Function at 0x1001759e
Capabilities:
Extract resource via kernel32 functions
Get common file path
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x188
push ebx
push esi
xor esi, esi
mov dword [ebp - 0xb0], ecx
inc esi
mov ebx, edx
mov dword [ebp - 0x40], esi
mov dword [ebp - 4], 0xffab8c3a
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x14], 0xacc4b7c7
mov dword [ebp - 0x24], 0x512e
mov dword [ebp - 0x28], 0xde47
push edi
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x10], 0
jmp 0x100175fd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x48], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100175f3
mov dword [ebp - 0x10], 0
jmp 0x10017619
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7c], 0xfffffff9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001760b
inc dword [ebp - 4]
jne 0x10017690
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x5c]
dec dword [ebp - 0x14]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x60], 0xe60d743c
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0x4333
setne cl
xor eax, eax
cmp ecx, 0xffffffff
mov ecx, dword [ebp - 0x5c]
setle al
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 4]
cmp eax, ecx
setl dl
inc edx
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 4]
mov eax, dword [ebp - 0x5c]
neg edx
sbb edx, edx
xor ecx, ecx
add edx, 0xffffdee0
imul edx, eax
mov eax, dword [ebp - 0x20]
cmp eax, edx
mov eax, dword [ebp - 0x14]
setg cl
sub eax, ecx
jne 0x10017690
xor edx, edx
jmp 0x10017692
mov edx, esi
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp edx, eax
setl cl
lea eax, [ecx - 7]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x48]
neg eax
sbb eax, eax
neg eax
xor edx, edx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x38], 0x974a5202
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x20], esi
mov dword [ebp - 4], edx
jmp 0x100176ea
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x50], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x100176dc
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x20], 0xffffffe9
jmp 0x1001778b
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], edx
jl 0x1001772a
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x10017725
push 0xf29
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
xor edx, edx
dec dword [ebp - 0x10]
jns 0x1001770c
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], edx
jl 0x10017788
mov dword [ebp - 0x14], 0x1ac48889
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x50], edx
jne 0x10017788
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], edx
jl 0x10017783
mov dword [ebp - 4], 0xeb32a831
mov dword [ebp - 4], edx
jmp 0x1001776b
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x10017768
push edx
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
xor edx, edx
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jle 0x10017756
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x50], ecx
dec dword [ebp - 0x14]
jns 0x1001774a
dec dword [ebp - 0x10]
jns 0x10017732
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff5
je 0x10017701
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x100177ab
push 0x2688
call dword [sym.imp.USER32.dll_GetSysColor]
xor edx, edx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 8], edx
mov dword [ebp - 0x1c], 0x974b666a
mov dword [ebp - 0x18], 0xe936be85
mov dword [ebp - 4], edx
jmp 0x100177d6
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x4c], 0xfffb
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x100177c8
cmp dword [ebp - 8], edx
je 0x1001781e
mov dword [ebp - 8], edx
jmp 0x100177f5
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x4c], ecx
mov dword [ebp - 0x1c], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jle 0x100177e5
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], edx
jl 0x1001782c
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x10017817
push edx
call edi
push eax
call dword [sym.imp.USER32.dll_EndPaint]
xor edx, edx
dec dword [ebp - 0x1c]
jns 0x10017802
jmp 0x1001782c
mov eax, dword [ebp - 0x1c]
push 0xfffffffffffffffd
pop ecx
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x4c]
cmp eax, 0x9cdf
setge cl
cmp ecx, dword [ebp - 8]
jge 0x10017844
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x18], 0x86335c0
jle 0x10017859
cmp dword [ebp - 0x4c], edx
jne 0x10017859
cmp dword [ebp - 8], edx
jne 0x10017859
mov edx, esi
mov eax, dword [ebp - 8]
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov dword [ebp - 0x28], 0xc8cdab0b
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x1c], 4
mov dword [ebp - 4], 0xfffffff7
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x18], 0x118c
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x2c], 0x2dc50754
mov dword [ebp - 8], ecx
jmp 0x100178a3
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x30], esi
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10017899
push 2
mov dword [ebp - 8], ecx
pop edx
jmp 0x100178c1
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x12c], 0x75f08a7c
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x100178b0
mov dword [ebp - 8], ecx
jmp 0x100178d8
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x118], esi
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x100178cb
cmp dword [ebp - 0x14], ecx
je 0x1001790b
mov eax, dword [ebp - 0x14]
mov edx, esi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x1c]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x14]
cmovbe edx, ecx
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], 9
jge 0x1001790d
xor ecx, ecx
mov eax, ecx
mov dword [ebp - 0x20], eax
xor edx, edx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
sub ecx, 0x477
cmp eax, ecx
setle dl
xor ecx, ecx
cmp edx, 0xb09b
setne cl
xor eax, eax
add ecx, dword [ebp - 0x30]
cmp ecx, 0x18b9628e
setl al
xor ecx, ecx
cmp eax, 0x6082
mov eax, dword [ebp - 0x30]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setg dl
sub edx, eax
je 0x10017992
xor edx, edx
mov byte [ebp - 9], dl
cmp byte [ebp - 9], dl
je 0x10017970
push edx
call dword [sym.imp.COMDLG32.dll_FindTextW]
xor edx, edx
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x10017a87
push edx
push edx
push 0x18d8
call edi
push eax
call dword [sym.imp.USER32.dll_SetScrollInfo]
jmp 0x10017a85
mov dword [ebp - 8], 0x353ea3a7
mov dword [ebp - 0x10], 0x88b1495d
cmp dword [ebp - 8], 0
jne 0x100179d6
mov eax, dword [ebp - 8]
sub eax, 0x5833
imul eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x20], 0
je 0x100179c4
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 8]
setg dl
xor ecx, ecx
neg edx
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, 0x6ec3
setne al
imul eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x10017a62
mov eax, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
cmp ecx, eax
setle dl
imul edx, dword [ebp - 0x10]
imul edx, dword [ebp - 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 8]
jl 0x10017a55
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x114], 0
jne 0x10017a62
xor eax, eax
jmp 0x10017a64
mov eax, esi
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 8]
sub edx, eax
mov eax, dword [ebp - 0x18]
sub edx, 5
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
imul ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
xor edx, edx
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 0x9458d81c
mov dword [ebp - 0x40], 0xffffffec
cmp dword [ebp - 0x40], 0xfffffff6
jne 0x100181f8
push 5
pop ebx
mov dword [ebp - 0xac], 0xffffffff
mov dword [ebp - 8], 0xd327cb3f
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x20], 0x6657eef1
mov dword [ebp - 4], edx
jmp 0x10017ae5
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x88], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10017ad4
cmp dword [ebp - 8], edx
je 0x10017be4
mov dword [ebp - 0x18], 0x2e3ca369
mov dword [ebp - 8], edx
jmp 0x10017bd8
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x14], edx
jmp 0x10017bcb
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0x1c], edx
jmp 0x10017bbe
mov dword [ebp - 4], edx
jmp 0x10017b33
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xf4], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10017b26
cmp dword [ebp - 8], edx
jne 0x10017bc8
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0x941c
push 0
setge cl
xor edx, edx
add ecx, 0x6f49c23e
imul ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
imul ecx, ecx, 9
cmp ecx, eax
setne dl
mov dword [ebp - 0x88], edx
add edx, 0x59c4
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0xf4]
sete cl
xor edx, edx
cmp ecx, 0xfffffff8
setne dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0xf4]
cmp edx, eax
mov eax, dword [ebp - 0xf4]
setg cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 8]
cmp ecx, eax
sete dl
mov dword [ebp - 0x10], edx
dec dword [ebp - 0x1c]
pop edx
cmp dword [ebp - 0x1c], 0xfffffffb
je 0x10017b21
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff3
jl 0x10017b12
inc dword [ebp - 8]
cmp dword [ebp - 8], 0xf
jne 0x10017b03
jmp 0x10017c31
mov dword [ebp - 0x24], 0x1efae07d
mov dword [ebp - 8], edx
jmp 0x10017c2b
mov dword [ebp - 0x10], edx
jmp 0x10017c0c
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x88]
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x88], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jle 0x10017bf5
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x84], 0x7665
mov dword [ebp - 0x88], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jle 0x10017bf0
mov dword [ebp - 8], 0xfffffff5
jmp 0x10017caf
mov dword [ebp - 0x14], 0xdce9db3f
mov dword [ebp - 4], 0xac012777
mov dword [ebp - 0x24], 0xfffffff8
cmp dword [ebp - 0x20], edx
je 0x10017c5a
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x88]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 8]
cmp ecx, eax
setl dl
mov dword [ebp - 4], edx
xor edx, edx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setl dl
mov dword [ebp - 0x24], edx
xor edx, edx
mov dword [ebp - 4], 0xffffffe5
cmp dword [ebp - 4], 0x16
je 0x10017cac
mov dword [ebp - 0x24], 0xfffffffb
cmp dword [ebp - 0x24], edx
jne 0x10017cac
inc dword [ebp - 4]
jmp 0x10017c95
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x24
jle 0x10017c3a
mov dword [ebp - 0xb4], 0x86e3e45b
mov dword [ebp - 0x14], 0x8094a188
mov dword [ebp - 4], edx
jmp 0x10017cdc
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xd8], 0xb319
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10017ccb
mov dword [ebp - 0x14], 2
cmp dword [ebp - 0x14], edx
jl 0x10017d67
mov eax, 0xd94fe5f3
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xd8], edx
jne 0x10017d67
mov dword [ebp - 0x70], edx
jmp 0x10017d5c
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp + eax*4 - 0xd8]
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xd8], ecx
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 2
jg 0x10017d59
mov dword [ebp - 0x24], 0xfffffffe
xor edx, edx
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp + eax*4 - 0xd8]
mov eax, dword [ebp - 0x6c]
cmp ecx, eax
sete dl
mov dword [ebp - 0x24], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jle 0x10017d30
xor edx, edx
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], 2
jle 0x10017d10
dec dword [ebp - 0x14]
jns 0x10017cee
lea eax, [ebp - 0x38]
mov dword [ebp - 0xbc], 0x889e022a
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xac]
push eax
push edx
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.10018cee
add esp, 0x18
mov dword [ebp - 0x10], 0x606de713
mov dword [ebp - 4], 0xfffffff6
xor edx, edx
push 2
pop ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 4], edx
jmp 0x10017dc0
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x3c], 0x35568345
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10017db2
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], edx
jl 0x10017e05
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], 0xac89
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x24], 0xfffffffc
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 4], esi
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x10]
jns 0x10017dcd
cmp dword [ebp - 0x3c], edx
je 0x10017e37
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp eax, 0x46aa
push 2
setge cl
sub ecx, 0xaecaa705
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
pop ecx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, 0xfffffff6
neg eax
sbb eax, eax
add eax, 0xffff4c4e
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x38], edx
jmp 0x100181de
mov dword [ebp - 0x1c], esi
mov dword [ebp - 4], edx
jmp 0x10017e79
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x94], 0xfffffffa
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10017e68
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], edx
jl 0x10018091
mov dword [ebp - 8], 0x32bb11ac
mov dword [ebp - 8], edx
jmp 0x1001807f
mov dword [ebp - 4], 0xafc37186
mov dword [ebp - 0x18], 0xb7a1
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], edx
jl 0x1001807c
mov dword [ebp - 0x10], 0x6d0374c7
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], edx
jl 0x10018073
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x14], edx
jmp 0x10017ee0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x110], 0xfffffffc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10017ecf
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x18], edx
je 0x10017f1e
mov eax, dword [ebp - 8]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov edx, dword [ebp + eax*4 - 0x94]
mov eax, dword [ebp - 8]
test eax, eax
sets cl
cmp ecx, edx
jl 0x10017f0f
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 8], eax
mov eax, esi
jne 0x10017f20
mov eax, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + eax*4 - 0x94]
mov eax, dword [ebp - 0x20]
imul ecx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x94], ecx
xor eax, eax
test ecx, ecx
sete al
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 4]
jle 0x10017f57
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x108]
mov ecx, 0xb71808ad
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x10c], eax
je 0x10017f76
mov eax, esi
cmp dword [ebp - 8], edx
jne 0x10017f78
mov eax, edx
dec eax
jne 0x10017f7e
mov eax, dword [ebp - 8]
cmp dword [ebp - 8], edx
je 0x10017fca
mov dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], edx
jl 0x10018054
mov dword [ebp - 0x24], 0x925b974d
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x10017fb1
push 0x108
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x94]
neg eax
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x20]
jns 0x10017f93
jmp 0x10018054
mov dword [ebp - 0x14], 0xb1262954
mov dword [ebp - 0x24], 0x1f101fbe
cmp dword [ebp - 8], edx
je 0x10017ffb
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 8]
sub ecx, eax
mov eax, edx
cmp ecx, 0x1ebdc591
jl 0x10017ffd
mov eax, esi
xor edx, edx
cmp eax, 7
mov eax, dword [ebp - 0x10]
sete dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, edx
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
je 0x10018020
mov ecx, esi
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x10]
test eax, eax
je 0x10018042
cmp dword [ebp - 0x1c], edx
je 0x10018042
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x94], edx
mov eax, esi
jne 0x10018044
mov eax, edx
cmp ecx, eax
jg 0x1001804f
mov eax, esi
cmp dword [ebp - 0x14], edx
jne 0x10018051
mov eax, edx
mov dword [ebp - 0x24], eax
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x10018067
push edx
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
dec dword [ebp - 0x10]
jns 0x10017ec7
push 2
pop ecx
dec dword [ebp - 4]
jns 0x10017eb4
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jle 0x10017e9a
dec dword [ebp - 0x1c]
jns 0x10017e8b
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x100180b6
push edx
push edx
push 0x9c9
push edx
push 0x1540
push edx
push 0x2310
push edx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
xor edx, edx
push 0x615
push 0x2152
push edx
push 0x6ed2
call fcn.10022e8f
mov dword [ebp - 0x1c], 0x328f6c74
add esp, 0x10
mov dword [ebp - 0x10], 0xbcd76ce4
mov dword [ebp - 4], 0x1ebf0ddd
mov dword [ebp - 4], esi
mov dword [ebp - 4], ebx
mov dword [ebp - 4], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x28], 0x277ed469
mov dword [ebp - 4], 0
jmp 0x10018110
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa8], 0xc0e84896
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x100180ff
cmp dword [ebp - 0x1c], 0
jne 0x1001811e
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov ecx, esi
setge dl
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
sub ecx, eax
add ecx, dword [ebp - 0x10]
cmp esi, ecx
sbb eax, eax
neg eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
je 0x10018171
cmp dword [ebp - 0x10], 0
je 0x10018171
mov eax, esi
jmp 0x10018173
xor eax, eax
cmp ebx, eax
sbb eax, eax
neg eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1c], 0
je 0x1001818e
cmp dword [ebp - 0x10], 0
jne 0x10018190
xor eax, eax
add eax, 0x39ef5b50
je 0x100181a1
cmp dword [ebp - 0x18], 0
je 0x100181a1
mov ecx, esi
jmp 0x100181a3
xor ecx, ecx
mov dword [ebp - 4], 0xf813
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 4]
setne dl
xor ecx, ecx
cmp eax, edx
setg cl
xor edx, edx
mov dword [ebp - 0xa8], ecx
mov byte [ebp - 9], dl
cmp byte [ebp - 9], dl
je 0x100181d8
push edx
push edx
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
xor edx, edx
dec dword [ebp - 0x38]
push 2
pop ecx
cmp dword [ebp - 0x38], 0xfffffff6
je 0x10017e60
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xfffffff6
je 0x10017ab0
mov ebx, dword [ebp - 0x78]
cmp dword [ebp - 0x38], edx
je 0x100183d6
push 0x3c0a
push 0x237d
push edx
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x3e3f36a5
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0xc0], 0xffffffff
push eax
push 0x8b4
push 0x315b
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc0]
push eax
push 0x52f6
call fcn.1001b116
add esp, 0x28
xor edx, edx
push 0xfffffffffffffff9
pop eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x9c], edx
jmp 0x100182ad
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x10018288
push 0x371
call dword [sym.imp.USER32.dll_MessageBeep]
xor edx, edx
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x100182a7
push edx
push 0xef5
push 0x1b3d
call edi
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
xor edx, edx
dec dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], 0xfffffff0
jl 0x10018272
mov dword [ebp - 0x18], 0xfffffff8
mov dword [ebp - 0x24], 0x4c38b6b0
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 0x880e033c
mov dword [ebp - 0x20], 0x54671013
mov dword [ebp - 0x14], 0xde6bc044
mov dword [ebp - 4], 0xfffffffc
mov dword [ebp - 0x2c], 0x9cc02768
mov dword [ebp - 0x1c], 0xf9052196
mov dword [ebp - 8], edx
jmp 0x10018308
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x44], 0x8d4081c2
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x100182fa
mov dword [ebp - 8], edx
jmp 0x10018323
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xcc], 0x465cd386
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x10018312
mov dword [ebp - 8], edx
jmp 0x1001833b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x150], edx
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001832e
mov eax, dword [ebp - 0x44]
dec dword [ebp - 4]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edx
jne 0x10018389
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0x2e42
setge cl
imul eax, ecx, 0xb059
test eax, eax
jne 0x1001836c
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x44], edx
je 0x10018374
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2c], edx
jne 0x100183a1
cmp dword [ebp - 0xcc], edx
jne 0x100183a1
mov esi, edx
mov eax, dword [ebp - 0x1c]
imul eax, esi
sub eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x44]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0xc8], ecx
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x100189d7
push edx
call edi
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
jmp 0x100189d7
mov dword [ebp - 0x14], 0x85a9576c
mov eax, 0xad8530de
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x18], 0xb0815898
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], esi
mov dword [ebp - 4], edx
jmp 0x1001843f
mov dword [ebp - 0x18], 0x3e45bbbd
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x10018439
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
xor edx, edx
inc dword [ebp - 0x18]
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffe7
jne 0x10018421
mov dword [ebp - 0x28], 0xbab1
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x10], 0xfc558bac
mov dword [ebp - 0x18], 0x7822e6e
mov dword [ebp - 4], edx
jmp 0x10018470
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x34], 0xca3691f6
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10018462
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
sub edx, 0x4794
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x34]
sete cl
xor edx, edx
cmp ecx, 0x98ce
setg dl
xor ecx, ecx
imul eax, edx
mov edx, dword [ebp - 0x34]
cmp eax, 0xfffffff8
mov eax, dword [ebp - 0x10]
setne cl
imul edx, ecx
sub edx, eax
jne 0x100184c5
cmp dword [ebp - 0x10], edx
jne 0x100184c5
xor edi, edi
jmp 0x100184c7
mov edi, esi
mov eax, dword [ebp - 0x10]
xor edx, edx
neg eax
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setle dl
xor eax, eax
cmp edi, 0x9bf5
setne al
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x34]
setne cl
add eax, ecx
mov ecx, dword [ebp - 0x10]
add ecx, eax
cmp ecx, dword [ebp - 0x34]
jle 0x1001853a
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x24], esi
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
neg eax
sbb eax, eax
neg eax
xor edx, edx
mov dword [ebp - 0x24], eax
jmp 0x1001855e
xor edx, edx
mov dword [ebp - 4], edx
jmp 0x10018552
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x138], 0x88f1
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10018541
inc dword [ebp - 0x130]
mov dword [ebp - 0x28], 0x17d239f9
mov dword [ebp - 4], 0x5052061f
mov dword [ebp - 0x18], 0x4e76
mov dword [ebp - 0x24], 0x1d102278
mov dword [ebp - 0x14], 0x9694d2b5
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x28], 0xffffffff
push 2
mov dword [ebp - 0x20], 0x8e8d
mov dword [ebp - 0x10], edx
pop edi
jmp 0x100185bc
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x158], 0xf7c8b166
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100185ab
mov dword [ebp - 0x10], edx
jmp 0x100185d7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x160], 0xfffffffb
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100185c6
cmp dword [ebp - 4], edx
jne 0x10018614
mov eax, dword [ebp - 4]
mov ecx, esi
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x24]
sub ecx, eax
cmp ecx, dword [ebp - 4]
jl 0x100185fd
cmp dword [ebp - 0x14], edx
je 0x100185fd
mov edx, esi
mov eax, dword [ebp - 4]
xor ecx, ecx
cmp eax, edx
setle cl
xor edx, edx
imul ecx, dword [ebp - 0x18]
mov eax, edx
cmp ecx, dword [ebp - 0x14]
je 0x10018616
mov eax, esi
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x20]
or eax, 0xffffffff
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0xd4f2
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x24], 9
mov dword [ebp - 4], edx
jmp 0x1001865e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x124], 0xc2285faa
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x1001864d
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x11c], 0xfffffff8
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xe0], esi
mov dword [ebp - 0x10], edx
jmp 0x100186f7
mov dword [ebp - 8], edx
mov dword [ebp - 0x18], edx
inc dword [ebp - 8]
mov dword [ebp - 8], edx
jmp 0x100186ee
mov dword [ebp - 4], 0xf08664a1
cmp dword [ebp - 4], edx
je 0x100186e5
mov ecx, dword [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 8]
cmp eax, ecx
setg dl
xor ecx, ecx
mov dword [ebp - 0xe8], edx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp eax, esi
setl cl
xor edx, edx
mov dword [ebp - 0x124], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x32
jl 0x10018696
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff4
jne 0x10018688
mov dword [ebp - 0x28], 0x8ad385e3
push 4
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], edx
mov dword [ebp - 8], 0xcd45
mov dword [ebp - 4], edx
mov dword [ebp - 4], eax
mov dword [ebp - 4], 0xa2e71cc
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x10], 0xe60a2fc5
mov dword [ebp - 0x14], 0xfc331464
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x2c], edi
mov dword [ebp - 4], edx
jmp 0x10018759
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x16c], 0x6611625f
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10018748
mov edi, 0xffff
cmp dword [ebp - 8], edx
je 0x100187d7
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 8]
push 0
sub eax, dword [ebp - 8]
neg eax
sbb eax, eax
inc eax
cmp eax, edi
sbb eax, eax
inc eax
pop eax
sets al
cmp eax, dword [ebp - 8]
jne 0x1001878f
mov eax, esi
cmp dword [ebp - 8], edx
jne 0x10018791
mov eax, edx
mov dword [ebp - 4], eax
xor edx, edx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
cmp ecx, eax
mov eax, dword [ebp - 8]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
cmp ecx, eax
setle dl
xor eax, eax
cmp edx, 9
setl al
cmp eax, dword [ebp - 8]
jge 0x100187d5
mov ecx, esi
jmp 0x100187d9
xor edx, edx
mov ecx, edx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 8]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x10], ecx
xor ecx, ecx
mov eax, dword [ebp - 8]
cmp eax, 0xfc75c14a
setle cl
mov dword [ebp - 0x14], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
neg edx
cmp edx, eax
setl cl
xor edx, edx
cmp dword [ebp - 8], ecx
jl 0x10018996
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 0x74], 0xb6ef5427
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x1c], 9
mov dword [ebp - 4], edx
jmp 0x10018850
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x148], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x10018843
cmp dword [ebp - 0x14], edx
je 0x100188a1
cmp dword [ebp - 0x74], edx
je 0x10018867
mov ecx, esi
cmp dword [ebp - 0x20], edx
jne 0x10018869
mov ecx, edx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
cmp ecx, dword [ebp - 0x10]
jge 0x1001888b
mov eax, esi
cmp dword [ebp - 0x18], edx
jne 0x1001888d
mov eax, edx
mov dword [ebp - 0x148], eax
mov eax, esi
mov dword [ebp - 0x1c], 0xffffffff
cmp dword [ebp - 0x1c], edx
jne 0x100188a3
mov eax, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
dec eax
je 0x100188b6
mov ecx, esi
cmp dword [ebp - 0x1c], edx
jne 0x100188b8
mov ecx, edx
mov eax, dword [ebp - 0x18]
sub ecx, eax
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 8], edi
jb 0x1001896f
mov dword [ebp - 0x14], 0x4c396c7b
xor edx, edx
mov dword [ebp - 0x18], 0x652606bd
mov dword [ebp - 0x18], 0xd9bf4d75
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x144]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setl dl
imul eax, edx
xor edx, edx
neg eax
cmp eax, 0x9976
mov eax, dword [ebp - 4]
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0xd940
setne al
add eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x10]
jne 0x1001892a
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
xor ebx, ebx
neg eax
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg bl
xor edx, edx
add ebx, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
cmp eax, ebx
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x78]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp esi, ecx
sbb eax, eax
neg eax
add eax, dword [ebp - 0x14]
xor edx, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
jmp 0x100189b5
mov dword [ebp - 0x14], edx
jmp 0x1001898e
mov byte [ebp - 9], dl
cmp byte [ebp - 9], 0
je 0x10018986
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
xor edx, edx
cmp dword [ebp - 4], edx
jne 0x100189b5
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffea
jge 0x10018974
jmp 0x100189b5
mov dword [ebp - 4], edx
jmp 0x100189ac
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x178], 0x2ac45f48
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x1001899b
mov dword [ebp - 0x10], esi
dec dword [ebp - 0x2c]
mov dword [ebp - 4], edx
jmp 0x100189ce
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x188], 0x2bba6dad
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x100189bd
inc dword [ebp - 0x24]
mov eax, ebx
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, dword [ebp - 0xb0]
mov edi, edx
mov esi, eax
call fcn.1001752c
add eax, esi
add eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret