Function at 0x10017305
Capabilities:
Log keystrokes
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x168
push ebx
push esi
push edi
mov dword [ebp - 0x80], edx
xor ebx, ebx
push 2
mov dword [ebp - 0x20], 0x3ae35568
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0xc], ebx
pop esi
jmp 0x10017336
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x74], 0xeb90
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x10017328
push 1
mov dword [ebp - 0x20], ebx
pop edx
jmp 0x10017574
mov dword [ebp - 0x34], 0x3063d62a
mov dword [ebp - 0x28], 0xb3333db9
mov dword [ebp - 0xc], ebx
jmp 0x1001736a
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x90], 7
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x10017359
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], bl
je 0x10017389
push ebx
push 0x2049
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
xor edx, edx
inc edx
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], ebx
jl 0x10017571
mov dword [ebp - 4], edx
mov dword [ebp - 0x18], 0x8f2ba167
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x2c], 0x3aa4807c
mov dword [ebp - 4], ebx
jmp 0x100173c9
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x104], 0x7747bb7a
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x100173b8
mov dword [ebp - 4], ebx
jmp 0x100173e5
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x9c], 0x8d11
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x100173d4
mov dword [ebp - 4], ebx
jmp 0x10017497
mov dword [ebp - 0x28], 0x207182b4
mov dword [ebp - 0xc], ebx
jmp 0x1001740f
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xb8], 0xfffffffd
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x100173fe
inc dword [ebp - 0x104]
mov eax, dword [ebp - 0x104]
jne 0x10017469
mov eax, dword [ebp - 4]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jne 0x1001745b
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x28], 0xabac
jl 0x10017446
mov ecx, ebx
cmp dword [ebp - 0x20], ebx
je 0x10017448
mov ecx, edx
mov dword [ebp - 0xb8], ecx
mov eax, dword [ebp - 0x18]
imul eax, ecx
mov ecx, ebx
cmp dword [ebp - 0x28], eax
jg 0x1001745d
mov ecx, edx
mov eax, dword [ebp - 0xfc]
sub eax, ecx
jne 0x10017469
mov edx, ebx
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp + eax*4 - 0x74]
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x74], ecx
lea eax, [edx + ecx]
imul eax, dword [ebp - 4]
xor edx, edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x74], ecx
inc dword [ebp - 4]
inc edx
cmp dword [ebp - 4], edx
jle 0x100173f2
mov dword [ebp - 0x18], ebx
jmp 0x1001755c
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x3c], 0x48b7
mov dword [ebp - 0xc], ebx
jmp 0x100174c4
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x150], edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x100174b7
mov eax, dword [ebp - 0x84]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x74]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp + eax*4 - 0x74]
cmp eax, edx
setge cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp eax, esi
mov dword [ebp - 0x14c], eax
setl cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
je 0x10017506
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp + eax*4 - 0x74]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp + eax*4 - 0x74]
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
inc ecx
mov edx, dword [ebp + eax*4 - 0x74]
mov eax, dword [ebp - 0x3c]
add eax, ecx
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp + eax*4 - 0x74]
cmp eax, edx
setle cl
xor edx, edx
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x18]
inc edx
cmp dword [ebp - 0x18], edx
jle 0x100174a8
dec dword [ebp - 0x84]
jns 0x1001739b
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffea
jne 0x10017346
mov dword [ebp - 0xc], 0xdf99ff60
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0xc], ebx
jmp 0x10017597
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x78], edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x1001758d
push 0x12
mov dword [ebp - 0xc], ebx
pop edi
jmp 0x100176c6
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], 0x2f34e401
mov dword [ebp - 8], ebx
mov dword [ebp - 0x18], 3
jmp 0x100176b9
mov dword [ebp - 4], 0xfffffffa
cmp dword [ebp - 0x18], ebx
je 0x10017679
mov eax, dword [ebp - 0xc]
xor ecx, ecx
cmp eax, 0x7136
mov eax, dword [ebp - 4]
setg cl
xor edx, edx
test ecx, ecx
setns dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 4], ebx
jne 0x10017603
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
cmp ecx, eax
setl dl
cmp edx, dword [ebp - 4]
jle 0x10017676
xor edx, edx
mov dword [ebp - 8], ebx
inc edx
cmp dword [ebp - 8], edx
jge 0x10017647
or ecx, 0xffffffff
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x78], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x10017638
mov dword [ebp - 4], 0xffffffee
jmp 0x1001766e
mov dword [ebp - 8], ebx
jmp 0x10017666
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x78], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jle 0x10017655
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x14
jle 0x10017650
jmp 0x100176b6
xor edx, edx
inc edx
mov dword [ebp - 0x20], ebx
jmp 0x10017695
mov dword [ebp - 0x30], ebx
jmp 0x1001768d
mov dword [ebp - 4], 0x2275dd36
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jle 0x10017683
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jge 0x1001767e
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], bl
je 0x100176b6
push ebx
push 0x16f6
push 0x187c
call dword [sym.imp.USER32.dll_AttachThreadInput]
xor edx, edx
inc edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x11
jge 0x100175c7
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffeb
jne 0x100175a7
mov dword [ebp - 0x34], 3
mov dword [ebp - 0x28], 0xf2887cf2
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x1c], 0x12df3d37
mov dword [ebp - 0x44], 0x6c2e7ccc
mov dword [ebp - 0xc], ebx
jmp 0x1001770b
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x158], ebx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x100176fe
mov dword [ebp - 0x28], 0x37d45db3
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x44]
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 8], 0xf9b3198a
mov dword [ebp - 8], 0xd
jmp 0x10017844
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], 0x4f2a6ca0
mov dword [ebp - 0xc], ebx
jmp 0x1001776e
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xd4], 1
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x1001775d
mov eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
je 0x10017781
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
or ecx, 0xffffffff
cmp ecx, eax
sbb ecx, ecx
neg ecx
sub ecx, dword [ebp - 8]
mov eax, dword [ebp - 8]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 8]
setg dl
sub edx, 0xa968
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, 0x8de637c5
setge cl
cmp eax, ecx
sbb eax, eax
neg eax
cmp eax, 0x510a
jge 0x1001781d
xor eax, eax
xor ebx, ebx
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
test eax, eax
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0x28]
setne bl
mov eax, dword [ebp - 8]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 8]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xfd52a42b
setne cl
cmp eax, ebx
mov dword [ebp - 0x28], ecx
sbb edx, edx
xor ecx, ecx
inc edx
add edx, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
cmp edx, eax
setge cl
xor ebx, ebx
mov dword [ebp - 0xc], ecx
jmp 0x10017838
mov dword [ebp - 0xc], ebx
jmp 0x10017833
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xd4], 0xfffffffa
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x10017822
mov eax, dword [ebp - 8]
mov dword [ebp - 0xd0], eax
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xffffffe3
jge 0x1001774e
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10017873
push 0x16a8
push ebx
push 0x318
push ebx
push 0x17a
push 0x11fa
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov byte [ebp - 0x21], bl
mov dword [ebp - 0x2c], 0x58d32ffa
mov dword [ebp - 0x1c], 0x3152c58f
mov dword [ebp - 0xc], ebx
jmp 0x10017897
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x6c], 0xfffffffb
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 1
jl 0x10017889
mov dword [ebp - 0x6c], 9
jmp 0x100178ae
cmp dword [ebp - 0x2c], ebx
jne 0x100178b3
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], edi
jg 0x100178a6
cmp byte [ebp - 0x21], 0
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
je 0x100178dc
push 0x51a
push 0xa3f
push ebx
call edi
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
mov byte [ebp - 0x11], bl
mov dword [ebp - 0x28], 0x1b49
mov dword [ebp - 0x2c], 0xeef7d266
mov dword [ebp - 0xc], ebx
jmp 0x10017900
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x68], 1
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x100178f2
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10017915
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
cmp dword [ebp - 0x64], ebx
jne 0x10017976
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0x64]
test eax, eax
je 0x10017972
cmp dword [ebp - 0x64], 0xf3e76e5b
je 0x10017931
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
xor edx, edx
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x68]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x64]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x64]
mov edx, 0x23d4a1cf
setg cl
sub edx, ecx
sub edx, eax
mov eax, dword [ebp - 0x64]
add eax, edx
jne 0x10017976
mov eax, ebx
jmp 0x10017979
xor eax, eax
inc eax
imul eax, eax, 0x5773
mov dword [ebp - 0x2c], eax
cmp byte [ebp - 0x11], 0
je 0x10017e40
mov dword [ebp - 8], 0x7e2799ac
push 8
pop eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], eax
mov dword [ebp - 8], ebx
jmp 0x10017b1d
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], 0xfffffff6
mov dword [ebp - 4], ebx
jmp 0x100179d3
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x58], 0xe2cf4565
inc dword [ebp - 4]
cmp dword [ebp - 4], 1
jl 0x100179c5
mov dword [ebp - 4], ebx
jmp 0x100179ec
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x50], 0x3bbb66ef
inc dword [ebp - 4]
cmp dword [ebp - 4], 1
jl 0x100179de
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jne 0x10017aa1
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 4], 0xca1a
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x50]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
cmp ecx, 5
setne dl
xor eax, eax
cmp edx, 3
mov dword [ebp - 0x114], edx
setle al
xor ecx, ecx
cmp eax, 0xfffffffc
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x50]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x50]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x50]
sete dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x50]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 8]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x18]
je 0x10017a91
cmp dword [ebp - 0x58], ebx
je 0x10017a91
xor ecx, ecx
inc ecx
jmp 0x10017a93
mov ecx, ebx
mov eax, dword [ebp - 8]
sub ecx, eax
cmp ecx, dword [ebp - 0x50]
je 0x10017aa1
mov eax, ebx
jmp 0x10017aa4
xor eax, eax
inc eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], ebx
jl 0x10017b1a
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10017b15
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10017ad3
push ebx
call edi
push eax
call esi
push eax
push ebx
push 0x23c6
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
mov eax, dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x58]
test eax, eax
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
setg cl
add ecx, ecx
sub edx, ecx
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp + eax*4 - 0x58]
sub edx, dword [ebp - 0x114]
mov eax, dword [ebp - 4]
neg edx
sbb edx, edx
inc edx
mov dword [ebp + eax*4 - 0x58], edx
dec dword [ebp - 0x18]
jns 0x10017ab7
dec dword [ebp - 4]
jns 0x10017aaf
inc dword [ebp - 8]
cmp dword [ebp - 8], 0xa
jge 0x100179b6
push ebx
push 0x633
call fcn.1001a5fa
or eax, 0xffffffff
mov dword [ebp - 0x18], 0xfff9
mov dword [ebp - 4], eax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0xc], 0x3eef7d26
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x2c], 0x3a67d62
mov dword [ebp - 0x28], 0x177106cf
mov dword [ebp - 0x1c], 1
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg edx
pop ecx
sbb edx, edx
inc edx
neg edx
pop ecx
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 4]
setge cl
xor edx, edx
cmp eax, ecx
setge dl
sub edx, 0x9475
neg edx
sbb edx, edx
inc edx
cmp edx, 0x6f65
jle 0x10017c33
mov dword [ebp - 0x2c], 0xfff9
or eax, 0xffffffff
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x34], 0xd7c3b7c3
mov dword [ebp - 0x3c], 9
mov eax, dword [ebp - 0x2c]
sub eax, 0xe5b14f4e
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setl dl
xor ecx, ecx
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x44]
imul eax, eax, 0x63d1
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
jmp 0x10017e40
mov dword [ebp - 0x10], 0x6fd0fe1f
mov dword [ebp - 8], 1
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x3c], 0x158e5840
mov dword [ebp - 0xc], 0xffffffec
cmp dword [ebp - 0xc], 0x12
jl 0x10017e15
or esi, 0xffffffff
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x20], 6
cmp dword [ebp - 8], ebx
je 0x10017cc4
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 4]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 8]
jge 0x10017c99
cmp dword [ebp - 8], ebx
jne 0x10017c99
mov ecx, ebx
jmp 0x10017c9c
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x38]
jge 0x10017cba
cmp dword [ebp - 8], ebx
jne 0x10017cbf
cmp dword [ebp - 0x44], ebx
je 0x10017cc4
xor ecx, ecx
inc ecx
jmp 0x10017cc6
mov ecx, ebx
xor eax, eax
cmp ecx, 0x350c
setl al
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
neg eax
cmp eax, 0xfffffffd
jle 0x10017cea
cmp dword [ebp - 8], ebx
jne 0x10017cea
mov edx, ebx
jmp 0x10017ced
xor edx, edx
inc edx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, edx
setg cl
mov dword [ebp - 8], ecx
xor ecx, ecx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
cmp eax, 1
setle cl
add ecx, dword [ebp - 0x18]
jne 0x10017d25
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], ebx
jmp 0x10017df8
mov dword [ebp - 0x34], 0xfaf4b059
mov dword [ebp - 0x20], ebx
jmp 0x10017d50
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xb0], 0x7ce1bf9d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10017d3f
mov dword [ebp - 0x20], 0xd
jmp 0x10017da6
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10017d73
push 1
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
mov dword [ebp - 0x30], ebx
jmp 0x10017d9d
mov dword [ebp - 0x38], ebx
jmp 0x10017d8e
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x10c], 1
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 2
jl 0x10017d7d
dec dword [ebp - 0x108]
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 1
jle 0x10017d78
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xf
je 0x10017d5f
mov eax, dword [ebp - 0xb0]
xor edx, edx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xb0]
cmp eax, ecx
mov eax, dword [ebp - 8]
setle dl
xor ecx, ecx
sub edx, eax
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp eax, 0x556a
setle cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0xb0]
cmp esi, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x1b
jge 0x10017d33
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x12
jge 0x10017c63
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
add ecx, dword [ebp - 0x1c]
cmp ecx, 1
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x2c]
jne 0x10017e3a
cmp dword [ebp - 0x10], ebx
jne 0x10017e3a
mov eax, ebx
jmp 0x10017e3d
xor eax, eax
inc eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x38], 0x80e3580d
mov dword [ebp - 0x30], 1
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x20], 9
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], ebx
jmp 0x10017e75
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xcc], 0xd9532bb1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10017e64
mov eax, dword [ebp - 0xc4]
xor edx, edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xc8]
cmp eax, ecx
mov eax, dword [ebp - 0x38]
setg dl
sub eax, edx
xor edx, edx
cmp eax, 0x223fa3a9
mov eax, dword [ebp - 0x30]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0xc], 2
cmp dword [ebp - 0xc], ebx
jl 0x10017fca
or eax, 0xffffffff
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x40], 0x1b07fb07
mov dword [ebp - 0x10], 0xfffffff8
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x20], 0xbb7a1405
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
sub eax, 0x9b3a
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x30]
jne 0x10017f3b
cmp dword [ebp - 0xec], ebx
jne 0x10017f3b
mov eax, ebx
jmp 0x10017f3e
xor eax, eax
inc eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x20], ebx
jmp 0x10017fbb
mov dword [ebp - 0x1c], 0xb974
xor edx, edx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc4]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setne dl
