Function at 0x1001cd65
Capabilities:
Accept command line arguments
Delete file
Get graphical window text

Disassembly:
mov eax, 0x1005a7f9
call fcn.10059bc0
sub esp, 0x214
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x48], ecx
xor edi, edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x34], edx
inc edi
mov dword [ebp - 0x1c], ebx
jmp 0x1001cd98
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1ac], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1001cd8b
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1001cdb1
push ebx
push 0x287
call dword [sym.imp.USER32.dll_GetWindowInfo]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1001cdc0
push ebx
call dword [sym.imp.USER32.dll_RegisterClassA]
mov dword [ebp - 0x1c], 0xf5540d7f
mov dword [ebp - 0x1c], ebx
jmp 0x1001ce51
push edi
lea ecx, [ebp - 0xf8]
call fcn.1001013f
mov dword [ebp - 0x2c], ebx
jmp 0x1001cdf3
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 0x951ea66e
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jl 0x1001cde0
cmp dword [ebp - 0x1c], ebx
je 0x1001ce39
mov dword [ebp - 0x1a4], ebx
mov dword [ebp - 0x1a0], ebx
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], ebx
jmp 0x1001ce2b
mov dword [ebp + eax*4 - 0x1a4], 0xda4d
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 4
mov eax, dword [ebp - 0x2c]
jl 0x1001ce1d
mov dword [ebp - 0x2c], eax
jmp 0x1001ce43
mov eax, dword [ebp - 0xf8]
cmp dword [eax], ebx
jne 0x1001ce5d
lea ecx, [ebp - 0xf8]
call fcn.100101c1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jle 0x1001cdcf
jmp 0x1001ce68
lea ecx, [ebp - 0xf8]
call fcn.100101c1
mov eax, dword [0x10603f04]
test al, 1
jne 0x1001ceff
or eax, edi
mov dword [0x10603f04], eax
push ebx
mov dword [ebp - 4], ebx
push ebx
mov dword [0x10603f30], ebx
mov dword [0x10603f34], ebx
call fcn.100129be
mov dword [0x10603f30], eax
mov dword [0x10603f38], ebx
mov dword [0x10603f40], ebx
mov byte [ebp - 4], 2
mov ecx, 0x10603f38
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xb8]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x1b0]
mov dword [0x10603f4c], 0x3f800000
push eax
mov dword [0x10603f3c], ebx
call fcn.10012762
push 0x1005b334
mov dword [0x10603f44], 7
mov dword [0x10603f48], 8
call fcn.100448cc
or esi, 0xffffffff
pop ecx
mov dword [ebp - 4], esi
jmp 0x1001cf02
or esi, 0xffffffff
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x20], 0x5ac3d6c1
mov dword [ebp - 0x30], 0x3d97
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x1c], ebx
jmp 0x1001cf34
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xcc], 0xa21b78cd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1001cf23
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], edi
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
dec eax
neg eax
push 4
sbb eax, eax
xor edx, edx
inc eax
cmp eax, edi
mov eax, dword [ebp - 0x20]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
mov ecx, 0x9c821f99
mov eax, dword [ebp - 0x24]
sub eax, 3
cmp ecx, eax
lea ecx, [ebp - 0xa8]
sbb eax, eax
neg eax
cmp eax, 0xa9c79ebe
sbb eax, eax
neg eax
mov dword [ebp - 0xcc], eax
imul eax, dword [ebp - 0x48], 0x2710
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x2c], 0x5cdb
mov dword [ebp - 0x30], 0xe05dae5a
call fcn.1001013f
push edi
lea ecx, [ebp - 0x194]
mov dword [ebp - 4], 3
call fcn.1001013f
mov byte [ebp - 4], 4
mov dword [ebp - 0x20], 0x599
mov dword [ebp - 0x14], ebx
jmp 0x1001cff4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1001cfe5
mov dword [ebp - 0x14], ebx
jmp 0x1001d012
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x194]
mov dword [eax + ecx*4], 0x44dcd6a9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1001cfff
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
je 0x1001d0c0
mov dword [ebp - 0x1c], 0xeb77278f
mov dword [ebp - 0x28], 0x1b8ce229
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x28], 0x70e74bb9
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0x89bb643c
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], 0xbb531eaa
mov dword [ebp - 0x28], 0xb861a716
mov dword [ebp - 0x28], 0xbae9140d
mov dword [ebp - 0x28], 0xc3cc8c9f
mov dword [ebp - 0x2c], 0xffffffe7
cmp dword [ebp - 0x2c], 0x2a
jle 0x1001d0b8
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x24], 0xa2215256
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
sub eax, 0xffff0009
neg eax
sbb eax, eax
inc eax
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x194]
mov dword [eax], edi
inc dword [ebp - 0x1c]
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x2a
jg 0x1001d081
dec dword [ebp - 0x20]
jmp 0x1001d1ac
mov dword [ebp - 0x30], 0x13bc
cmp dword [ebp - 0x30], 0x1792
jle 0x1001d0fc
mov esi, ebx
mov edi, ebx
mov ebx, 0x17f3
mov eax, edi
mov ecx, 0x10602dd8
cdq
push edx
push eax
call fcn.1000fdea
add edi, esi
dec ebx
jne 0x1001d0d9
inc esi
cmp esi, 0x16d4
jl 0x1001d0d2
xor edi, edi
inc edi
or esi, 0xffffffff
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 5
cmp dword [ebp - 0x30], 0x109c
jge 0x1001d13f
mov edx, 0x10008998
mov ecx, 0x10602dd8
call fcn.10012a98
jmp 0x1001d13f
mov dword [ebp - 0x30], 0x66072949
mov dword [ebp - 0x28], 0x4b1e4f37
dec dword [ebp - 0x14]
mov dword [ebp - 0x14], ebx
jmp 0x1001d1a6
cmp dword [ebp - 0x14], ebx
je 0x1001d188
mov eax, dword [ebp - 0x14]
mov ecx, 0xc1d3a0c9
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa8]
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x14]
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setg cl
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], ebx
je 0x1001d188
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x1001d155
lea ecx, [ebp - 0x194]
call fcn.100101c1
lea ecx, [ebp - 0xa8]
mov dword [ebp - 4], esi
call fcn.100101c1
lea eax, [ebp - 0x60]
push eax
call fcn.1001e960
mov eax, dword [eax]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x1c], 0x12
jmp 0x1001d24e
mov dword [ebp - 0x24], 0xbf390197
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x28], 0x2b90f998
cmp dword [ebp - 0x24], ebx
je 0x1001d246
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, 0x2749
setl cl
xor eax, eax
cmp ecx, 0x8875
setle al
xor edx, edx
sub eax, dword [ebp - 0x28]
add eax, 0x45bb
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, edi
setle cl
neg ecx
jne 0x1001d248
mov eax, ebx
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xc
jl 0x1001d1e5
cmp dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
je 0x1001d5f5
push 4
lea ecx, [ebp - 0x140]
call fcn.1001013f
mov dword [ebp - 4], 7
mov dword [ebp - 0x2c], 0x29bf3901
mov dword [ebp - 0x14], 0xbe4438be
mov dword [ebp - 0x1c], ebx
jmp 0x1001d29e
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], 0xac204e2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1001d28b
mov esi, dword [ebp - 0x140]
mov dword [ebp - 0x20], esi
mov dword [esi + 8], ebx
push edi
lea ecx, [ebp - 0x74]
call fcn.1001013f
mov byte [ebp - 4], 8
lea eax, [ebp - 0x1d0]
push dword [ebp + 8]
xorps xmm0, xmm0
mov dword [ebp - 0x80], ebx
push eax
lea eax, [ebp - 0x1e0]
mov dword [ebp - 0x7c], ebx
push eax
push ebx
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x78], ebx
movdqu xmmword [ebp - 0x1e0], xmm0
call fcn.100130f9
mov dword [ebp - 0x24], 0xd6b22149
mov dword [ebp - 0x1c], ebx
jmp 0x1001d307
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x74]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1001d2f7
mov eax, dword [ebp - 0x74]
dec dword [eax]
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jg 0x1001d450
mov dword [ebp - 0x1c], 0x9c93e328
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x74]
cmp dword [edx + eax*4], ebx
setge cl
neg ecx
jne 0x1001d431
cmp dword [edx], ebx
jne 0x1001d431
mov dword [ebp - 0x34], 0x76660b25
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov esi, dword [ebp - 0x80]
mov dword [ebp - 0x28], edx
mov eax, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x20]
mov dword [edi + edx*4], eax
xor eax, eax
cmp dword [esi + 0xc], 0x5cbf
setne al
xor edx, edx
imul eax, dword [ecx + 8]
mov ecx, dword [ebp - 0x1c]
add ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov ecx, dword [ebp - 0x14]
setg dl
sub edx, dword [esi + 0xc]
neg edx
sbb edx, edx
inc edx
imul ecx, edx
xor edx, edx
add ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x28]
setle cl
mov dword [ebp - 0x14], ecx
mov ecx, 0xffff0001
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
imul eax, ecx, 3
xor ecx, ecx
cmp dword [edi + edx*4], eax
setge cl
cmp ecx, dword [ebp - 0x24]
mov byte [ebp - 0x15], bl
jne 0x1001d3fa
cmp byte [ebp - 0x15], 0
je 0x1001d3f2
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
xor edi, edi
inc edi
mov dword [ebp - 0x14], ebx
jmp 0x1001d429
cmp byte [ebp - 0x15], 0
je 0x1001d3f2
push 0x1388
push 0x1e41
xor edi, edi
inc edi
push edi
push ebx
push 0x13bc
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
jmp 0x1001d3f5
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x80]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1001d41c
jmp 0x1001d441
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001d441
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x1001d31d
mov esi, dword [ebp - 0x20]
lea ecx, [ebp - 0x80]
call fcn.100101c1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 7
call fcn.100101c1
inc dword [esi + 8]
cmp dword [esi + 8], 0xc
jne 0x1001d2b0
cmp dword [esi + 8], 0
je 0x1001d47e
mov ecx, edi
cmp dword [ebp - 0x14], ebx
jne 0x1001d480
mov ecx, ebx
mov eax, dword [ebp - 0x14]
or dword [ebp - 4], 0xffffffff
sub eax, ecx
lea ecx, [ebp - 0x140]
mov dword [esi + 8], eax
call fcn.100101c1
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x34], 0x5211521f
mov dword [ebp - 0x14], 0xa
cmp dword [ebp - 0x14], 4
mov dword [ebp - 0x8c], eax
jne 0x1001d58a
mov esi, 0xfffe
push edi
lea ecx, [ebp - 0x11c]
call fcn.1001013f
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x30], 0xfffffff9
push 2
call fcn.1001013f
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x20], ebx
jmp 0x1001d505
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1001d4f2
mov dword [ebp - 0x20], ebx
jmp 0x1001d51e
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x188]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1001d50f
mov eax, dword [ebp - 0x14]
xor edx, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x188]
mov dword [eax], ecx
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
cmp eax, edi
mov ecx, dword [ebp - 0x11c]
setle dl
imul edx, dword [ecx]
sub edx, 3
neg edx
sbb edx, edx
lea eax, [edx - 9]
mov dword [ecx], eax
cmp esi, eax
lea ecx, [ebp - 0x188]
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
call fcn.100101c1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11c]
call fcn.100101c1
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
je 0x1001d4c0
mov dword [ebp - 0x14], ebx
jmp 0x1001d5ea
mov dword [ebp - 0x1c], 0xab3cf813
xor edx, edx
mov dword [ebp - 0x30], 0x128abf8b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
neg ecx
cmp eax, ecx
setg dl
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
neg eax
cmp eax, edx
setl cl
xor edx, edx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setne dl
mov dword [ebp - 0x34], edx
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff3
jle 0x1001d58f
jmp 0x1001e88c
push 3
lea ecx, [ebp - 0x164]
call fcn.1001013f
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x1c], ebx
jmp 0x1001d61d
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x164]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001d60a
mov dword [ebp - 0x14], ebx
jmp 0x1001d63d
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x164]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x1001d628
mov dword [ebp - 0x14], 0xfffffffc
jmp 0x1001d66d
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001d66a
push 0x971
push 0x960
push 0x1f9c
call dword [sym.imp.USER32.dll_EnableScrollBar]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe9
jle 0x1001d64c
lea ecx, [ebp - 0x164]
call fcn.100101c1
mov eax, dword [0x10603f04]
test al, 2
jne 0x1001d715
or eax, 2
mov dword [0x10603f04], eax
push ebx
mov dword [ebp - 4], 0xa
push ebx
mov dword [0x10603f10], ebx
mov dword [0x10603f14], ebx
call fcn.100129be
mov dword [0x10603f10], eax
mov dword [0x10603f18], ebx
mov dword [0x10603f20], ebx
mov byte [ebp - 4], 0xc
mov ecx, 0x10603f18
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0xc8]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x1a8]
mov dword [0x10603f2c], 0x3f800000
push eax
mov dword [0x10603f1c], ebx
call fcn.10012762
push 0x1005b32f
mov dword [0x10603f24], 7
mov dword [0x10603f28], 8
call fcn.100448cc
pop ecx
mov dword [ebp - 4], esi
lea eax, [ebp - 0x48]
xorps xmm0, xmm0
push eax
movdqu xmmword [ebp - 0x9c], xmm0
call fcn.1001e9c2
mov eax, dword [eax]
mov dword [ebp - 0x28], 0x2c88
cmp dword [ebp - 0x28], 0x2ed1
mov dword [ebp - 0x2c], eax
jle 0x1001d7c9
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov edx, esi
mov ecx, ebx
and edx, eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], edx
mov esi, ebx
mov eax, ecx
mov ecx, esi
sar eax, cl
lea ecx, [ebp - 0x210]
xor eax, edx
cdq
push edx
push eax
call fcn.1000cbfe
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001d77a
mov eax, dword [eax]
push eax
call fcn.100448f6
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x210]
call fcn.100107c9
mov ecx, dword [ebp - 0x24]
inc esi
mov edx, dword [ebp - 0x20]
cmp esi, 0x4eb4
jl 0x1001d75a
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x1675
jl 0x1001d758
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x68b7
jl 0x1001d74c
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x7786
jl 0x1001d747
or esi, 0xffffffff
mov dword [ebp - 0x14], ebx
lea ecx, [ebp - 0xd8]
push 2
call fcn.1001013f
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x20], edi
push 3
call fcn.1001013f
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x20], ebx
jmp 0x1001d80f
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1001d800
mov dword [ebp - 0x20], ebx
jmp 0x1001d829
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x17c]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1001d81a
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
je 0x1001d83a
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x17c]
push 0xfffffffffffffff7
pop edx
mov dword [eax + 8], 0x8425
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xd8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
cmp edx, eax
sbb eax, eax
inc eax
sub ecx, eax
je 0x1001d95c
mov dword [ebp - 0x38], 0x3efc1676
mov dword [ebp - 0x1c], 0xc
cmp dword [ebp - 0x1c], 0xffffffec
jne 0x1001d957
mov dword [ebp - 0x20], 0x12
cmp dword [ebp - 0x20], 0x11
jne 0x1001d94f
mov dword [ebp - 0x14], 0x5df4
cmp dword [ebp - 0x14], 0x60ff
jle 0x1001d918
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov ecx, esi
sar eax, cl
lea ecx, [ebp - 0x1f8]
cdq
push edx
push eax
call fcn.1000cbfe
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001d8ed
mov eax, dword [eax]
push eax
call fcn.100448f6
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1f8]
call fcn.100107c9
mov eax, dword [ebp - 0x24]
inc esi
cmp esi, 0x6a90
jl 0x1001d8d1
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0xb0a
jl 0x1001d8cf
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001d929
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCommState]
cmp dword [ebp - 0x14], 0x5c47
jge 0x1001d93d
push 0x10008a4c
call fcn.100448f6
pop ecx
mov dword [ebp - 4], 0xe
dec dword [ebp - 0x38]
dec dword [ebp - 0x20]
jmp 0x1001d8b0
dec dword [ebp - 0x1c]
jmp 0x1001d89f
or esi, 0xffffffff
jmp 0x1001d9a8
mov dword [ebp - 0x38], 0x3c3
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001d979
push ebx
push edi
push 0x150c
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
cmp dword [ebp - 0x38], ebx
jne 0x1001d99e
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
cmp esi, eax
mov eax, 0xa6033bee
sbb ecx, ecx
inc ecx
sub eax, ecx
mov ecx, dword [ebp - 0xd8]
cmp eax, dword [ecx]
jle 0x1001d9a4
mov eax, ebx
jmp 0x1001d9a6
mov ecx, dword [ebp - 0xd8]
mov eax, edi
mov dword [ecx], eax
lea ecx, [ebp - 0x17c]
call fcn.100101c1
lea ecx, [ebp - 0xd8]
call fcn.100101c1
cmp dword [ebp - 0x28], 0x28f9
jge 0x1001d9d2
push 0x10008a10
call fcn.100448f6
pop ecx
cmp byte [ebp + 0xc], 0
mov dword [ebp - 4], esi
jne 0x1001d9e6
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
jne 0x1001e3ab
mov dword [ebp - 0x14], ebx
lea ecx, [ebp - 0xec]
push 2
call fcn.1001013f
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x20], edi
push 3
call fcn.1001013f
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x20], ebx
jmp 0x1001da2c
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xec]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1001da1d
mov dword [ebp - 0x20], ebx
jmp 0x1001da46
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1001da37
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
je 0x1001da57
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14c]
push 0xfffffffffffffff7
pop edx
mov dword [eax + 8], 0x8425
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
cmp edx, eax
sbb eax, eax
inc eax
sub ecx, eax
je 0x1001daee
mov dword [ebp - 0x28], 0x3efc1676
mov dword [ebp - 0x1c], 0xc
jmp 0x1001dae3
mov dword [ebp - 0x20], 0x12
jmp 0x1001dada
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001dad4
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCommState]
dec dword [ebp - 0x28]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x11
je 0x1001dac3
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffec
je 0x1001daba
jmp 0x1001dbf5
mov dword [ebp - 0x20], 0x3c3
mov dword [ebp - 0x1c], 0x4774
cmp dword [ebp - 0x1c], 0x47ad
jle 0x1001db72
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x28], esi
mov eax, edi
cdq
idiv esi
mov esi, 0x6ef2
mov edi, edx
mov eax, edi
mov ecx, 0x10602dd8
and eax, ebx
cdq
push edx
push eax
call fcn.1000fdea
inc edi
dec esi
jne 0x1001db21
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x5c06
jl 0x1001db15
inc edi
mov dword [ebp - 0x38], edi
push 0
pop ebx
cmp edi, 0x71b
jl 0x1001db0d
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0xc9b
jl 0x1001db08
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
xor edi, edi
inc edi
or esi, 0xffffffff
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001db88
push ebx
push edi
push 0x150c
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x1c], 0x464b
jge 0x1001dbc8
mov edx, 0x10008a68
mov ecx, 0x10602dd8
call fcn.10012a98
jmp 0x1001dbc8
mov ecx, 0xa6033bee
cmp dword [ebp - 0x20], ebx
jne 0x1001dbed
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
cmp esi, eax
sbb eax, eax
inc eax
sub ecx, eax
mov eax, dword [ebp - 0xec]
cmp ecx, dword [eax]
jle 0x1001dbf3
mov edi, ebx
jmp 0x1001dbf3
mov eax, dword [ebp - 0xec]
mov dword [eax], edi
lea ecx, [ebp - 0x14c]
call fcn.100101c1
lea ecx, [ebp - 0xec]
mov dword [ebp - 4], esi
call fcn.100101c1
mov dl, byte [ebp + 0xc]
lea eax, [ebp - 0x220]
mov ecx, dword [ebp - 0x48]
push eax
call fcn.10013908
mov esi, eax
lea edi, [ebp - 0x9c]
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
or esi, 0xffffffff
xor edi, edi
mov dword [ebp - 0x1c], esi
inc edi
mov dword [ebp - 0x1c], ebx
jmp 0x1001dc45
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1001dc3b
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xffffffe9
jle 0x1001dd90
mov eax, 0x70ade216
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
push 4
call fcn.1001013f
mov dword [ebp - 0x20], ebx
jmp 0x1001dc8d
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], 0x39ba095a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1001dc7a
mov dword [ebp - 0x4c], ebx
jmp 0x1001dca0
jne 0x1001dca5
mov eax, dword [ebp - 0x58]
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], ebx
jle 0x1001dc98
mov esi, dword [ebp - 0x110]
mov dword [esi + 0xc], ebx
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x1001dd67
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x54], ebx
jne 0x1001dcd9
mov eax, dword [ebp - 0x20]
mov edx, ebx
mov eax, dword [ebp + eax*4 - 0x58]
cmp dword [ebp - 0x64], 8
jl 0x1001dcdb
mov edx, edi
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x50]
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, 0xfffffff6
mov ecx, 0xbb101eb6
setne al
cmp ecx, eax
mov eax, dword [ebp - 0x20]
sbb ecx, ecx
inc ecx
cmp ecx, dword [ebp + eax*4 - 0x58]
jl 0x1001dd11
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
jmp 0x1001dd5e
mov dword [ebp - 0x14], 0x8fbfc75d
cmp dword [ebp - 0x14], ebx
jne 0x1001dd67
mov dword [ebp - 0x14], ebx
jmp 0x1001dd59
mov dword [ebp - 0x24], 0x3d97867a
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001dd39
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x24], ebx
jmp 0x1001dd51
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001dd4e
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1001dd3e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x1001dd22
dec dword [ebp - 0x20]
jns 0x1001dcc1
dec dword [esi + 0xc]
jns 0x1001dcae
lea ecx, [ebp - 0x110]
call fcn.100101c1
dec dword [ebp - 0x1c]
mov eax, 0x70ade216
cmp dword [ebp - 0x1c], 0xffffffe9
jg 0x1001dc5c
or esi, 0xffffffff
mov ecx, dword [ebp - 0x64]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setle dl
cmp byte [ebp + 0xc], 0
mov dword [ebp - 0x1c], edx
je 0x1001dea5
cmp dword [ebp - 0x94], 0
je 0x1001dea5
push 2
lea ecx, [ebp - 0xb4]
call fcn.1001013f
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x28], 0xfde2bbef
mov dword [ebp - 0x24], ebx
jmp 0x1001dde6
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 0xf0ea75c9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001ddd3
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], edi
jg 0x1001de72
mov dword [ebp - 0x28], 0x1311e2db
xor edx, edx
mov dword [ebp - 0x24], 0xd833
mov dword [ebp - 0x38], 0x374fd522
mov dword [ebp - 0x1c], edi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb4]
cmp dword [eax + ecx*4], 0xfffffff7
sete dl
mov dword [ebp - 0x28], edx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb4]
cmp dword [eax + ecx*4], ebx
je 0x1001de47
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x14]
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [edx + esi*4]
setle cl
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x1001ddf4
or esi, 0xffffffff
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001de82
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea ecx, [ebp - 0xb4]
call fcn.100101c1
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x2c], 0
jne 0x1001e3ab
cmp dword [ebp - 0x9c], 0
jle 0x1001e3ab
push 2
lea ecx, [ebp - 0x158]
call fcn.1001013f
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x24], ebx
jmp 0x1001dee8
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], 0xdf99ff60
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001ded5
mov dword [ebp - 0x1c], ebx
jmp 0x1001df40
mov dword [ebp - 0x24], edi
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001df06
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
mov dword [ebp - 0x24], ebx
jmp 0x1001df38
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x158]
cmp dword [eax + ecx*4], ebx
jne 0x1001df3d
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001df35
push 0x9a3
push ebx
push 0xc77
push 0x2c
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x1001df0b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jle 0x1001def3
lea ecx, [ebp - 0x158]
call fcn.100101c1
mov dword [ebp - 0x14], 6
mov dword [ebp - 0x24], ebx
jmp 0x1001df66
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x68], edi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1001df5c
mov dword [ebp - 0x14], ebx
jmp 0x1001df7e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x68], 0xe125d16d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1001df70
mov dword [ebp - 0x14], ebx
jmp 0x1001dfa5
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001df99
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x68], ebx
jne 0x1001dfaa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x1001df88
push dword [ebp + 8]
movdqa xmm0, xmmword [0x1000b760]
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x24], 0xb26bdde0
push eax
push ebx
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xc4], ebx
movdqu xmmword [ebp - 0x1c0], xmm0
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], ebx
call fcn.100130f9
mov dword [ebp - 0x24], ebx
jmp 0x1001e047
mov dword [ebp - 0x20], 0x2cfb6318
mov dword [ebp - 0x20], 3
jmp 0x1001e020
mov dword [ebp - 0x28], esi
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001e018
push ebx
call dword [sym.imp.USER32.dll_CreateIconIndirect]
cmp dword [ebp - 0x28], ebx
jne 0x1001e026
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 6
jge 0x1001e005
mov dword [ebp - 0x20], ebx
jmp 0x1001e03e
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1001e02b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1a
jle 0x1001dff5
lea ecx, [ebp - 0xc4]
call fcn.100101c1
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x14], 0x45d811f0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x14], ebx
jne 0x1001e07d
mov eax, dword [ebp - 0x14]
mov ecx, ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
jmp 0x1001e07f
mov ecx, edi
mov eax, dword [ebp - 0x14]
inc eax
add eax, ecx
cmp eax, 0xf67d50f8
sbb eax, eax
neg eax
cmp eax, esi
jle 0x1001e147
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001e0af
push 0xa8d
push 0x17c7
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x38], 0x1f24
cmp dword [ebp - 0x38], 0x228c
jle 0x1001e118
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
and eax, esi
mov ecx, 0x10602dd8
or eax, edi
or eax, ebx
cdq
push edx
push eax
call fcn.1000fdea
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x3b93
jl 0x1001e0ce
inc esi
push 0
pop ebx
cmp esi, 0x5177
jl 0x1001e0c6
inc edi
cmp edi, 0x1605
jl 0x1001e0c4
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x31d
jl 0x1001e0c2
xor edi, edi
inc edi
or esi, 0xffffffff
mov dword [ebp - 0x28], 0x8475761a
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x38], 0x1d17
jge 0x1001e267
mov edx, 0x10008b2c
mov ecx, 0x10602dd8
call fcn.10012a98
jmp 0x1001e267
mov dword [ebp - 0x14], 0xffffffec
cmp dword [ebp - 0x14], 0xffffffe8
jle 0x1001e0af
push 3
lea ecx, [ebp - 0x170]
call fcn.1001013f
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x24], ebx
jmp 0x1001e184
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x170]
mov dword [eax + ecx*4], 0x466b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1001e171
mov dword [ebp - 0x24], 0x14c8
cmp dword [ebp - 0x24], 0x162f
jle 0x1001e1e2
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x28], 0x7d4a
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x10602dd8
cdq
push edx
push eax
call fcn.1000fdea
inc edi
cmp edi, 0x4edd
jl 0x1001e1ab
dec esi
dec dword [ebp - 0x28]
jne 0x1001e1a9
mov esi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x6420
jl 0x1001e19f
xor edi, edi
inc edi
or esi, 0xffffffff
mov eax, dword [ebp - 0x170]
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x24], 0x124e
mov dword [eax + 8], 0x124dc41f
jge 0x1001e22f
mov edx, 0x10008ac0
mov ecx, 0x10602dd8
call fcn.10012a98
jmp 0x1001e22f
lea ecx, [ebp - 0x170]
mov dword [ebp - 4], esi
call fcn.100101c1
dec dword [ebp - 0x14]
jmp 0x1001e14e
mov dword [ebp - 4], esi
mov dword [ebp - 0x28], 0x951fe511
mov dword [ebp - 0x14], ebx
jmp 0x1001e284
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x44], 0x80d416db
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1001e276
mov dword [ebp - 0x14], ebx
jmp 0x1001e29d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3c], 0x4055
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1001e28f
mov dword [ebp - 0x14], ebx
jmp 0x1001e2b8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe0], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1001e2a7
mov eax, dword [ebp - 0x40]
xor edx, edx
mov eax, dword [ebp - 0x40]
mov ecx, edi
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
sub ecx, eax
mov eax, dword [ebp - 0x44]
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setge dl
xor ecx, ecx
sub edx, eax
mov dword [ebp - 0xe0], edx
cmp edx, 0xe075257
mov eax, dword [ebp - 0x40]
setle cl
xor edx, edx
cmp ecx, eax
setg dl
xor ecx, ecx
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x28]
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
sete dl
imul eax, edx
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x98]
mov dword [ebp - 0xdc], eax
test ecx, ecx
je 0x1001e3ab
cmp dword [ebp - 0x20], 0
je 0x1001e3ab
call fcn.1001cd2a
mov dword [ebp - 0x1c], 0x3dd33a4a
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x28], 0x90f1
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
mov dword [ebp - 0x2c], eax
je 0x1001e389
push ebx
push 0x293
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov dword [ebp - 0x1c], ebx
jmp 0x1001e397
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 5
jne 0x1001e38e
lea eax, [ebp - 0x48]
push eax
call fcn.1001e9c2
mov ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
mov dword [ebp - 0x14], esi
xor ecx, ecx
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], 0x27289fff
mov dword [ebp - 0x28], 0x5d1cb6a7
mov dword [ebp - 0x1c], 0xbf5f40e1
mov eax, dword [ebp - 0x14]
add eax, 0xfff6
cmp eax, 0xb1b6
setle cl
xor edx, edx
imul ecx, dword [ebp - 0x14]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x14]
sub eax, 4
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1c], 0xfffffffb
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setl dl
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x1c], 0xc
jmp 0x1001e4a5
push dword [ebp + 8]
movdqa xmm0, xmmword [0x1000b790]
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1d0]
mov dword [ebp - 0x104], ebx
push eax
push ebx
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x100], ebx
movdqu xmmword [ebp - 0x1d0], xmm0
mov dword [ebp - 0xfc], ebx
call fcn.100130f9
mov dword [ebp - 0x14], ebx
jmp 0x1001e491
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001e47e
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001e48e
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x1001e46e
lea ecx, [ebp - 0x104]
call fcn.100101c1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xe
jg 0x1001e42a
lea ecx, [ebp - 0x9c]
call fcn.10019bd9
mov dword [ebp - 0x20], 0x7ddc85f7
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 8
je 0x1001e68c
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 0x418a
cmp dword [ebp - 0x14], 0x41cb
jle 0x1001e543
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
mov eax, esi
cdq
idiv ecx
mov ecx, 0x10602dd8
and edx, edi
and edx, ebx
mov eax, edx
cdq
push edx
push eax
call fcn.1000fdea
mov ecx, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x6d54
jl 0x1001e4f3
inc esi
push 0
pop ebx
cmp esi, 0x3c1e
jl 0x1001e4eb
inc edi
cmp edi, 0x13d2
jl 0x1001e4e9
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x4837
jl 0x1001e4e7
xor edi, edi
inc edi
or esi, 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1001e634
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x38], 0x5a8df044
cmp dword [ebp - 0x20], ebx
jne 0x1001e63e
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x20]
je 0x1001e580
mov edx, edi
cmp dword [ebp - 0x20], ebx
jne 0x1001e582
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x24]
sete cl
xor edx, edx
cmp ecx, eax
setne dl
xor ecx, ecx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp eax, edx
setg cl
add ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], ecx
xor ecx, ecx
cmp dword [ebp - 0x28], eax
setg cl
xor eax, eax
cmp eax, ecx
sbb eax, eax
xor edx, edx
neg eax
cmp eax, 0x369b
mov eax, dword [ebp - 0x38]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setl cl
xor edx, edx
cmp ecx, 0x1978e60d
setne dl
xor ecx, ecx
cmp eax, edx
setne cl
imul ecx, dword [ebp - 0x24]
mov byte [ebp - 0x15], bl
test ecx, ecx
je 0x1001e61a
cmp byte [ebp - 0x15], 0
je 0x1001e603
push ebx
push 0x209
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001e631
push 0x2380
push ebx
call dword [sym.imp.KERNEL32.dll_WinExec]
jmp 0x1001e631
cmp byte [ebp - 0x15], 0
je 0x1001e631
push 0x1a07
push ebx
push 0x3dd
call dword [sym.imp.USER32.dll_GetWindowTextW]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff8
jge 0x1001e54b
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x14], 0x3ed0
jge 0x1001e681
mov edx, 0x10008b90
mov ecx, 0x10602dd8
call fcn.10012a98
jmp 0x1001e681
mov dword [ebp - 4], esi
inc dword [ebp - 0x20]
jmp 0x1001e4c7
cmp dword [ebp - 0x30], 0
jne 0x1001e88c
mov esi, dword [ebp - 0x2c]
test esi, esi
je 0x1001e88c
mov dword [ebp - 0x1c], 0xade19d29
mov dword [ebp - 0x2c], 0x25b0e446
mov dword [ebp - 0x24], ebx
jmp 0x1001e6c2
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5c], 0xfffffff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1001e6b4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], ebx
jmp 0x1001e714
mov dword [ebp - 0x1c], ebx
jmp 0x1001e70c
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1001e709
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x5c], ebx
jne 0x1001e709
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x5c], 0xcf4c59cd
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
inc ecx
mov dword [ebp + eax*4 - 0x5c], ecx
dec dword [ebp - 0x24]
jns 0x1001e6e6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x1001e6d7
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x1001e6d2
mov edx, dword [ebp - 0x34]
mov ecx, esi
call fcn.1001cd5b
mov dword [ebp - 0x14], ebx
mov esi, eax
mov dword [ebp - 0x34], 0x5211521f
mov dword [ebp - 0x14], 0xa
cmp dword [ebp - 0x14], 4
mov dword [ebp - 0x8c], esi
jne 0x1001e81b
mov esi, 0xfffe
push edi
lea ecx, [ebp - 0x134]
call fcn.1001013f
mov dword [ebp - 4], 0x1e
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x34], 0xfffffff9
push 2
call fcn.1001013f
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x20], ebx
jmp 0x1001e790
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1001e77d
mov dword [ebp - 0x20], ebx
jmp 0x1001e7a9
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1001e79a
mov eax, dword [ebp - 0x14]
xor edx, edx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x128]
mov dword [eax], ecx
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
cmp eax, edi
mov ecx, dword [ebp - 0x134]
setle dl
imul edx, dword [ecx]
sub edx, 3
neg edx
sbb edx, edx
lea eax, [edx - 9]
mov dword [ecx], eax
cmp esi, eax
lea ecx, [ebp - 0x128]
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
call fcn.100101c1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x134]
call fcn.100101c1
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
je 0x1001e74b
mov esi, dword [ebp - 0x8c]
mov dword [ebp - 0x14], ebx
jmp 0x1001e87b
mov dword [ebp - 0x24], 0xab3cf813
xor edx, edx
mov dword [ebp - 0x34], 0x128abf8b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
neg ecx
cmp eax, ecx
setg dl
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
neg eax
cmp eax, edx
setl cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setne dl
mov dword [ebp - 0x34], edx
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff3
jle 0x1001e820
lea eax, [ebp - 0x60]
push eax
call fcn.1001e960
mov dword [eax], esi
mov eax, dword [ebp + 8]
lea esi, [ebp - 0x8c]
mov ecx, dword [ebp - 0xc]
mov edi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret