Function at 0x10025a52
Capabilities:
Identify system language via api

Disassembly:
mov eax, 0x100745c6
call fcn.10073778
sub esp, 0x1fc
mov dword [ebp - 0x18], 0x4d00693e
mov eax, ecx
mov dword [ebp - 0x1c], 0x68bb
push ebx
mov dword [ebp - 0x14], 0xaced
xor ebx, ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, 0x1007a60c
push 9
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x50], eax
pop eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x20], 0x8069d1fe
mov dword [ebp - 0x24], 0xde0d6158
mov byte [ebp - 0x40], dl
xor edx, edx
inc edx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], ebx
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg ecx
mov dword [ebp - 0x38], edi
sbb ecx, ecx
neg ecx
sub ecx, eax
imul ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x10025b02
mov eax, edx
cmp dword [ebp - 0x1c], ebx
jne 0x10025b04
mov eax, ebx
mov ecx, 0xfffe
cmp ecx, eax
sbb eax, eax
neg eax
sub eax, dword [ebp - 0x1c]
je 0x10025d0c
push 3
pop esi
push esi
lea ecx, [ebp - 0x80]
call fcn.100223ce
xor eax, eax
mov dword [ebp - 4], ebx
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], esi
jge 0x10025b54
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
mov dword [eax + ecx*4], 0x8c537847
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10025b3c
xor eax, eax
inc eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 2
jg 0x10025cc3
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x9c]
sub ecx, eax
cmp ecx, 0xa9413e45
mov ecx, dword [ebp - 0x80]
sbb eax, eax
inc eax
imul eax, dword [ecx + edx*4]
xor edx, edx
neg eax
cmp eax, dword [ecx + esi*4]
setg dl
imul edx, dword [ecx + 4]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x34], edx
xor edx, edx
mov esi, dword [ebp - 0x34]
cmp esi, dword [eax + ecx*4]
sete dl
mov dword [ebp - 0x1c], edx
xor edx, edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setl dl
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
sub eax, edx
je 0x10025c7c
mov dword [ebp - 0x4c], 2
mov dword [ebp - 0x1c], 0x67b6
cmp dword [ebp - 0x1c], 0x6ae9
jle 0x10025c22
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1061c7f8
or eax, esi
cdq
push edx
push eax
call fcn.100221af
inc edi
cmp edi, 0x1fe6
jl 0x10025bfc
inc esi
cmp esi, 0x2ec
jl 0x10025bfa
mov edi, dword [ebp - 0x3c]
inc dword [ebp - 0x4c]
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0x645a
jge 0x10025c41
mov edx, 0x10008234
mov ecx, 0x1061c7f8
call fcn.10024b94
mov dword [ebp - 4], ebx
xor eax, eax
inc eax
inc dword [ebp - 0x18]
jmp 0x10025b57
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 2
jg 0x10025c44
mov dword [ebp - 0x34], 0x9363
mov dword [ebp - 0x4c], 0x341a4633
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
cmp dword [eax + ecx*4], ebx
jne 0x10025cab
cmp dword [ebp - 0x9c], 1
jl 0x10025cab
mov edx, ebx
jmp 0x10025cae
xor edx, edx
inc edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp eax, edx
setl cl
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4c], ecx
inc dword [ebp - 0x14]
jmp 0x10025c7f
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax + 4]
add ecx, dword [eax]
mov eax, dword [ebp - 0x24]
imul eax, ecx
add eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
imul eax, eax, 0x53ab
sub ecx, eax
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x80]
or dword [ebp - 4], 0xffffffff
call fcn.10022450
push 3
pop esi
mov eax, dword [edi]
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x18], 0xde9bf9f
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x1c], ebx
jmp 0x10025deb
mov dword [ebp - 0x14], 0x8045
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xfffffff0
jne 0x10025cee
push 3
pop esi
mov dword [ebp - 0x24], 0x87a905be
mov dword [ebp - 0x24], 0xd0122bf4
mov dword [ebp - 0x1c], ebx
jmp 0x10025d43
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x11c], 0x480d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10025d32
cmp dword [ebp - 0x114], ebx
jne 0x10025dc3
mov ecx, dword [ebp - 0x9c]
xor edx, edx
mov eax, dword [ebp - 0x9c]
cmp ecx, eax
mov eax, dword [ebp - 0x11c]
setge dl
add eax, edx
xor edx, edx
imul eax, eax, 0xab57
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0xcd7
setg al
xor edx, edx
imul eax, dword [ebp - 0x4c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setl dl
sub edx, dword [ebp - 0x12c]
neg edx
sbb edx, edx
inc edx
cmp edx, dword [ebp - 0x14]
jle 0x10025dc0
xor edx, edx
mov eax, ebx
inc edx
jmp 0x10025dc5
xor edx, edx
inc edx
mov eax, edx
mov dword [ebp - 0x9c], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff0
je 0x10025d1f
jmp 0x10025cf1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x70], 0x974a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10025ddd
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp eax, edx
setg cl
xor eax, eax
cmp ecx, 0x38884515
setl al
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x10025ef0
mov dword [ebp - 0x38], 0x2570
lea ecx, [ebp - 0x128]
push 4
call fcn.100223ce
xor ecx, ecx
mov dword [ebp - 0x14], ebx
inc ecx
jmp 0x10025e5a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x58], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10025e50
push 4
mov dword [ebp - 0x14], ebx
pop edx
cmp dword [ebp - 0x14], edx
jge 0x10025e85
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0x7f20bab1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10025e6a
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x70], ebx
je 0x10025e98
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x70]
cmp dword [ebp - 0x70], eax
jge 0x10025ebb
mov eax, ebx
cmp dword [ebp - 0x58], ebx
je 0x10025ebd
mov eax, ecx
cmp eax, dword [ebp - 0x38]
jl 0x10025ecd
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x70], ebx
jne 0x10025ecd
mov ecx, ebx
mov dword [ebp - 0x58], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x128]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x128]
call fcn.10022450
dec dword [ebp - 0x18]
jns 0x10025e34
cmp byte [ebp - 0x40], 0
mov eax, dword [ebp + 8]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
je 0x1002603c
cmp dword [ebp - 0x4c], 1
jne 0x1002603c
mov dword [ebp - 0x2c], 0xae9714a0
lea ecx, [ebp - 0x168]
push esi
mov dword [eax + 8], 4
call fcn.100223ce
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x24], 0x57bf5cd5
mov dword [ebp - 0x20], 0x4ddb84c6
mov dword [ebp - 0x1c], 0x9b7d6b59
push 1
call fcn.100223ce
mov dword [ebp - 0x18], ebx
jmp 0x10025f66
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x168]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10025f56
mov dword [ebp - 0x18], ebx
jmp 0x10025f81
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x90], 0x7a6deec5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10025f70
push 4
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x10025fa0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x204], 0xa017779a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10025f8f
xor edx, edx
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x10025fc0
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x150]
mov dword [eax + ecx*4], 0x9e68fc78
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10025fad
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x8c]
neg eax
je 0x10025fdb
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x8c]
cmp eax, 0xec76
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
add ecx, 0xffff6a66
cmp eax, ecx
mov eax, dword [ebp - 0x8c]
setg dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x2c]
cmp edx, eax
setge cl
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x150]
call fcn.10022450
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x168]
call fcn.10022450
mov eax, dword [ebp + 8]
mov dword [eax + 0xc], edi
push 2
lea ecx, [ebp - 0x15c]
call fcn.100223ce
push esi
lea ecx, [ebp - 0xf8]
mov dword [ebp - 4], 4
call fcn.100223ce
mov dword [ebp - 0x14], ebx
jmp 0x10026074
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x15c]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10026061
mov dword [ebp - 0x14], ebx
jmp 0x10026092
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002607f
mov edi, dword [ebp - 0xf8]
