Function at 0x10009b5e
Capabilities:
Accept command line arguments
Check os version
Create process on windows
Delete file
Delete registry value
Extract resource via kernel32 functions
Get disk information
Get thread local storage value
Identify system language via api
Log keystrokes via polling

Disassembly:
mov eax, 0x1006d93e
call fcn.1006d048
sub esp, 0xc3c
push ebx
push esi
xor eax, eax
mov dword [ebp - 0x5c], ecx
push edi
inc eax
mov byte [ebp - 0x5e], dl
push eax
lea ecx, [ebp - 0x1d4]
call fcn.100183ab
push 0xfffffffffffffffa
xor eax, eax
lea ecx, [ebp - 0x5cc]
xor ebx, ebx
mov esi, 0x623b4709
mov dword [ebp - 4], ebx
inc eax
pop edi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x34], edi
push eax
call fcn.100183ab
xor edx, edx
mov dword [ebp - 0x14], ebx
inc edx
jmp 0x10009bca
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1d4]
mov dword [eax + ecx*4], 0xdf37
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10009bb7
push 4
mov dword [ebp - 0x14], ebx
pop ecx
jmp 0x10009be8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x654], 0xb5d1cb6a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10009bd7
mov dword [ebp - 0x14], ebx
jmp 0x10009c05
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5cc]
mov dword [eax + ecx*4], 0xae7a4860
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10009bf2
mov eax, dword [ebp - 0x1d4]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1d4]
add ecx, dword [eax]
mov dword [ebp - 0x64c], ecx
mov eax, dword [ebp - 0x654]
cmp dword [ebp - 0x648], ebx
jne 0x10009c7f
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
mov edx, dword [ebp - 0x1d4]
dec eax
cmp eax, dword [edx]
mov edx, dword [edx]
setle cl
xor eax, eax
inc ecx
cmp ecx, 0xbc46
setge al
xor ecx, ecx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, edx
setl cl
neg ecx
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp edx, ecx
setge al
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], ebx
je 0x10009c7c
cmp dword [ebp - 0x34], ebx
jne 0x10009c7f
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x5cc]
xor ecx, ecx
cmp dword [eax], ebx
mov eax, dword [ebp - 0x1d4]
setne cl
mov eax, dword [eax]
add eax, ecx
lea ecx, [ebp - 0x5cc]
mov dword [ebp - 0x64c], eax
call fcn.1001900a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d4]
call fcn.1001900a
xor eax, eax
lea ecx, [ebp - 0x210]
inc eax
push eax
call fcn.100183ab
xor eax, eax
inc eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x1c], 0xe0648261
mov dword [ebp - 0x38], 0xf12f3ccd
push 4
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x44], ebx
pop edi
jmp 0x10009d06
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xa5c], 0xf4ea14c5
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], edi
jl 0x10009cf5
mov dword [ebp - 0x1c], 0x17
cmp dword [ebp - 0x1c], 0xfffffffe
jge 0x10009e2e
lea eax, [ebp - 0x6f4]
lea ecx, [ebp - 0x6e4]
movdqa xmm0, xmmword [0x10007fd0]
push ecx
push ecx
push eax
lea ecx, [ebp - 0x370]
movdqu xmmword [ebp - 0x6f4], xmm0
call fcn.10018496
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 3
jg 0x10009df2
mov ebx, dword [ebp - 0x370]
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setge dl
xor ecx, ecx
mov dword [ebp - 0x38], edx
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
test eax, eax
mov eax, dword [ebp - 0x370]
setns cl
xor edx, edx
cmp ecx, dword [ebx + 4]
setge dl
xor ecx, ecx
cmp dword [eax + esi*4], edx
setl cl
sub ecx, 0x623b
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xfb5d
setge al
xor ecx, ecx
mov dword [ebp - 0xa5c], eax
test eax, eax
mov edx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x14]
sete cl
mov esi, dword [ebp - 0x370]
xor eax, eax
cmp ecx, dword [esi + edx*4]
setge al
cmp eax, 0xffffffff
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, dword [esi + edi*4]
setl cl
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x10009d5c
xor ebx, ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10009e07
push 0x22de
push ebx
call dword [sym.imp.USER32.dll_CharUpperBuffW]
lea ecx, [ebp - 0x370]
call fcn.1001900a
dec dword [ebp - 0x1c]
lea eax, [ebp - 0x6f4]
cmp dword [ebp - 0x1c], 0xfffffffe
lea ecx, [ebp - 0x6e4]
jl 0x10009d28
push 4
pop edi
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10009e43
push ebx
push 0x258b
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
xor eax, eax
lea ecx, [ebp - 0x5fc]
inc eax
push eax
call fcn.100183ab
xor edx, edx
mov dword [ebp - 0x14], ebx
inc edx
jmp 0x10009e6d
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x210]
mov dword [eax + ecx*4], 0xdf37
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10009e5a
mov dword [ebp - 0x14], ebx
jmp 0x10009e88
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x694], 0xb5d1cb6a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10009e77
mov dword [ebp - 0x14], ebx
jmp 0x10009ea5
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5fc]
mov dword [eax + ecx*4], 0xae7a4860
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10009e92
mov eax, dword [ebp - 0x210]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x210]
add ecx, dword [eax]
mov dword [ebp - 0x68c], ecx
mov eax, dword [ebp - 0x694]
cmp dword [ebp - 0x688], ebx
jne 0x10009f1f
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
mov edx, dword [ebp - 0x210]
dec eax
cmp eax, dword [edx]
mov edx, dword [edx]
setle cl
xor eax, eax
inc ecx
cmp ecx, 0xbc46
setge al
xor ecx, ecx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, edx
setl cl
neg ecx
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp edx, ecx
setge al
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], ebx
je 0x10009f1c
cmp dword [ebp - 0x54], ebx
jne 0x10009f1f
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x5fc]
xor ecx, ecx
cmp dword [eax], ebx
mov eax, dword [ebp - 0x210]
setne cl
mov eax, dword [eax]
add eax, ecx
lea ecx, [ebp - 0x5fc]
mov dword [ebp - 0x68c], eax
call fcn.1001900a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x210]
call fcn.1001900a
movdqa xmm0, xmmword [0x10008000]
lea ecx, [ebp - 0x900]
mov dword [ebp - 0x20], 0xdaab72b2
xor eax, eax
mov dword [ebp - 0x30], 0xc0d133f2
inc eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x8f0]
push ecx
push eax
push ecx
mov dword [ebp - 0x4c], 0xffffffff
lea ecx, [ebp - 0x71c]
mov dword [ebp - 0x40], 0xa273426a
movdqu xmmword [ebp - 0x900], xmm0
call fcn.10018496
mov dword [ebp - 4], 2
mov ecx, 0xffff1655
mov dword [ebp - 0x38], 0x89d693ce
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
sub ecx, eax
xor eax, eax
cmp ecx, 0x30a4ccfd
push 6
setg al
xor ecx, ecx
cmp eax, 0x87fc
setge cl
sub ecx, 0x44d0ebb8
mov dword [ebp - 0x30], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp eax, 0xffffffff
pop eax
setl cl
imul ecx, dword [ebp - 0x20]
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x1c], ebx
je 0x1000a0cc
mov dword [ebp - 0x40], 0x976d9935
mov dword [ebp - 0x40], 0x2506ed55
mov dword [ebp - 0x40], 0x9080254f
mov dword [ebp - 0x40], 0xc6a687e9
mov dword [ebp - 0x40], 0xfffffff9
mov dword [ebp - 0x40], 0xb1d70f3f
mov dword [ebp - 0x44], ebx
jmp 0x1000a05d
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xae4], 0xfffffff6
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 3
jl 0x1000a04c
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], 2
jg 0x1000a0b9
mov esi, dword [ebp - 0x71c]
mov dword [ebp - 0x40], 0x8bee6dab
lea ecx, [ebp - 0x884]
push edi
call fcn.100183ab
mov dword [ebp - 0x44], ebx
jmp 0x1000a09d
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x884]
mov dword [eax + ecx*4], 0x4ea885c8
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], edi
jl 0x1000a08a
inc dword [esi + 8]
lea ecx, [ebp - 0x884]
call fcn.1001900a
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jle 0x1000a072
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, 8
setne cl
mov dword [ebp - 0x38], ecx
jmp 0x1000a154
xor edx, edx
mov dword [ebp - 0x10], eax
inc edx
mov dword [ebp - 0x3c], 0x9d081799
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x10], ebx
jne 0x1000a0e4
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, edx
setg cl
imul ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
imul ecx, dword [ebp - 0x10]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
add ecx, 0xe619
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setg dl
xor ebx, ebx
cmp edx, eax
setle bl
xor ecx, ecx
imul ebx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4c]
cmp ebx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
mov eax, dword [ebp - 0x4c]
setl dl
sub eax, edx
neg eax
sbb eax, eax
inc eax
xor ebx, ebx
mov dword [ebp - 0x34], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x71c]
call fcn.1001900a
mov dword [ebp - 0x34], 0x2205
cmp dword [ebp - 0x34], 0x6b2
jge 0x1000a219
lea eax, [ebp - 0x98]
push eax
push 0x100077f0
call fcn.10054b0b
jmp 0x1000a202
dec eax
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x154]
push eax
push 0x100077f0
call fcn.10054b0b
pop ecx
pop ecx
mov ecx, dword [ebp - 0x154]
mov edi, ecx
mov eax, ecx
cdq
sub eax, edx
push 2
pop esi
sar eax, 1
cmp eax, esi
jl 0x1000a1e8
mov eax, ecx
cdq
idiv esi
test edx, edx
jne 0x1000a1de
mov eax, edi
cdq
idiv esi
mov edi, eax
mov eax, ecx
cdq
idiv esi
mov ecx, eax
cdq
idiv esi
test edx, edx
je 0x1000a1ca
mov dword [ebp - 0x154], ecx
mov eax, ecx
inc esi
cdq
idiv esi
cmp esi, eax
jle 0x1000a1ba
xor eax, eax
inc eax
cmp ecx, eax
jle 0x1000a1f6
mov eax, edi
cdq
idiv ecx
mov edi, eax
inc edi
push edi
push 0x100077fc
call fcn.100552e3
mov eax, dword [ebp - 0x98]
pop ecx
pop ecx
test eax, eax
jne 0x1000a18a
dec eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x1c], ebx
xor ecx, ecx
mov dword [ebp - 0x34], 8
inc ecx
push 0xfffffffffffffffc
mov dword [ebp - 0x3c], ebx
pop esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x20], ebx
jmp 0x1000a245
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x238], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1000a234
push 4
mov dword [ebp - 0x20], ebx
pop edx
jmp 0x1000a25f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x920], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1000a252
mov dword [ebp - 0x1c], ebx
mov edi, 0xb15e314a
cmp dword [ebp - 0x1c], 0xa
jle 0x1000a378
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x40], 0xfffffffe
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x728]
mov dword [ebp - 0x40], 0xe712c519
mov dword [ebp - 0x40], 0x9984333
mov dword [ebp - 0x40], 0x79b347d1
mov dword [ebp - 0x40], 0x8fab8d23
mov dword [ebp - 0x40], 0xf7cf8fb6
mov dword [ebp - 0x40], 0xfffffffd
push edx
call fcn.100183ab
push 4
mov dword [ebp - 0x40], 0x49a7e128
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x1000a2d5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb1c], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000a2c8
mov dword [ebp - 0x14], ebx
jmp 0x1000a2ee
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x728]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000a2df
mov dword [ebp - 0x14], ebx
jmp 0x1000a309
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb0c], 0x7092
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000a2f8
mov eax, dword [ebp - 0x1c]
cmp edi, eax
sbb eax, eax
xor edx, edx
inc eax
lea ecx, [edx + 1]
sub ecx, eax
neg ecx
sbb ecx, ecx
neg ecx
lea eax, [ecx + 0x392de32c]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], ebx
jne 0x1000a334
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x34], ebx
je 0x1000a347
lea ecx, [edx + 1]
cmp dword [ebp - 0x4c], ebx
jne 0x1000a349
mov ecx, ebx
mov eax, dword [ebp - 0x4c]
add eax, ecx
lea ecx, [ebp - 0x728]
mov dword [ebp - 0x238], eax
dec dword [ebp - 0x920]
call fcn.1001900a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xa
push 1
pop ecx
push 4
pop edx
jg 0x1000a276
push ecx
lea ecx, [ebp - 0x1bc]
call fcn.100183ab
push 3
pop edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x44], 0x623b4709
mov dword [ebp - 0x1c], 0xe0648261
mov dword [ebp - 0x38], 0xf12f3ccd
push 4
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x44], ebx
pop ecx
jmp 0x1000a3bf
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xa3c], 0xf4ea14c5
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ecx
jl 0x1000a3ae
mov dword [ebp - 0x1c], 0x17
cmp dword [ebp - 0x1c], 0xfffffffe
jge 0x1000a4e8
lea eax, [ebp - 0x6d4]
lea ecx, [ebp - 0x6c4]
movdqa xmm0, xmmword [0x10007fd0]
push ecx
push ecx
push eax
lea ecx, [ebp - 0x3d0]
movdqu xmmword [ebp - 0x6d4], xmm0
call fcn.10018496
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], edi
jg 0x1000a4ac
mov ebx, dword [ebp - 0x3d0]
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
push 3
setge dl
xor ecx, ecx
mov dword [ebp - 0x38], edx
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
test eax, eax
mov eax, dword [ebp - 0x3d0]
setns cl
xor edx, edx
cmp ecx, dword [ebx + 4]
setge dl
xor ecx, ecx
cmp dword [eax + esi*4], edx
setl cl
sub ecx, 0x623b
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xfb5d
setge al
xor ecx, ecx
mov dword [ebp - 0xa3c], eax
test eax, eax
mov edx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x14]
sete cl
mov esi, dword [ebp - 0x3d0]
xor eax, eax
cmp ecx, dword [esi + edx*4]
setge al
cmp eax, 0xffffffff
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, dword [esi + edi*4]
pop edi
setl cl
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x1000a414
xor ebx, ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a4c1
push 0x22de
push ebx
call dword [sym.imp.USER32.dll_CharUpperBuffW]
lea ecx, [ebp - 0x3d0]
call fcn.1001900a
dec dword [ebp - 0x1c]
lea eax, [ebp - 0x6d4]
cmp dword [ebp - 0x1c], 0xfffffffe
lea ecx, [ebp - 0x6c4]
jl 0x1000a3e1
push 0xfffffffffffffffc
pop esi
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a4fd
push ebx
push 0x258b
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
xor eax, eax
mov dword [ebp - 0x4c], 0xffffffff
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
je 0x1000a527
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a5ee
call dword [sym.imp.KERNEL32.dll_GetACP]
jmp 0x1000a5ee
movdqa xmm0, xmmword [0x10008020]
lea ecx, [ebp - 0x9a0]
push ecx
lea eax, [ebp - 0x990]
push eax
push ecx
lea ecx, [ebp - 0x740]
movdqu xmmword [ebp - 0x9a0], xmm0
call fcn.10018496
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x14], 0xb
jmp 0x1000a5ce
mov dword [ebp - 0x44], ebx
jmp 0x1000a577
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x244], 0xed23b618
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], edi
jl 0x1000a566
push 9
pop eax
mov dword [ebp - 0x244], eax
jmp 0x1000a5c2
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a5a1
push 0xf25
push 0xdad
push ebx
call dword [sym.imp.GDI32.dll_OffsetRgn]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a5bc
push ebx
push 0xf06
push ebx
push 0x1c22
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
dec dword [ebp - 0x244]
cmp dword [ebp - 0x244], 0xffffffee
jle 0x1000a587
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xc
je 0x1000a561
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x740]
mov dword [eax + 4], ecx
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x740]
call fcn.1001900a
mov dword [ebp - 0x14], ebx
jmp 0x1000a607
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a604
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffef
jl 0x1000a5f3
mov dword [ebp - 0x30], 0xfffffffa
xor ecx, ecx
mov dword [ebp - 0x14], 0x3d06ce12
inc ecx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x3c], 0x8aa2
mov dword [ebp - 0x38], 0x82e58099
mov dword [ebp - 0x38], 0xe2e4ed38
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x44], ebx
jmp 0x1000a64f
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xc8], 2
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ecx
jl 0x1000a63e
mov dword [ebp - 0x14], ebx
jmp 0x1000a667
mov dword [ebp + eax*4 - 0xc8], 0xfffffff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
jl 0x1000a659
mov ecx, dword [ebp - 0xc8]
xor edx, edx
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setge dl
mov dword [ebp - 0x34], edx
xor edx, edx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
setl dl
imul eax, edx, 0x4419
test eax, eax
jne 0x1000a69c
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
neg eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
add eax, 0x4257
je 0x1000a6c0
cmp dword [ebp - 0xc8], ebx
je 0x1000a6c0
xor eax, eax
lea edx, [eax + 1]
jmp 0x1000a6c2
mov edx, ebx
imul eax, dword [ebp - 0x14], 0xdfe4
xor ecx, ecx
cmp eax, 0xffffffff
setle cl
xor eax, eax
imul ecx, edx
cmp eax, ecx
lea ecx, [ebp - 0x488]
sbb eax, eax
neg eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x34], eax
xor eax, eax
inc eax
push eax
call fcn.100183ab
push 4
pop eax
push eax
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], al
call fcn.100183ab
push 5
pop eax
mov byte [ebp - 4], al
mov dword [ebp - 0x34], 0xe1ca2961
mov dword [ebp - 0x20], ebx
jmp 0x1000a72f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x9bc], 0x20624039
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1000a71e
push 4
mov dword [ebp - 0x20], ebx
pop edx
jmp 0x1000a74f
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x470]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1000a73c
mov dword [ebp - 0x34], 0x1a5e
cmp dword [ebp - 0x34], 0x10a0
jge 0x1000a925
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x2e8]
push eax
push 0x10007800
call fcn.10054b0b
add esp, 0xc
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], ebx
call fcn.1001ca9e
mov dword [ebp - 0xa8], eax
xor eax, eax
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x254]
mov eax, dword [ebp - 0x2e8]
inc eax
push eax
call fcn.10018567
xor eax, eax
mov byte [ebp - 4], 8
mov esi, eax
mov edi, eax
mov dword [ebp - 0x74], esi
cmp dword [ebp - 0x12c], eax
jle 0x1000a8fc
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0xdc]
push eax
push 0x10007800
call fcn.10054b0b
xor eax, eax
add esp, 0xc
inc eax
cmp dword [ebp - 0xdc], eax
jne 0x1000a84a
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x164]
call fcn.10018409
imul ecx, dword [ebp - 0x80], 0xc
lea eax, [ebp - 0x74]
push eax
add ecx, dword [ebp - 0x254]
call fcn.10018409
movzx eax, byte [0x10892f53]
push eax
lea eax, [ebp - 0x74]
push eax
push ecx
lea eax, [ebp - 0xa74]
push eax
lea ecx, [ebp - 0xa8]
call fcn.1001d7b6
mov esi, dword [ebp - 0x74]
jmp 0x1000a8d4
cmp dword [ebp - 0xdc], 2
jne 0x1000a8ae
mov edx, dword [ebp - 0x80]
xor ebx, ebx
mov ecx, dword [ebp - 0x254]
imul eax, edx, 0xc
add ecx, eax
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
sar eax, 2
test eax, eax
je 0x1000a89e
mov esi, dword [ebp - 0x254]
mov eax, dword [ecx]
lea ecx, [ebp - 0xa8]
lea eax, [eax + ebx*4]
push eax
call fcn.100184d3
mov edx, dword [ebp - 0x80]
inc ebx
imul ecx, edx, 0xc
add ecx, esi
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
sar eax, 2
cmp ebx, eax
jb 0x1000a875
mov esi, dword [ebp - 0x74]
imul ecx, edx, 0xc
add ecx, dword [ebp - 0x254]
mov eax, dword [ecx]
mov dword [ecx + 4], eax
jmp 0x1000a8d4
cmp dword [ebp - 0xdc], 3
jne 0x1000a8da
cmp edi, dword [ebp - 0x80]
jge 0x1000a8da
lea ebx, [ebx + edi*4]
push ebx
lea ecx, [ebp - 0xa8]
call fcn.100184d3
inc edi
add ebx, 4
cmp edi, dword [ebp - 0x80]
jl 0x1000a8bf
mov ebx, dword [ebp - 0x164]
push dword [ebp - 0xa4]
push 0x10007808
call fcn.100552e3
inc esi
pop ecx
pop ecx
mov dword [ebp - 0x74], esi
cmp esi, dword [ebp - 0x12c]
jl 0x1000a7de
lea ecx, [ebp - 0x254]
call fcn.1001908a
lea ecx, [ebp - 0x164]
call fcn.1001900a
lea ecx, [ebp - 0xa8]
call fcn.10011319
push 4
pop edx
push 3
xor ebx, ebx
pop edi
mov ecx, dword [ebp - 0x470]
mov dword [ecx + 0xc], 2
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x34], 0x9869ec42
mov eax, dword [ebp + eax*4 - 0x9bc]
dec dword [ecx + 0xc]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], edx
jns 0x1000a932
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a970
push 0x1336
push 0x991
push 0x614
push ebx
call dword [sym.imp.USER32.dll_GetMessageA]
push 4
pop edx
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], dl
call fcn.1001900a
xor edx, edx
mov dword [ebp - 0x14], ebx
inc edx
jmp 0x1000a999
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1bc]
mov dword [eax + ecx*4], 0xdf37
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000a986
push edx
lea ecx, [ebp - 0x264]
call fcn.100183ab
push 9
pop eax
push edi
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], al
call fcn.100183ab
mov byte [ebp - 4], 0xa
mov eax, 0xd5297f1f
mov dword [ebp - 0x38], 0xfffffff9
xor edx, edx
mov dword [ebp - 0x13c], eax
inc edx
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x1000aa06
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x264]
mov dword [eax + ecx*4], 0xd3df75dc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000a9f3
mov dword [ebp - 0x14], ebx
jmp 0x1000aa1e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x64], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000aa10
mov dword [ebp - 0x14], ebx
jmp 0x1000aa3b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5a8]
mov dword [eax + ecx*4], 0xc8b421dd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1000aa28
push 4
mov dword [ebp - 0x14], ebx
pop esi
