Function at 0x1001a322
Capabilities:
Enumerate gui resources
Get common file path
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x208
push ebx
xor ebx, ebx
mov dword [ebp - 0x38], 0xfffffff7
push esi
mov byte [ebp - 0xd], bl
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0xbc], ecx
cmp byte [ebp - 0xd], bl
je 0x1001a359
push 0x56e
push ebx
call edi
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x1001a370
push ebx
push 0x1d5f
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x48], 0x369bd69
mov dword [ebp - 0x28], 0xca9f8d19
mov dword [ebp - 0x34], eax
push 3
mov dword [ebp - 0x24], 0xd21462cc
mov dword [ebp - 0xc], ebx
pop ecx
jmp 0x1001a3aa
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1a4], 0xfffffff9
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x1001a399
mov dword [ebp - 0xc], ebx
jmp 0x1001a3c5
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x208], 0xfffffffb
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x1001a3b4
mov dword [ebp - 0xc], ebx
jmp 0x1001a3e0
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x164], 7
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x1001a3cf
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
dec dword [ebp - 0x34]
test eax, eax
je 0x1001a3fe
cmp dword [ebp - 0x24], ebx
jne 0x1001a3fe
mov eax, dword [ebp - 0x160]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x18]
add eax, 0x5a8df044
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x38], 0xffffffff
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x1001a438
push ebx
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x1001a461
push ebx
push 0x84f
push 0xe0e
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
mov dword [ebp - 4], 7
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 4], 0xffffffee
jmp 0x1001a4e5
mov dword [ebp - 0x18], 0x7008b15e
mov dword [ebp - 0x24], 0x6d21cd43
mov dword [ebp - 8], ebx
jmp 0x1001a499
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x6c], 0x4615
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001a48b
cmp dword [ebp - 0x68], ebx
jne 0x1001a4eb
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 4], ebx
jne 0x1001a4af
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
xor ecx, ecx
cmp eax, 0xffffffff
mov eax, dword [ebp - 4]
setne cl
imul eax, ecx
xor ecx, ecx
cmp eax, 0x69bd697e
setle cl
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
imul eax, dword [ebp - 0x68]
mov dword [ebp - 0x24], eax
inc dword [ebp - 4]
cmp dword [ebp - 4], 0xe
jne 0x1001a478
mov dword [ebp - 0x48], 0xffff
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x34], 0xfff9
mov dword [ebp - 8], ebx
jmp 0x1001a524
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1d4], 0xdb856137
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x1001a513
mov dword [ebp - 8], ebx
jmp 0x1001a540
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1c4], 0xe55a4419
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001a52f
mov dword [ebp - 0x1c], ebx
jmp 0x1001a567
mov dword [ebp - 0x24], 0x1836
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x12
je 0x1001a54b
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], ebx
jl 0x1001a608
mov dword [ebp - 0x38], 0xda7bc999
mov dword [ebp - 0x18], 0xfdb69689
mov dword [ebp - 0x38], 0xfffffff7
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x30], 0xcea2ff3e
mov dword [ebp - 0x20], 0xbd53
mov dword [ebp - 0x24], 0x1c73
mov dword [ebp - 4], ebx
jmp 0x1001a5c4
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x15c], 0xe6b6cd33
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x1001a5b3
dec dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x1d4]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setle dl
mov dword [ebp - 0x18], edx
dec dword [ebp - 0x1c]
jns 0x1001a57d
mov dword [ebp - 0x18], 0x81ff7b51
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x28], 0xc369
mov dword [ebp - 8], ebx
jmp 0x1001a633
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xec], 6
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x1001a622
mov dword [ebp - 8], ebx
jmp 0x1001a64f
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1fc], 1
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x1001a63e
mov dword [ebp - 0x1c], 0x1b
jmp 0x1001a756
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 8], ebx
jmp 0x1001a67a
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x64], 0x770
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001a66c
mov dword [ebp - 8], ebx
jmp 0x1001a696
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x118], 0x23758185
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001a685
mov dword [ebp - 4], 2
cmp dword [ebp - 4], ebx