mov dword [edi + 4], 1
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x100260ba
push 1
push 0x13b8
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
dec dword [edi + 4]
jns 0x100260a4
lea ecx, [ebp - 0xf8]
call fcn.10022450
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x15c]
call fcn.10022450
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x28], eax
jge 0x10026f21
mov edi, dword [ebp - 0x3c]
push 4
pop ecx
mov dword [ebp - 0x18], 0x110c93b4
add edi, ecx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x14], ebx
jmp 0x1002610d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x48], 0xa165
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100260ff
xor edx, edx
mov dword [ebp - 0x14], ebx
inc edx
jmp 0x10026129
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x64], 0xdaee2552
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1002611b
mov dword [ebp - 0x18], 0xffffffe3
cmp dword [ebp - 0x18], ecx
jl 0x1002629c
push 4
pop edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], 0x3c3fa3c9
mov dword [ebp - 0x1c], 0xfa0b2b04
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x24], 0xfffffffa
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp eax, 0xffffffff
setg cl
cmp dword [ebp - 0x48], ecx
jg 0x10026182
cmp dword [ebp - 0x44], ebx
jne 0x10026182
mov edx, ebx
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp edx, 6
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
sete cl
mov dword [ebp - 0x38], ecx
xor ecx, ecx
cmp dword [ebp - 0x38], eax
setne cl
imul eax, ecx, 0xa08d
cmp eax, 0x56cd219f
jge 0x100261bc
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0xfffffffe
setne cl
cmp ecx, dword [ebp - 0x1c]
je 0x100261d5
cmp dword [ebp - 0x48], ebx
jne 0x100261d5
mov edx, ebx
jmp 0x100261d8
xor edx, edx
inc edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x48]
setg cl
xor edx, edx
cmp ecx, 0x6947
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x48]
setne cl
mov dword [ebp - 0x38], ecx
xor ecx, ecx
cmp dword [ebp - 0x38], eax
sete cl
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp eax, 0x66883ce7
mov eax, esi
setl cl
sub eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x44]
jle 0x10026234
cmp dword [ebp - 0x20], ebx
je 0x10026234
xor edx, edx
inc edx
mov eax, edx
jmp 0x10026239
xor edx, edx
mov eax, ebx
inc edx
cmp eax, dword [ebp - 0x44]
jge 0x10026245
mov eax, edx
cmp dword [ebp - 0x20], ebx
jne 0x10026247
mov eax, ebx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
je 0x10026256
mov ecx, edx
cmp dword [ebp - 0x48], ebx
jne 0x10026258
mov ecx, ebx
mov eax, dword [ebp - 0x48]
imul eax, ecx
cmp eax, dword [ebp - 0x48]
jne 0x1002626a
mov ecx, edx
cmp dword [ebp - 0x1c], ebx
jne 0x1002626c
mov ecx, ebx
xor eax, eax
cmp ecx, 0x8b293c34
sete al
sub eax, dword [ebp - 0x20]
je 0x10026288
cmp dword [ebp - 0x48], ebx
je 0x10026288
mov eax, edx
cmp dword [ebp - 0x1c], ebx
jne 0x1002628a
mov eax, ebx
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jge 0x10026141
mov edi, dword [ebp - 0x3c]
mov dword [ebp - 0x18], ebx
jmp 0x10026356
push edx
lea ecx, [ebp - 0x110]
call fcn.100223ce
xor edx, edx
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x100262cb
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], 0xf2f470b9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100262b8
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax*4 - 0x48]
jle 0x10026304
cmp dword [ebp - 0x48], ebx
jne 0x10026304
mov edx, ebx
xor eax, eax
cmp eax, edx
sbb eax, eax
xor edx, edx
neg eax
imul ecx, eax, 0xc9df
mov eax, dword [ebp - 0x64]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x48]
cmp eax, edx
mov eax, dword [ebp - 0x18]
sete cl
xor edx, edx
cmp ecx, 0x5a4
lea ecx, [ebp - 0x110]
setg dl
imul edx, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 0x110]
mov dword [eax], edx
call fcn.10022450
inc dword [ebp - 0x18]
xor edx, edx
inc edx
cmp dword [ebp - 0x18], edx
jle 0x100262a4
cmp dword [ebp - 0x28], 0
jle 0x10026593
jmp 0x1002636e
xor edx, edx
inc edx
mov eax, dword [edi]
lea ecx, [ebp - 0xec]
push 4
