Function at 0x1000c182
Capabilities:
Get common file path
Query service status

Disassembly:
mov eax, 0x1005744e
call fcn.100567e0
sub esp, 0x1f0
push ebx
mov dword [ebp - 0xa8], ecx
xor ebx, ebx
xor ecx, ecx
mov dword [ebp - 0xd4], edx
push esi
inc ecx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x20], ecx
push edi
mov dword [ebp - 0x24], 0x4c8d3c89
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x20], ebx
jmp 0x1000c1e5
mov dword [ebp - 0x18], ebx
jmp 0x1000c1d4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd0], 0x74dd0324
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1000c1c3
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffef
jg 0x1000c1be
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x20], 0x9841b3c6
mov dword [ebp - 0x1c], 0x83cc
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x2c], 0x4d2b
cmp dword [ebp - 0x2c], 0x4d8b
jle 0x1000c264
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], 0x364b
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov eax, esi
mov ecx, 0x10071338
or eax, ebx
or eax, edi
cdq
push edx
push eax
call fcn.100060aa
inc ebx
cmp ebx, 0x14ad
jl 0x1000c227
inc edi
push 0
pop ebx
cmp edi, 0x17e7
jl 0x1000c224
dec esi
dec dword [ebp - 0x24]
jne 0x1000c222
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x1fc3
jl 0x1000c218
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1000c274
push ebx
call dword [sym.imp.KERNEL32.dll_EncodePointer]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x2c], 0x4bf2
jge 0x1000c28f
mov edx, str.witow_vegrl_uuhwmk_cdgceixx_cuoffy_awyyfdg_zen_uyl_opt_xyhewnql
mov ecx, 0x10071338
call fcn.1000aac1
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x14
jmp 0x1000c2f7
mov dword [ebp - 0x24], 0x6b9dd952
mov dword [ebp - 0x18], 0xfffffff7
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
neg edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
sbb edx, edx
neg edx
xor ecx, ecx
cmp edx, eax
setge cl
inc ecx
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x20], ebx
jne 0x1000c2fd
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1d
je 0x1000c2be
mov dword [ebp - 0x63], 0x40e0371
xor ecx, ecx
mov dword [ebp - 0x5f], 0x2694076e
inc ecx
mov byte [ebp - 0x64], cl
mov dword [ebp - 0x5b], 0x30060e05
mov word [ebp - 0x57], 0x3d04
mov byte [ebp - 0x55], bl
mov word [ebp - 0x54], 0x226
mov byte [ebp - 0x52], 0x28
mov dword [ebp - 0x24], 0xadf890ba
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20], 0xfffffffa
mov dword [ebp - 0x24], 0x5eb5a40a
mov dword [ebp - 0x30], 0x700c0d35
mov dword [ebp - 0x2c], 0x4c38db0
mov dword [ebp - 0x1c], ebx
jmp 0x1000c364
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3c], 0x3773672d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1000c356
mov dword [ebp - 0x1c], ebx
jmp 0x1000c37d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x80], 0x8f9c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000c36f
mov dword [ebp - 0x1c], ebx
jmp 0x1000c395
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd8], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1000c388
mov ecx, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x38]
cmp eax, ecx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
setle dl
add edx, 0x9e56e623
imul ecx, edx
xor edx, edx
cmp ecx, eax
setne dl
xor ecx, ecx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x78]
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x7c]
cmp edx, eax
setge cl
cmp ecx, 0xd88101ae
mov ecx, dword [ebp - 0x38]
sbb eax, eax
inc eax
imul ecx, eax
mov eax, dword [ebp - 0x3c]
sub eax, ecx
jne 0x1000c3ea
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x38]
add eax, ecx
mov ecx, dword [ebp - 0x24]
add ecx, eax
sub ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
add ecx, eax
mov eax, dword [ebp - 0x38]
cmp ecx, eax
mov eax, dword [ebp - 0x78]
setle dl
xor ecx, ecx
cmp edx, eax
sete cl
xor eax, eax
cmp ecx, 0x7088
mov dword [ebp - 0xd8], ecx
sete al
neg eax
jne 0x1000c445
cmp dword [ebp - 0x78], ebx
jne 0x1000c445
mov eax, ebx
jmp 0x1000c448
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
xor edx, edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0x78]
cmp ecx, eax
setg dl
sub edx, 0x6e12cdfd
jne 0x1000c46e
cmp dword [ebp - 0x24], ebx
jne 0x1000c46e
mov ecx, ebx
jmp 0x1000c471
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x38]
xor edx, edx
sub ecx, eax
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setle dl
cmp edx, 0x9dda
jle 0x1000c497
cmp dword [ebp - 0x2c], ebx
jne 0x1000c497
mov eax, ebx
jmp 0x1000c49a
xor eax, eax
inc eax
push 0x6c
mov dword [ebp - 0x2c], eax
pop eax
push 2
pop edi
mov word [ebp - 0x10a], ax
mov esi, edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x2c], 0x6b5a
mov dword [ebp - 0x18], 0xfefa2e57
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1000c4e1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000c4d0
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1000c500
push 0x1cc2
push 0xfed
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp dword [ebp - 0x1c], ebx
je 0x1000c51a
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
xor ecx, ecx
imul eax, dword [ebp - 0xa4]
cmp eax, 0x721c
setne cl
sub ecx, 6
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0xa4]
je 0x1000c57b
cmp dword [ebp - 0xa4], ebx
je 0x1000c57b
xor ecx, ecx
inc ecx
jmp 0x1000c57d
mov ecx, ebx
mov eax, dword [ebp - 0xa4]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
sete dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xa0]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setne cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
cmp dword [ebp - 0x30], eax
setge cl
mov dword [ebp - 0x20], ecx
cmp esi, 4
jne 0x1000c5cd
push 7
mov dword [ebp - 0x24], 5
pop esi
jmp 0x1000c63e
movzx edx, byte [ebp + esi - 0x63]
mov eax, esi
sub eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x66]
movzx ecx, word [ebp + eax*2 - 0x10c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x64]
add ecx, edx
mov word [ebp + eax*2 - 0x10c], cx
mov dword [ebp - 0x18], ebx
jmp 0x1000c60a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x50], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1000c600
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1000c621
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov dword [ebp - 0x50], edi
jmp 0x1000c635
mov dword [ebp - 0x30], 0x77dd6887
cmp dword [ebp - 0x30], ebx
jne 0x1000c63b
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0x15
jge 0x1000c626
mov dword [ebp - 0x24], ebx
add esi, edi
cmp esi, 0x13
jb 0x1000c4af
xor eax, eax
mov dword [ebp - 0x154], 7
mov word [ebp - 0xfe], ax
lea ecx, [ebp - 0x168]
mov word [ebp - 0x168], ax
lea eax, [ebp - 0x10c]
push eax
mov dword [ebp - 0x158], ebx
call fcn.10006ff6
mov dword [ebp - 4], edi
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1000c697
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1f8], 0xc93b4e1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1000c686
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 3
jg 0x1000c77f
mov dword [ebp - 0x1c], 0x2f6
cmp dword [ebp - 0x1c], 0x5aa
jle 0x1000c714
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x20], 0x6ed7
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
and eax, edi
mov ecx, 0x10071338
or eax, ebx
cdq
push edx
push eax
call fcn.100060aa
mov eax, dword [ebp - 0x2c]
add eax, esi
dec dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
jne 0x1000c6d0
inc esi
push 0
pop ebx
cmp esi, 0x6676
jl 0x1000c6c1
inc edi
cmp edi, 0x73aa
jl 0x1000c6bf
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x1ef0
jl 0x1000c6bd
push 2
pop edi
