Function at 0x10017eea
Capabilities:
Enumerate gui resources
Set registry value
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x264
push ebx
push esi
mov dword [ebp - 0x54], edx
xor esi, esi
mov dword [ebp - 0x18], 0xffff
mov ebx, ecx
inc esi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x1c], esi
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x14], 0x63372585
push edi
mov dword [ebp - 8], ecx
jmp 0x10017f2d
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x60], 0xdc1b6eab
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10017f1f
cmp dword [ebp - 0x18], ecx
jne 0x10017f78
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
inc ecx
cmp eax, ecx
setne dl
xor eax, eax
test edx, edx
setns al
mov dword [ebp - 0x20], eax
imul eax, dword [ebp - 0x20], 0x9cd4
add eax, dword [ebp - 0x1c]
jne 0x10017f67
cmp dword [ebp - 4], eax
jne 0x10017f67
xor ecx, ecx
jmp 0x10017f69
mov ecx, esi
mov eax, dword [ebp - 4]
imul eax, ecx
xor ecx, ecx
cmp eax, dword [ebp - 4]
mov eax, ecx
jle 0x10017f7a
mov eax, esi
mov dword [ebp - 0x60], eax
mov dword [ebp - 4], 0xfffffffa
cmp dword [ebp - 4], 0xffffffed
jle 0x10017fdc
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x14], 0xfffffff9
cmp dword [ebp - 0x60], ecx
jne 0x10017faf
cmp dword [ebp - 0x1c], ecx
je 0x10017fab
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x60], eax
test eax, eax
jne 0x10017faf
mov edx, ecx
jmp 0x10017fb1
mov edx, esi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
cmp edx, eax
push 0
setl cl
mov dword [ebp - 0x14], ecx
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffed
pop ecx
jg 0x10017f8a
mov dword [ebp - 8], 0xb9f9b31
mov dword [ebp - 0x20], 0xdbaf9eb1
mov dword [ebp - 0x28], 0xd1fe9056
mov dword [ebp - 0x1c], 0x788afb1c
mov dword [ebp - 0x10], ecx
jmp 0x1001800e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x8c], 0xfffffff9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10017ffd
mov dword [ebp - 0x10], ecx
jmp 0x10018027
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x74], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10018019
mov dword [ebp - 8], 0xe
cmp dword [ebp - 8], 0x1c
push 3
pop edi
jle 0x10018109
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x24], 0x2cb3a3fc
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x10], ecx
jmp 0x1001806e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xcc], 0xda37bb00
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1001805d
mov dword [ebp - 0x10], ecx
jmp 0x10018089
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1bc], 0xe0d6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10018078
mov eax, dword [ebp - 8]
xor edx, edx
neg eax
mov dword [ebp - 0x8c], eax
dec dword [ebp - 0x74]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1bc]
mov eax, dword [ebp - 0x8c]
cmp eax, ecx
mov eax, dword [ebp - 0xc8]
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0xc8]
push 0
setg cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
pop ecx
setge dl
mov dword [ebp - 4], edx
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x1c
jg 0x10018040
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 8], ecx
jmp 0x10018126
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1a8], 0xfffffffc
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10018115
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ecx
jl 0x1001814a
mov byte [ebp - 9], cl
cmp byte [ebp - 9], 0
je 0x10018145
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
xor ecx, ecx
dec dword [ebp - 0x20]
jns 0x10018133
mov dword [ebp - 8], 0x6960f57a
mov dword [ebp - 0x24], 0xc8fbfc75
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 8], 0x90ac204e
mov dword [ebp - 0x28], 0x95aad853
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], 0xfffffffd
mov dword [ebp - 0x10], 0xc33bab72
mov dword [ebp - 8], ecx
jmp 0x1001819b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x17c], 7
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x1001818a
mov dword [ebp - 8], 0xfffffff3
jmp 0x1001820e
mov dword [ebp - 0x20], 0xa29
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x1c], 0x9f361739
mov dword [ebp - 0x1c], ecx
jmp 0x100181d0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x208], 0x15898f01
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x100181bf
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1c], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x19
jge 0x100181a9
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0x5300ce3d
mov dword [ebp - 0x24], 0x648261f9
mov byte [ebp - 9], cl
cmp byte [ebp - 9], 0
je 0x1001823f
push 0x26c7
push ecx
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor ecx, ecx
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 9], cl
cmp byte [ebp - 9], 0
je 0x10018265
push ecx
push ecx
push ecx
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
xor ecx, ecx
mov dword [ebp - 0x24], 0x8299fa9e
mov dword [ebp - 0x24], 0x9c79ebef
mov dword [ebp - 0x18], 1
mov dword [ebp - 8], ecx
jmp 0x1001828c
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1d0], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001827f
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1d0], eax
mov byte [ebp - 9], cl
cmp byte [ebp - 9], 0
je 0x100182b6
push ecx
push ecx
push 0x1d24
call esi
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
xor ecx, ecx
mov dword [ebp - 0x24], 0x93d7f28
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 8], 0x46a1c17c
mov dword [ebp - 0x24], 0x3d8b3d38
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 8], ecx
jmp 0x100182eb
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x244], 0x631615e8
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x100182da
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jne 0x10018334
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sub ecx, 0x7dcd
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setl cl
xor edx, edx
cmp ecx, 0x693009c
setl dl
sub eax, edx
mov dword [ebp - 8], eax
jne 0x10018334
xor eax, eax
jmp 0x10018337
xor eax, eax
inc eax
mov ecx, 0xfff9
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
push 4
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, 0x91a83acd
setle dl
inc edx
xor ecx, ecx
mov dword [ebp - 0x240], edx
mov dword [ebp - 8], 0xffffffe8
pop edx
jmp 0x100183a0
mov dword [ebp - 0x24], 0x1c234ac0
mov dword [ebp - 0x24], 0xa4b15d3e
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x24], 0xae4c7ba3
mov dword [ebp - 0x24], 0x77d6446b
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x24], ecx
dec dword [ebp - 0x18]
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jle 0x10018365
mov eax, 0xe2ff5ff7
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov eax, 0x9a5c
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x10], ecx
jmp 0x100183dc
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x120], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x100183cf
mov dword [ebp - 0x10], ecx
jmp 0x100183f7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1fc], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100183e6
mov dword [ebp - 8], ecx
jmp 0x1001855e
mov dword [ebp - 4], 0x8974b66
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x24], 0xbb101eb
mov dword [ebp - 0x18], 0xe8b7dd14
mov dword [ebp - 0x1c], ecx
jmp 0x10018434
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x70], 0x1466ac3a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10018426
mov byte [ebp - 9], cl
cmp byte [ebp - 9], 0
je 0x10018460
push 0x128d
push 0xcf8
push 0x1dcd
push 0x17b8
push ecx
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], 3
jg 0x1001855b
mov dword [ebp - 0x10], 0xbf74
mov dword [ebp - 0x24], 0xd9e9
mov dword [ebp - 0x14], 0xbb7a2e25
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x1c], ecx
jmp 0x1001849f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1c8], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001848e
dec dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
cmp eax, ecx
setge dl
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x100184cd
cmp dword [ebp - 4], 0
je 0x100184df
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x120], 0
je 0x100184df
xor edx, edx
inc edx
jmp 0x100184e1
xor edx, edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x120]
push 0
setle cl
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x120]
setl dl
imul ecx, edx
add ecx, eax
mov eax, dword [ebp - 0x28]
inc eax
add eax, ecx
xor ecx, ecx
cmp eax, 1
setg cl
xor edx, edx
mov dword [ebp - 0x70], ecx
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 4]
imul eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1f8]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 4]
setle dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x120]
cmp eax, edx
setle cl
mov dword [ebp - 0x1c4], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
pop ecx
jle 0x1001846d
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jle 0x10018405
mov dword [ebp - 0x10], 0xf6af1124
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x10], 0xfffffff6
cmp dword [ebp - 0x10], 0xfffffff3
jle 0x10018729
mov dword [ebp - 0x1c], 0xfa75c19c
mov dword [ebp - 8], ecx
jmp 0x100185a0
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xc0], 0x8a99
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001858f
mov byte [ebp - 9], cl
cmp byte [ebp - 9], 0
je 0x100185c8
push ecx
push 0x1fc5
push 0x922
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
xor ecx, ecx
mov dword [ebp - 0x1c], 0x10
jmp 0x1001870f
mov dword [ebp - 4], 0x29ea4144
mov dword [ebp - 0x18], ecx
mov byte [ebp - 9], cl
cmp byte [ebp - 9], 0
je 0x100185f0
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor ecx, ecx
mov dword [ebp - 4], ecx
jmp 0x10018702
mov dword [ebp - 0x20], 0xeaba4a2c
mov dword [ebp - 8], ecx
jmp 0x10018615
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xa4], 3
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x10018604
mov dword [ebp - 0xa4], ecx
jmp 0x100186f2
mov dword [ebp - 0x18], 0xfffffffb
cmp dword [ebp - 0x10], ecx
je 0x100186d7
mov edx, dword [ebp - 0xbc]
xor ecx, ecx
mov eax, dword [ebp - 4]
neg edx
add edx, edx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x20]
jge 0x10018659
cmp dword [ebp - 4], 0
jne 0x10018659
xor eax, eax
jmp 0x1001865c
xor eax, eax
inc eax
cmp eax, 0xfffffffc
sbb eax, eax
xor ecx, ecx
inc eax
sub eax, dword [ebp - 0x10]
dec eax
cmp eax, 0x461302d
mov eax, dword [ebp - 0x9c]
setne cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setg dl
sub edx, eax
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 4]
imul edx, eax
mov eax, dword [ebp - 4]
imul ecx, edx
xor edx, edx
cmp ecx, eax
setle dl
xor ebx, ebx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xbc]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setle bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x20]
setge cl
xor edx, edx
test ecx, ecx
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
add ecx, 5
jne 0x100186d2
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x18], ecx
dec dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], 0xffffffe7
jle 0x10018626
inc dword [ebp - 4]
cmp dword [ebp - 4], 0xa
jle 0x100185f8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x14
jge 0x100185d4
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff3
jg 0x10018583
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], 0x632667a8
mov dword [ebp - 0x34], 0x31137833
push 8
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x18], 0x57257ea0
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0xa8ccedb7
mov dword [ebp - 0x14], 0xd20578cc
push 3
mov dword [ebp - 0x10], 0xcd1d2a6f
mov dword [ebp - 0x10], ecx
pop esi
jmp 0x10018782
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe4], 0xfffffff6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10018771
xor edx, edx
mov dword [ebp - 0x10], ecx
inc edx
jmp 0x100187a0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb0], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001878f
mov eax, dword [ebp - 4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 4]
test eax, eax
je 0x100187b9
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1c], 0xfff8
jbe 0x10018818
mov dword [ebp - 0x24], 0x92f1e5c8
mov dword [ebp - 0x24], 0x4d4e2b79
mov dword [ebp - 0x18], 0x2891
mov dword [ebp - 8], ecx
jmp 0x10018808
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1b4], 0x254e7f13
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x100187f7
inc dword [ebp - 0x18]
push 2
pop edi
jmp 0x100188e9
push 2
mov dword [ebp - 0x18], 0x1ed30906
mov dword [ebp - 8], ecx
pop edi
jmp 0x10018838
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xec], 0xfffffff8
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x10018827
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], edi
jg 0x100188e9
mov dword [ebp - 0x18], 0x6e9f81a7
xor ecx, ecx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x28], 6
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], 0xdd5d57d3
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xe4]
cmp eax, 0x846e1d67
mov eax, dword [ebp - 0x18]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
neg eax
sbb eax, eax
inc eax
sub edx, eax
mov eax, dword [ebp - 0xec]
neg edx
sbb edx, edx
lea ecx, [edx + 1]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setle dl
xor ecx, ecx
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov byte [ebp - 9], cl
cmp byte [ebp - 9], cl
je 0x100188da
push 1
push ecx
push ecx
push ecx
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
xor ecx, ecx
inc dword [ebp - 0x1c]
push 1
pop edx
cmp dword [ebp - 0x1c], edi
jle 0x10018849
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], edi
jg 0x10018921
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xe4]
inc eax
test eax, eax
mov eax, dword [ebp - 0x10]
setle cl
mov dword [ebp + eax*4 - 0xe4], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xe4]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jle 0x100188f1
xor ecx, ecx
mov dword [ebp - 0x2c], 0x73f5cfeb
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], 0xffffffff
cmp dword [ebp - 0x20], ecx
je 0x10018946