mov dword [ebp - 0x38], eax
pop eax
add edi, eax
mov dword [ebp - 0x3c], edi
add dword [ebp - 0x3c], eax
push edx
mov edi, dword [edi]
mov dword [ebp - 0x20], 0xe0648261
call fcn.100223ce
mov dword [ebp - 4], 5
xor edx, edx
mov dword [ebp - 0x34], 0xfffffff9
inc edx
mov dword [ebp - 0x18], 0x664a1160
mov dword [ebp - 0x1c], ebx
jmp 0x100263c3
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xec]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100263b0
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xfffffff7
jge 0x100264a8
mov dword [ebp - 0x2c], 0xffffffff
lea ecx, [ebp - 0xe0]
push esi
call fcn.100223ce
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x14], ebx
jmp 0x10026405
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x144], 0x45ccb972
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100263f4
mov dword [ebp - 0x14], ebx
jmp 0x1002641e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002640f
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xec]
mov dword [eax], ecx
test ecx, ecx
jne 0x10026445
mov eax, dword [ebp - 0x2c]
dec dword [ebp - 0x2c]
test eax, eax
jne 0x10026445
mov eax, dword [ebp - 0xe0]
dec dword [eax + 4]
imul ecx, dword [ebp - 0x18], 6
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x140]
sete cl
xor edx, edx
cmp ecx, 0xf4f9
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0xe0]
call fcn.10022450
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff7
jl 0x100263d5
xor edx, edx
inc edx
mov dword [ebp - 0x18], edx
lea ecx, [ebp - 0xec]
or dword [ebp - 4], 0xffffffff
call fcn.10022450
test edi, edi
mov edi, dword [ebp - 0x3c]
jne 0x100264c4
add edi, 8
mov dword [ebp - 0x20], 0xffffffff
lea ecx, [ebp - 0x174]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0xb9ae77ab
mov dword [ebp - 0x34], 0xd6804445
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x34], 0xd9e2a8d3
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0xffffffff
push esi
call fcn.100223ce
mov dword [ebp - 0x1c], ebx
jmp 0x10026518
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], 0xbc383c67
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10026505
mov dword [ebp - 0x20], 0xffffffed
jmp 0x10026573
mov dword [ebp - 0x34], 0xdc4b4e12
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x34], 0xf80c3414
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x1c], ebx
jmp 0x10026558
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x178], 2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10026547
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1002656d
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
dec dword [ebp - 0x24]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 6
jg 0x10026526
lea ecx, [ebp - 0x174]
call fcn.10022450
add edi, dword [ebp - 0x38]
dec dword [ebp - 0x28]
mov dword [ebp - 0x3c], edi
jne 0x1002636b
mov dword [ebp - 0x20], 0xb3ae3556
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x38], 0xeb905d09
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x38], 0x9ce456
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x1c], 0x3ffaf072
mov dword [ebp - 0x34], 0xade661fb
mov dword [ebp - 0x34], 0x76acb8f
mov dword [ebp - 0x24], 0xc28cae2f
mov dword [ebp - 0x50], 0xffffffff
push 2
call fcn.100223ce
xor ecx, ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x14], ebx
inc ecx
jmp 0x10026603
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x74], 0xdbc1c234
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x100265f5
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 2
jge 0x1002662d
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10026611
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xfffffff9
jle 0x10026766
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], 0xfffffff6
push ecx
mov dword [ebp - 0x24], 0xbf48c443
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x24], 0xfffffffe
call fcn.100223ce
mov byte [ebp - 4], 7
xor edx, edx
mov dword [ebp - 0x24], 0x7631615e
inc edx
mov dword [ebp - 0x28], ebx
jmp 0x10026684
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x190]