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1000c724
push ebx
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov byte [ebp - 4], 3
cmp dword [ebp - 0x1c], 0x287
jge 0x1000c761
mov edx, str.ktgapoce_hqsweet_hkdssjurj_qhdllgp_xoprlxf_taelhlse_yihvszmll_ujpgcx_hxwjhccd_smk_dhdkqy_gnijxegjc_lhacbw_oyszumj
mov ecx, 0x10071338
call fcn.1000aac1
jmp 0x1000c761
mov dword [ebp - 4], edi
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1000c777
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
inc dword [ebp - 0x18]
jmp 0x1000c6a0
push dword [ebp - 0xd4]
xor eax, eax
lea edi, [ebp - 0x10c]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x198]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.100061bf
mov byte [ebp - 4], 5
lea eax, [ebp - 0x1a8]
push dword [ebp - 0x74]
movdqa xmm0, xmmword [0x10064670]
lea ecx, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0xcc], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x1b8], xmm0
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
call fcn.1000b7db
mov byte [ebp - 4], 6
lea eax, [ebp - 0x198]
push dword [ebp - 0x74]
movdqa xmm0, xmmword [0x10064640]
lea ecx, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1c], 0x6673e7ed
push eax
push ebx
movdqu xmmword [ebp - 0x1a8], xmm0
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
call fcn.1000b7db
mov dword [ebp - 0x18], ebx
jmp 0x1000c83f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x138], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000c82e
mov edx, dword [ebp - 0xcc]
xor eax, eax
push 5
cmp dword [edx + 4], ebx
mov ecx, dword [edx + 0xc]
setne al
mov dword [ebp - 0x138], eax
pop eax
cmp eax, dword [edx + 0xc]
sbb eax, eax
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xb4]
mov dword [eax + 0xc], ecx
xor eax, eax
mov ecx, dword [edx]
cmp dword [edx + 0xc], ecx
setge al
cmp eax, ecx
jle 0x1000c8cf
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1000c895
push ebx
push 0x26b9
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 0x1c], 0xe
jmp 0x1000c8c7
mov dword [ebp - 0x30], 0x4d
xor ecx, ecx
mov dword [ebp - 0x24], 0x5c29478c
inc ecx
mov dword [ebp - 0x24], 0xe5849968
mov eax, dword [ebp - 0x30]
sub ecx, eax
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff7
je 0x1000c89e
jmp 0x1000c8f4
mov dword [ebp - 0x1c], ebx
jmp 0x1000c8ee
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1000c8eb
push ebx
push 0x8c4
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff0
jne 0x1000c8d4
push 3
pop esi
mov dword [ebp - 0x1c], esi
jmp 0x1000c924
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x20], ebx
jmp 0x1000c91b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1000c908
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 7
jne 0x1000c8fc
lea ecx, [ebp - 0xb4]
call fcn.1000643c
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 5
call fcn.1000643c
mov dword [ebp - 0x24], 0xfffffffe
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x24], 0xedd1edb6
push 4
call fcn.100063b9
mov byte [ebp - 4], 7
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0xfa9dfeee
mov dword [ebp - 0x1c], ebx
jmp 0x1000c987
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x6c], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1000c979
mov dword [ebp - 0x1c], ebx
jmp 0x1000c9a5
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x124]
mov dword [eax + ecx*4], 0xb6ba00b6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1000c992
mov dword [ebp - 0x24], esi
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
xor eax, eax
test ecx, ecx
setle al
cmp eax, 5
jl 0x1000c9ce
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
je 0x1000c9e7
cmp dword [ebp - 0x6c], ebx
je 0x1000c9e7
xor edx, edx
inc edx
jmp 0x1000c9e9
mov edx, ebx
mov eax, dword [ebp - 0x6c]
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, 0xe467b47e
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x6c]
setne dl
xor ecx, ecx
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, 0x47825498
setg al
xor edx, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x124]
setne dl
imul ecx, edx
mov dword [eax + 0xc], ecx
mov dword [ebp - 0x24], 0x6ffa
cmp dword [ebp - 0x24], 0x70ae
jle 0x1000ca86
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov eax, ebx
mov ecx, 0x10071338
and eax, esi
or eax, edi
cdq
push edx
push eax
call fcn.100060aa
inc ebx
cmp ebx, 0x48f7
jl 0x1000ca55
inc esi
push 0
pop ebx
cmp esi, 0x2531
jl 0x1000ca52
inc edi
cmp edi, 0x574a
jl 0x1000ca50
inc dword [ebp - 0x2c]
mov byte [ebp - 4], 8
cmp dword [ebp - 0x24], 0x6f09
jge 0x1000cac3
mov edx, str.mmicm_idyrrwkfz_emuhhfzeo
mov ecx, 0x10071338
call fcn.1000aac1
jmp 0x1000cac3
push 5
pop eax
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], al
call fcn.1000643c
push 0x5c
pop eax
push 2
mov byte [ebp - 0x34], bl
mov ecx, ebx
mov word [ebp - 0x33], 0x181
mov byte [ebp - 0x31], al
mov word [ebp - 0x4c], ax
pop esi
cmp esi, 2
jne 0x1000cafc
push esi
pop ecx
jmp 0x1000cb23
movzx edx, byte [ebp + esi - 0x33]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x36]
movzx eax, word [ebp + eax*2 - 0x4c]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x34]
mov word [ebp + eax*2 - 0x4c], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x1000caf3
xor eax, eax
mov dword [ebp - 0xe8], 7
mov word [ebp - 0x4a], ax
lea ecx, [ebp - 0xfc]
mov word [ebp - 0xfc], ax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0xec], ebx
call fcn.10006ff6
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x24], 0xfffc
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x2c], 0x935ff574
push 3
mov dword [ebp - 0x18], 0x7e91c178
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x1000cb90
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x8c], 0x64a6847d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1000cb7f
mov dword [ebp - 0x8c], 0xffffffea
jmp 0x1000cbe0
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x18], ebx
jmp 0x1000cbba
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1d0], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1000cbad
mov dword [ebp - 0x1c], ebx
jmp 0x1000cbd5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1d0], 0xa5043c4a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1000cbc4
inc dword [ebp - 0x8c]
cmp dword [ebp - 0x8c], 9
jle 0x1000cba1
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x24]
dec dword [ebp - 0x24]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x8c]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x20], 0x226f
cmp dword [ebp - 0x20], 0x235e
jle 0x1000ccbb
push 0x7d4
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x24], ebx
cdq
idiv esi
mov dword [ebp - 0x18], 0x3792
mov dword [ebp - 0x30], edx
mov edi, ebx
mov ebx, dword [ebp - 0x24]
mov ecx, edi
mov eax, ebx
sar eax, cl
mov ecx, 0x10071338
cdq
push edx
push eax
call fcn.100060aa
inc edi
cmp edi, 0x3ddd
jl 0x1000cc79
add ebx, dword [ebp - 0x30]
dec dword [ebp - 0x18]
push 0
mov dword [ebp - 0x24], ebx
pop ebx
jne 0x1000cc74
mov edi, dword [ebp - 0x2c]
inc esi
cmp esi, 0x5cfa
jl 0x1000cc62
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x4254
jl 0x1000cc60
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x20], 0x21d3
jge 0x1000ccf5
mov edx, str.vwtbsm_dnb_msuodc_bufuxyztp_gjrnjfkq_tou_xlic_nykwgi_ejvflrcv_cvcywytna_cmwgum_rtdc_hmyky
mov ecx, 0x10071338
call fcn.1000aac1
jmp 0x1000ccf5
push 3
lea ecx, [ebp - 0xc0]
mov dword [ebp - 4], 0xa
call fcn.100063b9
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x118]
xor eax, eax
mov dword [ebp - 0x18], 0x978f3c34
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 0x30], 0xec0d
mov dword [ebp - 0x18], 0xfffffff9
push eax
call fcn.100063b9
mov dword [ebp - 0x1c], ebx
jmp 0x1000cd53
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], 0x114768c0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000cd40
mov dword [ebp - 0x1c], ebx
jmp 0x1000cd6e
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x118]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1000cd5e
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1000cd99
push 1
push 0x16af
push 0x2608
push 0x24da
push 0xd08
call dword [sym.imp.USER32.dll_SetScrollRange]
mov esi, dword [ebp - 0xc0]
mov eax, dword [esi]
test eax, eax
je 0x1000cdb8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
mov esi, dword [ebp - 0xc0]
je 0x1000cdb8
xor edi, edi
inc edi
jmp 0x1000cdba
mov edi, ebx
cmp dword [esi], ebx
jne 0x1000ce0a
mov ecx, dword [esi + 8]
xor eax, eax
inc eax
xor edx, edx
sub eax, dword [esi + 4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov esi, dword [esi + 8]
add eax, ecx
cmp eax, 0xab56
setl dl
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
add eax, esi
cmp eax, esi
mov eax, dword [ebp - 0xc0]
setl cl
xor edx, edx
cmp ecx, dword [eax]
setl dl
xor eax, eax
cmp edx, esi
setne al
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], ebx
cmp edi, dword [ebp - 0x18]
jle 0x1000ce1b
cmp dword [ebp - 0x24], ebx
jne 0x1000ce1b
mov ecx, ebx
jmp 0x1000ce1e
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x118]
mov dword [eax], ecx
lea ecx, [ebp - 0x118]
call fcn.1000643c
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xa
call fcn.1000643c
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x24], 0x9e22401d
mov dword [ebp - 0x2c], 0x2a284868
mov dword [ebp - 0x18], ebx
jmp 0x1000ce6b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x98], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000ce5a
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], ebx
jl 0x1000cfa4
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x30], 0xff57440e
mov dword [ebp - 0x20], ebx
jmp 0x1000cea5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x74], 0xfffffff7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x1000ce97
mov dword [ebp - 0x20], ebx
jmp 0x1000cec1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x150], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1000ceb0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x98], ebx
je 0x1000cf3a
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x90]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
sete dl
xor ecx, ecx
mov dword [ebp - 0x30], edx
mov edx, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x30], eax
setge cl
cmp ecx, edx
jne 0x1000cf1c
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x98], ebx
je 0x1000cf1c
xor eax, eax
inc eax
jmp 0x1000cf1e
mov eax, ebx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x98]
cmp eax, 1
je 0x1000cf3a
xor ecx, ecx
inc ecx
jmp 0x1000cf3c
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
add eax, ecx
xor ecx, ecx
cmp eax, 0xf860
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x98]
cmp edx, eax
setl cl
mov dword [ebp - 0x74], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x98]
cmp eax, 0xfa025ec5
mov eax, dword [ebp - 0x1c]
sete cl
sub ecx, eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x1c]
jns 0x1000ce81
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1000cfb4
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
push 0x5f
pop eax
push 2
mov byte [ebp - 0x48], bl
mov ecx, ebx
mov dword [ebp - 0x47], 0x19bd0336
mov byte [ebp - 0x43], 0xb2
mov word [ebp - 0x40], ax
pop esi
cmp esi, 2
jne 0x1000cfda
push 4
pop ecx
push ecx
pop esi
jmp 0x1000d003
movzx edx, byte [ebp + esi - 0x47]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4a]
movzx ecx, word [ebp + eax*2 - 0x40]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x48]
add ecx, edx
mov word [ebp + eax*2 - 0x40], cx
mov ecx, ebx
add esi, 2
cmp esi, 6
jb 0x1000cfce
xor eax, eax
mov word [ebp - 0x3e], ax
mov dword [ebp - 0x24], 0x40c7
cmp dword [ebp - 0x24], 0x4233
jle 0x1000d068
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x1e8]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a99
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000d041
mov eax, dword [eax]
push eax
call fcn.1004027d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1e8]
call fcn.10006cfe
inc esi
cmp esi, 0x3402
jl 0x1000d025
inc edi
cmp edi, 0x5ddd
jl 0x1000d023
cmp dword [ebp - 0x24], 0x3cfa
jge 0x1000d07c
push str.xbg_ivogqcu_chuy_aeepckp_flnucse_uxzcqtn_hgutkh_vlsckfivw_ahdr_tux_tmwt_ghdm_qrovl
call fcn.1004027d
pop ecx
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x2c], 3
mov dword [ebp - 0x1c], 0x4dbb
mov dword [ebp - 0x24], 0xc70ab227
mov dword [ebp - 0x18], ebx
push 4
call fcn.100063b9
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x18], 0x856cd833
mov dword [ebp - 0x18], 0xdd484073
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], ebx
jmp 0x1000d0d7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x70], 6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x1000d0c9
mov dword [ebp - 0x20], ebx
jmp 0x1000d0f5
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1000d0e2
dec dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [edx + 4], eax
mov dword [ebp - 0x20], 0x7457
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, dword [edx + 4]
setge cl
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
jne 0x1000d141
cmp dword [ebp - 0x20], ebx
jne 0x1000d141
mov edx, ebx
jmp 0x1000d144
xor edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
sete cl
xor edx, edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor edx, edx
imul ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp ecx, 0x7fc0
setg dl
xor ecx, ecx
add edx, 0xae3d
cmp edx, eax
setg cl
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 3
jg 0x1000d2dd
xor edx, edx
mov dword [ebp - 0x20], ebx
inc edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x1000d22c
mov dword [ebp - 0x70], 0xffffffff
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe4]
cmp dword [eax + ecx*4], 0xffffffff
jl 0x1000d1e7
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe4]
cmp dword [eax + ecx*4], ebx
mov eax, ebx
je 0x1000d1e9
mov eax, edx
cmp eax, dword [ebp - 0x24]
jle 0x1000d1f1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
push 0xfffffffffffffffa
pop ecx
sub ecx, eax
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
cmp eax, 0xfffffff7
setne cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], ebx
jmp 0x1000d222
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x70], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1000d218
dec dword [ebp - 0x18]
jns 0x1000d1b8
mov dword [ebp - 0x2c], 0x7677
cmp dword [ebp - 0x2c], 0x7860
jle 0x1000d284
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov ecx, esi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x20], ebx
shl edi, cl
mov ecx, ebx
mov eax, edi
sar eax, cl
mov ecx, 0x10071338
cdq
push edx
push eax
call fcn.100060aa
inc ebx
cmp ebx, 0x776b
jl 0x1000d24d
mov edi, dword [ebp - 0x18]
inc esi
push 0
pop ebx
cmp esi, 0x2ee7
jl 0x1000d243
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x2a29
jl 0x1000d241
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1000d294
push ebx
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x2c], 0x72af
jge 0x1000d2ce
mov edx, str.qyosq_wvxphgb_lecok_yrytv_foh_ttd
mov ecx, 0x10071338
call fcn.1000aac1
jmp 0x1000d2ce
mov dword [ebp - 4], 0x10
inc dword [ebp - 0x1c]
jmp 0x1000d199
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0xa
call fcn.1000643c
xor eax, eax
mov dword [ebp - 0x16c], 7
mov word [ebp - 0x180], ax
lea ecx, [ebp - 0x180]
lea eax, [ebp - 0x40]
mov dword [ebp - 0x170], ebx
push eax
call fcn.10006ff6
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x20], 0x48e
cmp dword [ebp - 0x20], 0x7fe
jle 0x1000d38a
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
cdq
mov edi, ebx
idiv esi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x30], edx
mov esi, edi
mov ebx, 0x3c30
mov edi, dword [ebp - 0x30]
mov ecx, esi
mov eax, edi
shl eax, cl
mov ecx, 0x10071338
cdq
push edx
push eax
call fcn.100060aa
dec esi
dec ebx
jne 0x1000d347
mov edi, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0xb7e
jl 0x1000d33d
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x77c5
jl 0x1000d332
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x73ec
jl 0x1000d32d
push 2
lea ecx, [ebp - 0x130]
call fcn.100063b9
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x20], 0x202
jge 0x1000d3d1
mov edx, str.dfuagl_yjatrtox_hltnhrtse_dwe_qaxsqroqo_ofwqlory_kgf_tjepau_gzj_ontzropct
mov ecx, 0x10071338
call fcn.1000aac1
jmp 0x1000d3d1
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x18], 0xdf1febae
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x18], ebx
jmp 0x1000d3fb
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x130]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000d3eb
mov dword [ebp - 0x18], ebx
jmp 0x1000d419
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], 0x20fe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000d406
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x13
call fcn.1000643c
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x20], 0x4e6d4f28
mov dword [ebp - 0x24], 0xfd43ddca
mov dword [ebp - 0x24], 0x64a11600
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x24], 0x13f5e3d1
mov dword [ebp - 0x2c], 0xa81
cmp dword [ebp - 0x2c], 0xd8d
jle 0x1000d4c5
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
lea ecx, [eax + esi]
lea eax, [edi + ebx]
sar eax, cl
mov ecx, 0x10071338
cdq
push edx
push eax
call fcn.100060aa
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x2bde
jl 0x1000d473
inc esi
push 0
pop ebx
cmp esi, 0x363
jl 0x1000d46b
inc edi
cmp edi, 0x3fdf
jl 0x1000d469
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x5c2a
jl 0x1000d467
push ebx
push 0x39d
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x2c], 0xa4d
jge 0x1000d4ff
mov edx, str.faqqnspce_zqyntkxm_rxvxakmzv_don_isar_bli_aksebhl_cto_dirtkeu_ncjna
mov ecx, 0x10071338
call fcn.1000aac1
jmp 0x1000d4ff
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x18], ebx
jmp 0x1000d51c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000d50b
cmp dword [ebp - 0x20], 0xcf2e5664
je 0x1000d569
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], 0x245f
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c0]
inc eax
je 0x1000d569
cmp dword [ebp - 0x20], ebx
jne 0x1000d56c
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
push dword [ebp - 0xec]
cmp dword [ebp - 0xe8], 8
lea eax, [ebp - 0xfc]
push ebx
cmovae eax, dword [ebp - 0xfc]
lea ecx, [ebp - 0x198]
push eax
call fcn.100070b0
cmp eax, 0xffffffff
je 0x1000d5c5
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x180]
push ecx
push 1
push eax
lea ecx, [ebp - 0x198]
call fcn.1000b3a4
jmp 0x1000d57f
mov dword [ebp - 0x20], 0xf7d
cmp dword [ebp - 0x20], 0xfd6
jle 0x1000d63a
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov eax, edi
mov ecx, ebx
cdq
idiv esi
mov dword [ebp - 0x24], ecx
mov ebx, edx
mov eax, ebx
mov esi, 0x409a
cdq
idiv ecx
mov edi, edx
mov eax, edi
mov ecx, 0x10071338
cdq
push edx
push eax
call fcn.100060aa
dec edi
dec esi
jne 0x1000d5f7
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x5f5a
jl 0x1000d5eb
mov dword [ebp - 0x18], 0xffffffff
lea ecx, [ebp - 0x148]
push 3
call fcn.100063b9
mov dword [ebp - 0x18], ebx
jmp 0x1000d662
cmp dword [ebp - 0x18], 3
jl 0x1000d653