jl 0x1001a750
mov dword [ebp - 0x18], 0xfffffff7
xor ecx, ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xec]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x64]
cmp eax, 0x451d77f1
mov eax, dword [ebp - 0x64]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 4]
setne dl
xor ebx, ebx
mov eax, dword [ebp + eax*4 - 0xec]
cmp eax, edx
mov eax, dword [ebp - 0x64]
setl bl
xor ecx, ecx
sub ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xec]
cmp eax, ebx
setle cl
xor ebx, ebx
mov dword [ebp - 0x1fc], ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xec]
mov dword [ebp - 0x18], 0x3a15
imul eax, dword [ebp - 0x18], 0x7557
mov dword [ebp - 0x114], eax
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x1001a747
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
dec dword [ebp - 4]
jns 0x1001a6ac
dec dword [ebp - 0x28]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff5
jge 0x1001a661
mov dword [ebp - 4], 7
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 4], 0xffffffee
jmp 0x1001a7e4
mov dword [ebp - 0x18], 0x7008b15e
mov dword [ebp - 0x24], 0x6d21cd43
mov dword [ebp - 8], ebx
jmp 0x1001a798
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x7c], 0x4615
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001a78a
cmp dword [ebp - 0x78], ebx
jne 0x1001a7ea
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 4], ebx
jne 0x1001a7ae
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
xor ecx, ecx
cmp eax, 0xffffffff
mov eax, dword [ebp - 4]
setne cl
imul eax, ecx
xor ecx, ecx
cmp eax, 0x69bd697e
setle cl
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
imul eax, dword [ebp - 0x78]
mov dword [ebp - 0x24], eax
inc dword [ebp - 4]
cmp dword [ebp - 4], 0xe
jne 0x1001a777
mov dword [ebp - 8], ebx
jmp 0x1001a800
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x98], 0x18ab9c27
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x1001a7ef
mov dword [ebp - 8], ebx
jmp 0x1001a81c
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x124], 0xfffffffc
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x1001a80b
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0x996a5308
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 0xfffffffe
mov dword [ebp - 4], ebx
jmp 0x1001a854
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xb0], 0xfffffff9
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x1001a843
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x1001a86c
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
mov dword [ebp - 4], 2
cmp dword [ebp - 4], ebx
jl 0x1001a996
push 4
mov dword [ebp - 0x24], 1
mov dword [ebp - 0xc], ebx
pop ecx
jmp 0x1001a89c
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x174], 0xeb4c8f0d
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x1001a88b
mov dword [ebp - 0xc], ebx
jmp 0x1001a8b7
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xb8], 0x4d07ddbf
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x1001a8a6
mov dword [ebp - 0xc], ebx
jmp 0x1001a8cf
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x18c], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x1001a8c2
mov dword [ebp - 0x16c], 0x4a0d461e
xor ecx, ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xb0]
mov dword [ebp - 0x18], 0x1dfe936b
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x18]
neg edx
cmp eax, edx
setl cl
xor edx, edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0xb8]
sub ecx, eax
mov eax, dword [ebp - 0xac]
sub ecx, eax
mov eax, dword [ebp - 0xb0]
cmp ecx, eax
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xa8]
sete dl
add ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 4]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov eax, dword [ebp - 4]
mov edx, dword [ebp + eax*4 - 0xb0]
mov eax, dword [ebp - 0x18]
cmp eax, 6
setge cl
xor eax, eax
cmp ecx, 0xffffffff
setne al
cmp edx, eax
je 0x1001a97a
mov eax, dword [ebp - 0x16c]
mov eax, dword [ebp - 0xb8]
xor ecx, ecx
cmp eax, 0xfffc
setl cl
mov dword [ebp - 0x24], ecx
dec dword [ebp - 4]
jns 0x1001a87c
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xffffffe6
push 0xfffffffffffffffd
pop edx
jle 0x1001b616
xor edx, edx
inc edx
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0x34], 0x321210cb
mov dword [ebp - 0x14], ebx
mov dword [ebp - 8], 0x7bededb5
mov dword [ebp - 0x20], 0xcf7921e1
mov dword [ebp - 4], edx
mov dword [ebp - 8], ebx
jmp 0x1001a9de
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x58], 0xfffffff6
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x1001a9d0
mov dword [ebp - 8], ebx
jmp 0x1001a9f9
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x180], 0xd5fb
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x1001a9e8
mov eax, dword [ebp - 0x14]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], ebx
jne 0x1001aa30
mov eax, dword [ebp - 8]
mov ecx, 0xfe8b0d19
cmp ecx, eax
mov eax, dword [ebp - 0x14]
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setl cl
mov dword [ebp - 8], ecx
cmp dword [ebp - 0x14], ebx
jne 0x1001aa2d
mov eax, ebx
jmp 0x1001aa32
xor edx, edx
inc edx
mov eax, edx
imul eax, eax, 0x2f67
xor ecx, ecx
cmp eax, 0xffffffff
setle cl
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x14]
cmp edx, eax
sete cl
mov dword [ebp - 4], ecx
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], ebx
jl 0x1001aab0
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x58], ebx
jne 0x1001aab0
mov eax, dword [ebp - 8]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov edx, dword [ebp + eax*4 - 0x58]
mov eax, dword [ebp - 0x20]
cmp eax, 0xfffffff7
setl cl
cmp ecx, edx
jg 0x1001aa98
cmp dword [ebp - 0x180], ebx
je 0x1001aa98
xor eax, eax
inc eax
jmp 0x1001aa9a
mov eax, ebx
xor ecx, ecx
cmp eax, 0x18bd8502
mov eax, dword [ebp - 4]
sete cl
mov dword [ebp + eax*4 - 0x58], ecx
dec dword [ebp - 4]
jns 0x1001aa66
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x30], 0x136b8055
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc]
sub ecx, 0xffffa476
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
setl cl
sub edx, ecx
imul edx, eax
mov dword [ebp - 0x90], edx
cmp edx, dword [ebp - 0x1c]
je 0x1001b270
mov dword [ebp - 0x38], 0xfffffff7
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x1001ab1c
push 0x56e
push ebx
call edi
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x1001ab34
push ebx
push 0x1d5f
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x44], 0xc013
xor edx, edx
mov dword [ebp - 0x20], 0xfffffff9
inc edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x18], 0x6b65720b
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x1001ab73
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x138], 0x3dfa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1001ab62
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
neg eax
je 0x1001ab97
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, edx
cmp dword [ebp - 0x18], 0x4320e32c
jne 0x1001ab99
mov eax, ebx
mov dword [ebp - 0x14], eax
xor ecx, ecx
mov dword [ebp - 0x14], 0x203bd652
mov eax, dword [ebp - 0x14]
cmp eax, edx
setle cl
add ecx, 0xffff
jne 0x1001abbb
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x24], edx
xor edx, edx
mov dword [ebp - 0x14], 0x62cf9e8b
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x44]
dec dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
add eax, 0x95a2
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x14]
imul eax, eax, 0x44f8
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, 6
jl 0x1001b0b1
mov dword [ebp - 8], 8
mov dword [ebp - 0x18], 0x478c9dff
mov dword [ebp - 0x14], ebx
jmp 0x1001ac48
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x154], 0x17cd9532
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1001ac37
mov dword [ebp - 8], ebx
jmp 0x1001ace1
mov dword [ebp - 4], 1
mov dword [ebp - 0x18], 0x2f67ab6c
mov dword [ebp - 4], ebx
jmp 0x1001acd8
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], 0xb597
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 8]
sub ecx, eax
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
cmp eax, 0x2c512dc6
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
imul eax, ecx, 0x8b9b
xor ecx, ecx
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x18]
imul edx, dword [ebp - 4]
sub edx, dword [ebp - 0x20]
add edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
cmp eax, edx
setne cl
mov dword [ebp - 0x150], ecx
mov eax, dword [ebp - 4]
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xfffffffa
jl 0x1001ac69
inc dword [ebp - 8]
cmp dword [ebp - 8], 8
jl 0x1001ac56
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x1001acff
push 0x1c7c
call dword [sym.imp.USER32.dll_GetQueueStatus]
cmp dword [ebp - 0x44], ebx
jne 0x1001b613
mov dword [ebp - 4], 0x76820624
push 4
mov dword [ebp - 0x28], 1
mov dword [ebp - 8], ebx
pop ecx
jmp 0x1001ad2f
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x14c], 5
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x1001ad1e
mov dword [ebp - 8], ebx
jmp 0x1001ad46
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1ec], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x1001ad39
mov dword [ebp - 4], 0xffffffe9
jmp 0x1001ae49
mov dword [ebp - 8], 0xf55e00fe
mov dword [ebp - 0xc], 0x277ebd00
cmp dword [ebp - 8], ebx
je 0x1001ada6
mov dword [ebp - 0x24], 0x8d92
xor edx, edx
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
add ecx, 0x1de6
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0xffffffff
setle al
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
jmp 0x1001ae46
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x18], 0xfffffff8
mov dword [ebp - 0x14], ebx
jmp 0x1001adca
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1b0], 0xd8d34108
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001adb9
cmp dword [ebp - 0x28], ebx
jne 0x1001ae3d
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
sub ecx, eax
mov dword [ebp - 0x144], 0xffffffff
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
cmp eax, ecx
setne dl
cmp edx, 0xffffffff
jg 0x1001ae0b
cmp dword [ebp - 0x20], ebx
je 0x1001ae0b
xor eax, eax
inc eax
jmp 0x1001ae0d
mov eax, ebx
mov dword [ebp - 0x18], eax
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setne dl
xor ecx, ecx
imul edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
cmp edx, eax
setg cl
mov dword [ebp - 0x1e4], ecx
cmp ecx, 0x59785734
je 0x1001ae3d
mov eax, ebx
jmp 0x1001ae40
xor eax, eax
inc eax
mov dword [ebp - 0x1a8], eax
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x1b
jge 0x1001ad57
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x140], eax
mov byte [ebp - 0x29], bl
mov dword [ebp - 4], 0xe071
mov dword [ebp - 0xc], 0xe4cf
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x18], 0xf51885a1
mov dword [ebp - 0x24], 0x4eb856a7
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x1001ae9a
push ebx
push 0x60
call esi
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [ebp - 4], ebx
je 0x1001aeae
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
cmp eax, 0x9031
je 0x1001aebe
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
cmp eax, 0x59515ed
setl cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
cmp byte [ebp - 0x29], 0
je 0x1001b160
mov dword [ebp - 4], 0x2e91a049
mov dword [ebp - 0x38], 0x3ac16b40
mov dword [ebp - 0x14], ebx
jmp 0x1001af2c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa4], 0x6b5b3847
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001af1b
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1001af41
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov dword [ebp - 4], 0x10
cmp dword [ebp - 4], 0xfffffff1
jne 0x1001b0a3
push 0xfffffffffffffffd
pop edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x28], ebx
push 2
mov dword [ebp - 0x20], 9
mov dword [ebp - 0xc], ebx
pop ecx
jmp 0x1001af82
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x12c], 4
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x1001af71
mov dword [ebp - 0xc], ebx
jmp 0x1001af9d
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x100], 0x237f4a7d
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x1001af8c
mov dword [ebp - 0xc], ebx
jmp 0x1001afb9
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xd0], 0xffffffff
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x1001afa8
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x1001b041
inc dword [ebp - 0xf8]
xor ecx, ecx
mov dword [ebp - 0x28], 0x243b
mov eax, dword [ebp - 0x28]
cmp eax, 0x6194
setne cl
sub ecx, dword [ebp - 0x20]
je 0x1001afea
cmp dword [ebp - 4], ebx
jne 0x1001aff3
cmp dword [ebp - 4], ebx
jne 0x1001aff3
mov eax, ebx
jmp 0x1001aff6
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov eax, dword [ebp - 0x28]
test eax, eax
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x9c]
setne cl
add ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setg dl
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0xa0]
jl 0x1001b035
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xd0], ebx
jne 0x1001b041
xor edx, edx
inc edx
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x9c]
setge cl
add eax, ecx
je 0x1001b065
cmp dword [ebp - 4], ebx
je 0x1001b065
xor edx, edx
inc edx
jmp 0x1001b067
mov edx, ebx
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 4]
setge cl
lea eax, [ecx - 1]
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0xa0]
cmp edx, eax
setne cl
mov dword [ebp - 0x9c], ecx
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xfffffff1
je 0x1001af55
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegConnectRegistryW]
jmp 0x1001b160
mov dword [ebp - 8], ebx
mov dword [ebp - 0x24], 0x1f7d9671
mov dword [ebp - 8], ebx
jmp 0x1001b123
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 4], ebx
jmp 0x1001b11a
mov dword [ebp - 0x18], 0x65786371
cmp dword [ebp - 0x20], ebx
jne 0x1001b0e7
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov ecx, 0xad816f93
mov eax, dword [ebp - 0x18]
cmp ecx, eax
sbb eax, eax
neg eax
cmp eax, 0xdb5cabfc
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sub eax, 0x270f9e3d
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
inc dword [ebp - 4]
cmp dword [ebp - 4], 8
jg 0x1001b0cf
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffff2
jl 0x1001b0c0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0xcede
push eax
xor dl, dl
lea ecx, [ebp - 0x44]
call fcn.1001b8c2
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0xc]
pop ecx
neg eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], 0x110c93b4
mov dword [ebp - 0x18], 0x9fcfbce0
mov dword [ebp - 0x14], ebx
jmp 0x1001b184
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x198], 0x7165
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001b173
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 0xc], 0xfffffff3
jge 0x1001b220
mov dword [ebp - 0x20], 0xb0cb8ce3
mov dword [ebp - 0x24], 0xffff
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
neg edx
push 0
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
xor ebx, ebx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setl bl
sub ebx, 0xeda8
sub ebx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, eax
mov eax, dword [ebp - 0x24]
pop ebx
sete dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x20]
setle cl
cmp ecx, 1
sbb ecx, ecx
add edx, 0xffff0009
inc ecx
add edx, ecx
xor ecx, ecx
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setle cl
mov dword [ebp - 0x30], ecx
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xfffffff3
jl 0x1001b197
mov dword [ebp - 0xc], ebx
jmp 0x1001b236
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x198], 0x488a
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x1001b225
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1001b329
push 0x3187
push 0x2604
push 0x5856
push 0x5dc
push 0x1e1d
push ebx
call fcn.1001c000
add esp, 0x18
jmp 0x1001b329
mov dword [ebp - 4], 0x6c42336f
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x34]
add eax, 0xc454
sub ecx, eax
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xcd53b18
setle al
imul eax, dword [ebp - 0x74]
cmp eax, 0x1ef3
jne 0x1001b2a8
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x48]
xor edx, edx
cmp eax, 0x73e
mov eax, dword [ebp - 0xc]
setg dl
xor ecx, ecx
cmp eax, edx
setne cl
add ecx, dword [ebp - 0x90]
jne 0x1001b2d0
cmp dword [ebp - 4], ebx
jne 0x1001b2d0
mov edx, ebx
jmp 0x1001b2d3
xor edx, edx
inc edx
mov eax, dword [ebp - 0x94]
xor ecx, ecx
cmp edx, eax
push ebx
setle cl
push 0x7759
push 0x6aa5
lea edx, [ecx + 0x5946]
xor ecx, ecx
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 4]
cmp edx, eax
setne cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x3d]
push eax
mov byte [ebp - 0x3d], bl
call fcn.1001d8eb
add esp, 0x10
mov dword [ebp - 0xc], 0xbac64a68
mov eax, 0x1dba
mov dword [ebp - 0x8c], eax
xor edx, edx
mov dword [ebp - 0x88], eax
inc edx
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x38], 0x27b1aa43
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x24], 0x278539ae
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x3c], 0x52a3e9f7
mov dword [ebp - 0x14], ebx
jmp 0x1001b389
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x13c], 2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1001b378
mov dword [ebp - 0xc], ebx
jmp 0x1001b569
mov dword [ebp - 8], 0xa5043c4a
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x14], 0x950cfdfe
mov dword [ebp - 0x3c], 0xd1a38ad7
mov dword [ebp - 0x14], ebx
jmp 0x1001b3c4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1dc], 0x6ce2e7c5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1001b3b3
mov dword [ebp - 8], ebx
jmp 0x1001b55c
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x28], ebx
mov dword [ebp - 4], ebx
jmp 0x1001b3ef
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x4c], 6
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x1001b3e1
mov dword [ebp - 4], ebx
jmp 0x1001b40a
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x130], 0x69ed994a
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x1001b3f9
mov dword [ebp - 0x4c], ebx
jmp 0x1001b54f
mov dword [ebp - 4], 0xffffffff
mov eax, 0xf2ca1253
mov dword [ebp - 0x5c], 0x1ad31fc5
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x14], ebx
jmp 0x1001b458
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xf4], 0x9e206048
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1001b447
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x8c], ebx
jne 0x1001b4b4
cmp dword [ebp - 8], ebx
je 0x1001b482
mov dword [ebp - 0x20], 0x6d8
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x4c]
inc eax
jne 0x1001b484
mov edx, ebx
mov eax, dword [ebp - 8]
sub edx, eax
sub edx, dword [ebp - 8]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x8c]
cmp edx, eax
setge cl
xor edx, edx
inc edx
cmp ecx, dword [ebp - 8]
jg 0x1001b4b4
mov ecx, ebx
cmp dword [ebp - 0x80], ebx
je 0x1001b4b6
mov ecx, edx
xor eax, eax
cmp ecx, edx
setl al
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x20], ebx
je 0x1001b539
dec dword [ebp - 0x28]
xor edx, edx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
cmp edx, 0xfffffffc
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x28]
setle cl
xor edx, edx
cmp eax, ecx
setge dl
sub edx, dword [ebp - 0xc]
neg edx
sbb edx, edx
inc edx
imul eax, edx, 0x3c8d
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
sub edx, 0x1799
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf0]
cmp edx, eax
setl cl
xor edx, edx
inc edx
cmp ecx, edx
jae 0x1001b539
cmp dword [ebp - 0x5c], ebx
jne 0x1001b539
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0xf0]
add eax, 9
mov dword [ebp - 0x110], eax
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 3
jle 0x1001b417
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jle 0x1001b3d2
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xfffffff9
jge 0x1001b396
mov dword [ebp - 0xc], 3
cmp dword [ebp - 0xc], ebx
jl 0x1001b603
mov dword [ebp - 0x30], 0x63aebc01
mov dword [ebp - 0x3c], 0x8d280d01
mov dword [ebp - 0x14], ebx
jmp 0x1001b5a7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1bc], 0xc03a2c1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001b596
mov eax, dword [ebp - 0xc]
push 0xfffffffffffffffd
mov eax, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x38], 0x6b51
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x30]
add eax, ecx
pop ecx
cmp ecx, eax
mov dword [ebp - 0x1bc], eax
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0xc]
jns 0x1001b583
mov eax, dword [ebp - 0x34]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe6
jg 0x1001a9a9
push 0xfffffffffffffffd
pop edx
mov dword [ebp - 4], 0x4c266d8f
mov eax, 0x680d
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x5c], 0xa08d
mov dword [ebp - 0x30], 0xc888bc06
push 2
mov dword [ebp - 0x38], 0xee692d35
mov dword [ebp - 4], ebx
pop ecx
jmp 0x1001b665
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x54], 0x9b55bb2c
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001b657
mov dword [ebp - 4], ebx
jmp 0x1001b680
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xc4], 0x9a67
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001b66f
mov dword [ebp - 0x50], ebx
cmp dword [ebp - 0x50], edx
jle 0x1001b7b3
push 7
pop esi
mov dword [ebp - 0x1c], 0x6edad94e
xor ecx, ecx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x34], 0x945ad33d
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], 0xd20b
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
imul edx, eax
mov eax, dword [ebp - 0x1c]
push 0
sub edx, eax
mov eax, dword [ebp - 0x1c]
cmp edx, eax
pop edx
setne cl
cmp ecx, 0xc34ccbb2
sbb eax, eax
neg eax
imul eax, eax, 0xc9fe
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x54]
sub eax, 0x486c
mov eax, dword [ebp - 0x34]
sets dl
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
sub ecx, esi
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x34], 8
mov ecx, dword [ebp - 0x18]
sbb eax, eax
xor edx, edx
neg eax
sub ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 4]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x38]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xdc]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x50]
setle cl
xor edx, edx
cmp eax, ecx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xdc]
setle dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xc4]
setne dl
add eax, edx
je 0x1001b78c
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x3c], 0xffffffff
jl 0x1001b795
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 4], eax
dec dword [ebp - 0x50]
push 0xfffffffffffffffd
pop eax
cmp dword [ebp - 0x50], eax
jg 0x1001b694
mov dword [ebp - 4], ebx
jmp 0x1001b803
mov dword [ebp - 0x24], 0x8ffe
xor ecx, ecx
mov eax, dword [ebp - 0x24]
cmp eax, 1
setl cl
imul eax, ecx, 0x6156
mov dword [ebp - 0x50], eax
test eax, eax
jne 0x1001b7dd
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc4]
xor edx, edx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x24]
test eax, eax
mov eax, dword [ebp - 0x30]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x38], ecx
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffe5
jne 0x1001b7b8
mov eax, dword [ebp - 0xc8]
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, dword [ebp - 0xbc]
mov edi, edx
mov esi, eax
call fcn.1001a2ab
add eax, esi
add eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret