Function at 0x100174f0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x280
push ebx
push esi
mov eax, 0xa023703a
mov dword [ebp - 0x12c], ecx
mov ebx, 0x8ade19d2
mov dword [ebp - 0x114], edx
mov dword [ebp - 4], ebx
xor esi, esi
mov dword [ebp - 0x2c], 0x8cf4c59c
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], eax
push edi
mov dword [ebp - 0x2c], 0x91f9e6a0
push 0xfffffffffffffff9
pop eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], eax
push 3
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 4], esi
pop ecx
jmp 0x1001757f
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x100], 0x648
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001756e
mov dword [ebp - 4], esi
jmp 0x1001759a
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x228], 8
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10017589
mov dword [ebp - 4], esi
jmp 0x100175b5
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x100], 0xe1d9
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x100175a4
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
push 5
pop edx
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xf8]
push 1
pop edi
cmp dword [ebp - 0x2c], eax
jne 0x1001760b
mov ecx, edi
cmp dword [ebp - 4], esi
jne 0x1001760d
mov ecx, esi
mov dword [ebp - 0x224], ecx
mov eax, dword [ebp - 0x15c]
sub ecx, eax
mov dword [ebp - 0x1b0], ecx
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
neg eax
add dword [ebp - 4], eax
mov dword [ebp - 0xc], 0x7222
mov dword [ebp - 0x24], 0xd9ba5f27
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x14], 0x7d02
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x10], 0xf4e55b65
mov dword [ebp - 0x18], esi
jmp 0x1001765e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x48], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10017654
cmp dword [ebp - 0xc], esi
je 0x1001766a
mov esi, edi
mov eax, dword [ebp - 0xc]
neg eax
jne 0x10017674
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setge dl
imul ecx, edx, 0x9a01
xor edx, edx
cmp ecx, eax
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
cmp edx, eax
setl cl
sub ecx, dword [ebp - 0x48]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp esi, ecx
mov ecx, dword [ebp - 0x48]
setne al
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0xc]
imul eax, ecx
cmp eax, 0xffffffff
je 0x100176ce
mov ecx, edi
cmp dword [ebp - 0x48], edx
jne 0x100176d0
mov ecx, edx
mov eax, dword [ebp - 0x48]
add eax, ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], edx
jmp 0x100176fc
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x100176f9
push 0x1799
push 0x1868
push edx
call dword [sym.imp.USER32.dll_RemoveMenu]
xor edx, edx
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff0
jg 0x100176dd
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], 0x8cf4c59c
mov dword [ebp - 0xc], 0x25b9b55b
mov dword [ebp - 0x18], edx
jmp 0x10017725
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x178], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10017718
push 0xfffffffffffffffc
pop ebx
mov dword [ebp - 0xc], ebx
jmp 0x100177b6
mov dword [ebp - 0x18], edx
jmp 0x10017745
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3c], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001773b
mov dword [ebp - 0x3c], edi
cmp dword [ebp - 0x3c], edx
jl 0x1001779c
mov dword [ebp - 0x18], 0x8358bd4d
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x10017776
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
xor edx, edx
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], edx
jl 0x10017797
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp + eax*4 - 0x178]
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x178], ecx
dec dword [ebp - 0x18]
jns 0x1001777e
dec dword [ebp - 0x3c]
jns 0x10017752
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x100177b3
push 0xe94
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor edx, edx
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffee
jg 0x10017736
mov dword [ebp - 0xc], 0xfffffffa
mov eax, 0xa023703a
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], eax
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x10], ebx
push 3
pop esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x10], 7
mov dword [ebp - 0x10], 0x442e119
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x10], 0x9e8bfa08
mov dword [ebp - 0x10], 0xca72cb56
mov dword [ebp - 0x10], 0xceaa9639
push 4
mov dword [ebp - 0x10], edx
pop ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], edx
jmp 0x1001783d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x218], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10017830
mov dword [ebp - 4], edx
jmp 0x10017858
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x21c], 0x42e4
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10017847
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [ebp - 0x20], edx
je 0x1001788c
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x10017900
push 0x25b9
push edx
push edx
call ebx
push eax
call dword [sym.imp.USER32.dll_RedrawWindow]
push 4
xor edx, edx
pop ecx
jmp 0x10017900
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x10], 0x770a77c8
mov dword [ebp - 0x10], 0x2ee6d058
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x10], 0x9214a9ba
mov dword [ebp - 0x10], 0x3631e19e
mov dword [ebp - 0x10], 0x8bdfadf6
mov dword [ebp - 0x10], 0x78acc4b7
mov dword [ebp - 0x10], 0x9a20b287
mov dword [ebp - 0x10], 5
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], 0x5d06de21
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x18], edx
jmp 0x100178f8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x208], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100178e7
dec dword [ebp - 0x2c]
dec dword [ebp - 0x14]
mov dword [ebp - 0x20], 0x91f9e6a0
mov dword [ebp - 0x24], 0x53b26bdd
mov dword [ebp - 0x18], edx
jmp 0x10017923
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x200], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10017916
mov dword [ebp - 0x24], edx
jmp 0x100179ab
mov dword [ebp - 0x18], edx
jmp 0x10017940
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x40], 0xcfb6318d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10017932
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x10017963
push edx
push edx
push 0x1bca
push 0x670
push edx
call dword [sym.imp.USER32.dll_InsertMenuW]
xor edx, edx
mov dword [ebp - 0x40], 0xfffffff3
jmp 0x100179a2
mov dword [ebp - 0x14], 0xffffffff
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 0x15
jmp 0x10017999
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x10017996
call ebx
push eax
call dword [sym.imp.USER32.dll_HideCaret]
xor edx, edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x3c
jge 0x10017982
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xffffffee
jge 0x1001796c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1a
jge 0x1001792d
push 0xfffffffffffffff9
pop eax
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x20], 0x160a
mov dword [ebp - 0x10], edi
mov dword [ebp - 4], edx
jmp 0x100179f6
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x84], 0x31d83293
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x100179e5
mov dword [ebp - 4], edx
jmp 0x10017a11
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x104], 0x8d6db9e
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10017a00
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], 0x9acb085b
mov dword [ebp - 0x18], edx
jmp 0x10017a3e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x70], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10017a34
cmp dword [ebp - 0x6c], edx
jne 0x10017a4c
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x7c]
xor edx, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x6c]
cmp eax, 0x7c15
mov eax, dword [ebp - 0x6c]
setg dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x70]
cmp edx, 0xabaf
setg cl
imul eax, ecx
cmp eax, dword [ebp - 0x14]
jl 0x10017a7d
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x24], 0x241a
test eax, eax
je 0x10017a8e
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x20], eax
push 0xfffffffffffffffe
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0x17571177
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x30], 0x8a66
mov dword [ebp - 0x30], 0x390e64c7
mov dword [ebp - 4], edx
jmp 0x10017af4
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x5c], 0xffff
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10017ae6
mov dword [ebp - 4], edx
jmp 0x10017b0f
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x194], 0x1d4b
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10017afe
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x16
jle 0x10017d97
mov dword [ebp - 4], 0x6e3245f1
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x28], 0x31fbf685
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], 0x3388a019
mov dword [ebp - 0x58], 0x85ca7dbc
mov dword [ebp - 0x50], 0xc15a2d12
mov dword [ebp - 4], edx
jmp 0x10017d55
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0xec], edi
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0x54], 0x8004c3d8
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xf0]
neg ecx
sbb ecx, ecx
xor ebx, ebx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor esi, esi
cmp ecx, dword [ebp - 0xe8]
jle 0x10017bb5
mov edx, edi
cmp dword [ebp - 0x14], esi
jne 0x10017bb7
mov edx, esi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xe8]
setge cl
xor ebx, ebx
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setl bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0xe8]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp dword [ebp - 0x18], ecx
jg 0x10017bef
cmp dword [ebp - 0x5c], esi
jne 0x10017bf4
cmp dword [ebp - 0x18], esi
je 0x10017bfb
mov edx, edi
cmp dword [ebp - 0x58], esi
jne 0x10017bfd
mov edx, esi
dec dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
cmp edx, eax
mov eax, dword [ebp - 0x5c]
sete cl
xor ebx, ebx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setge bl
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, ebx
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18c]
setg cl
xor edx, edx
cmp ecx, 0xfffffffe
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne cl
imul eax, ecx
xor edx, edx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x1c], edx
jmp 0x10017d46
mov dword [ebp - 0x28], 0x322662b2
mov dword [ebp - 0x20], 0xe253e14
cmp dword [ebp - 0x18], edx
jne 0x10017c77
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xc0], edx
je 0x10017c81
cmp dword [ebp - 0x194], edx
je 0x10017c81
mov edx, edi
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov esi, dword [ebp + eax*4 - 0xc0]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xf0], esi
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x54]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xc0]
inc eax
add eax, edx
cmp esi, eax
mov eax, dword [ebp - 0x1c]
setne cl
xor edx, edx
imul ecx, ecx, 0x8073
mov eax, dword [ebp + eax*4 - 0xc0]
add eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
mov dword [ebp + eax*4 - 0xc0], edx
mov eax, dword [ebp - 0x50]
cmp edx, eax
setge cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x30]
add eax, ecx
mov ecx, dword [ebp - 0x28]
imul ecx, eax
cmp ecx, dword [ebp - 0x5c]
jle 0x10017d30
xor edx, edx
mov byte [ebp - 5], dl
cmp byte [ebp - 5], dl
je 0x10017d43
push edx
push edx
push 0x10c
push edx
push 0x887
push edx
push 0x102f
push edx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x10017d41
mov dword [ebp - 0x28], 0xe9f1f6a3
mov dword [ebp - 0x28], 0xffffffff
inc dword [ebp - 0x20]
xor edx, edx
inc dword [ebp - 0x1c]
push 3
pop esi
cmp dword [ebp - 0x1c], esi
jle 0x10017c58
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x19
je 0x10017b59
mov dword [ebp - 4], 0xfffffff5
jmp 0x10017d7e
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x10017d7b
push edx
push edx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
xor edx, edx
inc dword [ebp - 4]
cmp dword [ebp - 4], 0xd
jg 0x10017d68
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x16
jg 0x10017b21
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 4], edx
jmp 0x10017dad
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x110], 0x648
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10017d9c
mov dword [ebp - 4], edx
jmp 0x10017dc8
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x24c], 8
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10017db7
mov dword [ebp - 4], edx
jmp 0x10017de3
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x110], 0xe1d9
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10017dd2
mov dword [ebp - 0x18], 0x5299dada
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x18], edx
jmp 0x10017e07
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1e8], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10017dfa
mov dword [ebp - 0x18], edx
jmp 0x10017e1d
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x10017e11
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x110]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], 5
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x20], eax
jne 0x10017e74
mov ecx, edi
cmp dword [ebp - 4], edx
jne 0x10017e76
mov ecx, edx
mov dword [ebp - 0x248], ecx
mov eax, dword [ebp - 0x14c]
sub ecx, eax
mov dword [ebp - 0x1d0], ecx
mov eax, dword [ebp - 0x10]
neg eax
push 0xfffffffffffffff6
sbb eax, eax
neg eax
add dword [ebp - 4], eax
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x28], 0x442e119
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x28], 0x9e8bfa08
mov dword [ebp - 0x28], 0xca72cb56
mov dword [ebp - 0x28], 0xceaa9639
push 4
mov dword [ebp - 0x28], edx
pop ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 4], edx
jmp 0x10017ef0
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x210], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10017ee3
mov dword [ebp - 4], edx
jmp 0x10017f0b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1f0], 0x42e4
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10017efa
cmp dword [ebp - 0x10], edx
je 0x10017f36
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x10017faa
push 0x25b9
push edx
push edx
call ebx
push eax
call dword [sym.imp.USER32.dll_RedrawWindow]
xor edx, edx
jmp 0x10017faa
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x10], 0x770a77c8
mov dword [ebp - 0x10], 0x2ee6d058
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x10], 0x9214a9ba
mov dword [ebp - 0x10], 0x3631e19e
mov dword [ebp - 0x10], 0x8bdfadf6
mov dword [ebp - 0x10], 0x78acc4b7
mov dword [ebp - 0x10], 0x9a20b287
mov dword [ebp - 0x10], 5
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], 0x5d06de21
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], edx
jmp 0x10017fa2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1e0], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10017f91
dec dword [ebp - 0x20]
dec dword [ebp - 0x30]
mov dword [ebp - 4], 0x8ade19d2
mov dword [ebp - 0x10], 0x48d327cb
mov dword [ebp - 0x10], 0xdb505206
mov dword [ebp - 0x28], 0xc8fc558b
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x18], edx
jmp 0x10017fed
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x270], 0xddbc3707
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10017fdc
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], 0x7222
mov dword [ebp - 0x2c], 0xd9ba5f27
mov dword [ebp - 0x20], edx
mov dword [ebp - 0xc], 0x7d02
mov dword [ebp - 0x10], 5
mov dword [ebp - 0x10], 0xf4e55b65
mov dword [ebp - 0x18], edx
jmp 0x10018030
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10018026
mov esi, edi
cmp dword [ebp - 0x14], edx
jne 0x1001803e
mov esi, edx
mov eax, dword [ebp - 0x14]
neg eax
jne 0x10018048
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setge dl
imul ecx, edx, 0x9a01
xor edx, edx
cmp ecx, eax
setg dl
xor ecx, ecx
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setl cl
sub ecx, dword [ebp - 0x4c]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp esi, ecx
mov ecx, dword [ebp - 0x4c]
setne al
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
imul eax, ecx
cmp eax, 0xffffffff
je 0x100180a2
mov ecx, edi
cmp dword [ebp - 0x4c], edx
jne 0x100180a4
mov ecx, edx
mov eax, dword [ebp - 0x4c]
add eax, ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], edx
jmp 0x100180d0
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x100180cd
push 0x1799
push 0x1868
push edx
call dword [sym.imp.USER32.dll_RemoveMenu]
xor edx, edx
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xfffffff0
jg 0x100180b1
push 3
pop esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 4], edx
jmp 0x100180f2
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x128], 0x38a1f949
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x100180e1
mov dword [ebp - 4], edx
jmp 0x1001810d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1fc], 0xfe04822b
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x100180fc
mov eax, dword [ebp - 0x128]
neg eax
push 2
sbb eax, eax
neg eax
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0xc], edx
pop ecx
jmp 0x1001813b
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x1fc], edx
jne 0x10018140
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jle 0x1001812c
mov dword [ebp - 0x20], 0x8cf4c59c
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x10], 0xfffffff6
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], edi
push 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 0xed680444
mov dword [ebp - 0x10], 0xfffffffa
mov dword [ebp - 0x10], 0x7c10
mov dword [ebp - 4], edx
cmp dword [ebp - 4], eax
jge 0x1001819b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x280], edi
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x10018188
mov dword [ebp - 4], edx
jmp 0x100181b1
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x98], 0x18a52733
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x100181a0
dec dword [ebp - 0x98]
mov dword [ebp - 0x14], 0x25b9b55b
mov dword [ebp - 0xc], edx
jmp 0x100181d5