mov dword [eax + ecx*4], 0x4746a1c1
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x10026671
mov eax, dword [ebp - 0xc8]
inc dword [eax]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1002674c
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10026744
mov dword [ebp - 0x24], 0x549
cmp dword [ebp - 0x24], 0x834
jle 0x1002671f
mov edx, ebx
mov dword [ebp - 0x28], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x1c4]
or eax, edx
cdq
push edx
push eax
call fcn.1000ac3e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100266e4
mov eax, dword [eax]
push eax
call fcn.1005af25
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1c4]
call fcn.100229ac
mov eax, dword [ebp - 0x2c]
inc edi
mov edx, dword [ebp - 0x28]
cmp edi, 0x13be
jl 0x100266c6
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x316f
jl 0x100266c4
inc edx
mov dword [ebp - 0x28], edx
cmp edx, 0x17f0
jl 0x100266bf
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
cmp dword [ebp - 0x24], 0x287
jge 0x1002673d
push 0x10008298
call fcn.1005af25
pop ecx
mov dword [ebp - 4], 7
dec dword [ebp - 0x1c]
jmp 0x10026694
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 6
call fcn.10022450
dec dword [ebp - 0x20]
xor ecx, ecx
inc ecx
jmp 0x10026630
mov dword [ebp - 0x1c], 0x15
cmp dword [ebp - 0x1c], 0x1d
jne 0x10026892
mov dword [ebp - 0x2c], 0xe8e60a2f
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x14], 0x7cb0be94
mov dword [ebp - 0x18], 0x76ba
cmp dword [ebp - 0x18], 0x7747
jle 0x10026802
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x20], 0x2905
mov dword [ebp - 0x24], ecx
sar eax, cl
lea ecx, [ebp - 0x1dc]
cdq
push edx
push eax
call fcn.1000ac3e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100267c9
mov eax, dword [eax]
push eax
call fcn.1005af25
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1dc]
call fcn.100229ac
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
add ecx, edi
dec dword [ebp - 0x20]
mov dword [ebp - 0x24], ecx
jne 0x100267af
inc edi
cmp edi, 0xe23
jl 0x100267a3
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x29d0
jl 0x100267a1
mov eax, dword [ebp - 0x38]
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setge dl
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], ebx
jne 0x1002682e
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
neg eax
cmp eax, ecx
jl 0x1002682e
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov dword [ebp - 0x24], 1
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setne dl
lea ecx, [edx - 0x4475678d]
xor edx, edx
imul ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x14]
add ecx, 0xb3b3
cmp ecx, eax
mov eax, dword [ebp - 0x50]
setne dl
imul ecx, edx, 0xcfb6
xor edx, edx
cmp ecx, eax
setl dl
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x18], 0x754a
jge 0x10026883
push 0x100082f0
call fcn.1005af25
pop ecx
mov dword [ebp - 4], 6
inc dword [ebp - 0x1c]
jmp 0x1002676d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc8]
call fcn.10022450
mov eax, dword [ebp - 0x3c]
mov edi, dword [eax]
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x38], 0xc1d10227
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], ebx
jmp 0x100268cd
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1ac], 0x2fdcba86
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x100268bc
mov dword [ebp - 0x20], ebx
jmp 0x10026937
mov dword [ebp - 0x24], esi
xor ecx, ecx
mov dword [ebp - 0x2c], 8
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x20]
cmp eax, 0xb4e7
mov eax, dword [ebp - 0x20]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x2c]
setle cl
xor edx, edx
cmp ecx, 0x194
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setle cl
mov dword [ebp - 0x38], ecx
xor ecx, ecx
cmp dword [ebp - 0x38], eax
setne cl
mov dword [ebp - 0x38], ecx
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff0
jg 0x100268d7
add dword [ebp - 0x3c], 4
mov dword [ebp - 0x38], 9
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x18], 0x6695998
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x2c], 0x65b2
cmp dword [ebp - 0x2c], 0x65d8
jle 0x100269b5
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
and eax, edi
lea ecx, [ebp - 0x1f4]
cdq
push edx
push eax
call fcn.1000ac3e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10026986
mov eax, dword [eax]
push eax
call fcn.1005af25
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1f4]
call fcn.100229ac
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x54a4
jl 0x1002696c
inc edi
cmp edi, 0x1d08
jl 0x10026967
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x2c], 0x658d
jge 0x100269cc
push 0x10008350
call fcn.1005af25
pop ecx
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x28], ebx
inc ecx
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x24], 0xbfef
mov dword [ebp - 0x50], 0x392a
mov dword [ebp - 0x14], ebx
jmp 0x100269fa
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x54], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x100269f0
mov dword [ebp - 0x14], ebx
jmp 0x10026a15
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x88], 8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10026a04
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x54]
test eax, eax
mov eax, dword [ebp - 0x2c]
setg cl
xor edx, edx
cmp ecx, esi
setle dl
imul eax, edx
inc dword [ebp - 0x2c]
cmp eax, 0x133d496
jg 0x10026a4d
xor edx, edx
inc edx
jmp 0x10026a4f
mov edx, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
add ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x84]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x38]
setle cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
cmp eax, 0xfffffffa
setle cl
xor eax, eax
cmp ecx, dword [ebp - 0x34]
setl al
add eax, 4
jne 0x10026a9a
cmp dword [ebp - 0x24], ebx
jne 0x10026a9a
xor ecx, ecx
mov eax, ebx
inc ecx
jmp 0x10026a9f
xor ecx, ecx
inc ecx
mov eax, ecx
cmp eax, dword [ebp - 0x28]
jl 0x10026b1e
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2c], 0x861e80f9
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x28], ebx
jmp 0x10026ac4
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x5c], 0xffffffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x10026ab6
mov dword [ebp - 0x24], 0xffffffff
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x20]
add eax, 9
cmp eax, 0x84bafc8d
sbb eax, eax
xor ecx, ecx
neg eax
imul eax, eax, 0x4407
cmp eax, 0x9626dac1
setne cl
add ecx, 0x54c8d3dc
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
jmp 0x10026b4e
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ebx
jl 0x10026b48
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x88]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x88], ecx
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x54]
dec dword [ebp - 0x20]
jns 0x10026b29
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0xac]
push dword [ebp + 8]
movdqa xmm0, xmmword [0x10009660]
movdqu xmmword [ebp - 0x1a0], xmm0
mov esi, dword [eax]
lea eax, [ebp - 0x190]
push eax
mov dword [ebp - 0x28], 9
lea eax, [ebp - 0x1a0]
mov dword [ebp - 0x34], 0x8f4727c
push eax
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x38], 0x7c
mov dword [ebp - 0x38], 0x189f42c6
push ebx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], ebx
call fcn.1002558a
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x2c], 0x199314e7
mov dword [ebp - 0x28], 9
cmp dword [ebp - 0x28], 0x19
jl 0x10026c98
mov esi, dword [ebp - 0xac]
mov dword [ebp - 0x38], 0xfff9
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x34], 0x11e7bff4
mov dword [ebp - 0x24], 0x23dcdf5e
mov dword [ebp - 0x24], 1
push 2
call fcn.100223ce
xor ecx, ecx
mov dword [ebp - 0x14], ebx
inc ecx
jmp 0x10026c1f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x60], 0x1c097bc8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10026c11
mov dword [ebp - 0x14], ebx
jmp 0x10026c3c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x184]
mov dword [eax + ecx*4], 0xfaba
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10026c29
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x60]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x2c]
add eax, 0xffff9160
imul ecx, eax
imul eax, ecx, 0xffff
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x20]
dec dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x60], eax
call fcn.10022450
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x19
jge 0x10026bdd
mov esi, dword [ebp - 0x18]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xac]
call fcn.10022450
add dword [ebp - 0x3c], 4
lea ecx, [ebp - 0xd4]
xor eax, eax
inc eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], 8
push eax
call fcn.100223ce
mov dword [ebp - 4], 0xf
xor edx, edx
mov dword [ebp - 0x38], 0x41b6add7
inc edx
mov dword [ebp - 0x28], ebx
jmp 0x10026cf7
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xd4]
mov dword [eax + ecx*4], 0x6c65
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x10026ce4
cmp dword [ebp - 0x14], ebx
jne 0x10026d1e
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov ecx, ebx
setle dl
mov dword [ebp - 0x2c], edx
xor edx, edx
inc edx
cmp dword [ebp - 0x2c], ebx
je 0x10026d20
mov ecx, edx
mov eax, dword [ebp - 0x14]
add eax, ecx
xor ecx, ecx
cmp eax, 0x3e45
setge cl
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 0x206dd2cc
jg 0x10026d40
cmp dword [ebp - 0x20], ebx
jne 0x10026d47
mov ecx, ebx
cmp dword [ebp - 0x20], ebx
je 0x10026d49
mov ecx, edx
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
sete dl
xor ecx, ecx
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp edx, eax
setle cl
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd4]
mov dword [eax], ecx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
neg eax
je 0x10026dc2
mov dword [ebp - 0x18], ebx
jmp 0x10026da2
mov dword [ebp - 0x38], 0xe83
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10026d98
push 0x14f8
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x38], 0x36a5b5cf
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe6
jge 0x10026d7d
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10026e39
push 0x2675
call dword [sym.imp.GDI32.dll_GetBkColor]
jmp 0x10026e39
mov dword [ebp - 0x14], 0x360abed9
lea ecx, [ebp - 0x104]
push 1
call fcn.100223ce
xor edx, edx
mov dword [ebp - 0x34], 0xc7819afc
mov dword [ebp - 0x28], ebx
inc edx
jmp 0x10026df8
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x104]
mov dword [eax + ecx*4], 0x51ef224b
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x10026de5
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x104]
cmp dword [eax], edx
setg cl
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x104]
call fcn.10022450
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd4]
call fcn.10022450
test esi, esi
jne 0x10026f21
cmp byte [ebp - 0x40], 0
je 0x10026e68
cmp dword [ebp - 0x4c], 1
jne 0x10026e68
mov ecx, dword [ebp + 8]
push 4
pop eax
lea eax, [edi + eax*4]
add dword [ecx + 8], eax
mov ecx, dword [ebp - 0x3c]
push 4
mov eax, dword [ecx]
mov dword [ebp - 0x5c], eax
pop eax
add ecx, eax
push 4
mov eax, dword [ecx]
mov dword [ebp - 0x64], eax
pop eax
add ecx, eax
push edi
mov dword [ebp - 0x3c], ecx
call fcn.100562b8
pop ecx
mov edi, eax
mov dword [ebp - 0xb0], ebx
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xbc], ebx
push eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
call fcn.1002bce6
mov eax, dword [ebp - 0x1c]
mov esi, ebx
mov ecx, dword [ebp - 0xbc]
test eax, eax
jle 0x10026f0c
mov eax, esi
and eax, 0x80000001
jns 0x10026ed5
dec eax
or eax, 0xfffffffe
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x5c]
add eax, esi
add eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x64]
jmp 0x10026eea
lea eax, [edx + 1]
cdq
idiv dword [ebp - 0x1c]
cmp word [ecx + edx*2], bx
jne 0x10026ee7
xor eax, eax
inc eax
mov word [ecx + edx*2], ax
mov eax, dword [ebp - 0x3c]
mov al, byte [edx + eax]
mov byte [esi + edi], al
inc esi
mov eax, dword [ebp - 0x1c]
cmp esi, eax
jl 0x10026ec7
mov esi, dword [ebp + 8]
mov dword [esi], eax
mov dword [esi + 4], edi
test ecx, ecx
je 0x10026f24
push ecx
call fcn.1005b097
pop ecx
jmp 0x10026f24
mov esi, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret