Function at 0x100172f0
Capabilities:
Identify system language via api
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10066510
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x8f0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x8ac], 0xb5af19d4
mov eax, 0xffffde99
mov word [ebp - 0x28], ax
mov cx, word [0x1007f16c]
mov byte [ebp - 0x12], cl
mov edx, dword [0x1007f170]
xor eax, eax
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], eax
mov ecx, dword [0x1007f1c0]
mov dword [ebp - 0x80], ecx
movzx eax, byte [0x1007f026]
cdq
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
mov edx, 0x4cbe
mov word [ebp - 0x2c], dx
movzx eax, word [0x1007f14c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x54], 0x66b7
xor ecx, ecx
mov dword [ebp - 0x78], 0xac
mov dword [ebp - 0x74], ecx
mov dx, word [0x1007f1c8]
mov word [ebp - 0x20], dx
mov eax, dword [0x1007f190]
mov ecx, dword [0x1007f194]
mov dword [ebp - 0x8b0], ecx
mov dword [ebp - 0x70], eax
xor edx, edx
mov dword [ebp - 0x34], 0x9bd4
mov dword [ebp - 0x30], edx
mov eax, 0xffffc26e
mov word [ebp - 0x24], ax
mov ecx, 0x3a4c
mov word [ebp - 0x1c], cx
mov edx, dword [0x1007f180]
mov dword [ebp - 0x50], edx
xor eax, eax
mov dword [ebp - 0x6c], 0x47b6
mov dword [ebp - 0x68], eax
mov ecx, 0x490ac
mov dword [ebp - 0x5c], 0xb072e606
mov dword [ebp - 0x58], ecx
mov byte [ebp - 0x13], 0x54
mov dx, word [0x1007f16c]
mov byte [ebp - 0x11], dl
mov byte [ebp - 0x14], 0xbe
mov eax, dword [0x1007f120]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x15], 0x7e
mov ecx, dword [0x1007f198]
mov edx, dword [0x1007f19c]
mov dword [ebp - 0x8b4], edx
mov dword [ebp - 0x48], ecx
movzx eax, word [0x1007f14c]
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov eax, dword [0x1007f190]
mov ecx, dword [0x1007f194]
mov dword [ebp - 0x7c0], ecx
mov dword [ebp - 0x7c4], eax
mov edx, dword [0x1007f1b0]
mov eax, dword [0x1007f1b4]
mov dword [ebp - 0x88c], edx
mov dword [ebp - 0x888], eax
mov byte [ebp - 0xc5], 0x77
mov ecx, 0xe4c7
mov word [ebp - 0x448], cx
mov byte [ebp - 0xe5], 0x73
mov edx, dword [0x1007f160]
mov eax, dword [0x1007f164]
mov dword [ebp - 0x7c8], eax
mov byte [ebp - 0xe8], dl
mov cl, byte [0x1007f158]
mov byte [ebp - 0xe6], cl
xor edx, edx
mov dword [ebp - 0x894], 0x1c
mov dword [ebp - 0x890], edx
mov dword [ebp - 0x7cc], 0xed
mov byte [ebp - 0xe7], 0xbe
mov dword [ebp - 0x7d0], 0xd73fd41
movzx eax, byte [ebp - 0x11]
test eax, eax
jne 0x100175c7
movsx ecx, word [ebp - 0x24]
test ecx, ecx
je 0x100175c7
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x630], edx
mov dword [ebp - 0x62c], eax
mov ecx, dword [ebp - 0x630]
or ecx, dword [ebp - 0x62c]
je 0x100175c7
movsx edx, byte [ebp - 0x12]
push edx
movsx eax, byte [ebp - 0x15]
push eax
call fcn.100364f0
add esp, 8
mov byte [ebp - 0x13], al
movzx ecx, byte [ebp - 0x13]
test ecx, ecx
je 0x10017552
mov eax, dword [ebp - 0x50]
cdq
sub eax, 0xf6588885
sbb edx, 0xe9cbb
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
movzx edx, byte [0x1007f026]
mov eax, 0x69d5
sub eax, edx
cdq
mov ecx, eax
mov esi, edx
movzx eax, word [0x1007f1b8]
cdq
sub eax, dword [ebp - 0x3c]
sbb edx, dword [ebp - 0x38]
sub eax, ecx
sbb edx, esi
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
jmp 0x100175c5
movzx eax, byte [ebp - 0x11]
cdq
mov ecx, dword [0x1007f130]
mov esi, dword [0x1007f134]
push edx
push eax
push esi
push ecx
call fcn.1005a1b0
mov ecx, dword [0x1007f130]
mov esi, dword [0x1007f134]
sub ecx, eax
sbb esi, edx
mov dword [0x1007f130], ecx
mov dword [0x1007f134], esi
movzx eax, word [0x1007f168]
cdq
mov ecx, dword [0x1007f190]
mov esi, dword [0x1007f194]
push edx
push eax
push esi
push ecx
call fcn.1005a1b0
mov ecx, dword [0x1007f190]
mov esi, dword [0x1007f194]
push edx
push eax
push esi
push ecx
call fcn.1005a1b0
mov dword [0x1007f190], eax
mov dword [0x1007f194], edx
jmp 0x10017644
mov edx, 1
test edx, edx
je 0x10017644
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x638], eax
mov dword [ebp - 0x634], ecx
mov edx, dword [ebp - 0x638]
or edx, dword [ebp - 0x634]
je 0x10017603
movsx eax, word [ebp - 0x28]
cdq
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x310], edx
jmp 0x1001761a
mov eax, dword [0x1007f1c0]
mov ecx, dword [0x1007f1c4]
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x310], ecx
mov edx, dword [ebp - 0x314]
mov dword [ebp - 0x7c], edx
mov eax, dword [0x1007f170]
not eax
xor ecx, ecx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], ecx
xor edx, edx
mov dword [0x1007f178], 4
mov dword [0x1007f17c], edx
mov eax, dword [0x1007fc38]
mov dword [ebp - 0x94], eax
mov ecx, dword [0x1007f1b0]
or ecx, dword [0x1007f1b4]
jne 0x10017671
xor edx, edx
mov dword [ebp - 0x31c], 1
mov dword [ebp - 0x318], edx
jmp 0x1001767c
xorps xmm0, xmm0
movlpd qword [ebp - 0x31c], xmm0
mov eax, dword [ebp - 0x31c]
xor eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x318]
xor ecx, dword [ebp - 0x68]
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], ecx
mov edx, dword [ebp - 0x640]
or edx, dword [ebp - 0x63c]
jne 0x100176bc
xor eax, eax
mov dword [ebp - 0x648], 1
mov dword [ebp - 0x644], eax
jmp 0x100176c7
xorps xmm0, xmm0
movlpd qword [ebp - 0x648], xmm0
mov ecx, dword [0x1007f138]
mov esi, dword [0x1007f13c]
movsx eax, word [ebp - 0x2c]
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
xor eax, dword [ebp - 0x648]
mov dword [0x1007f158], eax
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x94]
add eax, 0x281
mov dword [ebp - 0x180], eax
mov dword [ebp - 4], 0
push 0
push 0xf4
push 0
push 0
push 0
push 0
mov ecx, dword [0x1007f13c]
push ecx
mov edx, dword [0x1007f138]
push edx
push 0
push 0xae
push 0
push 0x58
call fcn.10035400
add esp, 0x30
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x64c], edx
mov eax, dword [ebp - 0x650]
mov ecx, dword [ebp - 0x64c]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x658], edx
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 0
jl 0x1001778a
jg 0x1001777e
cmp dword [ebp - 0x658], 0
jbe 0x1001778a
mov dword [ebp - 0x100], 1
jmp 0x10017794
mov dword [ebp - 0x100], 0
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x660], ecx
mov dword [ebp - 0x65c], edx
cmp dword [ebp - 0x65c], 0
jl 0x100177c6
jg 0x100177ba
cmp dword [ebp - 0x660], 0x27
jbe 0x100177c6
mov dword [ebp - 0x104], 1
jmp 0x100177d0
mov dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x104]
jne 0x10017803
mov eax, dword [ebp - 0x50]
cdq
add eax, 0xed076c40
mov dx, word [ebp - 0x20]
mov ecx, eax
shl dx, cl
mov word [ebp - 0x20], dx
movsx eax, word [0x1007f15c]
shl eax, 2
mov dword [0x1007f144], eax
jmp 0x10017827
mov dword [ebp - 4], 0xffffffff
jmp 0x10017837
mov ecx, dword [ebp - 0x94]
add ecx, 0x378
mov dword [ebp - 0x458], ecx
mov ecx, dword [0x1007f1d0]
mov esi, dword [0x1007f1d4]
movzx eax, word [0x1007f128]
cdq
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], edx
mov dword [ebp - 0x670], ecx
mov dword [ebp - 0x66c], esi
mov edx, dword [ebp - 0x4d4]
cmp edx, dword [ebp - 0x66c]
jg 0x1001789f
jl 0x10017893
mov eax, dword [ebp - 0x4d8]
cmp eax, dword [ebp - 0x670]
jae 0x1001789f
mov dword [ebp - 0x108], 1
jmp 0x100178a9
mov dword [ebp - 0x108], 0
movzx ecx, word [0x1007f128]
cmp ecx, 0x24
jge 0x100178c1
mov dword [ebp - 0x10c], 1
jmp 0x100178cb
mov dword [ebp - 0x10c], 0
mov edx, dword [ebp - 0x108]
cmp edx, dword [ebp - 0x10c]
jne 0x100179ea
movzx eax, word [0x1007f128]
movzx ecx, byte [ebp - 0x14]
cmp ecx, eax
je 0x100178f8
mov dword [ebp - 0x110], 1
jmp 0x10017902
mov dword [ebp - 0x110], 0
movzx edx, word [0x1007f1b8]
cmp dword [ebp - 0x110], edx
jg 0x10017945
movsx eax, word [ebp - 0x2c]
cmp eax, 0x13
jl 0x10017945
movsx ecx, word [ebp - 0x28]
test ecx, ecx
je 0x10017945
movzx edx, word [0x1007f14c]
xor eax, eax
sub eax, edx
mov byte [0x1007f027], al
movzx eax, byte [0x1007f04e]
cdq
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
jmp 0x100179e8
mov ecx, 1
imul edx, ecx, 0xb3b8
movsx eax, byte [edx + 0x100d17b0]
cdq
and eax, dword [ebp - 0x3c]
and edx, dword [ebp - 0x38]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
movsx eax, word [ebp - 0x20]
movzx ecx, byte [0x1007f026]
and ecx, eax
mov byte [0x1007f026], cl
movzx edx, word [0x1007f1c8]
test edx, edx
jne 0x1001798e
mov dword [ebp - 0x114], 1
jmp 0x10017998
mov dword [ebp - 0x114], 0
cmp dword [ebp - 0x50], 0
jne 0x100179aa
mov dword [ebp - 0x118], 1
jmp 0x100179b4
mov dword [ebp - 0x118], 0
mov ecx, dword [0x1007f190]
mov esi, dword [0x1007f194]
or ecx, dword [ebp - 0x3c]
or esi, dword [ebp - 0x38]
not ecx
not esi
mov eax, dword [ebp - 0x114]
xor eax, dword [ebp - 0x118]
not eax
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
jmp 0x10017a59
mov edx, dword [0x1007f1d0]
mov eax, dword [0x1007f1d4]
mov dword [ebp - 0x678], edx
mov dword [ebp - 0x674], eax
mov ecx, dword [ebp - 0x678]
or ecx, dword [ebp - 0x674]
je 0x10017a28
mov edx, 0x1f7e9009
or edx, 0xfff4b643
jne 0x10017a28
mov dword [ebp - 0x11c], 0
jmp 0x10017a32
mov dword [ebp - 0x11c], 1
mov eax, dword [ebp - 0x80]
not eax
cmp dword [ebp - 0x11c], eax
jae 0x10017a59
mov ecx, dword [str.C]
sub ecx, 1
mov dword [str.C], ecx
movzx edx, byte [ebp - 0x13]
imul edx, dword [ebp - 0x48]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x94]
add eax, 0x26f
mov dword [ebp - 0x17c], eax
mov byte [ebp - 0x15], 0
cmp dword [ebp - 0x50], 0
je 0x10017a88
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x2a0], edx
jmp 0x10017a98
mov eax, dword [ebp - 0x48]
cdq
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2a0], edx
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x2a0]
mov dword [0x1007f188], eax
mov dword [0x1007f18c], ecx
mov eax, dword [ebp - 0x70]
cdq
mov ecx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x40]
add ecx, eax
adc esi, edx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
or edx, ecx
or eax, esi
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x40], eax
movzx ecx, byte [ebp - 0x13]
mov edx, dword [ebp - 0x70]
sub edx, ecx
mov eax, dword [ebp - 0x70]
imul eax, edx
mov dword [ebp - 0x70], eax
mov cl, byte [ebp - 0x15]
mov byte [ebp - 0x44c], cl
cmp byte [ebp - 0x44c], 0
je 0x10017af3
jmp 0x10017b30
movzx edx, byte [ebp - 0x11]
movzx eax, word [0x1007f1a0]
imul eax, edx
mov word [0x1007f1a0], ax
imul ecx, dword [0x1007f1bc], 0x8aad
mov dword [ebp - 0x7c], ecx