dec dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 8], ecx
jmp 0x10018968
mov byte [ebp - 9], cl
cmp byte [ebp - 9], 0
je 0x1001893e
push 0x989
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x5c], 0xb5f5
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x1001895a
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], ecx
jl 0x10018a62
mov dword [ebp - 0x20], 0x7c8a6b95
push 0xfffffffffffffffc
pop eax
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 8], ecx
jmp 0x100189b1
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xf4], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x100189a0
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ecx
jl 0x10018a59
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x5c], ecx
jne 0x100189ce
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x5c]
xor edx, edx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x5c]
mov dword [ebp - 0x138], ecx
mov eax, dword [ebp - 0x5c]
cmp ecx, eax
mov eax, dword [ebp - 0x58]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0xfffffff7
setne al
xor ecx, ecx
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0x5c], ecx
je 0x10018a17
xor edx, edx
inc edx
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ecx
jne 0x10018a59
jmp 0x10018a50
mov dword [ebp - 4], 0x64c9d8d9
mov dword [ebp - 4], ecx
jmp 0x10018a31
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x5c], 0x26f3
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10018a23
xor edx, edx
inc edx
mov dword [ebp - 4], edx
cmp dword [ebp - 4], ecx
jl 0x10018a50
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xf4], esi
dec dword [ebp - 4]
jns 0x10018a41
dec dword [ebp - 0x20]
jns 0x100189c2
dec dword [ebp - 0x10]
jns 0x10018979
mov dword [ebp - 0x10], ecx
jmp 0x10018a76
mov dword [ebp - 0x18], 0x307976b5
cmp dword [ebp - 0x18], ecx
jne 0x10018a7c
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe6
jge 0x10018a67
mov dword [ebp - 4], ecx
jmp 0x10018a92
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x110], 0xf99f
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10018a81
mov dword [ebp - 4], ecx
jmp 0x10018aa9
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x214], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10018a9c
mov dword [ebp - 0x18], 0xffff
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x14], 0x63372585
mov dword [ebp - 8], ecx
jmp 0x10018ad8
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x50], 0xdc1b6eab
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x10018aca
cmp dword [ebp - 0x18], ecx
jne 0x10018b29
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
inc ecx
cmp eax, ecx
setne dl
xor eax, eax
test edx, edx
setns al
mov dword [ebp - 0x20], eax
imul eax, dword [ebp - 0x20], 0x9cd4
add eax, dword [ebp - 0x1c]
jne 0x10018b15
cmp dword [ebp - 4], eax
jne 0x10018b15
xor edx, edx
xor ecx, ecx
inc edx
jmp 0x10018b1a
xor edx, edx
inc edx
mov ecx, edx
mov eax, dword [ebp - 4]
imul eax, ecx
xor ecx, ecx
cmp eax, dword [ebp - 4]
mov eax, ecx
jle 0x10018b2b
mov eax, edx
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], 0xfffffffa
cmp dword [ebp - 4], 0xffffffed
jle 0x10018b8c
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x14], 0xfffffff9
cmp dword [ebp - 0x50], ecx
jne 0x10018b5e
cmp dword [ebp - 0x1c], ecx
je 0x10018b5c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x50], eax
test eax, eax
jne 0x10018b5e
mov edx, ecx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
cmp edx, eax
push 0
setl cl
mov dword [ebp - 0x14], ecx
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffed
pop ecx
push 1
pop edx
jg 0x10018b3b
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 4], edi
mov edi, dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
cmp dword [ebp - 4], ecx
jl 0x10018d8c
xor edx, edx
inc edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 8], 2
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 8], ecx
jmp 0x10018bc9
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x254], edx
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x10018bbc
push 3
pop eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], ecx
jl 0x10018bea
mov dword [ebp - 0x24], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 8], ecx
jne 0x10018bea
dec dword [ebp - 8]
jns 0x10018bda
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x20], 0x273942
mov dword [ebp - 0x10], 0x1c29
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x18]
je 0x10018c9a
mov dword [ebp - 0x28], edx
mov dword [ebp - 8], ecx
jmp 0x10018c26
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xb4], edx
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x10018c19
mov dword [ebp - 0x10], 0xffffffe6
cmp dword [ebp - 0x10], 0xfffffff0
jle 0x10018c73
mov byte [ebp - 9], cl
cmp byte [ebp - 9], 0
je 0x10018c57
push 0x1d6
push ecx
push 0x4f8
push 0xf02
push ecx
push ecx
call esi
xor ecx, ecx
mov byte [ebp - 9], cl
cmp byte [ebp - 9], 0
je 0x10018c67
push ecx
push ecx
push ecx
call edi
xor ecx, ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff0
jg 0x10018c38
xor edx, edx
inc edx
cmp dword [ebp - 0x28], ecx
je 0x10018c86
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
jmp 0x10018c88
mov edx, ecx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0xb4], ecx
jmp 0x10018ce9
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x20], 0x1639956a
cmp dword [ebp - 0x10], ecx
jne 0x10018cb6
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
sub eax, 7
cmp eax, dword [ebp - 8]
jl 0x10018cc4
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
xor edx, edx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setg dl
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x18], 0x4d41bd43
cmp dword [ebp - 4], 0
je 0x10018cf9
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x110]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setge dl
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 4], eax
je 0x10018d32
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 4]
cmp ecx, eax
mov eax, dword [ebp - 4]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setl cl
imul eax, dword [ebp - 0x1c]
cmp eax, ecx
jl 0x10018d62
xor ecx, ecx
cmp dword [ebp - 0x14], ecx
je 0x10018d64
xor edx, edx
inc edx
mov eax, edx
jmp 0x10018d69
xor ecx, ecx
xor edx, edx
mov eax, ecx
inc edx
cmp eax, dword [ebp - 0x14]
jne 0x10018d78
mov eax, ecx
cmp dword [ebp - 0x108], ecx
je 0x10018d7a
mov eax, edx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x214], ecx
dec dword [ebp - 4]
jns 0x10018ba7
push 2
xor edx, edx
pop eax
mov dword [ebp - 0x14], eax
inc edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 4
jge 0x10018dba
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x264], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10018da4
push 2
pop eax
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ecx
jl 0x10018dd6
mov dword [ebp - 0x24], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x14], ecx
jne 0x10018dd6
dec dword [ebp - 0x14]
jns 0x10018dc6
mov dword [ebp - 0x10], 0xcea5d6c0
mov dword [ebp - 0x20], 0x3a266d21
mov dword [ebp - 8], 0xd25bb086
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], eax
jge 0x10018e0d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xfc], 0xdd2e91c8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10018df6
mov dword [ebp - 0x10], ecx
jmp 0x10018f76
mov dword [ebp - 4], edx
mov dword [ebp - 0x18], 0xfffb
mov dword [ebp - 0x28], 0xfffffff9
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x1c], 3
mov dword [ebp - 0x14], ecx
jmp 0x10018e5a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1f0], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10018e4d
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], 3
jg 0x10018f73
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x28], 0xc98aac1e
mov dword [ebp - 0x2c], 0x4549c4b
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x18], 0xdab5
jg 0x10018e8f
cmp dword [ebp - 0x10], ecx
jne 0x10018e91
mov edx, ecx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
push 0
setne cl
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 8]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
imul ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x160]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1f0]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setne dl
xor ecx, ecx
cmp edx, 1
setle cl
xor edx, edx
sub ecx, eax
add ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x18]
sub ecx, 3
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1ec]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setg dl
xor eax, eax
cmp eax, edx
mov eax, dword [ebp - 0x28]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0xf0a061fa
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0x4c01
mov eax, dword [ebp - 4]
setne dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x1c], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
pop ecx
push 1
pop edx
jle 0x10018e6d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
je 0x10018e15
cmp dword [ebp - 0x20], 0xfffffff8
je 0x10018f97
cmp dword [ebp - 8], ecx
je 0x10018f90
mov eax, dword [ebp - 0xf8]
mov eax, ecx
cmp dword [ebp - 0x20], ecx
je 0x10018f99
mov eax, edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18], 3
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x2c], 0x273942
mov dword [ebp - 0x10], 0x1c29
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x18]
je 0x10019049
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x14], ecx
jmp 0x10018fd5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xac], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10018fc8
mov dword [ebp - 0x10], 0xffffffe6
cmp dword [ebp - 0x10], 0xfffffff0
jle 0x10019022
mov byte [ebp - 9], cl
cmp byte [ebp - 9], 0
je 0x10019006
push 0x1d6
push ecx
push 0x4f8
push 0xf02
push ecx
push ecx
call esi
xor ecx, ecx
mov byte [ebp - 9], cl
cmp byte [ebp - 9], 0
je 0x10019016
push ecx
push ecx
push ecx
call edi
xor ecx, ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff0
jg 0x10018fe7
xor edx, edx
inc edx
cmp dword [ebp - 0x28], ecx
je 0x10019035
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
jmp 0x10019037
mov edx, ecx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0xac], ecx
jmp 0x10019098
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x20], 0x1639956a
cmp dword [ebp - 0x10], ecx
jne 0x10019065
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
sub eax, 7
cmp eax, dword [ebp - 8]
jl 0x10019073
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
xor edx, edx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setg dl
mov dword [ebp - 0x2c], edx
cmp dword [ebx + 0x10], 0
jne 0x100190a5
xor al, al
jmp 0x10019d17
lea eax, [ebp - 0x54]
push 0
push eax
call fcn.1001b911
xor edx, edx
pop ecx
mov dword [ebp - 8], edx
pop ecx
mov dword [ebp - 0x14], edx
jmp 0x100190cd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb8], 0x1bd97a8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x100190bc
mov dword [ebp - 8], 0xfffffffb
jmp 0x100190ec
cmp dword [ebp - 8], edx
jne 0x100190f2
cmp dword [ebp - 0xb8], edx
jne 0x100190f2
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffff1
jge 0x100190dc
cmp dword [ebx + 0x14], 0x10
jb 0x100190fc
mov esi, dword [ebx]
jmp 0x100190fe
mov esi, ebx
mov edi, dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
cmp dword [ebx + 0x14], 0x10
jb 0x1001910e
mov ecx, dword [ebx]
jmp 0x10019110
mov ecx, ebx
mov eax, dword [ebx + 0x10]
add eax, ecx
cmp esi, eax
je 0x100197ce
mov dword [ebp - 8], edx
mov dword [ebp - 0x14], edx
jmp 0x10019136
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa8], 0x1bd97a8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x10019125
mov dword [ebp - 8], 0xfffffffb
jmp 0x10019155
cmp dword [ebp - 8], edx
jne 0x1001915b
cmp dword [ebp - 0xa8], edx
jne 0x1001915b
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffff1
jge 0x10019145
mov dword [ebp - 0x10], 0xcea5d6c0
mov dword [ebp - 4], 0x7b04800f
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x28], 0xc6ea
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x14], 6
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], edx
jne 0x1001919c
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x34]
test eax, eax
mov eax, dword [ebp - 0x28]
setg cl
xor edx, edx
cmp ecx, 0x4d4b
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
cmp ecx, eax
setne dl
xor ecx, ecx
sub edx, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setne cl
add ecx, 0x1589afca
imul ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 4]
jg 0x10019212
xor ecx, ecx
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x2c], ecx
mov byte [ebp - 9], cl
cmp byte [ebp - 9], cl
je 0x10019225
push ecx
call edi
jmp 0x10019223
mov dword [ebp - 0x24], 0xfffffffb
mov dword [ebp - 0x24], 1
inc dword [ebp - 0x14]
xor ecx, ecx
mov dword [ebp - 0x18], 0x3a266d21
mov dword [ebp - 8], 0xb9f9b31
mov dword [ebp - 0x2c], 0xdbaf9eb1
mov dword [ebp - 0x20], 0xd1fe9056
mov dword [ebp - 0x14], 0x788afb1c
mov dword [ebp - 4], ecx
jmp 0x1001925e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x94], 0xfffffff9
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x1001924d
mov dword [ebp - 4], ecx
jmp 0x10019277
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x78], 0xfffffffa
inc dword [ebp - 4]
cmp dword [ebp - 4], 1
jl 0x10019269
mov dword [ebp - 8], 0xe
cmp dword [ebp - 8], 0x1c
jle 0x10019358
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x24], 0x2cb3a3fc
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 4], ecx
jmp 0x100192bc
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xd8], 0xda37bb00
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x100192ab
mov dword [ebp - 4], ecx
jmp 0x100192d8
mov dword [ebp - 0x20], 0xd25bb086
mov dword [ebp - 0x14], 0xfffffffd
mov dword [ebp - 0x14], ecx
jmp 0x1001937c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1c0], 0xfffffffc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1001936b
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], ecx
jl 0x100193a1
mov dword [ebp - 0x10], 0x8cff0ea7
mov dword [ebp - 0x1c], 5
push 3
mov dword [ebp - 4], 0x881dda8d
mov dword [ebp - 0x10], edx
pop esi
cmp dword [ebp - 0x10], 0xffffffea
jl 0x100199b1
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 4], edx
jmp 0x1001980d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x68], 0xfffffffd
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x100197ff
mov dword [ebp - 4], edx
jmp 0x10019829
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1a4], 0x37c57f39
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10019818
mov eax, dword [ebp - 0x64]
xor edx, edx
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x19c], ecx
mov eax, dword [ebp - 0x10]
sub ecx, eax
add ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x64]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x64]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x64]
setne dl
add eax, edx
xor edx, edx
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x64]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setle cl
xor edx, edx
add ecx, 9
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
imul ecx, edx, 0xfff9
xor edx, edx
cmp eax, ecx
mov ecx, 0x77fc7df3
setg dl
mov dword [ebp - 8], edx
xor edx, edx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x10]
sub ecx, eax
je 0x1001998f
mov dword [ebp - 0x24], 0xffff
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 8], edx
jmp 0x10019983
mov dword [ebp - 0x30], 0xb9d3
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0x19
jg 0x10019980
mov dword [ebp - 0x18], 0x20c3d8d5
mov dword [ebp - 0x20], 0x84a4e7fb
push 6
pop eax
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], eax
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x1001993b
push 0x249d
push edx
push edx
push edx
push 0x1469
push edx
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x18]
test eax, eax
jne 0x10019952
cmp dword [ebp - 0x30], edx
je 0x10019955
cmp dword [ebp - 0x18], edx
je 0x10019955
xor edx, edx
inc edx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
push 0
setge cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
sub ecx, eax
mov dword [ebp - 0x148], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x19
pop edx
jle 0x100198f3
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x16
jge 0x100198df
jmp 0x100199a0
mov dword [ebp - 0x24], 0x2420
cmp dword [ebp - 4], edx
jne 0x100199b1
cmp dword [ebp - 0x24], edx
jne 0x100199b1
mov eax, dword [ebp - 4]
mov dword [ebp - 0x19c], eax
dec dword [ebp - 0x10]
jmp 0x100197e9
mov dword [ebp - 0x1c], 0xfffffff0
jmp 0x100199db
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x100199d8
push 0x18bd
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
xor edx, edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffb
jg 0x100199ba
mov dword [ebp - 8], 0x6960f57a
mov eax, 0xe2ff5ff7
mov dword [ebp - 0x24], 0xc8fbfc75
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0x5300ce3d
mov dword [ebp - 0x24], 0x8299fa9e
mov dword [ebp - 0x24], 0x9c79ebef
mov dword [ebp - 0x24], 0x93d7f28
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov eax, 0x9a5c
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
push 4
mov dword [ebp - 0x24], edx
mov dword [ebp - 4], edx
pop ecx
jmp 0x10019a4c
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x170], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10019a3f
mov dword [ebp - 4], edx
jmp 0x10019a67
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x220], 0xfffffffa
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10019a56
xor ebx, ebx
mov dword [ebp - 8], edx
inc ebx
cmp dword [ebp - 8], esi
jg 0x10019bc2
mov dword [ebp - 4], 0x8974b66
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0x2c], 0xbb101eb
mov dword [ebp - 0x30], 0xe8b7dd14
mov dword [ebp - 0x20], edx
jmp 0x10019aaa
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6c], 0x1466ac3a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10019a9c
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x10019ac7
push 0x4241
push edx
call fcn.1001b9df
pop ecx
pop ecx
xor edx, edx
mov dword [ebp - 4], edx
cmp dword [ebp - 4], esi
jg 0x10019bba
mov dword [ebp - 0x14], 0xbf74
mov dword [ebp - 0x2c], 0xd9e9
mov dword [ebp - 0x2c], 0xbb7a2e25
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x20], edx
jmp 0x10019b01
inc dword [ebp - 8]
jmp 0x10019a72
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], edx
jmp 0x10019bd8
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x48], 0x4fd3df75
inc dword [ebp - 4]
cmp dword [ebp - 4], ebx
jl 0x10019bca
mov dword [ebp - 4], edx
jmp 0x10019bf0
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x4c], 0xfff7
inc dword [ebp - 4]
cmp dword [ebp - 4], ebx
jl 0x10019be2
mov dword [ebp - 0x48], edx
jmp 0x10019c51
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret