Function at 0x1001998e
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x100824b3
call fcn.10081be0
sub esp, 0x22c
push ebx
push esi
push edi
mov dword [ebp - 0x9c], ecx
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x10], 0xc0001115
push 2
mov dword [ebp - 0xa0], edx
call fcn.10017b3d
xor ebx, ebx
mov dword [ebp - 0x18], ebx
jmp 0x100199db
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf0]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100199c8
mov eax, dword [ebp - 0x10]
xor esi, esi
neg eax
xor edx, edx
inc esi
cmp eax, esi
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0xf0]
mov dword [eax], edx
mov eax, dword [ebp - 0x10]
cmp edx, eax
sete cl
cmp ecx, dword [ebp - 0x10]
jg 0x10019a0f
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
je 0x10019a2c
mov eax, dword [ebp - 0xf0]
mov ecx, esi
cmp dword [eax], ebx
jne 0x10019a2e
mov ecx, ebx
mov eax, dword [ebp - 0x10]
push 0xfffffffffffffff9
pop edi
add eax, ecx
je 0x10019a55
mov dword [ebp - 0x2c], 0xc8f
mov dword [ebp - 0x2c], 0x8bbd188
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], 0xbe26b5cf
dec dword [ebp - 0x30]
jmp 0x10019a64
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10019a64
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp - 0xf0]
call fcn.10018378
mov dword [ebp - 0x10], 0x81c
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x20], 0x1e0bec03
push esi
call fcn.10017b3d
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x28], 0x38e70e9e
mov dword [ebp - 0x2c], 0x84a57988
mov dword [ebp - 0x2c], 0xde45221b
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x3c], 0x3cec3345
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x38], 0x23552e29
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x24], ebx
jmp 0x10019add
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xfc]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10019ace
mov dword [ebp - 0x24], ebx
jmp 0x10019af4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x22c], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10019ae7
mov eax, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x10]
test eax, eax
mov eax, dword [ebp - 0x10]
setns dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x10]
push esi
setle cl
xor edx, edx
sub eax, ecx
cmp eax, 0x2a10aa43
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp dword [ebp - 0x10], ecx
jl 0x10019c16
mov dword [ebp - 0x28], 0x65cd
lea ecx, [ebp - 0xc8]
call fcn.10017b3d
mov dword [ebp - 0x18], ebx
jmp 0x10019b5e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0x26a056eb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10019b4b
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
mov eax, dword [ebp - 0xc8]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x20]
setl bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x20]
setle dl
neg eax
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0xc8]
setne cl
imul ecx, dword [eax]
test ecx, ecx
jne 0x10019b9b
cmp dword [ebp - 0x20], ecx
je 0x10019b9d
mov ecx, esi
inc dword [ebp - 0x1c]
mov edi, 0xffff
mov eax, dword [ebp - 0xfc]
cmp ecx, 0x93765224
mov esi, dword [eax]
mov eax, dword [ebp - 0xc8]
mov edx, dword [eax]
sbb eax, eax
inc eax
cmp edi, eax
sbb eax, eax
xor ecx, ecx
neg eax
add eax, esi
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, edx
mov edx, 0x8d7d2a7e
setl al
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x1c]
setg cl
xor ebx, ebx
sub edx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x28]
setle bl
sub ebx, 0xfffffffb
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, eax
setg cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0xc8]
call fcn.10018378
xor esi, esi
xor ebx, ebx
inc esi
jmp 0x10019d32
lea ecx, [ebp - 0x198]
call fcn.10017b3d
mov dword [ebp - 0x40], 0x51cc0d68
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x2c], 6
mov dword [ebp - 0x2c], 0x7429
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x4c], 0x4b46114a
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10019c6c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x198]
mov dword [eax + ecx*4], 0x424acdff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10019c59
mov dword [ebp - 0x10], ebx
jmp 0x10019c81
mov eax, dword [ebp - 0x198]
dec dword [eax]
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff7
jle 0x10019c76
mov eax, dword [ebp - 0x34]
mov edi, 0xffff
inc dword [ebp - 0x34]
test eax, eax
jne 0x10019ce0
xor ecx, ecx
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x3c]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x38]
setle cl
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp edi, eax
sbb eax, eax
xor edx, edx
neg eax
sub eax, 0x15c408cd
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x44]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
mov edx, ebx
setne cl
cmp ecx, dword [ebp - 0x4c]
jle 0x10019ce2
mov edx, esi
mov ecx, dword [ebp - 0x40]
neg edx
mov eax, dword [ebp - 0xfc]
neg edx
sbb edx, edx
neg edx
or dword [eax], 0xffffffff
mov eax, dword [ebp - 0x20]
imul ecx, edx
xor edx, edx
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 0xfffffffe
setg al
cmp eax, 0xfffffff7
mov eax, dword [ebp - 0x1c]
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, 0xffffffff
setg cl
xor eax, eax
cmp ecx, edx
lea ecx, [ebp - 0x198]
setne al
mov dword [ebp - 0x28], eax
call fcn.10018378
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfc]
call fcn.10018378
push 2
pop edi
push edi
lea ecx, [ebp - 0x1c4]
call fcn.10017b3d
mov dword [ebp - 0x20], 0x5c184c50
mov dword [ebp - 0x18], ebx
jmp 0x10019d6b
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c4]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10019d5c
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], ebx
jl 0x10019d8c
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10019d87
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
dec dword [ebp - 0x20]
jns 0x10019d78
lea ecx, [ebp - 0x1c4]
call fcn.10018378
push 4
lea ecx, [ebp - 0x12c]
call fcn.10017b3d
mov dword [ebp - 4], esi
mov dword [ebp - 0x1c], 0xfebaeef2
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10019dcd
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x12c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10019dbd
mov dword [ebp - 0x1c], ebx
jmp 0x10019faa
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x10], 0x81448718
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x12c]
cmp dword [eax + ecx*4], ebx
je 0x10019efb
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x28], 0x50169ff9
mov dword [ebp - 0x10], 3
cmp dword [ebp - 0x10], ebx
jl 0x10019f72
mov esi, dword [ebp - 0x12c]
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0x138]
call fcn.10017b3d
mov dword [ebp - 0x18], ebx
jmp 0x10019e3f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x138]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10019e2f
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10019e56
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
mov eax, dword [ebp - 0x138]
push 3
pop edx
mov dword [eax], edx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x3c], 0xb51404fc
mov dword [ebp - 0x18], ebx
jmp 0x10019e7d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x144], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10019e70
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
dec dword [ebp - 0x13c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
test eax, eax
setns cl
imul ecx, dword [esi + 0xc]
test ecx, ecx
je 0x10019ebb
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
cmp edi, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
setle cl
imul eax, ecx, 0xf0bb
mov ecx, dword [ebp - 0x138]
add eax, dword [ecx]
dec dword [ecx]
mov dword [ebp - 0x3c], eax
jns 0x10019e61
lea ecx, [ebp - 0x138]
call fcn.10018378
dec dword [ebp - 0x10]
jns 0x10019e1e
xor esi, esi
push 2
inc esi
pop edi
jmp 0x10019f72
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x34], esi
cmp dword [ebp - 0x38], ebx
jne 0x10019f16
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x10], eax
jge 0x10019f25
mov eax, esi
cmp dword [ebp - 0x38], ebx
jne 0x10019f27
mov eax, ebx
mov edx, dword [ebp - 0x10]
imul edx, eax
mov eax, dword [ebp - 0x10]
push 8
pop ecx
sub ecx, eax
xor eax, eax
cmp ecx, edx
push 0xfffffffffffffffa
setne al
xor edx, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x30]
sub ecx, eax
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
pop eax
setl cl
sub ecx, 0x69c0
neg ecx
sbb ecx, ecx
inc ecx
cmp eax, ecx
sbb eax, eax
neg eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], ebx
jmp 0x10019fa1
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x18], ebx
jmp 0x10019f98
cmp dword [ebp - 0x28], ebx
jne 0x10019f9e
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10019f95
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x10019f7f
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jle 0x10019f77
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x10019ddb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12c]
call fcn.10018378
mov dword [ebp - 0x28], 0x25e7a66f
lea ecx, [ebp - 0x114]
push edi
call fcn.10017b3d
push 3
lea ecx, [ebp - 0x15c]
mov dword [ebp - 4], edi
call fcn.10017b3d
mov dword [ebp - 0x3c], 0x18d
mov dword [ebp - 0x24], ebx
jmp 0x1001a005
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x114]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10019ff2
mov dword [ebp - 0x24], ebx
jmp 0x1001a022
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x15c]
mov dword [eax + ecx*4], 0x41a9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1001a00f
mov dword [ebp - 0x24], ebx
jmp 0x1001a03e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x20c], 0xcf59f89f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1001a02d
mov esi, dword [ebp - 0x28]
mov edx, dword [ebp - 0x114]
mov dword [edx], esi
test esi, esi
je 0x1001a091
cmp dword [edx + 4], ebx
jne 0x1001a088
mov eax, dword [ebp - 0x15c]
xor ecx, ecx
cmp dword [eax], ebx
sete cl
cmp esi, ecx
jl 0x1001a072
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x114]
xor eax, eax
cmp dword [edx], 0x4f88039d
setne al
cmp eax, dword [edx]
jne 0x1001a088
xor esi, esi
mov eax, ebx
inc esi
jmp 0x1001a08d
xor esi, esi
inc esi
mov eax, esi
mov dword [edx], eax
jmp 0x1001a0de
xor esi, esi
inc esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xc8a52b4b
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x10], ebx
jmp 0x1001a0b7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x238], 0xf5e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1001a0a6
mov dword [ebp - 0x10], ebx
jmp 0x1001a0d3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x210], 0x8b39d205
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001a0c2
inc dword [ebp - 0x204]
lea ecx, [ebp - 0x15c]
call fcn.10018378
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x114]
call fcn.10018378
mov dword [ebp - 0x10], ebx
lea ecx, [ebp - 0x6c]
push edi
call fcn.10017b3d
mov dword [ebp - 0x30], 0xf6657eef
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x18], ebx
jmp 0x1001a123
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6c]
mov dword [eax + ecx*4], 0x65683c8f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001a113
mov dword [ebp - 0x10], 0xfffffff7
jmp 0x1001a144
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001a141
push ebx
call dword [sym.imp.USER32.dll_RegisterClassW]
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffef
jl 0x1001a131
mov dword [ebp - 0x10], ebx
jmp 0x1001a269
mov dword [ebp - 0x24], 0xddbc3707
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x24], ebx
jmp 0x1001a175
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x6c]
mov dword [eax + ecx*4], 8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1001a165
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], esi
jg 0x1001a266
mov dword [ebp - 0x28], 0xffffffff
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add edx, 0xa7323eb5
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x6c]
setle cl
cmp ecx, dword [eax + esi*4]
jle 0x1001a1d0
cmp dword [ebp - 0x24], ebx
je 0x1001a1d0
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x24]
xor edx, edx
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
push 0
cmp dword [ecx + esi*4], eax
mov eax, dword [ebp - 0x6c]
setl dl
xor ecx, ecx
cmp edx, ebx
setl cl
xor edx, edx
cmp ecx, dword [eax + edi*4]
mov ecx, dword [ebp - 0x28]
setne dl
xor ebx, ebx
cmp dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x24]
setg bl
xor ecx, ecx
cmp ebx, eax
pop ebx
setg cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x30], eax
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x6c]
neg eax
cmp dword [edx + esi*4], eax
setle cl
mov dword [ebp - 0x30], ecx
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x6c]
add ecx, dword [eax]
add ecx, dword [edx + esi*4]
xor esi, esi
mov dword [ebp - 0x28], ecx
inc esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x1001a186
push 2
pop edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jle 0x1001a152
lea ecx, [ebp - 0x6c]
call fcn.10018378
push 3
pop eax
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x30], 0xbacd7953
mov dword [ebp - 0x34], esi
push eax
call fcn.10017b3d
mov dword [ebp - 0x18], esi
push 3
mov dword [ebp - 0x2c], 0xb546158d
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1001a2be
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18c]
mov dword [eax + ecx*4], 0x85f7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001a2ab
mov dword [ebp - 0x18], ebx
jmp 0x1001a2db
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18c]
mov dword [eax + ecx*4], 0xfff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001a2c8
lea ecx, [ebp - 0x18c]
call fcn.10018378
mov dword [ebp - 0x34], 0xcbd94543
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0x1c], 0x5540d7f8
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x38], 7
push 3
call fcn.10017b3d
mov dword [ebp - 0x18], ebx
jmp 0x1001a328
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1dc]
mov dword [eax + ecx*4], 0x24489be6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001a315
mov dword [ebp - 0x1c], ebx
jmp 0x1001a33d
mov dword [ebp - 0x10], 0xdce9d05b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x17
jg 0x1001a333
mov dword [ebp - 0x10], ebx
jmp 0x1001a3ed
mov dword [ebp - 0x40], 0xbbc2
mov dword [ebp - 0x3c], 0xa9a98436
mov dword [ebp - 0x18], ebx
jmp 0x1001a36f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x98], 0x2132
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001a35e
cmp dword [ebp - 0x98], ebx
je 0x1001a3d2
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
add eax, 0x8b39d206
cmp eax, 0xc44d4e2b
jne 0x1001a39f
mov ecx, ebx
cmp dword [ebp - 0x38], ebx
je 0x1001a3a1
mov ecx, esi
xor eax, eax
neg ecx
cmp ecx, esi
setl al
xor edx, edx
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg dl
mov dword [ebp - 0x40], edx
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x98]
sub ecx, eax
mov eax, dword [ebp - 0x40]
sub ecx, eax
jne 0x1001a3d9
mov ecx, ebx
cmp dword [ebp - 0x10], ebx
je 0x1001a3db
mov ecx, esi
mov eax, dword [ebp - 0x1c]
imul eax, ecx
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xa
jg 0x1001a34b
lea ecx, [ebp - 0x1dc]
call fcn.10018378
push edi
lea ecx, [ebp - 0x174]
call fcn.10017b3d
mov dword [ebp - 0x18], 0xf1febaee
mov dword [ebp - 0x3c], 0xb363f9e9
mov dword [ebp - 0x18], ebx
jmp 0x1001a430
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001a421
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x1001a466
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001a44d
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x174]
cmp dword [eax + ecx*4], ebx
sete dl
mov dword [ebp - 0x3c], edx
dec dword [ebp - 0x18]
jns 0x1001a43d
lea ecx, [ebp - 0x174]
call fcn.10018378
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x2c], 0xe1a3622b
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001a491
push ebx
push ebx
push 0x368
call dword [sym.imp.ADVAPI32.dll_CopySid]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001a4aa
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowPlacement]
mov dword [ebp - 0x2c], 0x15bb0028
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x1c], 0x7e2799ac
mov dword [ebp - 0x3c], 0x8b8ae505
mov dword [ebp - 0x1c], ebx
jmp 0x1001a5b3
mov dword [ebp - 0x24], 0xe8b72fd4
mov dword [ebp - 0x24], 0xfffffff3
jmp 0x1001a57c
mov dword [ebp - 0x18], 0x9d19ac19
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001a4f7
push ebx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [ebp - 0x18], 4
jmp 0x1001a573
push 2
lea ecx, [ebp - 0x150]
call fcn.10017b3d
push 2
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x1001a528
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x150]
mov dword [eax + ecx*4], 0x89a6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001a515
mov dword [ebp - 0x10], ebx
jmp 0x1001a540
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x74], 0xfffffff6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001a532
mov eax, dword [ebp - 0x150]
mov dword [eax], 0x8872fa4
mov dword [ebp - 0x70], ebx
jmp 0x1001a55f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x70]
cmp dword [ebp - 0x70], 0xffffffe6
jle 0x1001a556
lea ecx, [ebp - 0x150]
call fcn.10018378
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe7
je 0x1001a500
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffea
jne 0x1001a4e0
mov dword [ebp - 0x24], 0xfffffffd
jmp 0x1001a5aa
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001a5a7
push ebx
push 0x20e8
call edi
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1a
jle 0x1001a58f
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffee
jne 0x1001a4cd
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x1c], 0x3ae35568
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x1c], 0xffffffea
jmp 0x1001a743
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x5c], 0x18f8f6a1
mov dword [ebp - 0x10], ebx
jmp 0x1001a5fa
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x60], 0xfaf07207
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001a5ec
mov dword [ebp - 0x10], ebx
jmp 0x1001a630
mov dword [ebp - 0x3c], 0xd2e8588d
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x18], ebx
jmp 0x1001a627
mov dword [ebp - 0x3c], 0x13244d51
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffd
jge 0x1001a61d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jg 0x1001a604
cmp dword [ebp - 0x10], ebx
je 0x1001a67c
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], ebx
jl 0x1001a740
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001a664
mov dword [ebp - 0x24], 0x91a83acd
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x20], ebx
jmp 0x1001a69c
cmp dword [ebp - 0x20], 2
jl 0x1001a68b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xf
jg 0x1001a5da
mov dword [ebp - 0x20], ebx
jmp 0x1001a763
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xe4], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1001a752
dec dword [ebp - 0x38]
jne 0x1001abd1
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x38], ebx
jne 0x1001a780
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp eax, esi
setle cl
cmp ecx, dword [ebp - 0x4c]
jle 0x1001a796
mov edx, ebx
cmp dword [ebp - 0x34], ebx
je 0x1001a798
mov edx, esi
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0xe4], ecx
cmp ecx, dword [ebp - 0x28]
jge 0x1001abd1
mov dword [ebp - 0x3c], 0x28c2
mov eax, 0x5b40194d
mov dword [ebp - 0x10], 0x7cb3f4f4
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x20], 9
mov dword [ebp - 0x44], 0x53ebff78
mov dword [ebp - 0x18], 0x31937da8
mov dword [ebp - 0x20], ebx
jmp 0x1001a807
push esi
lea ecx, [ebp - 0x180]
call fcn.10017b3d
push 2
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], 3
call fcn.10017b3d
mov byte [ebp - 4], 4
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x28], 0x73ae
mov dword [ebp - 0x20], ebx
jmp 0x1001ac21
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x108]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1001ac0e
mov dword [ebp - 0x10], ebx
jmp 0x1001ac72