jmp 0x1000aa59
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6b4], 7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1000aa48
mov dword [ebp - 0x64], ebx
cmp dword [ebp - 0x64], ebx
jg 0x1000ac90
jmp 0x1000aa6f
xor edx, edx
inc edx
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x34], 0x228a
cmp dword [ebp - 0x34], 0x650
jge 0x1000aad5
lea eax, [ebp - 0x140]
push eax
push 0x10007808
call fcn.10054b0b
mov eax, dword [ebp - 0x140]
mov esi, ebx
pop ecx
pop ecx
test eax, eax
jle 0x1000aac5
mov ecx, eax
and ecx, 0x80000001
jns 0x1000aab4
dec ecx
or ecx, 0xfffffffe
inc ecx
cdq
add esi, ecx
sub eax, edx
sar eax, 1
test eax, eax
jg 0x1000aaa5
mov dword [ebp - 0x140], eax
push esi
push 0x100077fc
call fcn.100552e3
pop ecx
xor edx, edx
pop ecx
inc edx
mov dword [ebp - 0x38], 0xc7be0218
lea ecx, [ebp - 0x758]
mov dword [ebp - 0x40], 0x4e3f1571
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x34], 0xcfcb8f1f
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x24], 0x25f321ee
mov dword [ebp - 0x28], 0xa0e40209
push 2
call fcn.100183ab
push 5
mov byte [ebp - 4], 0xb
pop eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x44], ebx
jmp 0x1000ab30
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x758]
mov dword [eax + ecx*4], 0x6fc75dfc
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 2
jl 0x1000ab1d
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x1000ac6f
mov edi, dword [ebp - 0x5a8]
xor eax, eax
lea ecx, [ebp - 0x388]
inc eax
push eax
call fcn.100183ab
mov dword [ebp - 0x40], 0xb31cf6a1
mov dword [ebp - 0x20], ebx
jmp 0x1000ab74
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x85c], 0xdac7a8cf
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1000ab63
xor edx, edx
mov dword [ebp - 0x20], ebx
inc edx
jmp 0x1000ab95
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x388]
mov dword [eax + ecx*4], 0xc4ad1532
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1000ab82
mov eax, dword [ebp - 0x58]
mov ecx, edx
sub ecx, eax
imul ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x1000abac
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], ebx
je 0x1000abd0
mov ecx, dword [ebp - 0x64]
mov esi, edx
mov eax, dword [ebp - 0x264]
cmp dword [eax + ecx*4], ebx
jne 0x1000abd2
mov esi, ebx
inc dword [ebp - 0x6a8]
xor ebx, ebx
mov edx, dword [ebp - 0x6a8]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x264]
cmp edx, dword [eax + ecx*4]
sete bl
mov dword [edi + 4], ebx
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x3c], esi
je 0x1000abfd
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x858]
xor ebx, ebx
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x264]
cmp dword [ecx + eax*4], 0x2740
mov eax, dword [ebp - 0x58]
setne bl
imul ebx, dword [ecx + edx*4]
xor ecx, ecx
cmp ebx, eax
setge cl
xor ebx, ebx
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x24], ebx
je 0x1000ac42
cmp dword [ebp - 0x6a8], ebx
je 0x1000ac42
xor eax, eax
lea ecx, [eax + 1]
jmp 0x1000ac44
mov ecx, ebx
mov eax, dword [ebp - 0x388]
mov dword [eax], ecx
lea ecx, [ebp - 0x388]
cmp dword [ebp - 0x3c], ebx
jne 0x1000ac6a
call fcn.1001900a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x1000ab48
jmp 0x1000ac6f
call fcn.1001900a
lea ecx, [ebp - 0x758]
mov byte [ebp - 4], 0xa
call fcn.1001900a
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], ebx
jle 0x1000aa6c
push 4
pop esi
push 3
pop edi
lea ecx, [ebp - 0x5a8]
call fcn.1001900a
lea ecx, [ebp - 0x264]
call fcn.1001900a
mov dword [ebp - 0x14], ebx
jmp 0x1000acbc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x664], 0xb5d1cb6a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1000acab
xor edx, edx
mov dword [ebp - 0x14], ebx
inc edx
jmp 0x1000acdc
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x488]
mov dword [eax + ecx*4], 0xae7a4860
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000acc9
mov eax, dword [ebp - 0x1bc]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1bc]
add ecx, dword [eax]
mov dword [ebp - 0x65c], ecx
mov eax, dword [ebp - 0x664]
cmp dword [ebp - 0x658], ebx
jne 0x1000ad56
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
mov edx, dword [ebp - 0x1bc]
dec eax
cmp eax, dword [edx]
mov edx, dword [edx]
setle cl
xor eax, eax
inc ecx
cmp ecx, 0xbc46
setge al
xor ecx, ecx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, edx
setl cl
neg ecx
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp edx, ecx
setge al
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], ebx
je 0x1000ad53
cmp dword [ebp - 0x30], ebx
jne 0x1000ad56
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x488]
xor ecx, ecx
cmp dword [eax], ebx
mov eax, dword [ebp - 0x1bc]
setne cl
mov eax, dword [eax]
add eax, ecx
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x65c], eax
call fcn.1001900a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1bc]
call fcn.1001900a
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], 0x8308faa8
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x38], 0x2b8909ff
mov dword [ebp - 0x20], ebx
jmp 0x1000adbb
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x9f8], 0xb55b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1000adaa
mov dword [ebp - 0x20], ebx
jmp 0x1000add6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xec], 9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1000adc5
mov dword [ebp - 0xec], ebx
mov esi, 0x73df2ef5
mov edi, 0x486cae8e
jmp 0x1000af32
xor eax, eax
mov dword [ebp - 0x3c], 0x10f7a73d
inc eax
lea ecx, [ebp - 0x21c]
push eax
call fcn.100183ab
xor edx, edx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x44], ebx
inc edx
jmp 0x1000ae24
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x21c]
mov dword [eax + ecx*4], 3
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], edx
jl 0x1000ae11
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x21c]
inc ecx
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x9f8]
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x3c]
sub edx, eax
mov eax, dword [ebp - 0x3c]
cmp eax, edx
setl cl
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x30], 2
cmp dword [ebp - 0x30], ebx
jl 0x1000af21
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x3c], 0xfffffffe
cmp dword [ebp - 0xe8], ebx
je 0x1000af0d
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jne 0x1000aeb2
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x21c]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x28]
sete dl
sub edx, eax
jne 0x1000aeb2
mov ecx, ebx
jmp 0x1000aeb7
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x21c]
mov eax, dword [eax]
add eax, ecx
neg eax
sbb eax, eax
xor edx, edx
neg eax
cmp eax, edi
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x38], eax
jne 0x1000af06
cmp dword [ebp - 0x44], ebx
je 0x1000af0d
xor eax, eax
lea ecx, [eax + 1]
jmp 0x1000af0f
mov ecx, ebx
mov eax, dword [ebp - 0x21c]
inc ecx
mov dword [eax], ecx
dec dword [ebp - 0x30]
jns 0x1000ae72
lea ecx, [ebp - 0x21c]
call fcn.1001900a
inc dword [ebp - 0xec]
cmp dword [ebp - 0xec], 2
jle 0x1000adf0
mov eax, dword [0x100745fc]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x20], 8
cmp dword [ebp - 0x20], 0xffffffe2
jge 0x1000af89
push 4
pop edx
mov dword [ebp - 0x24], ebx
jmp 0x1000af6f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x7e8], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x1000af62
dec dword [ebp - 0x7e8]
mov eax, dword [ebp - 0x7e4]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe2
jl 0x1000af5d
mov dword [ebp - 0x20], ebx
jmp 0x1000af96
cmp dword [ebp - 0x20], ebx
jne 0x1000af9c
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffd
jg 0x1000af8e
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], 0x8308faa8
mov dword [ebp - 0x38], 0xfffffffb
push 3
mov dword [ebp - 0x38], 0x2b8909ff
mov dword [ebp - 0x20], ebx
pop edx
jmp 0x1000afcd
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa10], 0xb55b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1000afbc
mov dword [ebp - 0x20], ebx
jmp 0x1000afe8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xf8], 9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1000afd7
mov dword [ebp - 0xf8], ebx
cmp dword [ebp - 0xf8], 2
jg 0x1000b151
jmp 0x1000b005
xor ecx, ecx
inc ecx
push ecx
mov dword [ebp - 0x3c], 0x10f7a73d
lea ecx, [ebp - 0x1a4]
call fcn.100183ab
xor edx, edx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x24], ebx
inc edx
jmp 0x1000b036
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1a4]
mov dword [eax + ecx*4], 3
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x1000b023
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1a4]
inc ecx
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0xa10]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x3c]
sub edx, eax
mov eax, dword [ebp - 0x3c]
cmp eax, edx
setl cl
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x30], 2
cmp dword [ebp - 0x30], ebx
jl 0x1000b133
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x3c], 0xfffffffe
cmp dword [ebp - 0xf4], ebx
je 0x1000b11f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jne 0x1000b0c4
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x1a4]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x28]
sete dl
sub edx, eax
jne 0x1000b0c4
mov ecx, ebx
jmp 0x1000b0c9
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x1a4]
mov eax, dword [eax]
add eax, ecx
neg eax
sbb eax, eax
xor edx, edx
neg eax
cmp eax, edi
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x38], eax
jne 0x1000b118
cmp dword [ebp - 0x24], ebx
je 0x1000b11f
xor eax, eax
lea ecx, [eax + 1]
jmp 0x1000b121
mov ecx, ebx
mov eax, dword [ebp - 0x1a4]
inc ecx
mov dword [eax], ecx
dec dword [ebp - 0x30]
jns 0x1000b084
lea ecx, [ebp - 0x1a4]
call fcn.1001900a
inc dword [ebp - 0xf8]
cmp dword [ebp - 0xf8], 2
jle 0x1000b002
push 2
lea ecx, [ebp - 0x40c]
call fcn.100183ab
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x14], 0xfffffff7
mov dword [ebp - 0x1c], 0x9d8d9242
mov dword [ebp - 0x30], 0xd3650dfa
mov dword [ebp - 0x38], 0x1465ee6d
mov dword [ebp - 0x38], 0xe318b474
mov dword [ebp - 0x3c], 0xbfaead22
mov dword [ebp - 0x58], 0x7d86
mov dword [ebp - 0x38], 0xba053926
mov dword [ebp - 0x34], 0x179e
cmp dword [ebp - 0x34], 0x686
jge 0x1000b2b7
lea eax, [ebp - 0x90]
mov dword [ebp - 0x78], ebx
push eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x90], ebx
push eax
push 0x10007810
call fcn.10054b0b
add esp, 0xc
mov dword [ebp - 0x230], ebx
lea eax, [ebp - 0x230]
lea ecx, [ebp - 0x4a0]
push eax
push dword [ebp - 0x78]
call fcn.100183e7
lea eax, [ebp - 0x2b8]
mov byte [ebp - 4], 0xd
push eax
push dword [ebp - 0x90]
lea ecx, [ebp - 0x614]
mov dword [ebp - 0x2b8], ebx
call fcn.100183e7
mov ecx, dword [ebp - 0x78]
mov edi, ebx
test ecx, ecx
jle 0x1000b236
mov esi, dword [ebp - 0x4a0]
push esi
push 0x100077f4
call fcn.10054b0b
pop ecx
pop ecx
mov ecx, dword [ebp - 0x78]
inc edi
add esi, 4
cmp edi, ecx
jl 0x1000b21e
mov edi, dword [ebp - 0x90]
test edi, edi
jle 0x1000b264
mov esi, dword [ebp - 0x614]
push esi
push 0x100077f4
call fcn.10054b0b
mov edi, dword [ebp - 0x90]
inc ebx
pop ecx
add esi, 4
pop ecx
cmp ebx, edi
jl 0x1000b246
mov ecx, dword [ebp - 0x78]
xor ebx, ebx
mov edx, ebx
mov esi, ebx
test ecx, ecx
jle 0x1000b28e
mov ebx, dword [ebp - 0x614]
cmp esi, edi
jge 0x1000b28c
mov eax, dword [ebp - 0x4a0]
mov eax, dword [eax + edx*4]
cmp eax, dword [ebx + esi*4]
jg 0x1000b287
inc edx
inc esi
cmp edx, ecx
jl 0x1000b274
xor ebx, ebx
sub ecx, edx
push ecx
push 0x100077fc
call fcn.100552e3
pop ecx
pop ecx
lea ecx, [ebp - 0x614]
call fcn.1001900a
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0xc
call fcn.1001900a
mov dword [ebp - 0x24], ebx
jmp 0x1000b2cf
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x40c]
mov dword [eax + ecx*4], 0x5464
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1000b2bc
xor eax, eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jl 0x1000b427
mov dword [ebp - 0x34], 0xe29a
lea ecx, [ebp - 0x5c0]
push 2
call fcn.100183ab
mov dword [ebp - 0x54], 0x45a3
mov dword [ebp - 0x20], ebx
jmp 0x1000b315
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x770], 0x7dd9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1000b304
mov dword [ebp - 0x20], ebx
jmp 0x1000b333
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000b43c
push ebx
push 0x12ca
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40c]
call fcn.1001900a
mov eax, dword [ebp + 8]
push 4
pop edi
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 8
cmp dword [ebp - 0x20], 0xffffffe2
jge 0x1000b497
mov dword [ebp - 0x24], ebx
jmp 0x1000b481
cmp dword [ebp - 0x24], edi
jl 0x1000b474
mov dword [ebp - 0x20], ebx
jmp 0x1000b4a4
cmp dword [ebp - 0x20], 0xfffffffd
jg 0x1000b49c