xor edx, edx
mov eax, dword [ebp - 0x3c]
sub eax, dword [0x1007f180]
mov ecx, dword [ebp - 0x38]
sbb ecx, edx
and eax, dword [ebp - 0x3c]
and ecx, dword [ebp - 0x38]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], ecx
mov edx, dword [0x1007fc38]
mov dword [ebp - 0x9c], edx
mov eax, dword [0x1007f180]
xor ecx, ecx
mov edx, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x680], edx
mov dword [ebp - 0x67c], esi
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], ecx
mov eax, dword [ebp - 0x67c]
cmp eax, dword [ebp - 0x684]
jg 0x10017c47
jl 0x10017b87
mov ecx, dword [ebp - 0x680]
cmp ecx, dword [ebp - 0x688]
ja 0x10017c47
movsx edx, word [ebp - 0x1c]
movzx eax, byte [0x1007f026]
imul eax, edx
mov byte [0x1007f026], al
mov eax, dword [ebp - 0x50]
cdq
push 0x717ee
push 0x2fd674d6
push edx
push eax
call fcn.1005a1b0
mov word [0x1007f1a0], ax
cmp dword [0x1007f158], 0
jne 0x10017bd2
xor ecx, ecx
mov dword [ebp - 0x324], 1
mov dword [ebp - 0x320], ecx
jmp 0x10017bdd
xorps xmm0, xmm0
movlpd qword [ebp - 0x324], xmm0
movsx edx, word [0x1007f148]
imul edx, dword [ebp - 0x7c]
test edx, edx
jne 0x10017c00
xor eax, eax
mov dword [ebp - 0x32c], 1
mov dword [ebp - 0x328], eax
jmp 0x10017c0b
xorps xmm0, xmm0
movlpd qword [ebp - 0x32c], xmm0
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x58]
add edx, dword [ebp - 0x5c]
adc eax, ecx
push eax
push edx
mov ecx, dword [ebp - 0x320]
push ecx
mov edx, dword [ebp - 0x324]
push edx
call fcn.1005a1b0
add eax, dword [ebp - 0x32c]
adc edx, dword [ebp - 0x328]
mov dword [0x1007f120], eax
mov dword [0x1007f124], edx
jmp 0x10017c7e
mov eax, dword [0x1007f1b0]
sub eax, 0x4e9f7163
mov word [0x1007f1a8], ax
mov cl, byte [ebp - 0x50]
mov byte [ebp - 0x13], cl
movzx edx, byte [0x1007f027]
sub edx, 0x1b956d95
movzx eax, byte [ebp - 0x11]
movzx ecx, word [0x1007f168]
sub ecx, eax
imul ecx, edx
mov word [ebp - 0x1c], cx
mov edx, dword [ebp - 0x9c]
add edx, 0x305
mov dword [ebp - 0x7d4], edx
mov dword [ebp - 0x98], 0x2146
xor eax, eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
xor ecx, dword [str.C]
xor edx, eax
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
or eax, ecx
or esi, edx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], esi
mov byte [0x1007f026], 0xa5
mov ecx, dword [0x1007f1d0]
mov edx, dword [0x1007f1d4]
mov dword [ebp - 0x8b8], edx
movzx eax, word [0x1007f128]
add eax, dword [0x1007f180]
add eax, ecx
mov byte [ebp - 0x11], al
cmp dword [ebp - 0x98], 0x208e
jle 0x10017d5a
mov ecx, dword [str.GUEST_TARGET_PLATF]
mov dword [ebp - 0x7a4], ecx
mov edx, dword [0x100677c0]
mov dword [ebp - 0x7a0], edx
mov eax, dword [0x100677c4]
mov dword [ebp - 0x79c], eax
mov ecx, dword [0x100677c8]
mov dword [ebp - 0x798], ecx
mov dx, word [0x100677cc]
mov word [ebp - 0x794], dx
mov al, byte [0x100677ce]
mov byte [ebp - 0x792], al
lea ecx, [ebp - 0x7a4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov byte [ebp - 0x15], al
mov edx, dword [ebp - 0x98]
sub edx, 1
mov dword [ebp - 0x98], edx
jmp 0x10017ce5
mov eax, dword [ebp - 0x9c]
add eax, 0x211
mov dword [ebp - 0x1cc], eax
movsx ecx, word [0x1007f148]
movsx edx, word [ebp - 0x24]
imul edx, ecx
mov dword [0x1007f154], edx
mov eax, 0xbeed
mov word [0x1007f168], ax
mov ecx, dword [ebp - 0x9c]
add ecx, 0x219
mov dword [ebp - 0x8bc], ecx
push 0
push 0x65
push 0
push 0xcd
push 0
push 0x9c
push 0
push 0x47
call fcn.10034db0
add esp, 0x20
mov word [0x1007f1b8], ax
movzx edx, word [0x1007f1b8]
test edx, edx
jne 0x10017dd7
mov dword [ebp - 0x120], 1
jmp 0x10017de1
mov dword [ebp - 0x120], 0
movzx eax, word [0x1007f1b8]
cmp eax, 0x4f
jne 0x10017df9
mov dword [ebp - 0x124], 1
jmp 0x10017e03
mov dword [ebp - 0x124], 0
mov ecx, dword [ebp - 0x120]
cmp ecx, dword [ebp - 0x124]
jne 0x10017f76
movsx edx, word [0x1007f15c]
test edx, edx
je 0x10017e47
mov eax, dword [ebp - 0x70]
cdq
add eax, 0xd0807507
adc edx, 0x83a52
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
movsx eax, byte [ebp - 0x12]
add eax, dword [0x1007f144]
mov byte [ebp - 0x12], al
jmp 0x10017f74
movsx ecx, word [0x1007f15c]
test ecx, ecx
je 0x10017e80
mov edx, dword [0x1007f1b0]
sub edx, 0x6d803a5b
mov eax, dword [0x1007f1b4]
sbb eax, 0x8570a
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x40], eax
imul ecx, dword [ebp - 0x4c], 0x39
movzx edx, byte [ebp - 0x11]
sub edx, ecx
mov byte [ebp - 0x11], dl
jmp 0x10017f74
cmp dword [ebp - 0x70], 0
je 0x10017edd
mov eax, dword [0x1007f170]
xor eax, 0xfa
mov byte [0x1007f027], al
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [0x1007f188]
mov edx, dword [ebp - 0x38]
sbb edx, dword [0x1007f18c]
add ecx, dword [ebp - 0x3c]
adc edx, dword [ebp - 0x38]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], edx
mov ecx, dword [0x1007f1d0]
mov esi, dword [0x1007f1d4]
not ecx
not esi
mov eax, dword [0x1007f144]
cdq
add eax, ecx
adc edx, esi
mov dword [0x1007f178], eax
mov dword [0x1007f17c], edx
jmp 0x10017f74
cmp dword [0x1007f180], 0
jne 0x10017ef2
mov dword [ebp - 0x128], 1
jmp 0x10017efc
mov dword [ebp - 0x128], 0
movsx edx, word [ebp - 0x1c]
cmp dword [ebp - 0x128], edx
jne 0x10017f14
mov dword [ebp - 0x12c], 1
jmp 0x10017f1e
mov dword [ebp - 0x12c], 0
movsx eax, word [0x1007f15c]
cmp dword [0x1007f180], eax
jne 0x10017f39
mov dword [ebp - 0x130], 1
jmp 0x10017f43
mov dword [ebp - 0x130], 0
mov ecx, dword [ebp - 0x12c]
cmp ecx, dword [ebp - 0x130]
jl 0x10017f74
mov eax, dword [0x1007f138]
mov edx, dword [0x1007f13c]
mov cl, 1
call fcn.1005a210
mov byte [0x1007f026], al
mov edx, 0x3bc8
mov word [0x1007f168], dx
jmp 0x10017fbb
mov eax, 1
imul ecx, eax, 0x6ee1
mov dl, byte [0x1007f158]
mov byte [ecx + 0x1030cfe8], dl
movsx eax, word [ebp - 0x20]
mov ecx, dword [ebp - 0x48]
sub ecx, eax
mov edx, dword [ebp - 0x48]
sub edx, ecx
mov dword [ebp - 0x48], edx
movzx eax, word [0x1007f1a0]
sub eax, dword [0x1007f158]
movzx ecx, word [0x1007f1a0]
or ecx, eax
mov word [0x1007f1a0], cx
mov edx, dword [str.C]
add edx, 0x58243c72
xor eax, eax
mov dword [0x1007f188], edx
mov dword [0x1007f18c], eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
sub ecx, 0xe28592e5
sbb edx, 0xc618
mov dword [0x1007f138], ecx
mov dword [0x1007f13c], edx
movsx eax, word [ebp - 0x2c]
add eax, 0xa8
mov dword [0x1007f154], eax
mov dword [ebp - 0x1b8], 0
movzx eax, word [0x1007f168]
cdq
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x68c], edx
mov ecx, dword [ebp - 0x68c]
cmp ecx, dword [0x1007f124]
ja 0x10018048
jb 0x1001803c
mov edx, dword [ebp - 0x690]
cmp edx, dword [0x1007f120]
jae 0x10018048
mov dword [ebp - 0x134], 1
jmp 0x10018052
mov dword [ebp - 0x134], 0
movzx eax, word [0x1007f168]
cmp eax, 9
jge 0x1001806a
mov dword [ebp - 0x138], 1
jmp 0x10018074
mov dword [ebp - 0x138], 0
mov ecx, dword [ebp - 0x134]
cmp ecx, dword [ebp - 0x138]
jle 0x100180d2
push 0
push 0xb053c12e
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x6c]
push eax
call fcn.1005a1b0
mov dword [0x1007f198], eax
mov dword [0x1007f19c], edx
movsx ecx, word [ebp - 0x20]
sub ecx, dword [str.C]
movsx edx, word [ebp - 0x20]
add edx, ecx
mov word [ebp - 0x20], dx
movzx eax, byte [0x1007f026]
add eax, dword [0x1007f158]
mov ecx, dword [0x1007f158]
sub ecx, eax
mov dword [0x1007f158], ecx
jmp 0x100180fd
movsx edx, byte [ebp - 0x15]
test edx, edx
je 0x100180fd
mov al, byte [ebp - 0x20]
mov byte [ebp - 0x12], al
mov ecx, 2
imul edx, ecx, 0x859
movsx eax, word [edx + 0x100b73f0]
and eax, dword [str.C]
mov dword [str.C], eax
mov dword [ebp - 0x87c], 0
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov word [0x1007f148], ax
mov ecx, 1
test ecx, ecx
je 0x10018129
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [0x1007f1a4], eax
jmp 0x10018189
movsx edx, byte [ebp - 0x15]
test edx, edx
jne 0x10018189
movzx eax, word [0x1007f1b8]
test eax, eax
jne 0x10018189
movzx ecx, word [0x1007f1b8]
movzx edx, byte [0x1007f026]
add edx, ecx
movzx eax, byte [0x1007f026]
sub eax, edx
mov byte [0x1007f026], al
mov cx, word [0x1007f1b0]
mov edx, 2
imul eax, edx, 0x25
mov word [eax + 0x10369060], cx
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0x878], edx
sub ecx, 0x8e392c80
mov word [0x1007f168], cx
mov dword [ebp - 0x874], 0
xor eax, eax
mov dword [0x1007f120], 4
mov dword [0x1007f124], eax
movzx ecx, byte [ebp - 0x11]
movzx edx, byte [ebp - 0x11]
imul edx, ecx
mov byte [ebp - 0x11], dl
mov eax, dword [0x1007f158]
imul eax, dword [0x1007f1bc]
add eax, dword [0x1007f158]
mov dword [0x1007f158], eax
mov ecx, dword [0x1007f198]
mov esi, dword [0x1007f19c]
add ecx, 0x434ffb11
adc esi, 0
movsx eax, word [ebp - 0x1c]
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov word [ebp - 0x1c], ax
mov edx, dword [0x1007f120]
mov eax, dword [0x1007f124]
mov dword [ebp - 0x334], edx
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0
ja 0x100183f3
jb 0x10018223
cmp dword [ebp - 0x334], 4
ja 0x100183f3
mov ecx, dword [ebp - 0x334]
mov dword [ebp - 0x89c], ecx
mov edx, dword [ebp - 0x89c]
jmp dword [edx*4 + 0x1001d1ac]
mov eax, 0x68
mov word [ebp - 0x400], ax
mov ecx, 0x74
mov word [ebp - 0x3fe], cx
mov edx, 0x74
mov word [ebp - 0x3fc], dx
mov eax, 0x70
mov word [ebp - 0x3fa], ax
mov ecx, 0x73
mov word [ebp - 0x3f8], cx
mov edx, 0x3a
mov word [ebp - 0x3f6], dx
mov eax, 0x2f
mov word [ebp - 0x3f4], ax
mov ecx, 0x2f
mov word [ebp - 0x3f2], cx
mov edx, 0x76
mov word [ebp - 0x3f0], dx
mov eax, 0x69
mov word [ebp - 0x3ee], ax
mov ecx, 0x6c
mov word [ebp - 0x3ec], cx
mov edx, 0x6f
mov word [ebp - 0x3ea], dx
mov eax, 0x64
mov word [ebp - 0x3e8], ax
mov ecx, 0x65
mov word [ebp - 0x3e6], cx
mov edx, 0x71
mov word [ebp - 0x3e4], dx
mov eax, 0x61
mov word [ebp - 0x3e2], ax
mov ecx, 0x2e
mov word [ebp - 0x3e0], cx
mov edx, 0x63
mov word [ebp - 0x3de], dx
mov eax, 0x6f
mov word [ebp - 0x3dc], ax
mov ecx, 0x6d
mov word [ebp - 0x3da], cx
mov edx, 0x2f
mov word [ebp - 0x3d8], dx
mov eax, 0x64
mov word [ebp - 0x3d6], ax
mov ecx, 0x65
mov word [ebp - 0x3d4], cx
mov edx, 0x74
mov word [ebp - 0x3d2], dx
mov eax, 0x61
mov word [ebp - 0x3d0], ax
mov ecx, 0x6c
mov word [ebp - 0x3ce], cx
mov edx, 0x69
mov word [ebp - 0x3cc], dx
mov eax, 0x73
mov word [ebp - 0x3ca], ax
mov ecx, 0x2e
mov word [ebp - 0x3c8], cx
mov edx, 0x61
mov word [ebp - 0x3c6], dx
mov eax, 0x73
mov word [ebp - 0x3c4], ax
mov ecx, 0x70
mov word [ebp - 0x3c2], cx
mov edx, 0x78
mov word [ebp - 0x3c0], dx
xor eax, eax
mov word [ebp - 0x3be], ax
movzx eax, byte [0x1007f027]
add eax, 0x7460e7b7
cdq
mov ecx, dword [0x1007f1c0]
sub ecx, eax
mov eax, dword [0x1007f1c4]
sbb eax, edx
mov dword [0x1007f1c0], ecx
mov dword [0x1007f1c4], eax
mov ecx, dword [0x1007f140]
not ecx
movzx edx, byte [0x1007f027]
sub edx, ecx
jne 0x100185d6
xor eax, eax
mov dword [ebp - 0x6a8], 1
mov dword [ebp - 0x6a4], eax
jmp 0x100185e1
xorps xmm0, xmm0
movlpd qword [ebp - 0x6a8], xmm0
mov ecx, dword [0x1007f1d0]
mov edx, dword [0x1007f1d4]
mov dword [ebp - 0x86c], edx
mov eax, 0xeec796c
sub eax, ecx
xor eax, dword [ebp - 0x6a8]
mov word [ebp - 0x1c], ax
mov ecx, 0x68
mov word [ebp - 0x3bc], cx
mov edx, 0x74
mov word [ebp - 0x3ba], dx
mov eax, 0x74
mov word [ebp - 0x3b8], ax
mov ecx, 0x70
mov word [ebp - 0x3b6], cx
mov edx, 0x73
mov word [ebp - 0x3b4], dx
mov eax, 0x3a
mov word [ebp - 0x3b2], ax
mov ecx, 0x2f
mov word [ebp - 0x3b0], cx
mov edx, 0x2f
mov word [ebp - 0x3ae], dx
mov eax, 0x76
mov word [ebp - 0x3ac], ax
mov ecx, 0x69
mov word [ebp - 0x3aa], cx
mov edx, 0x6c
mov word [ebp - 0x3a8], dx
mov eax, 0x6f
mov word [ebp - 0x3a6], ax
mov ecx, 0x64
mov word [ebp - 0x3a4], cx
mov edx, 0x65
mov word [ebp - 0x3a2], dx
mov eax, 0x71
mov word [ebp - 0x3a0], ax
mov ecx, 0x61
mov word [ebp - 0x39e], cx
mov edx, 0x2e
mov word [ebp - 0x39c], dx
mov eax, 0x63
mov word [ebp - 0x39a], ax
mov ecx, 0x6f
mov word [ebp - 0x398], cx
mov edx, 0x6d
mov word [ebp - 0x396], dx
mov eax, 0x2f
mov word [ebp - 0x394], ax
mov ecx, 0x64
mov word [ebp - 0x392], cx
mov edx, 0x65
mov word [ebp - 0x390], dx
mov eax, 0x74
mov word [ebp - 0x38e], ax
mov ecx, 0x61
mov word [ebp - 0x38c], cx
mov edx, 0x6c
mov word [ebp - 0x38a], dx
mov eax, 0x69
mov word [ebp - 0x388], ax
mov ecx, 0x73
mov word [ebp - 0x386], cx
mov edx, 0x2e
mov word [ebp - 0x384], dx
mov eax, 0x61
mov word [ebp - 0x382], ax
mov ecx, 0x73
mov word [ebp - 0x380], cx
mov edx, 0x70
mov word [ebp - 0x37e], dx
mov eax, 0x78
mov word [ebp - 0x37c], ax
xor ecx, ecx
mov word [ebp - 0x37a], cx
mov edx, dword [ebp - 0x54]
push edx
movzx eax, byte [ebp - 0x12]
push eax
call fcn.10035170
add esp, 8
mov byte [0x1007f04e], al
movzx ecx, byte [0x1007f04e]
test ecx, ecx
je 0x10018872
mov ecx, dword [0x1007f190]
mov esi, dword [0x1007f194]
movsx eax, word [0x1007f1a8]
cdq
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x6ac], edx
mov dword [ebp - 0x518], ecx
mov dword [ebp - 0x514], esi
mov edx, dword [ebp - 0x6b0]
cmp edx, dword [ebp - 0x518]
jne 0x10018806
mov eax, dword [ebp - 0x6ac]
cmp eax, dword [ebp - 0x514]
je 0x10018812
mov dword [ebp - 0x13c], 1
jmp 0x1001881c
mov dword [ebp - 0x13c], 0
movsx ecx, word [0x1007f1a8]
cmp ecx, 0x4c
je 0x10018834
mov dword [ebp - 0x140], 1
jmp 0x1001883e
mov dword [ebp - 0x140], 0
mov edx, dword [ebp - 0x13c]
cmp edx, dword [ebp - 0x140]
jne 0x1001886d
movzx eax, word [0x1007f1a0]
sub eax, 6
mov dword [0x1007f140], eax
mov ecx, dword [0x1007f1a4]
add ecx, 0x23fd
mov dword [0x1007f144], ecx
jmp 0x100189eb
mov edx, 0x8d5f
test edx, edx
je 0x100188d1
movsx eax, word [ebp - 0x1c]
cdq
mov ecx, dword [0x1007f1b0]
sub ecx, eax
mov eax, dword [0x1007f1b4]
sbb eax, edx
mov dword [0x1007f1b0], ecx
mov dword [0x1007f1b4], eax
mov ecx, 4
imul edx, ecx, 0x202c
mov al, byte [edx + 0x102b9e20]
mov byte [ebp - 0x13], al
mov ecx, dword [0x1007f1d0]
mov edx, dword [0x1007f1d4]
mov dword [ebp - 0x880], edx
movsx eax, byte [ebp - 0x15]
cdq
add eax, ecx
mov dword [0x1007f180], eax
jmp 0x100189eb
cmp dword [0x1007f180], 0
jne 0x100188e6
mov dword [ebp - 0x144], 1
jmp 0x100188f0
mov dword [ebp - 0x144], 0
movzx eax, byte [0x1007f027]
not eax
cmp dword [ebp - 0x144], eax
jle 0x1001890d
mov dword [ebp - 0x148], 1
jmp 0x10018917
mov dword [ebp - 0x148], 0
cmp dword [0x1007f140], 0x1a1fecbd
je 0x1001892f
mov dword [ebp - 0x14c], 1
jmp 0x10018939
mov dword [ebp - 0x14c], 0
mov ecx, dword [ebp - 0x148]
cmp ecx, dword [ebp - 0x14c]
jle 0x1001897a
mov edx, dword [0x1007f1d0]
mov eax, dword [0x1007f1d4]
push 0xf25ac
push 0x6e6b6d9c
push eax
push edx
call fcn.1005a1b0
mov byte [ebp - 0x13], al
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x68]
mov dword [0x1007f1c0], ecx
mov dword [0x1007f1c4], edx
jmp 0x100189eb
movsx eax, word [ebp - 0x24]
cmp eax, dword [0x1007f140]
jle 0x1001899a
xor ecx, ecx
mov dword [ebp - 0x344], 1
mov dword [ebp - 0x340], ecx
jmp 0x100189a5
xorps xmm0, xmm0
movlpd qword [ebp - 0x344], xmm0
cmp dword [ebp - 0x340], 0xe302d
jl 0x100189eb
jg 0x100189bf
cmp dword [ebp - 0x344], 0x4d64d2a
jb 0x100189eb
mov edx, dword [str.C]
xor eax, eax
mov ecx, 8
imul ecx, ecx, 0x9dc6
mov dword [ecx + 0x1024e1c0], edx
mov dword [ecx + 0x1024e1c4], eax
mov byte [ebp - 0x14], 0xd5
mov edx, dword [0x1007fc38]
mov dword [ebp - 0x4c], edx
mov eax, 0x68
mov word [ebp - 0x444], ax
mov ecx, 0x74
mov word [ebp - 0x442], cx
mov edx, 0x74
mov word [ebp - 0x440], dx
mov eax, 0x70
mov word [ebp - 0x43e], ax
mov ecx, 0x73
mov word [ebp - 0x43c], cx
mov edx, 0x3a
mov word [ebp - 0x43a], dx
mov eax, 0x2f
mov word [ebp - 0x438], ax
mov ecx, 0x2f
mov word [ebp - 0x436], cx
mov edx, 0x76
mov word [ebp - 0x434], dx
mov eax, 0x69
mov word [ebp - 0x432], ax
mov ecx, 0x6c
mov word [ebp - 0x430], cx
mov edx, 0x6f
mov word [ebp - 0x42e], dx
mov eax, 0x64
mov word [ebp - 0x42c], ax
mov ecx, 0x65
mov word [ebp - 0x42a], cx
mov edx, 0x71
mov word [ebp - 0x428], dx
mov eax, 0x61
mov word [ebp - 0x426], ax
mov ecx, 0x2e
mov word [ebp - 0x424], cx
mov edx, 0x63
mov word [ebp - 0x422], dx
mov eax, 0x6f
mov word [ebp - 0x420], ax
mov ecx, 0x6d
mov word [ebp - 0x41e], cx
mov edx, 0x2f
mov word [ebp - 0x41c], dx
mov eax, 0x64
mov word [ebp - 0x41a], ax
mov ecx, 0x65
mov word [ebp - 0x418], cx
mov edx, 0x74
mov word [ebp - 0x416], dx
mov eax, 0x61
mov word [ebp - 0x414], ax
mov ecx, 0x6c
mov word [ebp - 0x412], cx
mov edx, 0x69
mov word [ebp - 0x410], dx
mov eax, 0x73
mov word [ebp - 0x40e], ax
mov ecx, 0x2e
mov word [ebp - 0x40c], cx
mov edx, 0x61
mov word [ebp - 0x40a], dx
mov eax, 0x73
mov word [ebp - 0x408], ax
mov ecx, 0x70
mov word [ebp - 0x406], cx
mov edx, 0x78
mov word [ebp - 0x404], dx
xor eax, eax
mov word [ebp - 0x402], ax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x6b8], ecx
mov dword [ebp - 0x6b4], edx
mov eax, dword [ebp - 0x6b8]
or eax, dword [ebp - 0x6b4]
je 0x10018c58
mov dword [ebp - 0xa0], 0x188
jmp 0x10018bbf
mov ecx, dword [ebp - 0xa0]
sub ecx, 1
mov dword [ebp - 0xa0], ecx
cmp dword [ebp - 0xa0], 0
jle 0x10018c56
movsx eax, word [ebp - 0x24]
cdq
mov ecx, dword [0x1007f120]
sub ecx, eax
mov eax, dword [0x1007f124]
sbb eax, edx
mov dword [0x1007f120], ecx
mov dword [0x1007f124], eax
cmp dword [ebp - 0x48], 0
jne 0x10018bfd
mov dword [ebp - 0x154], 1
jmp 0x10018c07
mov dword [ebp - 0x154], 0
movzx ecx, word [0x1007f128]
test ecx, ecx
jne 0x10018c1e
mov dword [ebp - 0x150], 1
jmp 0x10018c28
mov dword [ebp - 0x150], 0
movzx edx, byte [ebp - 0x11]
add edx, dword [ebp - 0x150]
imul edx, dword [ebp - 0x154]
mov byte [0x1007f027], dl
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x60]
add eax, 1
adc ecx, 0
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], ecx
jmp 0x10018bb0
jmp 0x10018cb6
movzx edx, word [0x1007f1c8]
movzx eax, word [0x1007f168]
cmp eax, edx
jge 0x10018c7e
xor ecx, ecx
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x348], ecx
jmp 0x10018c89
xorps xmm0, xmm0
movlpd qword [ebp - 0x34c], xmm0
mov edx, dword [ebp - 0x34c]
cmp edx, dword [ebp - 0x78]
jne 0x10018c9f
mov eax, dword [ebp - 0x348]
cmp eax, dword [ebp - 0x74]
je 0x10018cb6
movsx ecx, word [ebp - 0x20]
mov edx, dword [ebp - 0x4c]
sub edx, ecx
mov dword [ebp - 0x4c], edx
mov eax, 0x843e
mov word [0x1007f16c], ax
lea ecx, [ebp - 0x400]
mov dword [ebp - 0x7bc], ecx
lea edx, [ebp - 0x3bc]
mov dword [ebp - 0x7b8], edx
lea eax, [ebp - 0x444]
mov dword [ebp - 0x7b4], eax
mov dword [ebp - 0x450], 1
mov ecx, dword [ebp - 0x450]
push ecx
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
mov dword [ebp - 0x454], eax
mov edx, dword [ebp - 0x454]
push edx
call dword [sym.imp.USER32.dll_EndDeferWindowPos]
mov dword [ebp - 0x8a8], eax
movzx eax, byte [ebp - 0x14]
test eax, eax
je 0x10018d1e
mov dword [ebp - 0x158], 1
jmp 0x10018d28
mov dword [ebp - 0x158], 0
movzx ecx, byte [ebp - 0x14]
cmp ecx, 0x45
je 0x10018d3d
mov dword [ebp - 0x15c], 1
jmp 0x10018d47
mov dword [ebp - 0x15c], 0
mov edx, dword [ebp - 0x158]
cmp edx, dword [ebp - 0x15c]
jge 0x10018f82
movzx eax, byte [0x1007f1b8]
push eax
push 0xffffffffffffffe4
call fcn.10035170
add esp, 8
movsx eax, al
cdq
mov dword [0x1007f198], eax
mov dword [0x1007f19c], edx
mov ecx, dword [0x1007f198]
mov edx, dword [0x1007f19c]
mov dword [ebp - 0x6c0], ecx
mov dword [ebp - 0x6bc], edx
cmp dword [ebp - 0x6bc], 0
jg 0x10018db2
jl 0x10018da6
cmp dword [ebp - 0x6c0], 0
ja 0x10018db2
mov dword [ebp - 0x160], 1
jmp 0x10018dbc
mov dword [ebp - 0x160], 0
mov eax, dword [0x1007f198]
mov ecx, dword [0x1007f19c]
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], ecx
cmp dword [ebp - 0x6c4], 0
jg 0x10018df3
jl 0x10018de7
cmp dword [ebp - 0x6c8], 0x38
ja 0x10018df3
mov dword [ebp - 0x164], 1
jmp 0x10018dfd
mov dword [ebp - 0x164], 0
mov edx, dword [ebp - 0x160]
cmp edx, dword [ebp - 0x164]
jge 0x10018e5e
movsx eax, word [0x1007f15c]
not eax
cdq
mov ecx, eax
mov esi, edx
movsx eax, word [0x1007f15c]
cdq
and eax, dword [0x1007f1c0]
and edx, dword [0x1007f1c4]
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
movzx edx, byte [0x1007f027]
imul edx, dword [0x1007f1bc]
movzx eax, byte [0x1007f027]
imul eax, edx
mov byte [0x1007f027], al
jmp 0x10018f82
movsx ecx, word [ebp - 0x1c]
cmp ecx, 0xb4
jge 0x10018e99
mov edx, 0x334c
mov word [0x1007f16c], dx
mov eax, dword [0x1007fc38]
xor ecx, ecx
mov dword [0x1007f130], eax
mov dword [0x1007f134], ecx
mov edx, dword [0x1007fc38]
mov dword [0x1007f170], edx
jmp 0x10018f82
mov eax, dword [0x1007f1a4]
cdq
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x6d0], ecx
mov dword [ebp - 0x6cc], esi
mov dword [ebp - 0x6d8], eax
mov dword [ebp - 0x6d4], edx
mov edx, dword [ebp - 0x6cc]
cmp edx, dword [ebp - 0x6d4]
jl 0x10018ee7
jg 0x10018edb
mov eax, dword [ebp - 0x6d0]
cmp eax, dword [ebp - 0x6d8]
jbe 0x10018ee7
mov dword [ebp - 0x168], 1
jmp 0x10018ef1
mov dword [ebp - 0x168], 0
mov ecx, dword [ebp - 0x7c]
xor edx, edx
mov dword [ebp - 0x6e0], ecx
mov dword [ebp - 0x6dc], edx
mov eax, dword [0x1007f1c4]
cmp eax, dword [ebp - 0x6dc]
jg 0x10018f2b
jl 0x10018f1f
mov ecx, dword [0x1007f1c0]
cmp ecx, dword [ebp - 0x6e0]
ja 0x10018f2b
mov dword [ebp - 0x16c], 1
jmp 0x10018f35
mov dword [ebp - 0x16c], 0
mov edx, dword [ebp - 0x168]
imul edx, dword [ebp - 0x16c]
test edx, edx
je 0x10018f82
mov eax, dword [ebp - 0x4c]
cdq
mov ecx, eax
mov esi, edx
sub ecx, dword [0x1007f120]
sbb esi, dword [0x1007f124]
mov eax, dword [ebp - 0x4c]
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov dword [ebp - 0x4c], eax
mov edx, dword [0x1007f1d0]
mov eax, dword [0x1007f1d4]
mov dword [ebp - 0x884], eax
mov word [0x1007f168], dx
mov dword [ebp - 0x378], 0
xor ecx, ecx
mov dword [ebp - 0x374], ecx
mov dword [ebp - 0x370], ecx
mov dword [ebp - 0xa4], 0
jmp 0x10018fb5
mov edx, dword [ebp - 0xa4]
add edx, 2
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 0x297
jge 0x10019127
mov ecx, dword [0x1007f1d0]
mov esi, dword [0x1007f1d4]
movzx eax, word [0x1007f1b8]
cdq
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 0x6e4], edx
mov dword [ebp - 0x6f0], ecx
mov dword [ebp - 0x6ec], esi
mov edx, dword [ebp - 0x6e8]
cmp edx, dword [ebp - 0x6f0]
jne 0x10019030
mov eax, dword [ebp - 0x6e4]
cmp eax, dword [ebp - 0x6ec]
jne 0x10019030
mov ecx, dword [0x1007f198]
mov edx, dword [0x1007f19c]
mov dword [ebp - 0x7d8], edx
push ecx
call dword [sym.imp.USER32.dll_OpenIcon]
mov dword [str.C], eax
jmp 0x10019119
mov eax, 0xfd9e320c
test eax, eax
je 0x1001906d
movzx ecx, word [0x1007f128]
imul eax, ecx, 0x90
cdq
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
mov ecx, dword [0x1007f160]
mov edx, dword [0x1007f164]
mov dword [ebp - 0x8c0], edx
mov eax, dword [ebp - 0x70]
cdq
add eax, ecx
mov dword [ebp - 0x70], eax
jmp 0x10019119
movzx eax, word [0x1007f16c]
test eax, eax
je 0x10019119
movzx ecx, word [0x1007f16c]
test ecx, ecx
jne 0x1001909b
xor edx, edx
mov dword [ebp - 0x354], 1
mov dword [ebp - 0x350], edx
jmp 0x100190a6
xorps xmm0, xmm0
movlpd qword [ebp - 0x354], xmm0
mov eax, dword [0x1007f124]
push eax
mov ecx, dword [0x1007f120]
push ecx
mov edx, dword [ebp - 0x350]
push edx
mov eax, dword [ebp - 0x354]
push eax
call fcn.1005a1b0
mov dword [ebp - 0x6f8], eax
mov dword [ebp - 0x6f4], edx
mov ecx, dword [ebp - 0x6f8]
or ecx, dword [ebp - 0x6f4]
jne 0x100190ec
mov dword [ebp - 0x170], 1
jmp 0x100190f6
mov dword [ebp - 0x170], 0
movsx edx, word [ebp - 0x24]
movzx eax, word [0x1007f128]
sub eax, edx
xor eax, dword [ebp - 0x170]
mov word [0x1007f16c], ax
mov ecx, dword [ebp - 0x54]
shl ecx, 5
mov word [ebp - 0x24], cx
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
jmp 0x10018fa6
xor eax, eax
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x7ac], eax
mov dword [ebp - 0x7a8], eax
push 0xc0
call fcn.10037420
add esp, 4
movzx ecx, ax
mov dword [0x1007f180], ecx
cmp dword [0x1007f180], 0
je 0x10019166
mov dword [ebp - 0x174], 1
jmp 0x10019170
mov dword [ebp - 0x174], 0
cmp dword [0x1007f180], 0x18
je 0x10019185
mov dword [ebp - 0x178], 1
jmp 0x1001918f
mov dword [ebp - 0x178], 0
mov edx, dword [ebp - 0x174]
cmp edx, dword [ebp - 0x178]
jle 0x100191c1
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x4c]
add ecx, eax
mov dword [ebp - 0x4c], ecx
mov edx, dword [0x1007f178]
add edx, 0x3eb2
mov word [0x1007f15c], dx
jmp 0x10019212
mov eax, dword [ebp - 0x3c]
or eax, dword [ebp - 0x38]
je 0x10019212
mov ecx, dword [ebp - 0x54]
not ecx
sub ecx, dword [str.C]
mov word [0x1007f16c], cx
mov edx, dword [ebp - 0x70]
sub edx, dword [ebp - 0x80]
mov eax, dword [0x1007f154]
sub eax, edx
mov byte [0x1007f04e], al
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
push 0x2cf72
push 0xf2cd928d
push edx
push ecx
call fcn.1005a1b0
mov ecx, dword [0x1007f180]
add ecx, eax
mov dword [0x1007f180], ecx
mov edx, dword [ebp - 0x17c]
sub edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x17c]
sub eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x458]
sub ecx, 0x38d
sub ecx, eax
cmp ecx, edx
je 0x1001d168
mov eax, dword [0x1007f144]
sar eax, 5
cdq
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
mov edx, dword [ebp - 0x58]
mov ecx, dword [0x1007f138]
mov esi, dword [0x1007f13c]
sub ecx, dword [ebp - 0x5c]
sbb esi, edx
mov eax, dword [ebp - 0x70]
xor eax, 0x1fd6
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov ecx, eax
not ecx
movsx eax, byte [ebp - 0x15]
cdq
add eax, dword [0x1007f1c0]
or eax, 0xffffffaf
sub eax, ecx
mov dword [0x1007f180], eax
movsx eax, word [ebp - 0x28]
cdq
push 0x4f62b
push 0x96f1ce0e
push edx
push eax
call fcn.1005a1b0
add eax, dword [0x1007f1b0]
adc edx, dword [0x1007f1b4]
mov dword [0x1007f1b0], eax
mov dword [0x1007f1b4], edx
mov dword [ebp - 0x84], 0
jmp 0x100192d6
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 3
jge 0x1001d168
movzx eax, word [ebp - 0x2c]
push eax
push 0
push 0x6e
push 0x6e
push 0x40
call fcn.10036740
add esp, 0x14
mov word [ebp - 0x20], ax
movsx ecx, word [ebp - 0x20]
test ecx, ecx
je 0x10019379
movzx eax, byte [ebp - 0x14]
cdq
mov ecx, dword [ebp - 0x64]
mov esi, dword [ebp - 0x60]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], esi
movzx edx, byte [0x1007f027]
movsx eax, word [ebp - 0x2c]
imul eax, edx
mov word [ebp - 0x2c], ax
movsx ecx, word [ebp - 0x1c]
test ecx, ecx
jne 0x10019347
xor edx, edx
mov dword [ebp - 0x700], 1
mov dword [ebp - 0x6fc], edx
jmp 0x10019352
xorps xmm0, xmm0
movlpd qword [ebp - 0x700], xmm0
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x7dc], edx
add ecx, dword [ebp - 0x700]
movzx eax, word [0x1007f168]
mov edx, dword [ebp - 0x54]
imul eax, edx
cdq
sub eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x100193f6
movsx eax, word [0x1007f1a8]
movzx ecx, byte [0x1007f04e]
not ecx
imul eax, ecx
cdq
mov ecx, dword [0x1007f1d0]
mov esi, dword [0x1007f1d4]
not ecx
not esi
mov dword [ebp - 0x708], ecx
mov dword [ebp - 0x704], esi
mov dword [ebp - 0x710], eax
mov dword [ebp - 0x70c], edx
mov edx, dword [ebp - 0x708]
cmp edx, dword [ebp - 0x710]
jne 0x100193f6
mov eax, dword [ebp - 0x704]
cmp eax, dword [ebp - 0x70c]
jne 0x100193f6
mov dword [ebp - 0x4c], 0x11a1
mov ecx, dword [0x1007f198]
mov edx, dword [0x1007f19c]
mov dword [ebp - 0x7e0], edx
add ecx, 0x5268760a
mov dword [0x1007f170], ecx
jmp 0x1001940c
jmp 0x1001941d
mov eax, dword [0x1007fc38]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], 0
jmp 0x10019443
mov ecx, dword [ebp - 0xa8]
add ecx, 1
mov dword [ebp - 0xa8], ecx
cmp dword [ebp - 0xa8], 0x2f1
jge 0x100195b4
mov byte [ebp - 0x12], 3
mov edx, 0xfffffd1f
mov word [ebp - 0x2c], dx
movzx ax, byte [ebp - 0x13]
mov word [ebp - 0x2c], ax
movsx ecx, byte [ebp - 0x12]
mov dword [ebp - 0x184], ecx
cmp dword [ebp - 0x184], 3
ja case.default.0x10019486
mov edx, dword [ebp - 0x184]
jmp dword [edx*4 + 0x1001d1c0]
movsx eax, word [0x1007f15c]
not eax
cdq
sub eax, dword [ebp - 0x78]
mov word [0x1007f1c8], ax
mov ecx, dword [0x1007f160]
mov esi, dword [0x1007f164]
movsx eax, word [0x1007f1a8]
cdq
mov edi, eax
mov ebx, edx
sub edi, ecx
sbb ebx, esi
movsx eax, word [0x1007f1a8]
cdq
push ebx
push edi
push edx
push eax
call fcn.1005a1b0
mov word [0x1007f1a8], ax
imul edx, dword [ebp - 0x54], 0xa24e
add edx, dword [0x1007f140]
mov dword [0x1007f140], edx
jmp case.default.0x10019486
mov eax, dword [0x1007f1a4]
imul eax, dword [0x1007f170]
imul eax, dword [0x1007f170]
mov dword [0x1007f170], eax
mov dword [ebp - 0x50], 0x5b40b331
jmp case.default.0x10019486
movzx ecx, word [0x1007f168]
sar ecx, 8
mov dword [ebp - 0x50], ecx
mov ecx, dword [0x1007f138]
mov esi, dword [0x1007f13c]
movzx eax, word [0x1007f168]
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov ecx, eax
movzx eax, word [0x1007f168]
cdq
or eax, ecx
mov word [0x1007f168], ax
movsx edx, word [ebp - 0x28]
sub edx, 0x5d398e87
mov word [0x1007f168], dx
jmp case.default.0x10019486
movzx eax, byte [ebp - 0x14]
cdq
mov ecx, eax
add ecx, 0x3b2f2072
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
call fcn.1005a210
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], edx
mov eax, dword [0x1007f1a4]
cdq
mov esi, eax
mov edx, dword [0x1007f1b4]
push edx
mov eax, dword [0x1007f1b0]
push eax
mov ecx, dword [ebp - 0x74]
push ecx
mov edx, dword [ebp - 0x78]
push edx
call fcn.1005a1b0
sub eax, esi
mov dword [ebp - 0x70], eax
mov ax, word [ebp - 0x28]
add ax, 1
mov word [ebp - 0x28], ax
jmp 0x10019434
mov ecx, dword [ebp - 0xac]
add ecx, 0x1c8
mov dword [ebp - 0x45c], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
xor edx, edx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], ecx
cmp dword [ebp - 0x714], 0
jl 0x10019606
jg 0x100195fa
cmp dword [ebp - 0x718], 0
jbe 0x10019606
mov dword [ebp - 0x188], 1
jmp 0x10019610
mov dword [ebp - 0x188], 0
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x720], edx
mov dword [ebp - 0x71c], eax
cmp dword [ebp - 0x71c], 0
jl 0x10019642
jg 0x10019636
cmp dword [ebp - 0x720], 0x30
jbe 0x10019642
mov dword [ebp - 0x18c], 1
jmp 0x1001964c
mov dword [ebp - 0x18c], 0
mov ecx, dword [ebp - 0x188]
cmp ecx, dword [ebp - 0x18c]
je 0x100198b0
movzx edx, word [ebp - 0x2c]
push edx
push 0xb1
push 0x57
push 0xc6
push 0
call fcn.10036ef0
add esp, 0x14
movzx eax, ax
mov dword [0x1007f1a4], eax
movsx eax, word [ebp - 0x1c]
cdq
mov esi, eax
mov edi, edx
mov ecx, dword [0x1007f198]
mov edx, dword [0x1007f19c]
mov eax, dword [0x1007f180]
xor ebx, ebx
push edx
push ecx
push ebx
push eax
call fcn.1005a1b0
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], edx
mov dword [ebp - 0x730], esi
mov dword [ebp - 0x72c], edi
mov ecx, dword [ebp - 0x724]
cmp ecx, dword [ebp - 0x72c]
jg 0x10019715
jl 0x100196dc
mov edx, dword [ebp - 0x728]
cmp edx, dword [ebp - 0x730]
jae 0x10019715
movzx eax, byte [ebp - 0x14]
sar eax, 8
mov word [ebp - 0x28], ax
movzx eax, word [0x1007f1c8]
cdq
mov ecx, dword [ebp - 0x74]
push ecx
mov ecx, dword [ebp - 0x78]
push ecx
push edx
push eax
call fcn.1005a1b0
mov ecx, eax
movzx eax, word [0x1007f1c8]
cdq
add eax, ecx
mov word [0x1007f1c8], ax
jmp 0x100198ab
xor edx, edx
jne 0x1001974a
mov eax, dword [0x1007f138]
mov ecx, dword [0x1007f13c]
mov dword [ebp - 0x738], eax
mov dword [ebp - 0x734], ecx
mov edx, dword [ebp - 0x738]
or edx, dword [ebp - 0x734]
jne 0x1001974a
mov dword [ebp - 0x190], 0
jmp 0x10019754
mov dword [ebp - 0x190], 1
movsx eax, word [0x1007f1a8]
cmp dword [0x1007f1a4], eax
jne 0x1001976f
mov dword [ebp - 0x194], 1
jmp 0x10019779
mov dword [ebp - 0x194], 0
mov ecx, dword [ebp - 0x190]
cmp ecx, dword [ebp - 0x194]
jl 0x100197c3
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
add edx, 1
adc eax, 0
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
movsx eax, word [ebp - 0x2c]
cdq
mov edi, eax
mov ebx, edx
add edi, ecx
adc ebx, esi
movsx eax, word [ebp - 0x2c]
cdq
push ebx
push edi
push edx
push eax
call fcn.1005a1b0
mov word [ebp - 0x2c], ax
jmp 0x100198ab
cmp dword [0x1007f180], 0
je 0x100198ab
mov dx, word [0x1007f180]
mov word [ebp - 0x28], dx
cmp dword [ebp - 0x70], 0
jne 0x100197f5
xor eax, eax
mov dword [ebp - 0x364], 1
mov dword [ebp - 0x360], eax
jmp 0x10019800
xorps xmm0, xmm0
movlpd qword [ebp - 0x364], xmm0
mov ecx, dword [0x1007f190]
mov edx, dword [0x1007f194]
xor ecx, dword [0x1007f1c0]
xor edx, dword [0x1007f1c4]
mov dword [ebp - 0x740], ecx
mov dword [ebp - 0x73c], edx
mov eax, dword [ebp - 0x740]
or eax, dword [ebp - 0x73c]
jne 0x10019846
xor ecx, ecx
mov dword [ebp - 0x35c], 1
mov dword [ebp - 0x358], ecx
jmp 0x10019851
xorps xmm0, xmm0
movlpd qword [ebp - 0x35c], xmm0
mov edx, dword [0x1007f138]
mov eax, dword [0x1007f13c]
push 0
push 0xc6e5
push eax
push edx
call fcn.1005a1b0
mov ecx, eax
mov esi, edx
add ecx, dword [ebp - 0x35c]
adc esi, dword [ebp - 0x358]
movzx eax, byte [ebp - 0x11]
cdq
mov edi, dword [ebp - 0x34]
mov ebx, dword [ebp - 0x30]
sub edi, dword [ebp - 0x364]
sbb ebx, dword [ebp - 0x360]
not edi
not ebx
add edi, eax
adc ebx, edx
not edi
not ebx
push esi
push ecx
push ebx
push edi
call fcn.1005a1b0
mov dword [str.C], eax
jmp 0x10019a23
mov edx, dword [0x1007f154]
not edx
movzx eax, byte [0x1007f04e]
sub eax, edx
je 0x10019934
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x748], ecx
mov dword [ebp - 0x744], edx
mov eax, dword [ebp - 0x748]
cmp eax, dword [0x1007f1b0]
jne 0x10019934
mov ecx, dword [ebp - 0x744]
cmp ecx, dword [0x1007f1b4]
jne 0x10019934
mov edx, dword [ebp - 0x54]
movzx eax, byte [0x1007f026]
lea ecx, [eax + edx + 0xcc]
mov byte [0x1007f026], cl
movzx edx, word [0x1007f14c]
imul eax, edx, 0x58
cdq
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], edx
mov eax, dword [0x1007f1a4]
cdq
mov ecx, dword [ebp - 0x78]
sub ecx, eax
mov eax, dword [ebp - 0x74]
sbb eax, edx
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x74], eax
jmp 0x10019a23
movsx ecx, word [ebp - 0x2c]
test ecx, ecx
je 0x10019985
mov edx, dword [0x1007f130]
mov eax, dword [0x1007f134]
mov dword [ebp - 0x7e4], eax
add edx, 0x32f44ddd
mov byte [0x1007f04e], dl
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x7e8], edx
sub ecx, 0x5446928
mov dword [ebp - 0x70], ecx
movsx eax, word [ebp - 0x28]
not eax
cdq
mov dword [0x1007f188], eax
mov dword [0x1007f18c], edx
jmp 0x10019a23
mov eax, dword [0x1007f140]
not eax
test eax, eax
je 0x10019a23
mov ecx, 0xb4530890
test ecx, ecx
je 0x10019a23
movzx edx, byte [ebp - 0x14]
mov eax, dword [0x1007f1a4]
not eax
add eax, edx
jne 0x100199c4
xor ecx, ecx
mov dword [ebp - 0x750], 1
mov dword [ebp - 0x74c], ecx
jmp 0x100199cf
xorps xmm0, xmm0
movlpd qword [ebp - 0x750], xmm0
mov edx, dword [0x1007f1b0]
sub edx, 0x6223
add edx, dword [ebp - 0x750]
mov dword [ebp - 0x80], edx
movzx eax, word [0x1007f128]
test eax, eax
je 0x100199fb
movsx ecx, word [ebp - 0x20]
mov dword [ebp - 0x198], ecx
jmp 0x10019a08
movzx edx, word [0x1007f1c8]
mov dword [ebp - 0x198], edx
mov eax, dword [ebp - 0x198]
mov dword [0x1007f158], eax
movsx ecx, word [0x1007f15c]
add ecx, 0x6587
mov byte [ebp - 0x12], cl
mov edx, dword [ebp - 0xac]
add edx, 0x345
mov dword [ebp - 0x464], edx
movzx eax, word [0x1007f1a0]
cmp eax, dword [ebp - 0x4c]
je 0x10019aee
movzx ecx, word [0x1007f128]
test ecx, ecx
jne 0x10019a64
xor edx, edx
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x368], edx
jmp 0x10019a6f
xorps xmm0, xmm0
movlpd qword [ebp - 0x36c], xmm0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x754], ecx
mov edx, dword [ebp - 0x754]
cmp edx, dword [ebp - 0x368]
jl 0x10019aab
jg 0x10019a9f
mov eax, dword [ebp - 0x758]
cmp eax, dword [ebp - 0x36c]
jbe 0x10019aab
mov dword [ebp - 0x19c], 1
jmp 0x10019ab5
mov dword [ebp - 0x19c], 0
mov ecx, dword [ebp - 0x19c]
not ecx
test ecx, ecx
je 0x10019aee
xor edx, edx
mov ecx, dword [0x1007f178]
sub ecx, dword [0x1007f180]
mov esi, dword [0x1007f17c]
sbb esi, edx
movzx eax, byte [0x1007f04e]
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov word [0x1007f128], ax
mov edx, dword [ebp - 0xac]
add edx, 0x48f
mov dword [ebp - 0x460], edx
movzx eax, word [ebp - 0x48]
push eax
push 0
push 0
push 0x82
push 0x7b
mov ecx, dword [ebp - 0x70]
push ecx
push 0xf
call fcn.10035820
add esp, 0x1c
mov byte [ebp - 0x11], al
movzx edx, byte [ebp - 0x11]
test edx, edx
je 0x10019b5d
mov eax, dword [0x1007f144]
sub eax, dword [str.C]
mov ecx, dword [0x1007f144]
sub ecx, eax
mov dword [0x1007f144], ecx
movzx edx, word [0x1007f168]
sub edx, dword [ebp - 0x7c]
movzx eax, word [0x1007f168]
sub eax, edx
mov word [0x1007f168], ax
jmp 0x10019b8f
movsx ecx, word [ebp - 0x1c]
movsx edx, word [ebp - 0x28]
cmp edx, ecx
jne 0x10019b8f
movzx eax, byte [0x1007f026]
add eax, 0x7d
mov dword [ebp - 0x48], eax
mov ecx, 0x2093
mov word [ebp - 0x28], cx
mov eax, dword [ebp - 0x64]
mov edx, dword [ebp - 0x60]
mov cl, 6
call fcn.1005a210
mov dword [ebp - 0x80], eax
imul edx, dword [ebp - 0x45c], 0x20a
imul eax, dword [ebp - 0x460], 0x232
imul eax, edx
mov ecx, dword [ebp - 0x464]
add ecx, 0x3a8
cmp ecx, eax
je 0x1001d163
movzx edx, word [0x1007f1a0]
add edx, dword [0x1007f158]
mov dword [0x1007f158], edx
mov eax, dword [0x1007f170]
add eax, 0x22ae
xor ecx, ecx
mov dword [0x1007f188], eax
mov dword [0x1007f18c], ecx
movsx edx, word [0x1007f15c]
movzx eax, word [0x1007f1b8]
add eax, edx
movzx ecx, word [0x1007f1b8]
imul ecx, eax
mov word [0x1007f1b8], cx
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov byte [ebp - 0x14], al
mov edx, dword [0x1007fc38]
mov dword [ebp - 0xb0], edx
push 0x98
mov eax, dword [ebp - 0x54]
push eax
push 0
push 0
push 0xf4
call fcn.10036ef0
add esp, 0x14
movzx eax, ax
cdq
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0
ja 0x10019c4e
cmp dword [ebp - 0x3c], 0
jbe 0x10019ce7
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x70]
cdq
push 0x9a5a0
push 0x9299fdc2
push edx
push eax
call fcn.1005a1b0
mov ecx, dword [0x1007f178]
sub ecx, eax
mov eax, dword [0x1007f17c]
sbb eax, edx
mov dword [0x1007f178], ecx
mov dword [0x1007f17c], eax
cmp dword [ebp - 0x50], 0
je 0x10019c98
mov ecx, dword [0x1007f144]
mov dword [ebp - 0x1a0], ecx
jmp 0x10019ca2
movsx edx, byte [ebp - 0x12]
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x1a0]
cdq
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0
je 0x10019cc3
jmp 0x10019ce5
mov ecx, dword [ebp - 0x3c]
mov dword [0x1007f1a4], ecx
mov dl, byte [0x1007fc38]
mov byte [ebp - 0x12], dl
imul eax, dword [ebp - 0x50], 0x6a
cdq
mov dword [0x1007f190], eax
mov dword [0x1007f194], edx
jmp 0x10019d40
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x7ec], ecx
add eax, 0xcbdb
mov word [ebp - 0x28], ax
mov edx, dword [0x1007f160]
mov eax, dword [0x1007f164]
mov ecx, 8
imul ecx, ecx, 0xe497
add edx, dword [ecx + 0x101db520]
adc eax, dword [ecx + 0x101db524]
mov dword [0x1007f160], edx
mov dword [0x1007f164], eax
movzx edx, word [0x1007f1b8]
movsx eax, byte [ebp - 0x12]
imul eax, edx
movsx ecx, byte [ebp - 0x12]
sub ecx, eax
mov byte [ebp - 0x12], cl
mov edx, dword [ebp - 0xb0]
add edx, 0x127
mov dword [ebp - 0x230], edx
movzx eax, word [ebp - 0x7c]
push eax
push 0
movzx ecx, word [0x1007f1b0]
push ecx
push 0
push 0xc2
push 0xf6
push 0
call fcn.10035820
add esp, 0x1c
mov word [0x1007f14c], ax
movzx edx, word [0x1007f14c]
test edx, edx
jne 0x10019da2
mov eax, dword [ebp - 0x78]
sub eax, 0x72
mov dword [ebp - 0x80], eax
movzx ecx, word [0x1007f1a0]
sar ecx, 1
mov dword [ebp - 0x54], ecx
jmp 0x10019e65
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x760], edx
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x760]
or ecx, dword [ebp - 0x75c]
je 0x10019df1
mov edx, dword [0x1007fc38]
xor eax, eax
mov dword [0x1007f1c0], edx
mov dword [0x1007f1c4], eax
movsx ecx, word [0x1007f1a8]
add ecx, dword [ebp - 0x48]
movsx edx, word [0x1007f1a8]
add edx, ecx
mov word [0x1007f1a8], dx
jmp 0x10019e65
mov eax, dword [ebp - 0x78]
not eax
mov ecx, dword [ebp - 0x74]
not ecx
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x764], ecx
mov edx, dword [ebp - 0x768]
or edx, dword [ebp - 0x764]
je 0x10019e65
mov eax, dword [0x1007f154]
add eax, dword [ebp - 0x3c]
mov dword [0x1007f154], eax
movzx ecx, byte [ebp - 0x11]
test ecx, ecx
je 0x10019e43
mov edx, dword [0x1007f130]
mov eax, dword [0x1007f134]
mov dword [ebp - 0x2ac], edx
mov dword [ebp - 0x2a8], eax
jmp 0x10019e53
mov eax, dword [ebp - 0x4c]
cdq
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2a8], edx
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [ebp - 0x2a8]
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0xb0]
add eax, 0x1c9
mov dword [ebp - 0x22c], eax
movsx ecx, word [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov word [ebp - 0x1c], ax
mov edx, dword [ebp - 0xb0]
add edx, 0x2e3
mov dword [ebp - 0x470], edx
mov dword [ebp - 0x54], 4
movzx eax, byte [0x1007f04e]
xor eax, 0x9d88e232
cdq
mov esi, eax
mov eax, dword [0x1007f180]
xor ecx, ecx
mov edx, dword [ebp - 0x34]
mov edi, dword [ebp - 0x30]
push ecx
push eax
push edi
push edx
call fcn.1005a1b0
mov ecx, eax
mov edi, edx
movsx edx, word [ebp - 0x2c]
movsx eax, word [ebp - 0x20]
imul eax, edx
cdq
push edi
push ecx
push edx
push eax
call fcn.1005a1b0
sub eax, esi
mov dword [str.C], eax
mov eax, dword [ebp - 0x78]
add eax, 0x71553a98
mov ecx, dword [ebp - 0x74]
adc ecx, 0xabdf6
mov dword [0x1007f178], eax
mov dword [0x1007f17c], ecx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x1a4], edx
cmp dword [ebp - 0x1a4], 4
ja case.default.0x10019f1b
mov eax, dword [ebp - 0x1a4]
jmp dword [eax*4 + 0x1001d1d0]
movsx ecx, word [ebp - 0x1c]
sub ecx, dword [ebp - 0x4c]
jne 0x10019f37
mov dword [ebp - 0x1a8], 1
jmp 0x10019f41
mov dword [ebp - 0x1a8], 0
movsx edx, word [ebp - 0x1c]
movsx eax, word [ebp - 0x24]
or eax, edx
imul eax, dword [ebp - 0x1a8]
cdq
mov dword [0x1007f1c0], eax
mov dword [0x1007f1c4], edx
mov ecx, dword [ebp - 0x58]
mov edx, dword [0x1007f138]
mov eax, dword [0x1007f13c]
add edx, dword [ebp - 0x5c]
adc eax, ecx
mov ecx, dword [0x1007f138]
mov esi, dword [0x1007f13c]
add ecx, edx
adc esi, eax
mov dword [0x1007f138], ecx
mov dword [0x1007f13c], esi
mov edx, dword [0x1007fc38]
mov dword [str.C], edx
jmp case.default.0x10019f1b
mov dword [ebp - 0x48], 0x6f57d587
movzx eax, byte [ebp - 0x13]
movsx ecx, word [0x1007f1a8]
imul ecx, eax
movsx edx, word [0x1007f1a8]
add edx, ecx
mov word [0x1007f1a8], dx
mov eax, 0xa043
mov word [0x1007f128], ax
jmp case.default.0x10019f1b
mov ecx, dword [0x1007f188]
sub ecx, 0xde
mov edx, dword [0x1007f18c]
sbb edx, 0
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], edx
jmp case.default.0x10019f1b
mov eax, dword [0x1007f1d0]
mov ecx, dword [0x1007f1d4]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x770]
or edx, dword [ebp - 0x76c]
jne 0x1001a024
mov dword [ebp - 0x1ac], 1
jmp 0x1001a02e
mov dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
xor eax, 0x6eb6
movsx ecx, word [0x1007f1a8]
movzx edx, byte [0x1007f04e]
add edx, ecx
imul edx, eax
mov dword [0x1007f180], edx
mov eax, 0xffffd644
mov word [ebp - 0x28], ax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x7c]
lea eax, [edx + ecx - 0x468265a0]
mov dword [ebp - 0x7c], eax
jmp case.default.0x10019f1b
mov ecx, dword [0x1007f154]
not ecx
xor edx, edx
add ecx, dword [ebp - 0x6c]
adc edx, dword [ebp - 0x68]
mov eax, dword [str.C]
not eax
xor esi, esi
add eax, ecx
adc esi, edx
mov dword [ebp - 0x778], eax
mov dword [ebp - 0x774], esi
mov ecx, dword [ebp - 0x778]
or ecx, dword [ebp - 0x774]
jne 0x1001a0b2
mov edx, 1
mov word [ebp - 0x86], dx
jmp 0x1001a0bb
xor eax, eax
mov word [ebp - 0x86], ax
mov cx, word [ebp - 0x86]
mov word [ebp - 0x1c], cx
imul eax, dword [ebp - 0x48], 0xe7e0
cdq
or eax, dword [ebp - 0x3c]
or edx, dword [ebp - 0x38]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
mov edx, dword [ebp - 0x84]
lea eax, [ebp + edx*4 - 0x7b0]
push eax
mov ecx, dword [ebp - 0x84]
lea edx, [ebp + ecx*4 - 0x378]
push edx
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp + eax*4 - 0x7bc]
push ecx
call fcn.10008c80
add esp, 0xc
mov eax, dword [ebp - 0x4c]
cdq
mov ecx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x40]
and ecx, eax
and esi, edx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], esi
mov edx, dword [ebp - 0x4c]
sub edx, 1
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
mov cl, 6
call fcn.1005a210
mov dword [0x1007f180], eax
lea eax, [ebp - 0x1b8]
push eax
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp + ecx*4 - 0x378]
push edx
call fcn.100262c0
add esp, 8
mov dword [ebp - 0xc0], eax
xor eax, eax
mov dword [0x1007f160], 3
mov dword [0x1007f164], eax
mov ecx, dword [0x1007f1b4]
push ecx
mov edx, dword [0x1007f1b0]
push edx
mov eax, dword [0x1007f1c4]
push eax
mov ecx, dword [0x1007f1c0]
push ecx
call fcn.1005a1b0
mov dword [0x1007f1c0], eax
mov dword [0x1007f1c4], edx
movzx edx, byte [0x1007f027]
test edx, edx
jne 0x1001a1b1
mov dword [ebp - 0x1b0], 1
jmp 0x1001a1bb
mov dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x1b0]
mov dword [0x1007f1a4], eax
push 0x9ee98
push 0xfc3a87d1
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x6c]
push edx
call fcn.1005a1b0
mov word [ebp - 0x20], ax
mov eax, dword [0x1007f160]
mov ecx, dword [0x1007f164]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], ecx
cmp dword [ebp - 0xf4], 0
jl 0x1001a3e2
jg 0x1001a218
cmp dword [ebp - 0xf8], 0
jb 0x1001a3e2
cmp dword [ebp - 0xf4], 0
jg 0x1001a3e2
jl 0x1001a234
cmp dword [ebp - 0xf8], 3
ja 0x1001a3e2
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x8a4]
jmp dword [eax*4 + 0x1001d1e4]
mov eax, dword [ebp - 0x1b8]
push eax
mov ecx, dword [ebp - 0xc0]
push ecx
push 0xc
push str.mkOAg236ZnKJ
call fcn.1001f620
add esp, 0x10
jmp 0x1001a424
jmp 0x1001a444
jmp 0x1001a450
jmp 0x1001a46b
jmp 0x1001a47c
mov ecx, 0x10
mov esi, dword [ebp - 0xc0]
lea edi, [ebp - 0x900]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x54]
cdq
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x784], edx
mov edx, dword [0x1007f124]
cmp edx, dword [ebp - 0x784]
jb 0x1001a4cf
ja 0x1001a4c3
mov eax, dword [0x1007f120]
cmp eax, dword [ebp - 0x788]
jb 0x1001a4cf
mov dword [ebp - 0x1bc], 1
jmp 0x1001a4d9
mov dword [ebp - 0x1bc], 0
cmp dword [0x1007f124], 0
ja 0x1001a4eb
cmp dword [0x1007f120], 0x10
jb 0x1001a4f7
mov dword [ebp - 0x1c0], 1
jmp 0x1001a501
mov dword [ebp - 0x1c0], 0
mov ecx, dword [ebp - 0x1bc]
cmp ecx, dword [ebp - 0x1c0]
jge 0x1001a677
push 0
call fcn.10037420
add esp, 4
mov word [ebp - 0xea], ax
movzx eax, word [ebp - 0xea]
cdq
mov dword [0x1007f1c0], eax
mov dword [0x1007f1c4], edx
mov edx, dword [0x1007f1c0]
or edx, dword [0x1007f1c4]
je 0x1001a551
mov dword [ebp - 0x1c4], 1
jmp 0x1001a55b
mov dword [ebp - 0x1c4], 0
cmp dword [0x1007f1c0], 0x58
jne 0x1001a56d
cmp dword [0x1007f1c4], 0
je 0x1001a579
mov dword [ebp - 0x1c8], 1
jmp 0x1001a583
mov dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp - 0x1c8]
jge 0x1001a65f
mov dword [ebp - 0xb4], 0xa
movzx ecx, word [0x1007f1a0]
movzx edx, word [0x1007f168]
sub edx, ecx
movzx eax, word [0x1007f168]
add eax, edx
mov word [0x1007f168], ax
imul ecx, dword [0x1007f154], 0xe83f867b
xor edx, edx
add ecx, dword [0x1007f188]
adc edx, dword [0x1007f18c]
mov dword [0x1007f188], ecx
mov dword [0x1007f18c], edx
movsx eax, word [0x1007f15c]
imul eax, dword [0x1007f180]
test eax, eax
jne 0x1001a608
xor ecx, ecx
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x2b0], ecx
jmp 0x1001a613
xorps xmm0, xmm0
movlpd qword [ebp - 0x2b4], xmm0
mov edx, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x2b0]
mov dword [0x1007f120], edx
mov dword [0x1007f124], eax
movsx eax, word [ebp - 0x24]
cdq
mov ecx, eax
sub ecx, dword [0x1007f188]
movsx eax, word [ebp - 0x24]
cdq
xor eax, ecx
mov word [ebp - 0x24], ax
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
cmp dword [ebp - 0xb4], 0x1dac
jl 0x1001a5e2
jmp 0x1001a675
mov eax, 0xffffb80a
mov word [ebp - 0x20], ax
mov ecx, dword [ebp - 0x48]
shl ecx, 7
mov word [0x1007f1a8], cx
jmp 0x1001a6a6
mov edx, 0xb623209c
test edx, edx
je 0x1001a6a6
movsx eax, word [0x1007f15c]
imul ecx, eax, 0x45
mov edx, dword [0x1007f158]
sub edx, ecx
mov dword [0x1007f158], edx
movsx eax, byte [ebp - 0x15]
sub eax, 0x3ff3
mov dword [0x1007f170], eax
jmp 0x1001a6f9
mov dword [ebp - 4], 0xffffffff
jmp 0x1001a709
mov eax, dword [ebp - 0x1cc]
or eax, dword [ebp - 0x1cc]
cmp eax, 0x245
je 0x1001d105
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
je 0x1001a759
mov dword [ebp - 0x46c], 1
mov ecx, dword [ebp - 0x46c]
push ecx
mov edx, dword [ebp - 0x1d0]
push edx
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x790], eax
mov dword [ebp - 0x78c], ecx
cmp dword [ebp - 0x78c], 0
jg 0x1001a96b
jl 0x1001a787
cmp dword [ebp - 0x790], 0
ja 0x1001a96b
movzx edx, byte [ebp - 0x13]
test edx, edx
jne 0x1001a79b
mov dword [ebp - 0x1d4], 1
jmp 0x1001a7a5
mov dword [ebp - 0x1d4], 0
movzx eax, word [0x1007f16c]
cmp eax, dword [ebp - 0x1d4]
jle 0x1001a7c0
mov dword [ebp - 0x1e0], 1
jmp 0x1001a7ca
mov dword [ebp - 0x1e0], 0
movsx ecx, word [ebp - 0x20]
test ecx, ecx
jne 0x1001a7de
mov dword [ebp - 0x1d8], 1
jmp 0x1001a7e8
mov dword [ebp - 0x1d8], 0
movzx edx, word [0x1007f1b8]
test edx, edx
jne 0x1001a7ff
mov dword [ebp - 0x1dc], 1
jmp 0x1001a809
mov dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1d8]
add eax, dword [ebp - 0x1dc]
jne 0x1001a823
mov dword [ebp - 0x1e4], 1
jmp 0x1001a82d
mov dword [ebp - 0x1e4], 0
mov ecx, dword [ebp - 0x1e0]
cmp ecx, dword [ebp - 0x1e4]
jle 0x1001a847
mov dword [ebp - 0x1e8], 1
jmp 0x1001a851
mov dword [ebp - 0x1e8], 0
mov edx, dword [0x1007f1d0]
mov eax, dword [0x1007f1d4]
mov dword [ebp - 0x488], edx
mov dword [ebp - 0x484], eax
mov ecx, dword [ebp - 0x488]
or ecx, dword [ebp - 0x484]
jne 0x1001a8a2
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x490], edx
mov dword [ebp - 0x48c], eax
mov ecx, dword [ebp - 0x490]
or ecx, dword [ebp - 0x48c]
jne 0x1001a8a2
mov dword [ebp - 0x1ec], 0
jmp 0x1001a8ac
mov dword [ebp - 0x1ec], 1
mov edx, dword [ebp - 0x1e8]
or edx, dword [ebp - 0x1ec]
je 0x1001a969
mov eax, dword [0x1007f198]
mov ecx, dword [0x1007f19c]
xor eax, 0x74d4887e
xor ecx, 0
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x498]
or edx, dword [ebp - 0x494]
jne 0x1001a8f7
mov dword [ebp - 0x1f0], 1
jmp 0x1001a901
mov dword [ebp - 0x1f0], 0
movsx eax, word [ebp - 0x1c]
imul ecx, eax, 0x48c6
not ecx
mov eax, dword [ebp - 0x1f0]
sub eax, ecx
not eax
cdq
mov esi, eax
movsx eax, word [ebp - 0x1c]
cdq
mov ecx, dword [0x1007f124]
push ecx
mov ecx, dword [0x1007f120]
push ecx
push edx
push eax
call fcn.1005a1b0
sub eax, esi
mov dword [0x1007f154], eax
movsx edx, word [ebp - 0x20]
xor edx, 0x25e22f4
mov byte [ebp - 0x15], dl
movsx eax, word [ebp - 0x24]
cdq
push 0x9280f
push 0x73520458
push edx
push eax
call fcn.1005a1b0
mov dword [0x1007f120], eax
mov dword [0x1007f124], edx
jmp 0x1001a9e9
movzx eax, byte [0x1007f04e]
not eax
test eax, eax
je 0x1001a9e9
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
add ecx, 0x942b6617
adc esi, 0x91e99
movsx eax, word [ebp - 0x24]
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov word [ebp - 0x24], ax
movzx eax, word [0x1007f14c]
cdq
mov ecx, eax
movzx eax, byte [ebp - 0x14]
cdq
mov esi, dword [0x1007f1b0]
sub esi, eax
not esi
sub esi, ecx
mov eax, dword [0x1007f144]
cdq
sub eax, dword [ebp - 0x3c]
sbb edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x74]
push ecx
mov ecx, dword [ebp - 0x78]
push ecx
push edx
push eax
call fcn.1005a1b0
add eax, esi
mov byte [ebp - 0x15], al
mov edx, dword [0x1007f120]
sub edx, 0xc54
mov dword [str.C], edx
mov eax, dword [ebp - 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
xor ecx, ecx
mov dword [0x1007f1c0], eax
mov dword [0x1007f1c4], ecx
movzx edx, word [ebp - 0x900]
cmp edx, 0x5a4d
jne 0x1001d105
xorps xmm0, xmm0
movlpd qword [ebp - 0x5c], xmm0
mov eax, dword [0x1007fc38]
xor ecx, ecx
mov dword [0x1007f120], eax
mov dword [0x1007f124], ecx
mov edx, dword [ebp - 0x80]
sub edx, 0x77
xor eax, eax
mov dword [0x1007f138], edx
mov dword [0x1007f13c], eax
movzx ecx, word [0x1007f1a0]
imul edx, ecx, 0x65f6bc85
mov word [ebp - 0x1c], dx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x49c], ecx
mov edx, dword [ebp - 0x4a0]
or edx, dword [ebp - 0x49c]
je 0x1001aa73
jmp 0x1001aaa5
mov eax, dword [0x1007f154]
add eax, dword [0x1007f1c0]
mov dword [0x1007f154], eax
mov ecx, dword [0x1007f1bc]
xor edx, edx
push edx
push ecx
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
call fcn.1005a1b0
mov dword [0x1007f138], eax
mov dword [0x1007f13c], edx
mov dl, byte [0x1007f1c0]
mov byte [0x1007f026], dl
mov eax, dword [0x1007f1d0]
mov ecx, dword [0x1007f1d4]
mov dword [ebp - 0x7f8], ecx
add eax, 0xccc5
mov word [ebp - 0x24], ax
mov edx, dword [0x1007fc38]
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x3c]
jne 0x1001aae7
mov ecx, dword [ebp - 0x68]
cmp ecx, dword [ebp - 0x38]
je 0x1001ab26
mov edx, 8
imul eax, edx, 0x244
mov ecx, dword [0x1007f1c0]
mov edx, dword [0x1007f1c4]
mov dword [eax + 0x101db520], ecx
mov dword [eax + 0x101db524], edx
movsx eax, word [0x1007f1a8]
shl eax, 1
mov byte [0x1007f026], al
mov ecx, dword [0x1007f180]
mov dword [ebp - 0x4c], ecx
jmp 0x1001ac73
movzx eax, byte [ebp - 0x11]
not eax
cdq
mov ecx, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x4a8], ecx
mov dword [ebp - 0x4a4], esi
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4ac], edx
mov edx, dword [ebp - 0x4a4]
cmp edx, dword [ebp - 0x4ac]
jg 0x1001ab75
jl 0x1001ab69
mov eax, dword [ebp - 0x4a8]
cmp eax, dword [ebp - 0x4b0]
ja 0x1001ab75
mov dword [ebp - 0x1f4], 1
jmp 0x1001ab7f
mov dword [ebp - 0x1f4], 0
movsx ecx, word [ebp - 0x24]
cmp dword [ebp - 0x1f4], ecx
jl 0x1001abbd
mov edx, dword [0x1007f1b0]
sub edx, 0x640d4060
mov dword [ebp - 0x54], edx
movsx eax, word [ebp - 0x20]
cdq
mov ecx, dword [0x1007f120]
not ecx
sub ecx, eax
mov dword [0x1007f170], ecx
mov edx, 0x16
mov word [ebp - 0x28], dx
jmp 0x1001ac73
cmp dword [0x1007f140], 0
je 0x1001ac28
movsx eax, word [ebp - 0x20]
mov ecx, dword [ebp - 0x7c]
sub ecx, eax
mov edx, dword [ebp - 0x7c]
sub edx, ecx
mov dword [ebp - 0x7c], edx
mov ecx, dword [0x1007f154]
xor esi, esi
movzx eax, byte [0x1007f026]
cdq
mov edi, dword [ebp - 0x64]
mov ebx, dword [ebp - 0x60]
add edi, eax
adc ebx, edx
xor edi, ecx
xor ebx, esi
movzx eax, byte [ebp - 0x14]
cdq
sub eax, edi
sbb edx, ebx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
mov edx, 2
imul eax, edx, 0xbcb
movzx ecx, word [eax + 0x10355558]
movzx edx, word [0x1007f1a0]
sub edx, ecx
mov word [0x1007f1a0], dx
jmp 0x1001ac73
mov eax, dword [0x1007f154]
xor ecx, ecx
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4b4], ecx
mov edx, dword [ebp - 0x4b8]
cmp edx, dword [0x1007f188]
jne 0x1001ac73
mov eax, dword [ebp - 0x4b4]
cmp eax, dword [0x1007f18c]
jne 0x1001ac73
movsx eax, word [ebp - 0x2c]
cdq
add eax, dword [0x1007f120]
adc edx, dword [0x1007f124]
mov dword [0x1007f120], eax
mov dword [0x1007f124], edx
mov ecx, dword [ebp - 0xb8]
add ecx, 0x498
mov dword [ebp - 0xbc], ecx
push 0
push 0
push 0
push 0xdc
movzx eax, word [0x1007f16c]
cdq
push edx
push eax
mov edx, dword [0x1007f154]
xor eax, eax
push eax
push edx
call fcn.10034db0
add esp, 0x20
mov dword [0x1007f140], eax
cmp dword [0x1007f140], 0
je 0x1001acf4
movzx eax, word [0x1007f16c]
add eax, 0x28
cdq
mov dword [0x1007f130], eax
mov dword [0x1007f134], edx
movsx ecx, word [0x1007f1a8]
imul eax, ecx, 0x50
cdq
mov dword [0x1007f1c0], eax
mov dword [0x1007f1c4], edx
mov edx, dword [ebp - 0x80]
not edx
xor edx, dword [ebp - 0x6c]
mov word [ebp - 0x2c], dx
jmp 0x1001ad43
mov eax, dword [0x1007f160]
mov ecx, dword [0x1007f164]
push 0
push 0xa389627c
push ecx
push eax
call fcn.1005a1b0
mov ecx, eax
mov esi, edx
movzx eax, byte [ebp - 0x13]
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov byte [ebp - 0x13], al
mov edx, dword [ebp - 0x3c]
add edx, 1
mov eax, dword [ebp - 0x38]
adc eax, 0
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], eax
mov ecx, dword [0x1007f1a4]
xor ecx, dword [ebp - 0x48]
mov dword [0x1007f1a4], ecx
mov edx, dword [ebp - 0xb8]
add edx, 0x1d7
mov dword [ebp - 0x7fc], edx
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx eax, ax
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0xb8]
add eax, 0x408
mov dword [ebp - 0x800], eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x804], edx
push ecx
push 0xd9
call fcn.100364f0
add esp, 8
mov word [ebp - 0x1c], ax
mov eax, dword [0x1007f130]
mov ecx, dword [0x1007f134]
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], ecx
mov edx, dword [ebp - 0x4c0]
cmp edx, dword [0x1007f188]
jne 0x1001adc7
mov eax, dword [ebp - 0x4bc]
cmp eax, dword [0x1007f18c]
je 0x1001addb
xor ecx, ecx
mov dword [ebp - 0x2bc], 1
mov dword [ebp - 0x2b8], ecx
jmp 0x1001ade6
xorps xmm0, xmm0
movlpd qword [ebp - 0x2bc], xmm0
xor edx, edx
mov eax, dword [0x1007f1d0]
mov ecx, dword [0x1007f1d4]
xor eax, dword [0x1007f1bc]
xor ecx, edx
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c4], ecx
mov edx, dword [ebp - 0x4c4]
cmp edx, dword [ebp - 0x2b8]
jg 0x1001ae79
jl 0x1001ae25
mov eax, dword [ebp - 0x4c8]
cmp eax, dword [ebp - 0x2bc]
ja 0x1001ae79
cmp dword [0x1007f1a4], 0
je 0x1001ae63
movzx ecx, word [0x1007f168]
imul eax, ecx, 0x76
cdq
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
movzx eax, byte [0x1007f027]
sar eax, 3
cdq
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
movzx edx, word [0x1007f1c8]
mov eax, 0x5078
sub eax, edx
mov byte [ebp - 0x12], al
jmp 0x1001ae77
movzx ecx, word [0x1007f168]
sub ecx, 0xdfce
mov byte [ebp - 0x13], cl
mov byte [ebp - 0x12], 0x61
jmp 0x1001aec6
movzx edx, word [0x1007f16c]
test edx, edx
je 0x1001aec6
movsx eax, word [0x1007f15c]
test eax, eax
je 0x1001aec6
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x808], edx
add ecx, 0xe5544d30
mov eax, dword [ebp - 0x48]
cdq
sub eax, ecx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x80]
xor ecx, ecx
push 0x2e0c0
push 0x7caa42b7
push ecx
push eax
call fcn.1005a1b0
mov word [0x1007f168], ax
mov edx, dword [ebp - 0xbc]
xor edx, 0x96
mov eax, dword [ebp - 0xbc]
imul eax, edx
cmp eax, dword [ebp - 0xbc]
je 0x1001d105
mov ecx, 0x4c103
mov dword [ebp - 0x44], 0x13973a8
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x6c]
add edx, 0xbb7de3c
mov eax, dword [ebp - 0x68]
adc eax, 0x2f84b
mov dword [0x1007f178], edx
mov dword [0x1007f17c], eax
movzx eax, byte [ebp - 0x11]
cdq
add eax, 0xa5c18b
mov word [ebp - 0x28], ax
push 0
push 0
mov ecx, dword [0x1007f194]
push ecx
mov edx, dword [0x1007f190]
push edx
push 0
push 0
call fcn.10035b90
add esp, 0x18
mov word [0x1007f16c], ax
movzx eax, word [0x1007f16c]
test eax, eax
jge 0x1001b113
push 0
movzx ecx, byte [ebp - 0x12]
push ecx
call fcn.10035170
add esp, 8
movsx eax, al
cdq
mov dword [0x1007f160], eax
mov dword [0x1007f164], edx
mov edx, dword [0x1007f160]
mov eax, dword [0x1007f164]
mov dword [ebp - 0x4d0], edx
mov dword [ebp - 0x4cc], eax
mov ecx, dword [ebp - 0x4d0]
or ecx, dword [ebp - 0x4cc]
je 0x1001b10e
movzx eax, byte [ebp - 0x11]
cdq
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], edx
mov edx, dword [0x1007f18c]
cmp edx, dword [ebp - 0x4dc]
jb 0x1001afd4
ja 0x1001afc8
mov eax, dword [0x1007f188]
cmp eax, dword [ebp - 0x4e0]
jb 0x1001afd4
mov dword [ebp - 0x1f8], 1
jmp 0x1001afde
mov dword [ebp - 0x1f8], 0
cmp dword [0x1007f18c], 0
ja 0x1001aff0
cmp dword [0x1007f188], 0xc
jb 0x1001affc
mov dword [ebp - 0x1fc], 1
jmp 0x1001b006
mov dword [ebp - 0x1fc], 0
mov ecx, dword [ebp - 0x1f8]
cmp ecx, dword [ebp - 0x1fc]
jg 0x1001b04e
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x80c], eax
not edx
mov word [ebp - 0x28], dx
mov eax, dword [ebp - 0x50]
cdq
mov ecx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x40]
push edx
push eax
push esi
push ecx
call fcn.1005a1b0
mov ecx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x40]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], esi
jmp 0x1001b10e
movzx eax, byte [ebp - 0x11]
cdq
mov ecx, dword [0x1007f1d0]
mov esi, dword [0x1007f1d4]
mov dword [ebp - 0x4e8], ecx
mov dword [ebp - 0x4e4], esi
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x4ec], edx
mov edx, dword [ebp - 0x4e4]
cmp edx, dword [ebp - 0x4ec]
jl 0x1001b0a1
jg 0x1001b095
mov eax, dword [ebp - 0x4e8]
cmp eax, dword [ebp - 0x4f0]
jb 0x1001b0a1
mov dword [ebp - 0x200], 1
jmp 0x1001b0ab
mov dword [ebp - 0x200], 0
movsx ecx, word [ebp - 0x24]
cmp dword [ebp - 0x7c], ecx
jne 0x1001b0c0
mov dword [ebp - 0x204], 1
jmp 0x1001b0ca
mov dword [ebp - 0x204], 0
mov edx, dword [ebp - 0x200]
cmp edx, dword [ebp - 0x204]
jle 0x1001b10e
movzx eax, word [0x1007f1c8]
movzx ecx, word [0x1007f128]
xor ecx, eax
movzx edx, word [0x1007f128]
imul edx, ecx
mov word [0x1007f128], dx
movsx eax, byte [ebp - 0x12]
cdq
mov ecx, dword [ebp - 0x64]
mov esi, dword [ebp - 0x60]
add ecx, eax
adc esi, edx
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x60], esi
jmp 0x1001b262
mov ecx, dword [0x1007f1d0]
mov esi, dword [0x1007f1d4]
movzx eax, byte [0x1007f026]
cdq
mov dword [ebp - 0x4f8], eax
mov dword [ebp - 0x4f4], edx
mov dword [ebp - 0x500], ecx
mov dword [ebp - 0x4fc], esi
mov edx, dword [ebp - 0x4f8]
cmp edx, dword [ebp - 0x500]
jne 0x1001b167
mov eax, dword [ebp - 0x4f4]
cmp eax, dword [ebp - 0x4fc]
jne 0x1001b167
mov dword [ebp - 0x208], 1
jmp 0x1001b171
mov dword [ebp - 0x208], 0
movsx ecx, word [0x1007f15c]
add ecx, dword [0x1007f180]
mov edx, dword [ebp - 0x208]
sub edx, ecx
je 0x1001b262
mov eax, 4
mov word [0x1007f15c], ax
movzx ecx, byte [ebp - 0x13]
movzx edx, word [0x1007f1a0]
movzx eax, byte [ebp - 0x13]
not eax
imul eax, edx
imul eax, ecx
test eax, eax
jne 0x1001b1c6
xor ecx, ecx
mov dword [ebp - 0x2cc], 1
mov dword [ebp - 0x2c8], ecx
jmp 0x1001b1d1
xorps xmm0, xmm0
movlpd qword [ebp - 0x2cc], xmm0
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x508], edx
mov dword [ebp - 0x504], eax
mov ecx, dword [ebp - 0x508]
or ecx, dword [ebp - 0x504]
jne 0x1001b1fd
mov dword [ebp - 0x20c], 1
jmp 0x1001b207
mov dword [ebp - 0x20c], 0
movzx edx, word [0x1007f168]
imul edx, dword [ebp - 0x20c]
test edx, edx
jne 0x1001b22d
xor eax, eax
mov dword [ebp - 0x2c4], 1
mov dword [ebp - 0x2c0], eax
jmp 0x1001b238
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c4], xmm0
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
add ecx, dword [ebp - 0x2c4]
adc edx, dword [ebp - 0x2c0]
push edx
push ecx
mov eax, dword [ebp - 0x2c8]
push eax
mov ecx, dword [ebp - 0x2cc]
push ecx
call fcn.1005a1b0
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0xc0]
push edx
call fcn.10011f90
mov dword [ebp - 0x8c], eax
movzx eax, byte [0x1007f026]
cdq
mov ecx, dword [0x1007f160]
mov esi, dword [0x1007f164]
mov dword [ebp - 0x510], ecx
mov dword [ebp - 0x50c], esi
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], edx
mov edx, dword [ebp - 0x50c]
cmp edx, dword [ebp - 0x624]
jl 0x1001b2ca
jg 0x1001b2be
mov eax, dword [ebp - 0x510]
cmp eax, dword [ebp - 0x628]
jbe 0x1001b2ca
mov dword [ebp - 0x210], 1
jmp 0x1001b2d4
mov dword [ebp - 0x210], 0
mov ecx, dword [0x1007f160]
mov edx, dword [0x1007f164]
mov dword [ebp - 0x520], ecx
mov dword [ebp - 0x51c], edx
cmp dword [ebp - 0x51c], 0
jl 0x1001b30c
jg 0x1001b300
cmp dword [ebp - 0x520], 0x3b
jbe 0x1001b30c
mov dword [ebp - 0x214], 1
jmp 0x1001b316
mov dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x214]
jge 0x1001b4ab
cmp dword [ebp - 0x4c], 0
je 0x1001b462
mov ecx, dword [0x1007f190]
mov edx, dword [0x1007f194]
mov dword [ebp - 0x528], ecx
mov dword [ebp - 0x524], edx
mov eax, dword [ebp - 0x528]
or eax, dword [ebp - 0x524]
jne 0x1001b364
mov dword [ebp - 0x21c], 1
jmp 0x1001b36e
mov dword [ebp - 0x21c], 0
mov ecx, dword [0x1007f198]
mov edx, dword [0x1007f19c]
mov dword [ebp - 0x530], ecx
mov dword [ebp - 0x52c], edx
mov eax, dword [ebp - 0x530]
or eax, dword [ebp - 0x52c]
jne 0x1001b3a0
mov dword [ebp - 0x218], 1
jmp 0x1001b3aa
mov dword [ebp - 0x218], 0
movzx ecx, byte [ebp - 0x14]
cmp dword [ebp - 0x218], ecx
jle 0x1001b3c2
mov dword [ebp - 0x220], 1
jmp 0x1001b3cc
mov dword [ebp - 0x220], 0
mov edx, dword [ebp - 0x21c]
cmp edx, dword [ebp - 0x220]
jne 0x1001b3e6
mov dword [ebp - 0x224], 1
jmp 0x1001b3f0
mov dword [ebp - 0x224], 0
mov ecx, dword [0x1007f138]
mov esi, dword [0x1007f13c]
mov eax, dword [ebp - 0x224]
not eax
cdq
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x534], edx
mov dword [ebp - 0x540], ecx
mov dword [ebp - 0x53c], esi
mov edx, dword [ebp - 0x534]
cmp edx, dword [ebp - 0x53c]
jg 0x1001b460
jl 0x1001b43b
mov eax, dword [ebp - 0x538]
cmp eax, dword [ebp - 0x540]
jae 0x1001b460
mov eax, dword [0x1007f1a4]
cdq
push 0x80480
push 0x755c014
push edx
push eax
call fcn.1005a1b0
mov dword [ebp - 0x80], eax
mov cx, word [0x1007f178]
mov word [ebp - 0x1c], cx
jmp 0x1001b4a9
mov edx, 1
test edx, edx
je 0x1001b4a9
movzx eax, byte [0x1007f026]
movsx ecx, word [0x1007f148]
imul ecx, eax
movsx edx, word [0x1007f148]
sub edx, ecx
mov word [0x1007f148], dx
push 0
push 0x6e87
mov eax, dword [0x1007f17c]
push eax
mov ecx, dword [0x1007f178]
push ecx
call fcn.1005a1b0
mov word [ebp - 0x2c], ax
jmp 0x1001b4fd
mov edx, dword [ebp - 0x38]
cmp edx, dword [ebp - 0x74]
jb 0x1001b4c9
ja 0x1001b4bd
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x78]
jbe 0x1001b4c9
mov dword [ebp - 0x228], 1
jmp 0x1001b4d3
mov dword [ebp - 0x228], 0
mov ecx, dword [ebp - 0x7c]
cmp ecx, dword [ebp - 0x228]
ja 0x1001b4fd
mov edx, dword [0x1007f1a4]
add edx, 0x4a9f5208
mov word [0x1007f15c], dx
xor eax, eax
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x22c]
add ecx, 4
sub ecx, dword [ebp - 0x230]
mov edx, dword [ebp - 0x22c]
add edx, 0x193
mov eax, dword [ebp - 0x230]
xor eax, dword [ebp - 0x470]
imul eax, edx
cmp eax, ecx
je 0x1001d105
mov ecx, 2
mov word [0x1007f15c], cx
mov eax, dword [ebp - 0x50]
not eax
cdq
push edx
push eax
mov edx, dword [ebp - 0x74]
push edx
mov eax, dword [ebp - 0x78]
push eax
call fcn.1005a1b0
mov ecx, eax
mov esi, edx
movsx eax, byte [ebp - 0x15]
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov dword [ebp - 0x80], eax
mov edx, dword [0x1007f170]
add edx, 0x16acdc25
mov dword [ebp - 0x50], edx
movsx eax, word [0x1007f15c]
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
je 0x1001b5a9
cmp dword [ebp - 0xc4], 1
je 0x1001b62e
cmp dword [ebp - 0xc4], 2
je 0x1001b657
jmp 0x1001b690
mov ecx, 4
mov word [0x1007f16c], cx
mov edx, dword [0x1007f188]
sub edx, dword [ebp - 0x6c]
mov eax, dword [0x1007f18c]
sbb eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x40]
add ecx, edx
adc esi, eax
mov dword [ebp - 0x548], ecx
mov dword [ebp - 0x544], esi
mov edx, dword [ebp - 0x548]
or edx, dword [ebp - 0x544]
jne 0x1001b5fe
xor eax, eax
mov dword [ebp - 0x550], 1
mov dword [ebp - 0x54c], eax
jmp 0x1001b609
xorps xmm0, xmm0
movlpd qword [ebp - 0x550], xmm0
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0x810], edx
not ecx
movzx eax, word [0x1007f1a0]
cdq
sub eax, ecx
sub eax, dword [ebp - 0x550]
mov dword [0x1007f154], eax
jmp 0x1001b690
mov eax, dword [str.C]
xor ecx, ecx
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], ecx
mov eax, dword [ebp - 0x54]
cdq
sub eax, 0xa0135f08
sbb edx, 0x8a407
mov dword [0x1007f178], eax
mov dword [0x1007f17c], edx
jmp 0x1001b690
mov ecx, dword [0x1007f138]
mov edx, dword [0x1007f13c]
mov dword [ebp - 0x814], edx
sub ecx, 0xeee8dcb8
movzx eax, word [0x1007f1a0]
cdq
sub eax, ecx
mov word [0x1007f1a0], ax
movzx eax, word [0x1007f1a0]
add eax, 0xba
mov byte [0x1007f04e], al
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x8c], 0
je 0x1001d105
jmp 0x1001b6d2
jmp 0x1001b6e3
jmp 0x1001b6fb
jmp 0x1001b71d
movsx ecx, word [ebp - 0x1c]
mov dword [0x1007f144], ecx
mov edx, dword [0x1007f144]
xor edx, 0x65
or edx, dword [ebp - 0x7c]
mov byte [0x1007f026], dl
mov eax, dword [0x1007fc38]
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x558], ecx
mov dword [ebp - 0x554], edx
mov eax, dword [ebp - 0x558]
or eax, dword [ebp - 0x554]
je 0x1001b777
jmp 0x1001b775
jmp 0x1001b7be
movsx cx, byte [ebp - 0x15]
mov edx, 2
imul eax, edx, 0x3abb
mov word [eax + 0x10322c30], cx
imul ecx, dword [ebp - 0x80], 0xbefe
xor edx, edx
mov dword [0x1007f120], ecx
mov dword [0x1007f124], edx
mov eax, dword [0x1007f190]
mov ecx, dword [0x1007f194]
mov dword [ebp - 0x818], ecx
add eax, 0xb6bd123
mov dword [0x1007f158], eax
mov edx, dword [ebp - 0xd0]
add edx, 0x298
mov dword [ebp - 0x81c], edx
mov dword [ebp - 0xe4], 0x2e
mov eax, dword [0x1007f1bc]
add eax, dword [ebp - 0x6c]
mov ecx, dword [0x1007f1bc]
add ecx, eax
mov dword [0x1007f1bc], ecx
movzx edx, byte [ebp - 0x14]
add edx, 0x2ac9
mov word [ebp - 0x20], dx
movzx eax, word [0x1007f16c]
cdq
push edx
push eax
mov eax, dword [0x1007f1b4]
push eax
mov ecx, dword [0x1007f1b0]
push ecx
call fcn.1005a1b0
and eax, dword [0x1007f1b0]
and edx, dword [0x1007f1b4]
mov dword [0x1007f1b0], eax
mov dword [0x1007f1b4], edx
mov edx, dword [0x1007f158]
add edx, 0xf5c9729d
mov word [ebp - 0x28], dx
mov eax, dword [ebp - 0xe4]
add eax, 1
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x16c8
jl 0x1001b7fe
mov ecx, dword [ebp - 0xd0]
add ecx, 0x1e8
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0xcc], 0x46
mov edx, dword [0x1007f190]
mov eax, dword [0x1007f194]
add edx, 1
adc eax, 0
mov dword [0x1007f190], edx
mov dword [0x1007f194], eax
mov ecx, dword [0x1007f188]
and ecx, 0x4c
mov edx, dword [0x1007f18c]
and edx, 0
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], edx
imul eax, dword [0x1007f154], 0xa6da
add eax, dword [ebp - 0x50]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x60]
sub ecx, 0x5e
sbb edx, 0
mov dword [0x1007f178], ecx
mov dword [0x1007f17c], edx
movzx eax, byte [ebp - 0x13]
test eax, eax
jne 0x1001b8f0
xor ecx, ecx
mov dword [ebp - 0x2d4], 1
mov dword [ebp - 0x2d0], ecx
jmp 0x1001b8fb
xorps xmm0, xmm0
movlpd qword [ebp - 0x2d4], xmm0
mov edx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x74], eax
mov esi, dword [0x1007f170]
xor edi, edi
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
push edx
push ecx
mov eax, dword [0x1007f124]
push eax
mov ecx, dword [0x1007f120]
push ecx
call fcn.1005a1b0
sub eax, esi
sbb edx, edi
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x55c], edx
mov edx, dword [ebp - 0x560]
or edx, dword [ebp - 0x55c]
jne 0x1001b959
mov dword [ebp - 0x234], 1
jmp 0x1001b963
mov dword [ebp - 0x234], 0
movzx eax, byte [ebp - 0x14]
movsx ecx, word [ebp - 0x1c]
imul ecx, eax
movzx edx, byte [ebp - 0x14]
sub edx, ecx
sub edx, dword [ebp - 0x234]
mov dword [0x1007f170], edx
mov eax, dword [ebp - 0xcc]
add eax, 1
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x2058
jl 0x1001b8bc
mov ecx, dword [ebp - 0xd0]
add ecx, 0x134
mov dword [ebp - 0x820], ecx
cmp dword [ebp - 0x48], 0
jne 0x1001b9cb
xor edx, edx
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2d8], edx
jmp 0x1001b9d6
xorps xmm0, xmm0
movlpd qword [ebp - 0x2dc], xmm0
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], ecx
cmp dword [0x1007f144], 0
jne 0x1001ba05
xor edx, edx
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x2e0], edx
jmp 0x1001ba10
xorps xmm0, xmm0
movlpd qword [ebp - 0x2e4], xmm0
mov eax, dword [0x1007f190]
mov ecx, dword [0x1007f194]
not eax
not ecx
add eax, dword [ebp - 0x2e4]
adc ecx, dword [ebp - 0x2e0]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
movzx edx, byte [0x1007f027]
imul eax, edx, 0x582c38cd
mov byte [ebp - 0x13], al
mov ecx, dword [0x1007fc38]
mov dword [ebp - 0xd4], ecx
mov edx, dword [ebp - 0x4c]
imul edx, dword [ebp - 0x80]
mov dword [ebp - 0x4c], edx
movsx eax, word [0x1007f15c]
movzx ecx, word [0x1007f1a0]
imul ecx, eax
mov word [0x1007f1a0], cx
mov edx, dword [ebp - 0xd4]
add edx, 0x1ec
mov dword [ebp - 0x248], edx
movzx eax, word [0x1007f1b8]
cmp dword [0x1007f140], eax
jge 0x1001bb02
mov eax, dword [ebp - 0x54]
sub eax, 0x39b4f378
mov word [0x1007f1a8], ax
mov ecx, dword [ebp - 0x7c]
sub ecx, 0x5b1a670e
xor edx, edx
mov dword [0x1007f130], ecx
mov dword [0x1007f134], edx
mov eax, dword [ebp - 0x84]
cmp dword [ebp + eax*4 - 0x378], 0
je 0x1001d163
mov cx, word [0x1007f14c]
sub cx, 1
mov word [0x1007f14c], cx
mov eax, dword [0x1007f144]
cdq
add eax, 0xbbfb3703
adc edx, 0xea9dd
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
jmp 0x100192c7
movsx ecx, word [ebp - 0x2c]
add ecx, 0x43d08fce
mov dx, word [ebp - 0x1c]
shl dx, cl
mov word [ebp - 0x1c], dx
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
push 0
push 0x25a8
push ecx
push eax
call fcn.1005a1b0
mov word [0x1007f128], ax
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret