Function at 0x100235f2
Capabilities:
Clear file content
Identify system language via api
Resolve function by parsing pe exports
Suspend thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10081d58
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x238
push ebx
mov dword [esp + 0x40], edx
xor ebx, ebx
mov dword [esp + 8], 0xb110c93b
mov dword [esp + 8], ebx
push esi
push edi
mov dword [esp + 0x34], ecx
cmp dword [esp + 0x10], ebx
jl 0x10023665
mov dword [esp + 0x18], 0xdf98a59c
mov dword [esp + 0x18], 0x19
jmp 0x10023658
mov dword [esp + 0x24], 0xe3e6
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], eax
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 4
jne 0x10023644
dec dword [esp + 0x10]
jns 0x10023632
cmp dword [ecx + 0x10], ebx
jne 0x10023671
xor al, al
jmp 0x100251b6
push 3
pop edi
push edi
lea ecx, [esp + 0x7c]
call fcn.10017b45
mov dword [esp + 0x24c], ebx
mov dword [esp + 0x10], 0xb1cecb45
mov dword [esp + 0x18], 1
mov dword [esp + 0x20], 0x142ace07
mov dword [esp + 0x10], ebx
jmp 0x100236b6
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x78]
mov dword [eax + ecx*4], 0x41b3
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x100236a3
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x100236ce
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [esp + 0x10], 2
cmp dword [esp + 0x10], ebx
jl 0x1002398d
push 1
lea ecx, [esp + 0x70]
call fcn.10017b45
mov byte [esp + 0x24c], 1
mov dword [esp + 0x24], 0xbad479ea
mov dword [esp + 0x28], ebx
jmp 0x10023714
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x6c]
mov dword [eax + ecx*4], 0xd952eaa2
inc dword [esp + 0x28]
cmp dword [esp + 0x28], 1
jl 0x10023701
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x78]
mov ecx, dword [eax + ecx*4]
mov eax, dword [esp + 0x6c]
mov dword [edx + esi*4], ecx
mov dword [eax], ecx
lea eax, [ecx + 0xe9105be]
test eax, eax
je 0x10023765
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + ecx*4]
mov eax, dword [esp + 0x6c]
mov dword [eax], ecx
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x10], 0xfffffff6
jbe 0x10023765
mov eax, dword [esp + 0x10]
push dword [esp + 0x60]
movdqa xmm0, xmmword [0x10008090]
lea eax, [esp + 0x200]
push eax
lea eax, [esp + 0x1f4]
mov dword [esp + 0x28], 0x8712
push eax
mov dword [esp + 0x28], 0xfffffff6
lea ecx, [esp + 0x90]
push ebx
movdqu xmmword [esp + 0x1fc], xmm0
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
call fcn.1001911b
xor edx, edx
mov byte [esp + 0x24c], 2
mov dword [esp + 0x28], ebx
inc edx
jmp 0x100237dd
mov eax, dword [esp + 0x28]
mov dword [esp + eax*4 + 0x44], 0x4d024bfc
inc dword [esp + 0x28]
cmp dword [esp + 0x28], edx
jl 0x100237cd
cmp dword [esp + 0x20], ebx
jne 0x10023978
mov eax, dword [esp + 0x20]
or ecx, 0xffffffff
sub ecx, eax
je 0x100238a2
mov dword [esp + 0x20], 0xed9a830f
mov dword [esp + 0x24], edx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], 0x174d4a52
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x84]
mov dword [eax + 4], edx
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x44]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x44]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x6c]
sub ecx, dword [eax]
dec ecx
cmp ecx, 0xfffa
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
cmp eax, 0xbb1c
setne cl
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], eax
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10023948
push ebx
push 0x8fa
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
jmp 0x10023948
push edx
lea ecx, [esp + 0x140]
call fcn.10017b45
mov dword [esp + 0x28], ebx
jmp 0x100238cb
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x13c]
mov dword [eax + ecx*4], 0xd5bc3fa0
inc dword [esp + 0x28]
cmp dword [esp + 0x28], 1
jl 0x100238b5
mov dword [esp + 0x18], 1
cmp dword [esp + 0x18], ebx
jne 0x10023921
mov eax, dword [esp + 0x78]
xor ecx, ecx
cmp dword [eax + 8], 0x7d46
mov eax, dword [esp + 0x84]
sete cl
imul ecx, dword [eax + 8]
xor eax, eax
cmp ecx, 0x40c593bb
setl al
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x18]
neg eax
cmp eax, dword [ecx + edx*4]
jle 0x10023921
mov edx, ebx
jmp 0x10023924
xor edx, edx
inc edx
mov eax, dword [esp + 0x13c]
xor ecx, ecx
cmp edx, dword [eax]
sete cl
mov dword [eax], ecx
lea ecx, [esp + 0x13c]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x20], eax
call fcn.100183a3
lea ecx, [esp + 0x84]
call fcn.100183a3
mov eax, dword [esp + 0x6c]
lea ecx, [esp + 0x6c]
cmp dword [eax], ebx
jne 0x10023988
mov byte [esp + 0x24c], bl
call fcn.100183a3
dec dword [esp + 0x10]
jns 0x100236e0
jmp 0x1002398d
lea ecx, [esp + 0x84]
call fcn.100183a3
lea ecx, [esp + 0x6c]
call fcn.100183a3
or dword [esp + 0x24c], 0xffffffff
lea ecx, [esp + 0x78]
call fcn.100183a3
mov dword [esp + 0x18], 0x7ca0029b
xor ecx, ecx
mov dword [esp + 0x10], 0xaad8
inc ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x24], 0x15fdc8df
mov dword [esp + 0x24], 0x74a52027
mov dword [esp + 0x24], 0x111d0188
mov dword [esp + 0x24], 0x1b17d72b
mov dword [esp + 0x24], 0x89e022a5
mov dword [esp + 0x24], 0x6dd2cc91
mov dword [esp + 0x24], 0x3c57643
mov dword [esp + 0x24], 0xfffffffb
mov dword [esp + 0x20], 0x70d9
mov dword [esp + 0x28], ebx
jmp 0x10023a17
mov eax, dword [esp + 0x28]
mov dword [esp + eax*4 + 0x5c], 0xa6d0811
inc dword [esp + 0x28]
cmp dword [esp + 0x28], ecx
jl 0x10023a07
mov dword [esp + 0x18], 0x8e469ad5
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
neg edx
push 0xfffffffffffffffe
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, 0xc3a0
pop esi
setle cl
imul edx, ecx
neg edx
jne 0x10023ab5
cmp dword [esp + 0x10], ebx
jne 0x10023ab5
mov dword [esp + 0x24], ebx
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x18], ebx
jmp 0x10023a8d
mov dword [esp + 0x28], ebx
jmp 0x10023a7f
mov eax, dword [esp + 0x28]
mov dword [esp + eax*4 + 0x224], 0x51ac06e3
inc dword [esp + 0x28]
cmp dword [esp + 0x28], edi
jl 0x10023a6c
inc dword [esp + 0x20]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ebx
jle 0x10023a66
mov dword [esp + 0x10], ebx
jmp 0x10023aad
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + eax*4 + 0x5c]
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x5c], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ebx
jle 0x10023a99
jmp 0x10023b0a
mov dword [esp + 0x24], esi
lea ecx, [esp + 0x19c]
mov dword [esp + 0x24], 0x6e3e45bb
push 2
call fcn.10017b45
mov dword [esp + 0x20], 0x62a7
mov dword [esp + 0x28], ebx
jmp 0x10023af3
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x19c]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [esp + 0x28]
cmp dword [esp + 0x28], 2
jl 0x10023add
dec dword [esp + 0x20]
lea ecx, [esp + 0x19c]
call fcn.100183a3
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10023b29
push ebx
push ebx
push 0x20ec
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x20], esi
jmp 0x1002429f
mov dword [esp + 0x1c], 0xea5d6c05
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x24], 0xaac1e0f7
mov dword [esp + 0x1c], 0xfffffffc
jmp 0x10023d12
mov dword [esp + 0x2c], 0xeede0b40
lea ecx, [esp + 0xe4]
push 1
call fcn.10017b45
mov dword [esp + 0x24c], edi
mov dword [esp + 0x28], ebx
jmp 0x10023b9c
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0xe4]
mov dword [eax + ecx*4], 7
inc dword [esp + 0x28]
cmp dword [esp + 0x28], 1
jl 0x10023b86
mov dword [esp + 0x2c], 0xffffffe2
jmp 0x10023cef
mov dword [esp + 0x18], 0x3c891c55
mov dword [esp + 0x28], 0x4667120d
mov dword [esp + 0x28], 0x66ef3b06
mov dword [esp + 0x18], ebx
jmp 0x10023ce0
mov dword [esp + 0x10], 1
lea ecx, [esp + 0x154]
push edi
call fcn.10017b45
mov dword [esp + 0x28], ebx
jmp 0x10023c02
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x154]
mov dword [eax + ecx*4], 0x39ee491b
inc dword [esp + 0x28]
cmp dword [esp + 0x28], edi
jl 0x10023bec
mov dword [esp + 0x10], 5
jmp 0x10023c3b
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10023c24
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10023c37
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
dec dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jge 0x10023c12
mov eax, dword [esp + 0x18]
xor edx, edx
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x154]
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x10]
cmp eax, 0x7c14
mov eax, dword [esp + 0xe4]
setne dl
xor ecx, ecx
cmp edx, dword [eax]
setle cl
xor edx, edx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
cmp ecx, eax
mov eax, dword [esp + 0x18]
setne dl
neg edx
mov dword [esp + 0x24], edx
xor edx, edx
cmp dword [esp + 0x24], eax
mov eax, dword [esp + 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [esp + 0x28], ecx
xor ecx, ecx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x28], eax
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0xe4]
add edx, dword [eax]
mov eax, dword [esp + 0x18]
cmp edx, eax
setg cl
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x154]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x24], eax
call fcn.100183a3
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x12
jle 0x10023bd1
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], 0xb
jle 0x10023bb0
or dword [esp + 0x24c], 0xffffffff
lea ecx, [esp + 0xe4]
call fcn.100183a3
dec dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0xffffffe5
je 0x10023b63
mov dword [esp + 0x28], 0xfffffff7
mov dword [esp + 0x10], 0xfffffffd
mov dword [esp + 0x2c], 0x563ffaf0
mov dword [esp + 0x24], 0x7cba
dec dword [esp + 0x10]
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x10], 0x25
jg 0x10023dd3
xor ecx, ecx
mov dword [esp + 0x1c], 0x1c71bc7d
inc ecx
mov dword [esp + 0x38], ecx
cmp dword [esp + 0x10], ebx
je 0x10023d73
mov eax, ecx
mov esi, ecx
mov dword [esp + 0x2c], eax
cmp dword [esp + 0x2c], ebx
jne 0x10023d75
mov esi, ebx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
sub ecx, eax
je 0x10023d85
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
xor edx, edx
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
cmp eax, ecx
setle dl
xor eax, eax
cmp esi, edx
setg al
cmp eax, 0x3072
jne 0x10023db9
cmp dword [esp + 0x2c], ebx
je 0x10023db9
xor ecx, ecx
inc ecx
jmp 0x10023dbb
mov ecx, ebx
mov eax, dword [esp + 0x1c]
add eax, ecx
mov dword [esp + 0x38], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0x25
jle 0x10023d50
push 0xfffffffffffffffe
pop esi
mov dword [esp + 0x28], ebx
cmp dword [esp + 0x28], 7
jg 0x1002429b
push 2
mov dword [esp + 0x30], 1
lea ecx, [esp + 0x1ac]
pop eax
mov dword [esp + 0x24], 0x76c3a0b8
mov dword [esp + 0x24], eax
mov dword [esp + 0x24], 0x5aad8530
push eax
call fcn.10017b45
xor edx, edx
inc edx
mov dword [esp + 0x24], edx
mov dword [esp + 0x18], edx
mov dword [esp + 0x10], ebx
jmp 0x10023e32
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0xc4], 0xc204e2db
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x10023e1f
mov dword [esp + 0x10], ebx
jmp 0x10023e50
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x1a8]
mov dword [eax + ecx*4], edx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x10023e3e
mov dword [esp + 0x2c], ebx
jmp 0x10023e86
mov dword [esp + 0x1c], 5
mov dword [esp + 0x1c], ebx
cmp dword [esp + 0x1c], ebx
jl 0x10023e82
mov eax, dword [esp + 0x1c]
cmp dword [esp + eax*4 + 0xc4], ebx
jne 0x10023e82
dec dword [esp + 0x1c]
jns 0x10023e6f
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], ebx
jle 0x10023e5d
inc dword [esp + 0x18]
lea ecx, [esp + 0x1a8]
call fcn.100183a3
mov byte [esp + 0x17], bl
lea ecx, [esp + 0x124]
mov dword [esp + 0x10], 0x6dd8d130
mov dword [esp + 0x18], esi
push 2
call fcn.10017b45
push 2
mov dword [esp + 0x20], ebx
pop edx
jmp 0x10023ed9
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x124]
mov dword [eax + ecx*4], 5
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edx
jl 0x10023ec3
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x10]
jne 0x10023f17
mov dword [esp + 0x18], 1
jmp 0x10023f87
mov dword [esp + 0x24], 1
mov dword [esp + 0x1c], ebx
jmp 0x10023f34
mov eax, dword [esp + 0x1c]
mov dword [esp + eax*4 + 0x214], ebx
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edx
jl 0x10023f25
push 0xffffffffffffffea
pop edi
mov dword [esp + 0x18], edi
jmp 0x10023f79
mov dword [esp + 0x1c], 0xc1d6
mov dword [esp + 0x10], ebx
jmp 0x10023f6e
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x124]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [esp + 0x1c]
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jle 0x10023f51
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edi
jne 0x10023f43
mov eax, dword [esp + 0x24]
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x124]
call fcn.100183a3
cmp byte [esp + 0x17], 0
je 0x10024289
push 2
lea ecx, [esp + 0xdc]
call fcn.10017b45
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x1c], 8
mov dword [esp + 0x1c], 0xcc254292
mov dword [esp + 0x24], 0x8cd54673
mov dword [esp + 0x1c], ebx
jmp 0x10023fe8
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0xd8]
mov dword [eax + ecx*4], 0x4f01c089
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 2
jl 0x10023fd2
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x10], 1
jg 0x1002407e
mov edi, dword [esp + 0xd8]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
xor eax, eax
cmp dword [edi + 4], 0x5b64
push 0
setl al
mov dword [esp + 0x20], eax
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0xdc]
mov eax, dword [edx + eax*4]
cmp eax, dword [edx + ecx*4]
mov ecx, dword [esp + 0x20]
pop eax
setl al
add eax, dword [edx + esi*4]
xor edx, edx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd8]
cmp ecx, dword [eax]
mov ecx, dword [esp + 0x24]
setle dl
xor eax, eax
sub ecx, edx
dec ecx
cmp ecx, dword [edi + 4]
setge al
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jle 0x10024005
push 0xfffffffffffffffe
pop esi
lea ecx, [esp + 0xd8]
call fcn.100183a3
push 0x2bd8
push ebx
call fcn.1002766e
mov dword [esp + 0x20], 0x53b26bdd
xor eax, eax
mov dword [esp + 0x18], esi
inc eax
mov dword [esp + 0x24], 0x256ee973
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x2c], eax
mov dword [esp + 0x2c], ebx
pop ecx
mov dword [esp + 0x28], 0xffffffff
pop ecx
mov dword [esp + 0x24], 0xffffffff
lea ecx, [esp + 0x130]
mov dword [esp + 0x38], 0xfffffffc
mov dword [esp + 0x38], esi
mov dword [esp + 0x38], eax
push eax
call fcn.10017b45
push 4
pop esi
mov dword [esp + 0x24c], esi
lea ecx, [esp + 0x118]
mov dword [esp + 0x38], 0x324015fb
push esi
call fcn.10017b45
push 9
pop eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x10], ebx
jmp 0x10024129
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x130]
mov dword [eax + ecx*4], esi
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x10024117
mov dword [esp + 0x10], ebx
jmp 0x10024148
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x118]
mov dword [eax + ecx*4], ebx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x10024136
mov dword [esp + 0x18], 6
jmp 0x1002425b
mov dword [esp + 0x10], 0x85b7
mov dword [esp + 0x1c], ebx
jmp 0x1002417c
mov eax, dword [esp + 0x1c]
mov dword [esp + eax*4 + 0x108], 0xfffffffa
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], esi
jl 0x10024169
mov ecx, dword [esp + 0x108]
mov eax, dword [esp + 0x118]
dec ecx
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
xor ecx, ecx
inc dword [esp + 0x2c]
mov eax, dword [esp + 0x108]
cmp eax, 0xffffffff
setle cl
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x1c]
neg eax
cmp dword [esp + 0x2c], eax
jge 0x100241c9
cmp dword [esp + 0x114], ebx
jne 0x100241c9
mov edx, ebx
jmp 0x100241cc
xor edx, edx
inc edx
dec dword [esp + 0x10]
xor ecx, ecx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x108]
cmp edx, eax
mov eax, dword [esp + 0x130]
setl cl
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [esp + 0x18]
setne dl
xor ecx, ecx
cmp eax, 1
setg cl
sub ecx, edx
xor edx, edx
imul eax, ecx, 0xfffe
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
cmp eax, ecx
setg dl
xor ecx, ecx
cmp edx, 0x422f8dc7
setg cl
mov dword [esp + 0x114], ecx
mov eax, dword [esp + 0x24]
add eax, ecx
mov dword [esp + 0x38], eax
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10024257
push ebx
push 0x180f
push 0x26d7
push 0x21
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x11
jg 0x1002415b
lea ecx, [esp + 0x118]
call fcn.100183a3
or dword [esp + 0x24c], 0xffffffff
lea ecx, [esp + 0x130]
call fcn.100183a3
push 0xfffffffffffffffe
pop esi
inc dword [esp + 0x28]
cmp dword [esp + 0x28], 7
jle 0x10023de2
push 3
pop edi
dec dword [esp + 0x20]
cmp dword [esp + 0x20], 0xfffffff8
je 0x10023b36
mov dword [esp + 0x1c], 0xd5e48d32
lea ecx, [esp + 0x188]
mov dword [esp + 0x24], 0xa971867b
push 1
call fcn.10017b45
xor edx, edx
mov dword [esp + 0x20], ebx
inc edx
jmp 0x100242e7
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x188]
mov dword [eax + ecx*4], 5
inc dword [esp + 0x20]
cmp dword [esp + 0x20], edx
jl 0x100242d1
mov dword [esp + 0x1c], 0xe
jmp 0x100243a9
mov dword [esp + 0x20], 0x8bac04ee
mov dword [esp + 0x24], 0x69f30cc2
mov dword [esp + 0x24], 0x3edfa831
mov dword [esp + 0x24], 0x2aee5a98
mov dword [esp + 0x2c], 0xc40a98ce
mov dword [esp + 0x10], ebx
jmp 0x10024334
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x64], ebx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x10024328
mov dword [esp + 0x10], ebx
jmp 0x10024353
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0xc0], 0xffffffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x10024340
mov dword [esp + 0x20], ebx
cmp dword [esp + 0x20], ebx
jl 0x100243a5
mov dword [esp + 0x24], 0x35edade0
mov dword [esp + 0x24], 0x9c45c1d1
mov dword [esp + 0x1c0], ebx
mov dword [esp + 0x1c4], ebx
mov dword [esp + 0x1c8], ebx
mov dword [esp + 0x1cc], ebx
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x20]
mov dword [esp + eax*4 + 0x64], ecx
inc dword [esp + 0x2c]
dec dword [esp + 0x20]
jns 0x10024363
dec dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0xffffffe9
jne 0x100242fa
lea ecx, [esp + 0x188]
call fcn.100183a3
mov byte [esp + 0x17], bl
lea ecx, [esp + 0x1b4]
push edi
call fcn.10017b45
mov dword [esp + 0x24], 0x36432a27
mov dword [esp + 0x24], 0xf2000252
mov dword [esp + 0x24], 0x18795010
mov dword [esp + 0x24], 1
mov dword [esp + 0x24], 0xbd4dfbd6
mov dword [esp + 0x24], 0xfffffff8
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x10], ebx
jmp 0x10024425
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x1b4]
mov dword [eax + ecx*4], 0x5bb2
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x1002440f
mov dword [esp + 0x10], ebx
jmp 0x10024440
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x230], ebx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x10024431
dec dword [esp + 0x20]
lea ecx, [esp + 0x1b4]
call fcn.100183a3
cmp byte [esp + 0x17], 0
je 0x1002460e
mov dword [esp + 0x2c], 0xfffffff9
mov dword [esp + 0x20], ebx
jmp 0x10024483
mov eax, dword [esp + 0x20]
mov dword [esp + eax*4 + 0x178], 0x4ec2e0cf
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 4
jl 0x10024470
mov dword [esp + 0x2c], ebx
jmp 0x100245e9
push 1
lea ecx, [esp + 0x100]
call fcn.10017b45
mov dword [esp + 0x24c], 5
mov dword [esp + 0x20], ebx
jmp 0x100244c8
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0xfc]
mov dword [eax + ecx*4], 0x532bb11a
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 1
jl 0x100244b2
mov eax, dword [esp + 0xfc]
mov dword [eax], ebx
mov eax, dword [eax]
mov dword [esp + 0x1c], 0x25a80e35
cmp dword [esp + eax*4 + 0x178], ebx
jne 0x100245d1
mov dword [esp + 0x1c], ebx
jmp 0x100245b6
push 2
lea ecx, [esp + 0x14c]
call fcn.10017b45
mov dword [esp + 0x18], 1
mov dword [esp + 0x24], 0x75ee
mov dword [esp + 0x20], ebx
jmp 0x10024532
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x148]
mov dword [eax + ecx*4], 0xc7af5af8
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 2
jl 0x1002451c
mov esi, dword [esp + 0x148]
mov dword [esi + 4], ebx
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1002455f
push 0x21bf
push 0x760
push ebx
call dword [sym.imp.USER32.dll_CheckMenuItem]
inc dword [esi + 4]
cmp dword [esi + 4], edi
jle 0x10024543
mov dword [esp + 0x18], ebx
jmp 0x100245a0
mov eax, dword [esp + 0x18]
xor ecx, ecx
mov eax, dword [esp + eax*4 + 0x178]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + eax*4 + 0x178]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + eax*4 + 0x178]
cmp eax, 0x48b1
setne cl
mov dword [esp + 0x24], ecx
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edi
jle 0x1002456d
lea ecx, [esp + 0x148]
call fcn.100183a3
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jle 0x100244f8
mov eax, dword [esp + 0xfc]
inc dword [eax]
cmp dword [eax], edi
jle 0x100244d8
or dword [esp + 0x24c], 0xffffffff
lea ecx, [esp + 0xfc]
call fcn.100183a3
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], edi
jle 0x10024493
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10024607
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
push ebx
call fcn.10028805
pop ecx
push 2
mov dword [esp + 0x20], edi
pop edx
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x1c]
push 6
pop esi
sub eax, esi
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
sub ecx, eax
je 0x10024660
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10024701
push 1
push ebx
push 0x198d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemInt]
jmp 0x10024701
mov dword [esp + 0x10], 0xfff9
lea ecx, [esp + 0x16c]
push edx
call fcn.10017b45
mov dword [esp + 0x20], ebx
jmp 0x10024691
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x16c]
mov dword [eax + ecx*4], 0x6038
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 2
jl 0x1002467b
cmp dword [esp + 0x1c], ebx
je 0x100246c3
mov dword [esp + 0x20], 0xb1b0
xor edx, edx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
cmp eax, ecx
setle dl
mov dword [esp + 0x10], edx
jmp 0x100246d4
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x100246d4
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov dword [esp + 0x10], ebx
jmp 0x100246ee
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x16c]
cmp dword [eax + ecx*4], ebx
jne 0x100246f5
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jle 0x100246da
lea ecx, [esp + 0x16c]
call fcn.100183a3
mov dword [esp + 0x18], ebx
jmp 0x1002471d
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10024719
push ebx
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xffffffff
jg 0x10024707
mov eax, dword [esp + 0x48]
lea ecx, [esp + 0x50]
push 4
mov dword [eax], ebx
call fcn.10017b45
mov dword [esp + 0x24c], esi
lea ecx, [esp + 0x9c]
xor esi, esi
inc esi
push esi
call fcn.10017b45
mov dword [esp + 0x10], ebx
jmp 0x10024761
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x50]
mov dword [eax + ecx*4], esi
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x10024752
mov dword [esp + 0x10], ebx
jmp 0x1002477e
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x30], 0x252cb136
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x1002476e
mov dword [esp + 0x10], ebx
or esi, 0xffffffff
cmp dword [esp + 0x10], 1
jge 0x100247a7
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x9c]
mov dword [eax + ecx*4], esi
inc dword [esp + 0x10]
jmp 0x1002478c
mov dword [esp + 0x30], ebx
cmp dword [esp + 0x30], edi
jg 0x10024a00
mov eax, 0xffff
mov dword [esp + 0x10], 0xc4530722
mov dword [esp + 0x38], esi
mov dword [esp + 0x1c], 0x2dafbbd0
mov dword [esp + 0x28], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x10], edi
jg 0x100249ce
mov edx, dword [esp + 0x50]
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], 1
mov dword [esp + 0x2c], 0x9884cb8f
mov dword [esp + 0x20], ebx
jmp 0x1002480e
mov eax, dword [esp + 0x20]
mov dword [esp + eax*4 + 0x68], esi
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 1
jl 0x10024802
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x50]
cmp dword [eax + ecx*4], ebx
je 0x1002482d
inc dword [esp + 0x18]
je 0x1002482d
xor edi, edi
inc edi
jmp 0x1002482f
mov edi, ebx
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x50]
mov eax, dword [eax + ecx*4]
cmp eax, dword [edx + 0xc]
jge 0x1002492e
cmp dword [esp + 0x1c], 1
je 0x1002484e
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x1c]
mov ecx, 0xffff
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x10]
sub eax, dword [edx + 0xc]
neg eax
sbb eax, eax
inc eax
cmp ecx, eax
mov eax, dword [esp + 0x9c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, dword [eax]
mov eax, dword [esp + 0x50]
setle dl
xor ecx, ecx
cmp edx, 0x3f54
setge cl
xor edx, edx
sub ecx, dword [eax + esi*4]
imul eax, ecx, 0xd5eb
cmp eax, 0xfffffffd
mov eax, dword [esp + 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
sete cl
xor eax, eax
add ecx, dword [esp + 0x1c]
cmp ecx, 0xaa6f
setne al
cmp eax, dword [esp + 0x10]
jle 0x100248c3
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x10]
xor ecx, ecx
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x28], ebx
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x9c]
add edx, dword [eax]
mov eax, dword [esp + 0x30]
cmp edx, eax
setne cl
xor edx, edx
sub ecx, 0xfff8
mov dword [esp + 0x2c], ecx
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
cmp eax, 5
mov eax, dword [esp + 0x30]
setne dl
xor ecx, ecx
imul edx, eax
mov eax, dword [esp + 0x68]
cmp edx, eax
mov eax, dword [esp + 0x50]
setge cl
xor edx, edx
cmp ecx, dword [eax + esi*4]
mov eax, dword [esp + 0x9c]
setle dl
cmp edx, dword [eax]
jne 0x1002492e
mov edx, ebx
jmp 0x10024931
xor edx, edx
inc edx
mov eax, dword [esp + 0x1c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x30]
sete cl
xor edx, edx
add ecx, eax
mov eax, dword [esp + 0x10]
cmp ecx, eax
setge dl
xor eax, eax
cmp edi, edx
setl al
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x10]
cmp dword [ecx + edx*4], eax
jge 0x10024992
cmp dword [esp + 0x28], ebx
jne 0x10024992
mov esi, ebx
jmp 0x10024995
xor esi, esi
inc esi
mov ecx, dword [esp + 0x10]
xor edx, edx
mov eax, dword [esp + 0x50]
push 3
pop edi
push 0xffffffffffffffff
cmp esi, dword [eax + ecx*4]
mov eax, dword [esp + 0x34]
setl dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [esp + 0x28]
pop esi
setl cl
mov dword [esp + 0x38], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jle 0x100247ec
or esi, esi
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x100249ed
push 0x1dbc
push ebx
push ebx
push ebx
push 0x1862
push ebx
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
inc dword [esp + 0x30]
mov eax, 0xffff
cmp dword [esp + 0x30], edi
jle 0x100247ba
lea ecx, [esp + 0x9c]
call fcn.100183a3
lea ecx, [esp + 0x50]
mov dword [esp + 0x24c], esi
call fcn.100183a3
mov dword [esp + 0x24], 0xda115252
xor ecx, ecx
inc ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x24], 0x45307222
mov dword [esp + 0x24], 0xf23b1a95
mov dword [esp + 0x24], 0xcddd1d8f
mov dword [esp + 0x24], ebx
mov dword [esp + 0x24], 8
mov dword [esp + 0x24], 0xfffffff8
mov dword [esp + 0x24], ebx
mov dword [esp + 0x24], 0x1fcc8af9
push 2
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x14], ebx
pop edx
jmp 0x10024a83
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x21c], 0xfffffffe
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x10024a70
mov dword [esp + 0x10], ebx
jmp 0x10024a9e
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x20c], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x10024a8f
mov eax, dword [esp + 0x34]
inc dword [esp + 0x24]
cmp dword [eax + 0x14], 0x10
jb 0x10024ab6
mov ecx, dword [eax]
jmp 0x10024ab8
mov ecx, eax
cmp dword [eax + 0x14], 0x10
mov dword [esp + 0x4c], ecx
jb 0x10024ac6
mov edx, dword [eax]
jmp 0x10024ac8
mov edx, eax
mov eax, dword [eax + 0x10]
add eax, edx
cmp ecx, eax
je 0x10024d64
mov al, byte [ecx]
cmp al, 0x30
jl 0x10024cfd
cmp al, 0x39
jg 0x10024cfd
push 1
lea ecx, [esp + 0xac]
call fcn.10017b45
mov dword [esp + 0x24c], 7
xor ecx, ecx
mov dword [esp + 0x18], 0xd329b3a0
inc ecx
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], ecx
mov dword [esp + 0x24], 0xfffffffd
mov dword [esp + 0x24], 0xfffffffb
mov dword [esp + 0x24], 0xfffffff6
mov dword [esp + 0x24], 0x8dbe583c
mov dword [esp + 0x24], 0xfffffffe
mov dword [esp + 0x10], ebx
jmp 0x10024b6e
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xa8]
mov dword [eax + ecx*4], 0x532bb11a
xor ecx, ecx
inc dword [esp + 0x10]
inc ecx
cmp dword [esp + 0x10], ecx
jl 0x10024b55
mov dword [esp + 0x10], ebx
jmp 0x10024b8d
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x1fc], 0xa2b617f2
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x10024b7a
mov edx, dword [esp + 0xa8]
xor eax, eax
cmp dword [edx], ecx
setg al
sub eax, 0x9dbe
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp dword [edx], eax
sete cl
xor eax, eax
sub ecx, 0x7f2be925
cmp ecx, dword [edx]
setg al
cmp eax, 0xf495e3b3
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0xa29f
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
setle cl
mov dword [edx], ecx
mov ecx, dword [esp + 0xa8]
cmp dword [ecx], eax
jne 0x10024c1b
mov dword [esp + 0x18], ebx
jmp 0x10024c10
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10024c0c
push 0x7d6e
push ebx
push 0x1a42
call fcn.100253d1
add esp, 0xc
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ebx
jle 0x10024bee
jmp 0x10024c9f
mov dword [esp + 0x10], esi
cmp dword [ecx], ebx
jne 0x10024c2b
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0xcc]
cmp dword [esp + 0x10], 0xbd3d38e2
sbb eax, eax
neg eax
sub eax, dword [esp + 0xd0]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xdad24015
mov eax, dword [esp + 0xa8]
setne cl
mov dword [eax], ecx
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0xcc]
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x10], 0xfffc
jb 0x10024c85
cmp dword [esp + 0x10], ebx
je 0x10024c85
xor eax, eax
inc eax
jmp 0x10024c87
mov eax, ebx
mov edx, dword [esp + 0x10]
xor ecx, ecx
add edx, eax
mov eax, dword [esp + 0xc8]
cmp edx, eax
setg cl
mov dword [esp + 0x24], ecx
inc dword [esp + 0x204]
lea ecx, [esp + 0xa8]
mov dword [esp + 0x24c], esi
call fcn.100183a3
push 0x7b45
push 0x3636
lea eax, [esp + 0x50]
push eax
push 0x4ea1
push 0x43b9
push 0x6126
push ebx
push 0x215a
lea eax, [esp + 0x6c]
push eax
push 0x5561
call fcn.10025209
mov ecx, dword [esp + 0x74]
add esp, 0x28
mov eax, dword [esp + 0x34]
inc ecx
jmp 0x10024ab8
mov dword [esp + 0x40], 0xb110c93b
mov dword [esp + 0x40], ebx
cmp dword [esp + 0x40], ebx
jl 0x10024d52
mov dword [esp + 0x20], 0xdf98a59c
mov dword [esp + 0x20], 0x19
jmp 0x10024d45
push 0x3c92
lea eax, [esp + 0x44]
mov dword [esp + 0x64], 0xe3e6
push eax
lea eax, [esp + 0x68]
push eax
push ebx
call fcn.10027832
add esp, 0x10
dec dword [esp + 0x20]
cmp dword [esp + 0x20], 4
jne 0x10024d21
dec dword [esp + 0x40]
jns 0x10024d0f
lea eax, [esp + 0x48]
push ebx
push eax
call fcn.1002543a
pop ecx
pop ecx
jmp 0x1002366a
push dword [esp + 0xc0]
movdqa xmm0, xmmword [0x10008050]
lea eax, [esp + 0x1f0]
push eax
lea eax, [esp + 0x1e4]
mov dword [esp + 0xbc], ebx
push eax
push ebx
lea ecx, [esp + 0xc4]
mov dword [esp + 0xc8], ebx
movdqu xmmword [esp + 0x1ec], xmm0
mov dword [esp + 0xcc], ebx
call fcn.1001911b
mov dword [esp + 0x24c], 8
lea ecx, [esp + 0x1d0]
mov dword [esp + 0x1c], 6
push edi
call fcn.10017b45
push 9
pop eax
mov byte [esp + 0x24c], al
mov dword [esp + 0x34], esi
mov dword [esp + 0x10], ebx
jmp 0x10024df2
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x3c], 0xc506d444
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x10024de2
mov dword [esp + 0x10], ebx
jmp 0x10024e15
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x1d0]
mov dword [eax + ecx*4], 8
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x10024dff
mov dword [esp + 0x3c], ebx
jmp 0x10024f9a
mov dword [esp + 0x18], esi
mov dword [esp + 0x24], 0x28d8805e
mov dword [esp + 0x2c], 1
mov dword [esp + 0x34], 0xd225
cmp dword [esp + 0x18], ebx
jne 0x10024fa4
mov dword [esp + 0x18], edi
cmp dword [esp + 0x18], ebx
jl 0x10024f96
push 9
pop edi
push 1
lea ecx, [esp + 0x94]
call fcn.10017b45
mov dword [esp + 0x38], esi
mov dword [esp + 0x20], ebx
jmp 0x10024e89
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x90]
mov dword [eax + ecx*4], 0xba5c1243
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 1
jl 0x10024e73
cmp dword [esp + 0x1c], ebx
jne 0x10024f4e
mov eax, dword [esp + 0x3c]
xor edx, edx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x3c]
cmp ecx, eax
mov eax, dword [esp + 0x3c]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x1c]
setg cl
mov dword [esp + 0x34], ecx
xor ecx, ecx
cmp dword [esp + 0x34], eax
mov eax, dword [esp + 0x90]
setg cl
add ecx, dword [eax]
jne 0x10024eef
cmp dword [esp + 0x1c], ebx
je 0x10024eef
xor edx, edx
inc edx
jmp 0x10024ef1
mov edx, ebx
mov eax, dword [esp + 0x90]
xor ecx, ecx
cmp edx, dword [eax]
setge cl
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x1c]
cmp edi, eax
sbb eax, eax
inc eax
cmp eax, 7
je 0x10024f15
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x90]
xor ecx, ecx
cmp dword [eax], 6
mov eax, dword [esp + 0xb4]
setge cl
add ecx, dword [eax + 4]
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x90]
mov eax, dword [eax]
cmp eax, dword [esp + 0x2c]
jl 0x10024f65
test eax, eax
jne 0x10024f65
mov eax, ebx
jmp 0x10024f68
xor eax, eax
inc eax
mov dword [esp + 0x34], eax
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10024f7d
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
lea ecx, [esp + 0x90]
call fcn.100183a3
dec dword [esp + 0x18]
jns 0x10024e5b
push 3
pop edi
inc dword [esp + 0x3c]
cmp dword [esp + 0x3c], edi
jle 0x10024e24
lea ecx, [esp + 0x1d0]
call fcn.100183a3
lea ecx, [esp + 0xb4]
mov dword [esp + 0x24c], esi
call fcn.100183a3
mov dword [esp + 0x18], 0xa48bbca6
lea ecx, [esp + 0xf0]
push 1
call fcn.10017b45
mov dword [esp + 0x24c], 0xa
mov dword [esp + 0x10], ebx
jmp 0x10025000
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xf0]
mov dword [eax + ecx*4], 0xb3e90a62
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x10024fea
mov dword [esp + 0x10], ebx
jmp 0x10025020
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x194], 0xb9ae77ab
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x1002500d
mov dword [esp + 0x18], esi
jmp 0x10025077
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xf0]
mov dword [eax], ecx
mov dword [esp + 0x198], ecx
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10025073
push ebx
push 0x84b
push 0x172f
push 0x4ce9
push 0x1479
push 0x6236
push 0x3943
call fcn.100288a7
add esp, 0x1c
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xffffffea
jle 0x1002502d
lea eax, [esp + 0xf0]
push ebx
push eax
call fcn.100277cf
pop ecx
pop ecx
lea ecx, [esp + 0xf0]
mov dword [esp + 0x24c], esi
call fcn.100183a3
mov dword [esp + 0x1c], edi
push 2
pop edx
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x1c]
sub eax, 6
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
sub ecx, eax
je 0x100250f1
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10025192
push 1
push ebx
push 0x198d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemInt]
jmp 0x10025192
mov dword [esp + 0x10], 0xfff9
lea ecx, [esp + 0x160]
push edx
call fcn.10017b45
mov dword [esp + 0x20], ebx
jmp 0x10025122
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x160]
mov dword [eax + ecx*4], 0x6038
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 2
jl 0x1002510c
cmp dword [esp + 0x1c], ebx
je 0x10025154
mov dword [esp + 0x34], 0xb1b0
xor edx, edx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x1c]
cmp eax, ecx
setle dl
mov dword [esp + 0x10], edx
jmp 0x10025165
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10025165
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov dword [esp + 0x10], ebx
jmp 0x1002517f
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x160]
cmp dword [eax + ecx*4], ebx
jne 0x10025186
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jle 0x1002516b
lea ecx, [esp + 0x160]
call fcn.100183a3
mov dword [esp + 0x18], ebx
jmp 0x100251ae
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x100251aa
push ebx
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
dec dword [esp + 0x18]
cmp dword [esp + 0x18], esi
jg 0x10025198
mov al, 1
mov ecx, dword [esp + 0x244]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret