea ecx, [ebp - 0x4a4]
setne al
mov dword [ebp - 0x44], eax
call fcn.10019fac
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 9
push 3
pop esi
jg 0x1000ed28
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000edf5
push 0x1f43
push 0xd94
call dword [sym.imp.USER32.dll_GetDlgItem]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe6
jge 0x1000ed18
cmp dword [ebp - 0x20], ebx
jne 0x1000ee48
cmp dword [ebp - 0x48], ebx
je 0x1000ee13
mov eax, dword [ebp - 0x20]
mov ecx, edi
jmp 0x1000ee15
mov ecx, ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], edi
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp - 0x20]
add ecx, 0x4d89bb64
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
neg ecx
sbb ecx, ecx
add ecx, 4
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
mov eax, ebx
je 0x1000ee4a
mov eax, edi
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x3c], 0x30
jg 0x1000feec
push 2
lea ecx, [ebp - 0x2e0]
call fcn.10019f2a
mov dword [ebp - 0x24], ebx
jmp 0x1000ee85
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2e0]
mov dword [eax + ecx*4], 0xac64a684
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1000ee72
mov eax, dword [ebp - 0x2e0]
mov dword [eax], 0xfffffffa
mov dword [ebp - 0x50], 0xaab72b21
mov dword [ebp - 0x50], ebx
jmp 0x1000eeb6
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x2e0]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], edi
jle 0x1000eea3
lea ecx, [ebp - 0x2e0]
call fcn.10019fac
movdqa xmm0, xmmword [0x1000bc60]
lea ecx, [ebp - 0x6ec]
push ecx
lea eax, [ebp - 0x6dc]
mov dword [ebp - 0x68], 0x1d4c3f1
push eax
push ecx
lea ecx, [ebp - 0x614]
movdqu xmmword [ebp - 0x6ec], xmm0
call fcn.10019f86
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0x44], 0xfff9
mov dword [ebp - 0x24], ebx
jmp 0x1000ef1f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1bc], 0x7dfa
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1000ef0e
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1000efd0
mov dword [ebp - 0x54], 0x5af6
cmp dword [ebp - 0x54], 0x5e87
jle 0x1000ef85
mov dword [ebp - 0x40], ebx
mov edi, ebx
mov esi, ebx
mov ebx, dword [ebp - 0x40]
mov ecx, esi
lea eax, [edi + ebx]
shl eax, cl
mov ecx, 0x10610418
cdq
push edx
push eax
call fcn.10019cf9
inc esi
cmp esi, 0x36af
jl 0x1000ef4b
inc edi
push 0
pop ebx
cmp edi, 0x43fa
jl 0x1000ef46
push ebx
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x54], 0x5a3e
jge 0x1000efc9
mov edx, 0x100078fc
mov ecx, 0x10610418
call fcn.1001c204
jmp 0x1000efc9
mov dword [ebp - 4], 0x16
mov esi, dword [ebp - 0x614]
mov dword [esi + 4], ebx
mov eax, dword [esi + 4]
xor ebx, ebx
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], 0x2f144811
mov dword [ebp - 0x54], 0xffffffff
mov eax, dword [ebp + eax*4 - 0x1bc]
test eax, eax
mov eax, dword [ebp - 0x1bc]
mov eax, dword [esi + 4]
setne bl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1bc]
cmp eax, edi
mov eax, dword [esi + 4]
setl cl
imul edx, ecx, 0x531f
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1bc]
cmp eax, ebx
mov eax, dword [esi + 4]
setne cl
xor ebx, ebx
cmp ecx, edx
mov eax, dword [ebp + eax*4 - 0x1bc]
setne bl
xor ecx, ecx
cmp ebx, eax
setle cl
xor ebx, ebx
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x54], eax
jne 0x1000f055
mov ecx, ebx
cmp dword [ebp - 0x40], ebx
je 0x1000f057
mov ecx, edi
mov eax, dword [ebp - 0x40]
add eax, ecx
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x40]
inc dword [esi + 4]
cmp dword [esi + 4], 2
mov dword [ebp - 0x44], eax
jle 0x1000efd9
lea ecx, [ebp - 0x614]
mov byte [ebp - 4], 9
call fcn.10019fac
push 3
pop esi
mov dword [ebp - 0x4c], 0x5d7d231d
lea ecx, [ebp - 0x3fc]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x44], 8
push esi
call fcn.10019f2a
mov dword [ebp - 0x24], ebx
jmp 0x1000f0b5
inc dword [ebp - 0x60]
jmp 0x1000e89b
cmp dword [ebp - 0x2c], 0x7b79
jge 0x100102ff
push dword [ebp - 0x30]
call fcn.10051966
pop ecx
jmp 0x100102ff
push 4
lea ecx, [ebp - 0x130]
call fcn.10019f2a
mov dword [ebp - 0x20], 0x22ba3946
mov dword [ebp - 0x30], 0x5bea
mov dword [ebp - 0x64], 0xcecce005
mov dword [ebp - 0x18], ebx
jmp 0x1000ff46
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x130]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1000ff36
push 3
mov dword [ebp - 0x20], ebx
pop ecx
cmp dword [ebp - 0x20], ecx
jg 0x10010026
mov edi, dword [ebp - 0x130]
xor esi, esi
inc esi
mov dword [ebp - 0x18], ebx
jmp 0x1000ff7a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x5e0], 0x3ed423cb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1000ff69
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x130]
cmp dword [eax + ecx*4], ebx
jne 0x1000ffbc
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x130]
mov eax, dword [ecx + eax*4]
cmp eax, dword [ecx + 4]
setne dl
xor ecx, ecx
imul eax, edx, 0x8625
cmp eax, dword [edi + 8]
setl cl
cmp ecx, dword [edi + 8]
jge 0x1000ffbc
mov esi, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov edx, dword [ebp - 0x130]
cmp esi, dword [edx + eax*4]
setge cl
cmp ecx, 0xffffffff
sbb eax, eax
neg eax
add eax, dword [edx]
cmp eax, dword [edi + 8]
jle 0x1000ffe0
cmp dword [ebp - 0x20], ebx
jne 0x1000ffe3
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
xor esi, esi
mov eax, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x5dc], esi
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x130]
push 3
cmp dword [eax + ecx*4], ebx
pop ecx
setle dl
sub edx, 0xffff
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x5dc], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jle 0x1000ff64
lea ecx, [ebp - 0x130]
call fcn.10019fac
mov byte [ebp - 0x11], bl
mov dword [ebp - 0x44], 0x7d3e
cmp dword [ebp - 0x44], 0x80d1
jle 0x1001006e
mov esi, ebx
mov edi, ebx
mov eax, esi
mov ecx, 0x10610418
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10019cf9
inc edi
cmp edi, 0x5ca
jl 0x10010048
inc esi
cmp esi, 0x7e1a
jl 0x10010046
push 4
lea ecx, [ebp - 0x628]
call fcn.10019f2a
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10010096
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x628]
mov dword [eax + ecx*4], 0xb9b5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10010083
push 3
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x100100ad
mov dword [ebp - 0x2c], ebx
inc dword [ebp - 0x2c]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x100100a4
lea ecx, [ebp - 0x628]
call fcn.10019fac
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x44], 0x7cc9
jge 0x100100d9
mov edx, 0x10007a44
mov ecx, 0x10610418
call fcn.1001c204
xor esi, esi
inc esi
mov dword [ebp - 4], 9
cmp byte [ebp - 0x11], 0
je 0x100102ff
mov dword [ebp - 0x3c], 0xbecba2af
lea ecx, [ebp - 0x1cc]
push edi
call fcn.10019f2a
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x18], ebx
jmp 0x10010140
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1cc]
mov dword [eax + ecx*4], 0xb785aa1e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001012d
cmp dword [ebp - 0x3c], ebx
jbe 0x10010200
mov dword [ebp - 0x18], ebx
jmp 0x10010164
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x198], 0x92f644ac
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10010153
cmp dword [ebp - 0x198], ebx
je 0x10010178
mov eax, dword [ebp - 0x198]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x190]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x198]
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], ebx
jmp 0x100101f6
mov dword [ebp - 0x48], 0x5077045b
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp + eax*4 - 0x198]
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x198], ecx
mov dword [ebp - 0x48], edi
cmp dword [ebp - 0x48], ebx
jl 0x100101f3
mov dword [ebp - 0x18], ebx
jmp 0x100101d4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x208], 0x7245c2f1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100101c3
mov eax, dword [ebp - 0x48]
push 5
pop ecx
mov eax, dword [ebp + eax*4 - 0x198]
sub ecx, eax
mov dword [ebp - 0x208], ecx
dec dword [ebp - 0x48]
jns 0x100101be
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], edi
jle 0x1001019b
jmp 0x100102ec
push 2
pop esi
mov dword [ebp - 0x1c], 0x23758185
lea ecx, [ebp - 0x414]
push esi
call fcn.10019f2a
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x30], 0xf099
mov dword [ebp - 0x64], 0xbb87e338
mov dword [ebp - 0x18], ebx
jmp 0x1001023f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x414]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10010230
dec dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add eax, 0x70a6
cmp eax, 0xd713
mov eax, dword [ebp - 0x1c]
setl cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setl dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1cc]
cmp ecx, dword [eax]
jge 0x10010283
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
mov eax, dword [ebp - 0x1cc]
setge dl
imul edx, dword [eax + 4]
mov eax, dword [ebp - 0x414]
imul ecx, edx, 0xffff0001
xor edx, edx
cmp ecx, dword [eax]
setne dl
mov dword [ebp - 0x2c], edx
xor edx, edx
mov eax, dword [ebp - 0x2c]
sub eax, edi
cmp eax, 8
mov eax, dword [ebp - 0x30]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1cc]
setle cl
xor edx, edx
cmp ecx, esi
setl dl
xor ecx, ecx
cmp edx, dword [eax]
setne cl
mov dword [ebp - 0x64], ecx
lea ecx, [ebp - 0x414]
call fcn.10019fac
lea ecx, [ebp - 0x1cc]
call fcn.10019fac
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
or esi, 0xffffffff
lea ecx, [ebp - 0x124]
mov dword [ebp - 4], esi
call fcn.10019fac
mov dword [ebp - 0x28], esi
lea ecx, [ebp - 0x42c]
push 4
call fcn.10019f2a
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x18], ebx
jmp 0x1001033f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x42c]
mov dword [eax + ecx*4], 0x27eed050
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1001032c
push 3
mov dword [ebp - 0x28], 8
pop edi
jmp 0x10010497
mov dword [ebp - 0x4c], 0xfffb
lea ecx, [ebp - 0x4bc]
mov dword [ebp - 0x2c], 0x9ca4f067
push edi
call fcn.10019f2a
mov dword [ebp - 0x18], ebx
jmp 0x10010382
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4bc]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10010373
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100103a6
push ebx
push 0xaee
push 0x1fda
push 0x19e9
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
push 7
pop edx
mov ecx, edx
sub ecx, eax
je 0x10010484
mov dword [ebp - 0x48], 0x35f19716
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x18], ebx
jmp 0x100103f1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x91c], 0x5fef4072
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100103e0
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
push 6
setge dl
mov dword [ebp - 0x2c], edx
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
pop eax
setl dl
cmp eax, edx
mov eax, dword [ebp - 0x4c]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x4c]
jle 0x10010449
cmp dword [ebp - 0x48], ebx
jne 0x10010449
xor edx, edx
mov ecx, ebx
inc edx
jmp 0x1001044e
xor edx, edx
inc edx
mov ecx, edx
mov eax, dword [ebp - 0x48]
imul eax, ecx
cmp eax, 0xffff
ja 0x10010462
mov ecx, edx
cmp dword [ebp - 0x48], ebx
jne 0x10010464
mov ecx, ebx
mov eax, 0x5320
sub eax, ecx
je 0x10010474
mov ecx, edx
cmp dword [ebp - 0x28], ebx
jne 0x10010476
mov ecx, ebx
mov eax, dword [ebp - 0x42c]
mov dword [eax + 4], ecx
dec dword [ebp - 0x44]
jmp 0x10010489
cmp dword [ebp - 0x28], ebx
jne 0x100104a3
lea ecx, [ebp - 0x4bc]
call fcn.10019fac
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xa
je 0x10010354
jmp 0x100104ae
lea ecx, [ebp - 0x4bc]
call fcn.10019fac
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100104be
push ebx
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
lea ecx, [ebp - 0x42c]
mov dword [ebp - 4], esi
call fcn.10019fac
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], 0x50ba1bf2
mov dword [ebp - 0x18], ebx
jmp 0x100104ec
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf8], 0xfffffffd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100104db
xor esi, esi
inc esi
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x100105af
push edi
lea ecx, [ebp - 0x534]
call fcn.10019f2a
mov dword [ebp - 0x18], ebx
jmp 0x10010525
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x534]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10010512
mov dword [ebp - 0x30], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov edx, 0x70669599
mov eax, dword [ebp + eax*4 - 0xf8]
cmp eax, 0x12af048
mov eax, dword [ebp - 0x1c]
sete cl
sub edx, ecx
imul edx, dword [ebp + eax*4 - 0xf8]
mov eax, dword [ebp - 0x1c]
imul ecx, edx, 3
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle dl
sub edx, dword [ebp + eax*4 - 0xf8]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
inc edx
mov ecx, dword [ebp + eax*4 - 0xf8]
mov eax, dword [ebp - 0x1c]
add ecx, 0x86a1283a
add ecx, edx
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xf8]
cmp ecx, eax
mov eax, dword [ebp - 0x534]
lea ecx, [ebp - 0x534]
setle dl
mov dword [eax + 8], edx
call fcn.10019fac
dec dword [ebp - 0x1c]
jns 0x10010501
mov dword [ebp - 0x54], 0x19ea
cmp dword [ebp - 0x54], 0x1c44
jle 0x1001061f
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x44], ebx
mov esi, ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0x2c], esi
mov edi, esi
mov esi, 0x388b
mov ecx, edi
mov eax, ebx
shl eax, cl
mov ecx, 0x10610418
xor eax, edx
cdq
push edx
push eax
call fcn.10019cf9
mov edx, dword [ebp - 0x18]
dec edi
dec esi
jne 0x100105d6
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x7421
jl 0x100105cf
inc ebx
push 0
mov dword [ebp - 0x44], ebx
cmp ebx, 0x46a1
pop ebx
jl 0x100105c7
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0x108b
jl 0x100105c4
xor esi, esi
inc esi
push 3
pop edi
push edi
lea ecx, [ebp - 0x274]
call fcn.10019f2a
mov dword [ebp - 4], 0x27
lea ecx, [ebp - 0x45c]
mov dword [ebp - 0x64], 0xa0949511
mov dword [ebp - 0x30], esi
push 2
call fcn.10019f2a
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x58], 0x6fe7
cmp dword [ebp - 0x58], 0x700e
jle 0x100106f9
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov eax, ebx
mov dword [ebp - 0x44], ebx
mov edx, ecx
mov edi, ebx
mov ecx, eax
mov dword [ebp - 0x2c], edi
sar edx, cl
mov dword [ebp - 0x30], edx
mov ecx, edi
mov esi, ebx
mov edi, edx
sar edi, cl
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x7ac]
cdq
push edx
push eax
call fcn.1000d08a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100106a2
mov eax, dword [eax]
push eax
call fcn.10051966
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x7ac]
call fcn.1001a37a
inc esi
cmp esi, 0x2287
jl 0x10010684
mov edi, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x553d
jl 0x1001067c
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x44], eax
cmp eax, 0x76bb
jl 0x1001066e
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x47ff
jl 0x10010669
xor esi, esi
push 3
inc esi
pop edi
cmp dword [ebp - 0x58], 0x6e4d
jge 0x1001070d
push 0x10007ac8
call fcn.10051966
pop ecx
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x28], ebx
jmp 0x1001072c
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x274]
mov dword [eax + ecx*4], 0x2e91a049
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x10010719
mov dword [ebp - 0x28], ebx
jmp 0x10010747
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x28c], 0x6411d7fe
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x10010736
mov dword [ebp - 0x28], ebx
jmp 0x10010764
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x45c]
mov dword [eax + ecx*4], 0xd594484f
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10010751
mov edi, dword [ebp - 0x274]
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x70], eax
mov dword [edi + 8], ebx
mov dword [ebp - 0x18], 0xb055
lea ecx, [ebp - 0x4d4]
push 4
call fcn.10019f2a
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x444]
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xffff
push 2
call fcn.10019f2a
mov dword [ebp - 0x2c], 0x76e30f4a
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x1c], ebx
jmp 0x100107d1
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4d4]
mov dword [eax + ecx*4], 0x974edf0e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100107be
mov dword [ebp - 0x1c], ebx
jmp 0x100107ef
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x444]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100107dc
mov eax, dword [ebp - 0x274]
xor edx, edx
mov eax, dword [eax]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x64]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
sub ecx, dword [ebp - 0x18]
inc ecx
jne 0x10010827
mov eax, dword [ebp - 0x284]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4d4]
mov dword [eax + 0xc], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x444]
mov dword [ebp - 0x30], eax
mov esi, dword [edx + 4]
imul eax, esi, 0x7994
cmp eax, dword [edi + 8]
setl cl
xor ebx, ebx
neg ecx
cmp ecx, dword [edx]
mov edx, dword [ebp - 0x70]
setl bl
mov ecx, dword [ebp - 0x18]
sub ebx, dword [edx + 4]
neg ebx
sbb ebx, ebx
xor eax, eax
inc ebx
add ebx, esi
cmp dword [edi + 8], ebx
setl al
imul eax, eax, 0xffff
cmp eax, 0xffff
sbb eax, eax
neg eax
add ecx, eax
xor eax, eax
neg ecx
cmp ecx, dword [edx + 4]
setl al
xor edx, edx
cmp eax, 0x15f8f506
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x444]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
call fcn.10019fac
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x28
call fcn.10019fac
inc dword [edi + 8]
xor esi, esi
inc esi
push 0
pop ebx
cmp dword [edi + 8], esi
jl 0x1001077c
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x100108f8
push 0x1232
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea ecx, [ebp - 0x45c]
call fcn.10019fac
lea ecx, [ebp - 0x274]
call fcn.10019fac
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x54], 0x19d1
jge 0x1001092d
mov edx, 0x10007aa8
mov ecx, 0x10610418
call fcn.1001c204
or dword [ebp - 4], 0xffffffff
push 3
pop edi
mov dword [ebp - 0x28], 0xffffffff
lea ecx, [ebp - 0x474]
push 4
call fcn.10019f2a
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x18], ebx
jmp 0x1001098c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x474]
mov dword [eax + ecx*4], 0x27eed050
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10010979
mov dword [ebp - 0x28], 8
jmp 0x10010add
mov dword [ebp - 0x4c], 0xfffb
lea ecx, [ebp - 0x51c]
mov dword [ebp - 0x2c], 0x9ca4f067
push edi
call fcn.10019f2a
mov dword [ebp - 0x18], ebx
jmp 0x100109cc
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x51c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100109bd
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100109f0
push ebx
push 0xaee
push 0x1fda
push 0x19e9
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
push 7
pop edx
mov ecx, edx
sub ecx, eax
je 0x10010aca
cmp dword [ebp - 0x28], 0xa
je 0x1001099e
jmp 0x10010af4
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10010b04
push ebx
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x474]
call fcn.10019fac
mov dword [ebp - 0x40], 0x71c7bf0b
xor edx, edx
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x58], 0xfffffff6
mov dword [ebp - 0x2c], 0x63abefa0
mov dword [ebp - 0x30], 0x604491d0
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setle dl
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1c], 0xffffffeb
jmp 0x10010bca
mov dword [ebp - 0x68], 0xd44c039e
mov dword [ebp - 0x34], 0x5bd52a28
cmp dword [ebp - 0x1c], ebx
je 0x10010b68
cmp dword [ebp - 0x1c], 7
jl 0x10010b4f
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x34], 0x2c4475ee
mov dword [ebp - 0x58], 0xfffffff8
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10010c01