Function at 0x1001d02c
Capabilities:
Enumerate gui resources
Extract resource via kernel32 functions
Get common file path
Resume thread

Disassembly:
mov eax, 0x1008dbc9
call fcn.1008d1ac
sub esp, 0xec
mov dword [ebp - 0x3c], ecx
push ebx
push esi
push edi
test dl, dl
je 0x1001d7a6
mov dword [ebp - 0x28], 0xffffffff
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x24], 0x8c9dffbe
xor edi, edi
mov dword [ebp - 0x28], 0xb597857
inc edi
mov dword [ebp - 0x18], 0x3f0e26a2
mov dword [ebp - 0x1c], 0xa2b52f10
mov dword [ebp - 0x1c], 0x72f548f9
push edi
call fcn.1001ae23
push 0xfffffffffffffffa
pop ecx
mov dword [ebp - 0x1c], edi
xor ebx, ebx
push 4
mov dword [ebp - 0x1c], ecx
pop esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x10], ebx
jmp 0x1001d0a7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x30], 0x869ec427
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1001d099
mov dword [ebp - 0x10], ebx
jmp 0x1001d0c2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xbc], 0xfffffffe
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001d0b1
mov dword [ebp - 0x10], ebx
jmp 0x1001d0d9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf8], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1001d0cc
push 2
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x1001d0f8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa0], 0x6ac8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001d0e7
mov dword [ebp - 0x10], ebx
jmp 0x1001d115
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x8c]
mov dword [eax + ecx*4], 0xfffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1001d102
mov dword [ebp - 0x10], ebx
jmp 0x1001d130
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xdc], 0xf0cdbbf8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001d11f
mov dword [ebp - 0x10], ebx
jmp 0x1001d14b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xec], 0xf156de04
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001d13a
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jne 0x1001d229
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0x18]
je 0x1001d174
mov edx, edi
cmp dword [ebp - 0xbc], ebx
jne 0x1001d176
mov edx, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, 0x81fd
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
sete cl
xor edx, edx
cmp ecx, eax
push 8
setle dl
xor ecx, ecx
imul eax, edx, 0x8aea
mov dword [ebp - 0xf0], edx
add eax, dword [ebp - 0x28]
cmp eax, 0x6845925f
setne cl
neg ecx
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
inc ecx
cmp edi, ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
sete dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
pop ecx
cmp ecx, eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0xb4]
sbb ecx, ecx
neg ecx
sub eax, ecx
je 0x1001d1f8
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xb4], edi
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
dec eax
neg eax
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x8c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x1c]
cmp eax, edx
setg cl
xor eax, eax
cmp ecx, edx
setle al
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffffffb
sbb eax, eax
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x8c]
setge dl
xor ecx, ecx
cmp edx, dword [eax]
setle cl
mov dword [ebp - 0xd8], ecx
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x20], edi
dec dword [ebp - 0xe0]
call fcn.1001aea5
mov dword [ebp - 0x28], 0xa66e58d0
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x10], ebx
jmp 0x1001d2bd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x38], 0xfffffff9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1001d2af
mov dword [ebp - 0x10], ebx
jmp 0x1001d2d8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xc4], 0xd6b9c2d6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001d2c7
cmp dword [ebp - 0x38], ebx
jne 0x1001d338
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x38]
cmp eax, 0xd018
setl cl
xor eax, eax
cmp ecx, 0x3f02
setge al
cmp dword [ebp - 0x38], eax
jge 0x1001d30a
mov eax, edi
cmp dword [ebp - 0x38], ebx
jne 0x1001d30c
mov eax, ebx
mov dword [ebp - 0xc4], eax
xor ecx, ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, 0xa0f0f5eb
setne cl
cmp edi, ecx
sbb eax, eax
neg eax
cmp edi, eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x38]
mov eax, ebx
jl 0x1001d33a
mov eax, edi
mov dword [ebp - 0x20], eax
xor edx, edx
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x28], 0xcf13e13a
mov dword [ebp - 0x1c], 0x9fcfbce0
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x10], 0xde64f6cb
mov dword [ebp - 0x3c], 0x1658a600
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0xfffffffb
setg al
imul eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x44], edi
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0x1a82
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, esi
setl al
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0xffffffee
cmp dword [ebp - 0x10], 0x1d
jge 0x1001d553
mov eax, 0x236da352
mov dword [ebp - 0x18], 0xfffffff9
xor edx, edx
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x34], 0xdb28
mov dword [ebp - 0x40], 0x18828597
mov dword [ebp - 0x2c], 0x7fa1
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], 0x34f9
mov dword [ebp - 0x1c], 2
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], 0xecce005a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x44]
setge bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
cmp ecx, 7
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge bl
sub ebx, 0xafa0b2b0
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, eax
setge cl
xor eax, eax
sub ecx, dword [ebp - 0x1c]
cmp ecx, 7
setle al
xor ecx, ecx
cmp eax, 0xfe78
setg cl
imul ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
sub edx, ecx
xor ecx, ecx
cmp edx, eax
setne cl
xor ebx, ebx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], 9
jne 0x1001d541
mov dword [ebp - 0x2c], 0xf2f470b
mov dword [ebp - 0x1c], ebx
jmp 0x1001d524
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x40], 0xe9472023
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x1001d4d4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
imul eax, ecx, 0x4295
cmp dword [ebp - 0x18], eax
jne 0x1001d515
mov ecx, ebx
cmp dword [ebp - 0x10], ebx
je 0x1001d517
mov ecx, edi
xor eax, eax
cmp ecx, edi
setg al
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff6
jne 0x1001d4bc
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x1001d539
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
inc dword [ebp - 0x24]
jmp 0x1001d4a6
inc dword [ebp - 0x10]
mov eax, 0x236da352
cmp dword [ebp - 0x10], 0x1d
jl 0x1001d3d3
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001d5b0
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x20], 0x6e52d8cb
mov dword [ebp - 0x20], 2
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001d580
push ebx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x20], 0xe42a43d9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
push ebx
neg ecx
push ebx
sbb ecx, ecx
push 0x15b5
inc ecx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
push 0x26ac
push ebx
mov dword [ebp - 0x20], eax
call dword [sym.imp.USER32.dll_ModifyMenuW]
push 2
pop eax
mov dword [ebp - 0x18], 0x125d16df
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
push eax
call fcn.1001ae23
mov dword [ebp - 4], ebx
push 2
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x10], ebx
pop edx
cmp dword [ebp - 0x10], 3
jge 0x1001d5e8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x50], edx
inc dword [ebp - 0x10]
jmp 0x1001d5d6
mov dword [ebp - 0x10], ebx
jmp 0x1001d5fd
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x5c]
mov dword [eax + ecx*4], 0xea2ff3e1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001d5ed
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
jl 0x1001d75c
mov dword [ebp - 0x10], 0x891f782a
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x28], 3
mov dword [ebp - 0x2c], 0x287
mov dword [ebp - 0x10], ebx
jmp 0x1001d644
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001d641
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 2
pop edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jle 0x1001d62f
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], ebx
jl 0x1001d732
push 3
lea ecx, [ebp - 0x68]
call fcn.1001ae23
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x24], ebx
jmp 0x1001d67b
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x68]
mov dword [eax + ecx*4], 0xfffa
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1001d66b
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x68]
inc dword [eax]
jne 0x1001d6d0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x50]
cmp dword [ebp - 0x48], eax
jg 0x1001d6b1
mov eax, dword [ebp - 0x68]
cmp dword [eax + 8], ebx
mov eax, ebx
je 0x1001d6b3
mov eax, edi
xor edx, edx
cmp eax, 0x7825
mov eax, dword [ebp - 0x4c]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x5c]
setg cl
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
dec eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
je 0x1001d6f8
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001d71e
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
jmp 0x1001d71e
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
neg eax
add eax, 0x156b
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001d71e
push ebx
push 0x2204
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea ecx, [ebp - 0x68]
call fcn.1001aea5
dec dword [ebp - 0x10]
jns 0x1001d655
push 2
pop edx
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], ebx
jl 0x1001d753
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001d74b
push ebx
push ebx
call dword [sym.imp.USER32.dll_EnumWindows]
dec dword [ebp - 0x10]
jns 0x1001d73a
push 2
pop edx
dec dword [ebp - 0x18]
jns 0x1001d60e
inc dword [ebp - 0x34]
je 0x1001d766
cmp dword [ebp - 0x1c], ebx
jne 0x1001d768
mov edi, ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x5c]
add ecx, dword [eax]
mov eax, dword [ebp - 0x18]
imul esi, ecx, 0xfffd
xor ecx, ecx
sub esi, 0x3a861d8d
cmp edi, eax
mov eax, dword [ebp - 0x5c]
setle cl
xor edx, edx
cmp ecx, esi
lea ecx, [ebp - 0x5c]
setg dl
mov dword [eax + 4], edx
call fcn.1001aea5
jmp 0x1001d9cd
xor ebx, ebx
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x1001d7bb
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x1001d7d0
push 0x1523
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 2
pop eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x20], ebx
push eax
call fcn.1001ae23
xor edi, edi
lea ecx, [ebp - 0x98]
inc edi
push 3
mov dword [ebp - 4], edi
call fcn.1001ae23
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x28], 0x4939e63a
push 4
call fcn.1001ae23
push 3
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 3
call fcn.1001ae23
mov dword [ebp - 0x20], 0xed832cb8
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x20], 0x2a6dfe16
mov dword [ebp - 0x2c], 0x24e8160a
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x10], ebx
jmp 0x1001d853
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x74]
mov dword [eax + ecx*4], 0xf4727cad
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001d843
push 3
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x1001d874
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x98]
mov dword [eax + ecx*4], 0xdcdf
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001d861
mov dword [ebp - 0x10], ebx
jmp 0x1001d88e
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x80]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1001d87e
mov dword [ebp - 0x10], ebx
jmp 0x1001d8ac
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], 0xa9c4ad15
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001d899
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2c], eax
mov esi, dword [eax + 4]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov ecx, dword [ebp - 0x34]
setg dl
cmp edx, 0xed66e5dc
sbb eax, eax
inc eax
imul eax, dword [ecx + 0xc]
xor ecx, ecx
cmp eax, esi
setle cl
xor eax, eax
cmp ecx, 4
setne al
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x74]
mov esi, dword [ebp - 0x2c]
setl cl
xor edx, edx
mov dword [eax], ecx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp dword [esi + 4], 0xfffffffa
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x18]
setne dl
add edx, dword [eax]
mov eax, dword [ebp - 0xac]
neg edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x98]
inc dword [eax]
cmp edx, ecx
mov eax, edi
cmovne eax, ebx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0x80]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x34]
setge cl
xor eax, eax
cmp ecx, dword [edx + 0xc]
setle al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x18]
jle 0x1001d983
cmp dword [esi + 4], ebx
jne 0x1001d985
mov edi, ebx
mov dword [ebp - 0x2c], edi
lea ecx, [ebp - 0xac]
call fcn.1001aea5
lea ecx, [ebp - 0x80]
call fcn.1001aea5
lea ecx, [ebp - 0x98]
call fcn.1001aea5
lea ecx, [ebp - 0x74]
call fcn.1001aea5
mov edx, dword [ebp - 0x3c]
mov dword [edx], ebx
cmp dword [edx], 2
jge 0x1001d9cd
mov esi, dword [ebp + 8]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0xf5f49900
inc dword [edx]
cmp dword [edx], 2
jl 0x1001d9bb
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret