Function at 0x1000b69c
Capabilities:
Accept command line arguments
Delete file
Get common file path
Get geographical location
Set registry value

Disassembly:
mov eax, 0x10065da4
call fcn.10065698
sub esp, 0x744
push ebx
mov ebx, dword [sym.imp.USER32.dll_DrawFocusRect]
xor eax, eax
push esi
push edi
mov dword [ebp - 0x20], 0x5d6c05ba
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1a
push 1
mov byte [ebp - 0x59], dl
mov dword [ebp - 0x58], ecx
pop eax
je 0x1000b746
push eax
lea ecx, [ebp - 0x2e8]
call fcn.100179d6
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0x14], ecx
inc edx
cmp dword [ebp - 0x14], edx
jge 0x1000b703
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2e8]
mov dword [eax + ecx*4], 0xeede0b40
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000b6e9
xor ecx, ecx
mov eax, dword [ebp - 0x2e8]
mov dword [eax], 0x1d
mov byte [ebp - 0x2d], cl
cmp byte [ebp - 0x2d], 0
je 0x1000b722
push ecx
push 0x55c
call ebx
xor ecx, ecx
mov eax, dword [ebp - 0x2e8]
dec dword [eax]
cmp dword [eax], 0xffffffec
jg 0x1000b70f
lea ecx, [ebp - 0x2e8]
call fcn.10017a38
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1a
push 1
pop eax
jne 0x1000b6d0
mov edi, 0x74b666a7
lea ecx, [ebp - 0x3f0]
push 3
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x3c], eax
pop eax
push eax
mov dword [ebp - 0x78], eax
call fcn.100179d6
xor esi, esi
xor ecx, ecx
mov dword [ebp - 0x10], esi
inc ecx
jmp 0x1000b77e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xbc], 0xc2dd78f4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1000b76d
push 3
mov dword [ebp - 0x10], esi
pop edx
jmp 0x1000b79e
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3f0]
mov dword [eax + ecx*4], 0x638299fa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1000b78b
cmp dword [ebp - 0x18], esi
jne 0x1000b7b1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x3f0]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xbc]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x3f0]
dec dword [eax]
call fcn.10017a38
xor eax, eax
mov dword [ebp - 0x18], edi
inc eax
lea ecx, [ebp - 0x3fc]
push 3
mov dword [ebp - 0x3c], eax
pop eax
push eax
call fcn.100179d6
xor ecx, ecx
mov dword [ebp - 0x10], esi
inc ecx
jmp 0x1000b82b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb0], 0xc2dd78f4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1000b81a
push 3
mov dword [ebp - 0x10], esi
pop edx
jmp 0x1000b84b
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3fc]
mov dword [eax + ecx*4], 0x638299fa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1000b838
cmp dword [ebp - 0x18], esi
jne 0x1000b85e
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x3fc]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xb0]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x3fc]
dec dword [eax]
call fcn.10017a38
mov dword [ebp - 0x10], 0xfffffffd
or ecx, 0xffffffff
mov dword [ebp - 0x18], ecx
push 2
mov dword [ebp - 0x3c], ecx
pop eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jle 0x1000b983
xor edi, edi
inc edi
mov dword [ebp - 0x28], ecx
mov ecx, 0x4b96
mov dword [ebp - 0x3c], 0x32955f1b
mov dword [ebp - 0x14], 0xfb5c4ce1
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
sub ecx, eax
jne 0x1000b8fd
mov eax, esi
cmp dword [ebp - 0x10], esi
je 0x1000b8ff
mov eax, edi
xor ecx, ecx
cmp eax, 0xe0cd
push 0xffffffffffffffff
setl cl
xor eax, eax
cmp ecx, 0x4b14
pop ecx
setl al
cmp eax, edi
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jg 0x1000b8ca
mov edi, 0x74b666a7
xor eax, eax
mov dword [ebp - 0x18], edi
inc eax
lea ecx, [ebp - 0x4d4]
push eax
call fcn.100179d6
xor edx, edx
mov dword [ebp - 0x14], esi
inc edx
jmp 0x1000b9b0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4d4]
mov dword [eax + ecx*4], 0xf6af1124
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000b99d
mov eax, dword [ebp - 0x4d4]
push 6
pop ecx
mov dword [eax], ecx
lea ecx, [ebp - 0x4d4]
call fcn.10017a38
xor eax, eax
inc eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x20], 0x5d6c05ba
mov dword [ebp - 0x20], esi
jmp 0x1000ba4d
push eax
lea ecx, [ebp - 0x300]
call fcn.100179d6
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0x14], ecx
inc edx
cmp dword [ebp - 0x14], edx
jge 0x1000ba10
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x300]
mov dword [eax + ecx*4], 0xeede0b40
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000b9f6
xor ecx, ecx
mov eax, dword [ebp - 0x300]
mov dword [eax], 0x1d
mov byte [ebp - 0x2d], cl
cmp byte [ebp - 0x2d], 0
je 0x1000ba2f
push ecx
push 0x55c
call ebx
xor ecx, ecx
mov eax, dword [ebp - 0x300]
dec dword [eax]
cmp dword [eax], 0xffffffec
jg 0x1000ba1c
lea ecx, [ebp - 0x300]
call fcn.10017a38
inc dword [ebp - 0x20]
push 1
pop eax
cmp dword [ebp - 0x20], 0x1a
jne 0x1000b9dd
push 3
pop eax
push eax
lea ecx, [ebp - 0x594]
call fcn.100179d6
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], 0x960f57a7
mov dword [ebp - 0x34], 0xfffffffe
push 2
mov dword [ebp - 0x28], 0x355c0c8f
mov dword [ebp - 0x10], ebx
pop ecx
jmp 0x1000ba95
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x190], 0x7862
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1000ba84
mov dword [ebp - 0x10], ebx
jmp 0x1000bab0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x680], 0xfffffffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1000ba9f
xor ecx, ecx
mov dword [ebp - 0x7c], 5
inc ecx
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], ebx
jl 0x1000bbae
mov dword [ebp - 0x10], 0x8974b66
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], ebx
jl 0x1000bb9b
mov dword [ebp - 0x28], 0x335c0de4
xor edx, edx
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x24], 0xfffffffc
mov eax, dword [ebp - 0x10]
push 5
mov ecx, dword [ebp + eax*4 - 0x190]
mov eax, dword [ebp - 0x190]
cmp ecx, eax
setl dl
mov dword [ebp - 0x28], edx
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
pop ecx
setg dl
xor eax, eax
cmp edx, 0xcb0b
setle al
imul eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
sbb edx, edx
xor ecx, ecx
add edx, 0x240b2086
cmp edx, eax
setle cl
cmp ecx, 0xfff6
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 1
setg cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x190]
sub ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x67c]
mov eax, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x24], ecx
dec dword [ebp - 0x10]
jns 0x1000bade
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x190]
dec dword [ebp - 0x14]
jns 0x1000bacb
mov dword [ebp - 0x10], ebx
jmp 0x1000bbc4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb8], 0xc2dd78f4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1000bbb3
push 4
pop esi
push esi
lea ecx, [ebp - 0x600]
call fcn.100179d6
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x14], ebx
jmp 0x1000bbf3
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x600]
mov dword [eax + ecx*4], 0x3342
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1000bbe0
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], bl
je 0x1000bc0d
push 0x2436
push ebx
push ebx
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
push 3
pop eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jl 0x1000bc5e
mov dword [ebp - 0x14], 0x9aed23b6
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jl 0x1000bc59
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], bl
je 0x1000bc3c
push ebx
push 0x16bc
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], bl
je 0x1000bc51
push ebx
push 0x18dc
push ebx
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
dec dword [ebp - 0x14]
jns 0x1000bc27
push 3
pop eax
dec dword [ebp - 0x20]
jns 0x1000bc18
lea ecx, [ebp - 0x600]
call fcn.10017a38
push 3
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x1000bc84
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x594]
mov dword [eax + ecx*4], 0x638299fa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1000bc71
mov dword [ebp - 0x10], 0x7ddc85f7
lea ecx, [ebp - 0x414]
push esi
call fcn.100179d6
push 3
pop edi
mov dword [ebp - 0x28], edi
or edx, 0xffffffff
mov dword [ebp - 0x24], 0xb28787d6
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], esi
jge 0x1000bcc5
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x414]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x14]
jmp 0x1000bcaf
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], 0xfffffff4
jg 0x1000bd60
mov esi, dword [ebp - 0x414]
mov dword [ebp - 0x14], 0xfffffffb
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x10]
cmp eax, edx
je 0x1000bcf3
cmp dword [ebp - 0x14], ebx
je 0x1000bcf3
mov edx, ebx
jmp 0x1000bcf8
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, edx
mov dword [esi + 8], edx
mov eax, dword [ebp - 0x10]
setl cl
add eax, 0xb7c7008b
add ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp edx, eax
push 0xffffffffffffffff
setl cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
pop edx
setl cl
mov dword [ebp - 0x24], ecx
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff4
jle 0x1000bcd8
push 4
pop esi
lea ecx, [ebp - 0x414]
call fcn.10017a38
cmp dword [ebp - 0x18], ebx
jne 0x1000bd79
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x6c4]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xb8]
neg eax
push 5
sbb eax, eax
neg eax
mov dword [ebp - 0x18], eax
or eax, 0xffffffff
mov dword [ebp - 0x34], 0xad6f2ee
mov dword [ebp - 0x28], eax
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], esi
xor esi, esi
mov dword [ebp - 0x28], 0x8fb770a7
inc esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], 0x962ee6d0
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x28], 0x42e1
push edi
call fcn.100179d6
push 3
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x1000be0e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x6c4]
mov dword [eax + ecx*4], 0xdfa9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000bdfb
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x34]
sub eax, 0x21462ccd
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x28]
jg 0x1000be35
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0xfffb
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setle dl
xor ecx, ecx
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x2c]
cmp eax, 0xfab8
setle cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x6c4]
call fcn.10017a38
mov eax, dword [ebp - 0x594]
lea ecx, [ebp - 0x594]
or edi, 0xffffffff
dec dword [eax]
mov dword [ebp - 4], edi
call fcn.10017a38
mov dword [ebp - 0x24], esi
lea ecx, [ebp - 0x42c]
push 2
call fcn.100179d6
push 2
mov dword [ebp - 0x38], 0x46df37d4
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x1000bebd
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x42c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000beae
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x42c]
mov dword [eax], ecx
mov dword [ebp - 0x38], ecx
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], bl
mov ebx, dword [sym.imp.GDI32.dll_CreatePalette]
je 0x1000bee2
push 0
call ebx
lea ecx, [ebp - 0x42c]
call fcn.10017a38
mov dword [ebp - 0x24], esi
lea ecx, [ebp - 0x4ec]
push 2
call fcn.100179d6
xor edx, edx
mov dword [ebp - 0x38], 0x46df37d4
mov dword [ebp - 0x14], edx
jmp 0x1000bf1a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4ec]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1000bf0b
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x4ec]
mov dword [eax], ecx
mov dword [ebp - 0x38], ecx
mov byte [ebp - 0x2d], dl
cmp byte [ebp - 0x2d], dl
je 0x1000bf39
push edx
call ebx
lea ecx, [ebp - 0x4ec]
call fcn.10017a38
mov dword [ebp - 0x10], 0xc28ade19
xor ebx, ebx
mov dword [ebp - 0x24], 0xfff9
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x10], 0xfffffff7
cmp dword [ebp - 0x10], 0xffffffe5
jle 0x1000c156
mov dword [ebp - 0x24], 0x64dc
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x34], 0xc13fe66
mov dword [ebp - 0x3c], 0x3f5e3d1a
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
neg ecx
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp dword [ebp - 0x24], eax
jl 0x1000bfb7
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1000c0fb
push 0x2436
push ebx
push ebx
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
jmp 0x1000c0fb
cmp dword [ebp - 0x10], ebx
jne 0x1000c156
mov dword [ebp - 0x24], 0x15b6
cmp dword [ebp - 0x24], 0x7ea
jge 0x1000c0f4
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x74]
push eax
push 0x100099fc
call fcn.1004d23b
add esp, 0xc
lea ecx, [ebp - 0x2d8]
push dword [ebp - 0x74]
call fcn.10017ad6
mov dword [ebp - 4], esi
mov edi, ebx
cmp dword [ebp - 0x74], 0
jle 0x1000c01e
mov esi, dword [ebp - 0x2d8]
push esi
push 0x100099f8
call fcn.1004d23b
inc edi
add esi, 4
pop ecx
pop ecx
cmp edi, dword [ebp - 0x74]
jl 0x1000c008
push dword [ebp - 0x80]
lea ecx, [ebp - 0x330]
call fcn.10017ad6
mov ecx, dword [ebp - 0x80]
mov edi, ebx
test ecx, ecx
jle 0x1000c053
mov esi, dword [ebp - 0x330]
push esi
push 0x100099f8
call fcn.1004d23b
pop ecx
pop ecx
mov ecx, dword [ebp - 0x80]
inc edi
add esi, 4
cmp edi, ecx
jl 0x1000c03b
mov edx, dword [ebp - 0x74]
mov esi, ebx
mov edi, ebx
lea eax, [edx + ecx]
test eax, eax
jle 0x1000c0c8
cmp edi, ecx
jge 0x1000c0a4
cmp esi, edx
jge 0x1000c08e
mov eax, dword [ebp - 0x330]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [eax + edi*4]
cmp dword [ecx + esi*4], eax
mov ecx, dword [ebp - 0x80]
jle 0x1000c0a4
mov edx, dword [ebp - 0x2d8]
cmp eax, dword [edx + esi*4]
mov edx, dword [ebp - 0x74]
jg 0x1000c0c0
mov eax, dword [ebp - 0x330]
push dword [eax + edi*4]
push 0x10009a04
call fcn.1004d7b6
inc edi
jmp 0x1000c0b8
mov eax, dword [ebp - 0x2d8]
push dword [eax + esi*4]
push 0x10009a04
call fcn.1004d7b6
inc esi
mov edx, dword [ebp - 0x74]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x80]
inc ebx
lea eax, [edx + ecx]
cmp ebx, eax
jl 0x1000c061
push 0x10009961
call fcn.1004de06
pop ecx
lea ecx, [ebp - 0x330]
call fcn.10017a38
or edi, 0xffffffff
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 4], edi
call fcn.10017a38
xor esi, esi
xor ebx, ebx
inc esi
mov dword [ebp - 0x34], 0x6c2e7ccc
cmp dword [ebp - 0x10], ebx
jne 0x1000c114
mov eax, dword [ebp - 0x3c]
add eax, 0x28833352
cmp eax, dword [ebp - 0x28]
jge 0x1000c114
mov ecx, ebx
cmp dword [ebp - 0x3c], ebx
je 0x1000c116
mov ecx, esi
mov eax, dword [ebp - 0x10]
add ecx, 0x11600d54
xor edx, edx
cmp eax, ecx
setle dl
xor eax, eax
add edx, 9
cmp edx, 0x43ddca27
setl al
mov dword [ebp - 0x34], eax
xor eax, eax
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x28]
cmp ecx, 0xa6eb
setl al
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x10]
jmp 0x1000bf5e
push 3
pop eax
mov dword [ebp - 0x3c], 0x28fbc781
lea ecx, [ebp - 0x444]
mov dword [ebp - 0x28], edi
push eax
call fcn.100179d6
push 3
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x1000c188
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x318], 0xccce
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1000c177
mov dword [ebp - 0x10], ebx
jmp 0x1000c1a5
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x444]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1000c192
cmp dword [ebp - 0x318], ebx
je 0x1000c1c9
mov eax, dword [ebp - 0x318]
mov eax, dword [ebp - 0x310]
push 0xfffffffffffffffc
pop ecx
sub ecx, eax
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x318]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x444]
sub ecx, 0xfffffffd
neg ecx
sbb ecx, ecx
inc ecx
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x444]
call fcn.10017a38
mov dword [ebp - 0x38], esi
lea ecx, [ebp - 0x3a8]
push 2
call fcn.100179d6
push 2
pop edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x24], 0x46df37d4
mov dword [ebp - 0x10], 0xc28ade19
mov dword [ebp - 0x24], 0xfff9
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x10], 0xfffffff7
cmp dword [ebp - 0x10], 0xffffffe5
jle 0x1000c2f0
xor edx, edx
mov dword [ebp - 0x24], 0x64dc
inc edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x34], 0xc13fe66
mov dword [ebp - 0x3c], 0x3f5e3d1a
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
neg ecx
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp dword [ebp - 0x24], eax
jl 0x1000c27e
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1000c28a
push 0x2436
push ebx
push ebx
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
xor edx, edx
inc edx
jmp 0x1000c28a
cmp dword [ebp - 0x10], ebx
jne 0x1000c2ea
mov dword [ebp - 0x34], 0x6c2e7ccc
cmp dword [ebp - 0x10], ebx
jne 0x1000c2a3
mov eax, dword [ebp - 0x3c]
add eax, 0x28833352
cmp eax, dword [ebp - 0x28]
jge 0x1000c2a3
mov ecx, ebx
cmp dword [ebp - 0x3c], ebx
je 0x1000c2a5
mov ecx, edx
mov eax, dword [ebp - 0x10]
add ecx, 0x11600d54
xor edx, edx
cmp eax, ecx
setle dl
xor eax, eax
add edx, 9
cmp edx, 0x43ddca27
setl al
mov dword [ebp - 0x34], eax
xor eax, eax
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x28]
cmp ecx, 0xa6eb
setl al
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe5
jg 0x1000c230
xor esi, esi
push 2
inc esi
pop edx
mov dword [ebp - 0x14], ebx
jmp 0x1000c304
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3a8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000c2f5
push 4
lea ecx, [ebp - 0x2ac]
call fcn.100179d6
push 3
pop eax
push esi
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], al
call fcn.100179d6
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x10], ebx
jmp 0x1000c347
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2ac]
mov dword [eax + ecx*4], 0xff0e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1000c334
xor edx, edx
mov dword [ebp - 0x10], ebx
inc edx
jmp 0x1000c364
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x17c]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1000c355
mov eax, dword [ebp - 0x17c]
push 3
pop ecx
mov dword [eax], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], 0xfffe
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1000c3a2
push 0x217c
push ebx
push 0x21c7
push 0xc1e
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push 3
pop ecx
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ebx
jl 0x1000c493
mov ecx, dword [ebp - 0x17c]
mov esi, dword [ebp - 0x2ac]
mov dword [ebp - 0x14], 0x3d4752e4
mov eax, dword [ecx]
cmp dword [esi + eax*4], ebx
je 0x1000c456
mov eax, dword [ecx]
xor edx, edx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x34], 0xfffffff7
cmp dword [esi + eax*4], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x17c]
setne dl
mov ecx, dword [eax]
mov eax, dword [ebp - 0x2ac]
mov esi, dword [eax + ecx*4]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, esi
setle dl
xor eax, eax
cmp edx, esi
setl al
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x2ac]
mov edx, dword [eax + ecx*4]
xor ecx, ecx
mov eax, dword [ebp - 0x34]
dec edx
cmp edx, eax
setle cl
mov dword [ebp - 0x14], ecx
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1000c467
push ebx
push 0x26d1
push ebx
push 0xe9b
push 0xf
call dword [sym.imp.GDI32.dll_ExtCreatePen]
jmp 0x1000c467
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1000c467
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
push 3
mov dword [ebp - 0x14], ebx
pop ecx
cmp dword [ebp - 0x14], ecx
jg 0x1000c48a
xor edx, edx
inc edx
mov dword [ebp - 0x24], 0x61e33ecd
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jle 0x1000c475
dec dword [ebp - 0x20]
jns 0x1000c3ae
mov eax, dword [ebp - 0x17c]
inc dword [eax]
cmp dword [eax], ecx
jle 0x1000c374
lea ecx, [ebp - 0x17c]
call fcn.10017a38
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 2
call fcn.10017a38
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3a8]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x24], ecx
inc eax
push eax
lea ecx, [ebp - 0x134]
call fcn.100179d6
xor edx, edx
mov dword [ebp - 0x18], ebx
inc edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x14], ebx
jmp 0x1000c4fb
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 0x2d5e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1000c4e8
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1000c65e
mov dword [ebp - 0x10], 0x8fc558ba
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], ebx
jl 0x1000c60d
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x1000c566
mov dword [ebp - 0x14], 0x71867b8f
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jl 0x1000c55e
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x134]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x134]
cmp dword [eax + ecx*4], ebx
jne 0x1000c55e
dec dword [ebp - 0x14]
jns 0x1000c539
dec dword [ebp - 0x20]
jns 0x1000c52a
xor edx, edx
inc edx
cmp dword [ebp - 0x18], ebx
jne 0x1000c573
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x10], ebx
je 0x1000c576
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x10]
xor edx, edx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
mov ebx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x3c]
push 0
cmp ebx, dword [ecx + eax*4]
mov ebx, dword [ebp - 0x24]
sete dl
xor eax, eax
add edx, dword [ecx + esi*4]
cmp edx, dword [ecx + edi*4]
mov esi, dword [ebp - 0x38]
setne al
xor edx, edx
cmp eax, 0x725d3672
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x10]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x134]
setle dl
xor ecx, ecx
imul edx, dword [eax + ebx*4]
mov eax, dword [ebp - 0x10]
pop ebx
push 1
cmp edx, 0xaee5a986
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x134]
setle dl
xor ecx, ecx
cmp dword [eax + esi*4], edx
pop edx
setle cl
mov dword [ebp - 0x3c], ecx
dec dword [ebp - 0x10]
push 0xffffffffffffffff
pop edi
jns 0x1000c51f
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x134]
push 0
cmp dword [edi + eax*4], 0x8720725f
mov edx, dword [edi + edx*4]
sbb eax, eax
inc eax
sub edx, eax
imul edx, dword [edi + ecx*4]
imul edx, dword [edi + esi*4]
neg edx
sbb edx, edx
xor eax, eax
neg edx
cmp edx, dword [edi + ebx*4]
pop ebx
push 1
setg al
pop edx
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x18]
push 0xffffffffffffffff
pop edi
jns 0x1000c50c
or edi, edi
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1000c684
push ebx
push 0x22f4
push 0x6a2
push ebx
push 0x19a6
push 0x1493
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
lea ecx, [ebp - 0x134]
call fcn.10017a38
mov dword [ebp - 0x10], 0x36951ad3
mov dword [ebp - 0x20], ebx
push 2
mov dword [ebp - 0x18], 0x8dc509ca
mov dword [ebp - 0x14], ebx
pop ecx
jmp 0x1000c6b9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9c], 0xae9714a0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000c6a8
mov dword [ebp - 0x10], ebx
jmp 0x1000c813
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x14], 0x2f7c629c
mov dword [ebp - 0x38], edi
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x9c], ebx
jne 0x1000c6ec
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x9c]
mov eax, dword [ebp - 0x10]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x9c]
mov eax, dword [ebp - 0x98]
cmp eax, ecx
setge dl
mov dword [ebp - 0x24], edx
xor edx, edx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], 0xbf0ddd9c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x9c]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x2c]
cmp eax, edx
setne cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x9c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x9c]
add eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
je 0x1000c7a0
mov dword [ebp - 0x24], 0xe5fef407
mov edx, 0x14fac
mov eax, dword [ebp - 0x2c]
sub edx, eax
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp eax, edx
setne cl
xor eax, eax
inc eax
cmp ecx, eax
jbe 0x1000c78f
mov edx, eax
cmp dword [ebp - 0x9c], ebx
jne 0x1000c791
mov edx, ebx
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x2c], ecx
jmp 0x1000c810
mov dword [ebp - 0x3c], 0x469f41af
inc ecx
inc dword [ebp - 0x3c]
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ebx
jl 0x1000c810
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x9c], ebx
jne 0x1000c810
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
jl 0x1000c80b
push 2
pop edx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], edx
jge 0x1000c7ea
push 3
pop ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x5e8], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edx
jl 0x1000c7d8
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, 0xb92a1dd6
push 1
setne cl
mov dword [ebp - 0x5e4], ecx
dec dword [ebp - 0x18]
pop ecx
jns 0x1000c7ca
dec dword [ebp - 0x20]
jns 0x1000c7b3
inc dword [ebp - 0x10]
xor esi, esi
inc esi
cmp dword [ebp - 0x10], esi
jle 0x1000c6c6
mov dword [ebp - 0x18], 0xffffffe2
jmp 0x1000c849
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1000c846
push 0x1bd
push 0xc55
push 0x1f27
call dword [sym.imp.GDI32.dll_LineTo]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffe
jge 0x1000c828
mov byte [ebp - 0x19], bl
push 2
mov dword [ebp - 0x24], 0xc5a654fd
mov dword [ebp - 0x14], ebx
pop ecx
jmp 0x1000c872
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x374], 0x1f2c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000c861
mov eax, dword [ebp - 0x370]
sub eax, dword [ebp - 0x370]
mov edi, dword [sym.imp.USER32.dll_LoadMenuW]
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1000c89c
push ebx
push ebx
call edi
push 2
pop ecx
cmp byte [ebp - 0x19], 0
je 0x1000c933
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x38], 0x185a1fa1
mov dword [ebp - 0x44], 0xf95751cf
push ecx
mov dword [ebp - 0x44], esi
lea ecx, [ebp - 0x618]
mov dword [ebp - 0x44], 0x6f1860ec
call fcn.100179d6
push 2
mov dword [ebp - 0x3c], 0x158fb5c4
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x1000c8ef
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x618]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1000c8dc
xor ecx, ecx
mov dword [ebp - 0x10], ebx
inc ecx
cmp dword [ebp - 0x10], ecx
jge 0x1000c914
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6b8], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1000c902
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x618]
mov dword [ebp - 0x38], 0xfffefffe
dec dword [ebp - 0x3c]
call fcn.10017a38
push ebx
call dword [sym.imp.GDI32.dll_CreatePalette]
or eax, 0xffffffff
lea ecx, [ebp - 0x3a8]
mov dword [ebp - 4], eax
call fcn.10017a38
mov esi, 0xc5a654fd
push 2
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x14], ebx
pop ecx
jmp 0x1000c965
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x36c], 0x1f2c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000c954
mov eax, dword [ebp - 0x368]
sub eax, dword [ebp - 0x368]
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000c989
push ebx
push ebx
call edi
push 2
pop ecx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x14], ebx
jmp 0x1000c9a2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x394], 0x1f2c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000c991
mov eax, dword [ebp - 0x390]
sub eax, dword [ebp - 0x390]
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000c9c3
push ebx
push ebx
call edi
push 3
pop eax
mov dword [ebp - 0x14], 0xebb0cb8c
lea ecx, [ebp - 0x504]
mov dword [ebp - 0x3c], 0x87a7525d
mov dword [ebp - 0x20], 0xffff
push eax
call fcn.100179d6
push 2
lea ecx, [ebp - 0x45c]
mov dword [ebp - 4], 4
call fcn.100179d6
push 5
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0x54c]
xor eax, eax
inc eax
push eax
call fcn.100179d6
xor edx, edx
mov dword [ebp - 0x24], 0x13ed423c
mov dword [ebp - 0x18], ebx
inc edx
push 3
pop eax
cmp dword [ebp - 0x18], eax
jge 0x1000ca36
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x504]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
jmp 0x1000ca1d
mov dword [ebp - 0x18], ebx
jmp 0x1000ca4e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x45c]
mov dword [eax + ecx*4], 0x98422518
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000ca3b
mov dword [ebp - 0x18], ebx
jmp 0x1000ca6c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54c]
mov dword [eax + ecx*4], 0xbdf78b15
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1000ca59
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], 0xd658edf
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x45c]
mov dword [eax], edx
mov eax, dword [ebp - 0x504]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x54c]
imul ecx, edx
mov dword [eax], ecx
lea ecx, [ebp - 0x54c]
call fcn.10017a38
lea ecx, [ebp - 0x45c]
call fcn.10017a38
or eax, 0xffffffff
lea ecx, [ebp - 0x504]
mov dword [ebp - 4], eax
call fcn.10017a38
mov esi, dword [0x1006c61c]
lea ecx, [ebp - 0x1e8]
or eax, 0xffffffff
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x18], eax
push 4
call fcn.100179d6
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 4
jge 0x1000cb1c
or edx, 0xffffffff
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1e8]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1000cb07
mov ecx, dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x18]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add eax, 0x6baf
jne 0x1000cb38
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add eax, dword [ecx + 8]
je 0x1000cb74
mov dword [ebp - 0x14], 0x7d72b90f
xor edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, 0x4111d018
mov eax, dword [ebp - 0x14]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0xfffffff9
setne al
mov dword [ebp - 0x14], eax
jmp 0x1000cbb6
push 3
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1000cba5
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000cb94
push ebx
push 0x1472
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
push 3
pop edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1e8]
cmp dword [ecx + eax*4], ebx
jne 0x1000cbb0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x1000cb7c
mov ecx, dword [ebp - 0x1e8]
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x18], eax
push 3
pop edx
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
jl 0x1000cc48
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], 0x35db5a26
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x14], ebx
jmp 0x1000cbe8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2b0], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000cbdb
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], edx
jg 0x1000cc43
lea ecx, [ebp - 0x1e8]
call fcn.10017a38
push 3
pop eax
mov dword [ebp - 0x14], 0xebb0cb8c
lea ecx, [ebp - 0x48c]
mov dword [ebp - 0x28], 0x87a7525d
mov dword [ebp - 0x20], 0xffff
push eax
call fcn.100179d6
push 6
pop eax
push 2
lea ecx, [ebp - 0x57c]
mov dword [ebp - 4], eax
call fcn.100179d6
xor eax, eax
mov byte [ebp - 4], 7
inc eax
lea ecx, [ebp - 0x474]
push eax
call fcn.100179d6
xor edx, edx
mov dword [ebp - 0x24], 0x13ed423c
mov dword [ebp - 0x18], ebx
inc edx
push 3
pop eax
cmp dword [ebp - 0x18], eax
jge 0x1000ccc3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48c]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
jmp 0x1000ccaa
mov dword [ebp - 0x18], ebx
jmp 0x1000ccdb
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x57c]
mov dword [eax + ecx*4], 0x98422518
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000ccc8
mov dword [ebp - 0x18], ebx
jmp 0x1000ccf9