xor ebx, ebx
cmp eax, edx
setl bl
xor ecx, ecx
add ebx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
cmp ebx, eax
setl cl
xor ebx, ebx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x30], ebx
jmp 0x10017fb2
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10017faf
push 0x2638
push 0x17dc
push 0x1d75
push 0x1284
push 0x10bb
push ebx
push ebx
push ebx
push ebx
call edi
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_DrawStateW]
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jle 0x10017f7e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x10017f46
dec dword [ebp - 0xc]
jns 0x10017ec0
mov ebx, dword [ebp - 0x4c]
xor edx, edx
cmp dword [ebx + 0x10], edx
jne 0x10017fdb
xor al, al
jmp 0x1001885b
mov dword [ebp - 0x2c], 0xaf425f5f
xor eax, eax
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x1c], 0x70669599
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], 0x12af0488
mov dword [ebp - 0x1c], 0x9a2f3817
mov dword [ebp - 0x28], 0xa74adf29
mov dword [ebp - 0x28], 0xfffe
mov dword [ebp - 4], edx
jmp 0x10018024
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x12c], 0xa6b950ba
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x10018013
mov dword [ebp - 4], edx
jmp 0x10018040
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xe8], 0x9017ca4e
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x1001802f
cmp dword [ebp - 0x124], edx
je 0x100180bc
mov ecx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x28]
neg ecx
inc dword [ebp - 0x28]
cmp ecx, eax
jne 0x10018065
xor esi, esi
inc esi
jmp 0x10018067
mov esi, edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x120], edx
jne 0x10018096
cmp dword [ebp - 0x3c], edx
jne 0x10018096
mov eax, edx
jmp 0x10018099
xor eax, eax
inc eax
xor edx, edx
cmp eax, 1
mov eax, dword [ebp - 0xe8]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0xffffffff
setl al
cmp esi, eax
je 0x100180c5
xor edx, edx
cmp dword [ebp - 0x3c], edx
jne 0x100180c5
mov ecx, edx
jmp 0x100180c8
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x120]
xor edx, edx
cmp eax, ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
setge dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 8], 0x7a3a
mov dword [ebp - 0x18], 0xd2eb
mov dword [ebp - 0x28], 0x5051
mov dword [ebp - 0x1c], 0xc96dd1e1
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], dl
je 0x1001812b
push edx
push edx
push 0x993
push edx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
xor edx, edx
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x10018140
push edx
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
xor edx, edx
mov dword [ebp - 0x1c], 0xbf199314
xor ecx, ecx
inc ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1c], 0xfa72c25
mov dword [ebp - 0x1c], 0x12e1dfe
mov dword [ebp - 0x10], edx
jmp 0x100181ac
mov dword [ebp - 0x2c], 0x54fd
mov dword [ebp - 0x3c], 0x3ec3d4e7
mov dword [ebp - 4], edx
jmp 0x10018183
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x144], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10018176
mov dword [ebp - 4], edx
jmp 0x1001819e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x130], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001818d
dec dword [ebp - 0x2c]
inc dword [ebp - 0x3c]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 9
jge 0x10018163
mov dword [ebp - 0xc], 0xfffffffb
mov dword [ebp - 0x10], edx
jmp 0x100181cc
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7c], 3
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100181be
mov eax, dword [ebp - 8]
xor ecx, ecx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp eax, 0xf1d65f4e
setne cl
cmp ecx, dword [ebp - 8]
jl 0x100181ec
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
cmp dword [ebp - 8], edx
jne 0x10018209
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x7289
mov dword [ebp - 0x7c], ecx
mov eax, dword [ebp - 8]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
sete dl
xor ecx, ecx
cmp edx, eax
setg cl
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0xc], ecx
xor ecx, ecx
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ecx
jl 0x10018292
mov dword [ebp - 8], ecx
jmp 0x10018281
mov dword [ebp - 0x1c], 0xfffffff7
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x7c], 1
mov dword [ebp - 0xc], 0xa
jmp 0x10018278
mov dword [ebp - 0x1c], 0x32cb818e
cmp dword [ebp - 0x1c], ecx
jne 0x1001827e
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x15
jl 0x10018269
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jle 0x10018244
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x7c]
dec dword [ebp - 0x18]
jns 0x1001823f
push ecx
lea eax, [ebp - 0x80]
push 0x743c
push eax
call fcn.1001a083
add esp, 0xc
mov dword [ebp - 8], 0xf9b3198a
mov dword [ebp - 8], 0xd
or esi, 0xffffffff
cmp dword [ebp - 8], 0xffffffe3
push 2
pop edi
jl 0x100183c9
mov dword [ebp - 0x40], 0
xor ebx, ebx
mov dword [ebp - 0xc], 0x4f2a6ca0
inc ebx
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x10], edi
jge 0x100182ee
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa4], ebx
inc dword [ebp - 0x10]
jmp 0x100182da
mov eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x100182fd
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 8]
cmp esi, eax
sbb ecx, ecx
neg ecx
sub ecx, dword [ebp - 8]
mov eax, dword [ebp - 8]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 8]
setg dl
sub edx, 0xa968
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, 0x8de637c5
setge cl
cmp eax, ecx
sbb eax, eax
neg eax
cmp eax, 0x510a
jge 0x10018391
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], ebx
xor ebx, ebx
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x40]
test eax, eax
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebp - 0x2c]
setne bl
mov eax, dword [ebp - 8]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 8]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xfd52a42b
setne cl
cmp eax, ebx
mov dword [ebp - 0x2c], ecx
sbb edx, edx
xor ecx, ecx
inc edx
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 8]
cmp edx, eax
setge cl
mov dword [ebp - 0xc], ecx
jmp 0x100183b0
mov dword [ebp - 0xc], 0
jmp 0x100183ab
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xa4], 0xfffffffa
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x1001839a
mov eax, dword [ebp - 8]
mov dword [ebp - 0xa0], eax
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xffffffe3
jge 0x100182c2
mov ebx, dword [ebp - 0x4c]
xor edx, edx
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], dl
je 0x100183f1
push 0x16a8
push edx
push 0x318
push edx
push 0x17a
push 0x11fa
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor edx, edx
mov dword [ebp - 4], 0xb4ffb87
mov dword [ebp - 0x4c], 0xfd66c4a8
mov dword [ebp - 0x2c], 0x448112de
mov dword [ebp - 0x3c], esi
mov dword [ebp - 8], edx
jmp 0x10018418
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x48], edx
inc dword [ebp - 8]
cmp dword [ebp - 8], 1
jl 0x1001840e
mov dword [ebp - 8], edx
jmp 0x10018430
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x13c], esi
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x10018423
mov dword [ebp - 8], edx
jmp 0x1001844b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xc0], 3
inc dword [ebp - 8]
cmp dword [ebp - 8], 1
jl 0x1001843a
mov dword [ebp - 4], edx
cmp dword [ebp - 4], edx
jl 0x10018538
mov dword [ebp - 0x2c], 0x86bd085c
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x10], edx
jmp 0x10018484
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd8], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x10018473
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x48], edx
je 0x100184b0
cmp dword [ebp - 0x4c], edx
je 0x100184b0
xor edx, edx
inc edx
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x48]
mov ecx, dword [ebp - 0x48]
sub ecx, eax
mov eax, dword [ebp - 4]
neg ecx
sbb ecx, ecx
mov eax, dword [ebp + eax*4 - 0x48]
inc ecx
add eax, ecx
mov dword [ebp - 0xd8], eax
je 0x100184f2
cmp dword [ebp - 0x3c], 0
jne 0x100184f2
xor ecx, ecx
jmp 0x100184f5
xor ecx, ecx
inc ecx
mov dword [ebp - 0x2c], esi
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x48]
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
add ecx, dword [ebp - 0x2c]
je 0x10018527
cmp dword [ebp - 0x1c], edx
je 0x10018527
xor eax, eax
inc eax
jmp 0x10018529
mov eax, edx
mov dword [ebp - 0xc0], eax
dec dword [ebp - 4]
jns 0x1001845d
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x1001855b
push edx
push 0x49d6
push 0x6f5f
push 0x27ef
call fcn.1001a637
add esp, 0x10
xor edx, edx
mov dword [ebp - 0x30], 0xac64a684
mov dword [ebp - 0x10], edx
jmp 0x10018578
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xdc], 6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x10018567
mov dword [ebp - 0x30], 0xfffffffb
jmp 0x100185a1
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x1001859e
push 0x10df
push edx
call dword [sym.imp.USER32.dll_GetSubMenu]
xor edx, edx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x19
jl 0x10018587
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebx + 0x14], 0x10
mov dword [ebp - 0xdc], eax
jb 0x100185c0
mov esi, dword [ebx]
jmp 0x100185c2
mov esi, ebx
cmp dword [ebx + 0x14], 0x10
jb 0x100185cc
mov ecx, dword [ebx]
jmp 0x100185ce
mov ecx, ebx
mov eax, dword [ebx + 0x10]
add eax, ecx
cmp esi, eax
je 0x10018859
mov al, byte [esi]
cmp al, 0x30
jl 0x100186e8
cmp al, 0x39
jg 0x100186e8
mov dword [ebp - 0xa8], 7
xor eax, eax
mov dword [ebp - 0x60], 0x57ad95e1
inc eax
mov dword [ebp - 0x1c], eax
or ecx, 0xffffffff
mov dword [ebp - 0x1c], 0xa3888451
mov dword [ebp - 0x1c], 0xa22e974a
mov dword [ebp - 0x1c], 0x52f34111
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1c], 0xa5bc4220
mov dword [ebp - 0x1c], 0x4361a6b7
mov dword [ebp - 0x1c], 0xb1af9d66
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], 0x65b0b56c
mov dword [ebp - 0x1c], 0x79655965
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x1c], 0x77b69c93
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], edx
jmp 0x1001866c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x168], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1001865b
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xa8]
push eax
push edx
call fcn.10019c72
add esp, 0xc
mov dword [ebp - 0x60], 3
cmp dword [ebp - 0x60], 0
jl 0x100186d0
mov dword [ebp - 0x1c], 0x576c3a0b
mov dword [ebp - 0x1c], 0x811fc80a
mov dword [ebp - 0x4c], 0xfffffffb
mov dword [ebp - 0x10], 0
jmp 0x100186c2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x134], 0xe95aad85
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x100186b1
dec dword [ebp - 0x4c]
dec dword [ebp - 0x60]
jns 0x10018693
mov edx, dword [ebp - 0x80]
movsx eax, byte [esi]
imul ecx, dword [edx], 0xa
add ecx, 0xffffffd0
add eax, ecx
inc esi
mov dword [edx], eax
xor edx, edx
jmp 0x100185c2
mov dword [ebp - 4], 0x76f5020f
mov dword [ebp - 0x10], edx
jmp 0x10018705
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb4], 0xc85f
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x100186f4
mov dword [ebp - 4], edx
jmp 0x1001877c
mov dword [ebp - 0x10], edx
jmp 0x10018726
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x98], 0xb8c3ad3b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10018715
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], edx
jl 0x1001876d
push edx
lea eax, [ebp - 0x59]
mov byte [ebp - 0x59], dl
push eax
push 0x243c
call fcn.10019c11
lea eax, [ebp - 0x51]
mov byte [ebp - 0x51], 0
push eax
push 0
push 0x15d0
call fcn.100188a0
add esp, 0x18
dec dword [ebp - 0x98]
push 0
pop edx
jns 0x10018739
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xb4], edx
jne 0x10018781
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jle 0x10018710
mov dword [ebp - 4], 0xfffffff7
cmp dword [ebp - 4], 0x17
jg 0x100187a1
push edx
call fcn.1001a1da
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x17
pop ecx
push 0
pop edx
jle 0x1001878e
push edx
push 0x1e23
lea eax, [ebp - 0x80]
push eax
push 0x4ef6
push 0x378a
push 0x76cc
call fcn.10019d10
mov dword [ebp - 0x1c], 0x75c9
xor ebx, ebx
mov dword [ebp - 0x1c], 0xe87df2f4
xor ecx, ecx
mov dword [ebp - 0x1c], 0xfffffff8
add esp, 0x18
mov dword [ebp - 0x1c], ebx
inc ecx
mov dword [ebp - 0x1c], 0xfc3eee2f
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0x1c], 0xfffffffa
mov dword [ebp - 0xbc], 0xfffffffb
mov dword [ebp - 0x10], ebx
jmp 0x1001882b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x140], 0xc63c4078
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1001881a
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10018845
push 0x70bf
push ebx
call fcn.10019e9a
pop ecx
pop ecx
lea eax, [ebp - 0xbc]
push ebx
push eax
call fcn.1001a151
pop ecx
pop ecx
jmp 0x10017fd4
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret