Function at 0x10065403
Capabilities:
Get geographical location

Disassembly:
mov eax, 0x10080e92
call fcn.1007fc38
sub esp, 0x214
push ebx
push esi
xor esi, esi
mov byte [ebp - 0x45], dl
push edi
inc esi
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], esi
or edi, 0xffffffff
mov dword [ebp - 0x1c], 0x452a26f3
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x30], 0xec560449
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x44], 0x7f53
cmp dword [ebp - 0x44], 0x80e5
push 0
pop ebx
jle 0x100654df
mov dword [ebp - 0x3c], ebx
mov edx, ebx
mov dword [ebp - 0x2c], 0x1cc9
mov dword [ebp - 0x14], edx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x1d4]
or eax, edx
cdq
push edx
push eax
call fcn.1001098e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1006548d
mov eax, dword [eax]
push eax
call fcn.1006abb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1d4]
call fcn.100213a8
mov edx, dword [ebp - 0x14]
inc esi
cmp esi, 0x3948
jl 0x1006546d
inc edi
cmp edi, 0x4f8a
jl 0x1006546b
mov esi, dword [ebp - 0x3c]
add edx, esi
dec dword [ebp - 0x2c]
mov dword [ebp - 0x14], edx
jne 0x10065469
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x20a1
jl 0x1006545d
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
inc esi
or edi, 0xffffffff
mov dword [ebp - 0x3c], esi
cmp dword [ebp - 0x44], 0x7cc9
jge 0x100654f6
push 0x1000eea8
call fcn.1006abb3
pop ecx
mov dword [ebp - 0x40], 0x26164a3c
mov dword [ebp - 0x2c], 0xb16c6279
mov dword [ebp - 0x14], ebx
jmp 0x10065513
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x58], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10065509
mov eax, dword [ebp - 0x24]
xor ecx, ecx
add eax, 0x2703d9b9
cmp eax, 0xaab7
setne cl
cmp ecx, esi
sbb eax, eax
neg eax
mov dword [ebp - 0x1c], eax
je 0x1006553d
mov ecx, ebx
cmp dword [ebp - 0x24], ebx
jne 0x1006553f
mov ecx, esi
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x24]
je 0x10065725
mov dword [ebp - 0x40], 0x87fce6bb
mov dword [ebp - 0x38], 0xddac0faa
mov dword [ebp - 0x18], 0x1dbdae4f
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x18], 0x1dc7
mov dword [ebp - 0x10], 0x712e
cmp dword [ebp - 0x10], 0x73ed
jle 0x10065614
mov esi, ebx
mov dword [ebp - 0x44], ebx
mov eax, esi
mov dword [ebp - 0x3c], 0x7c03
mov dword [ebp - 0x14], eax
mov edi, ebx
mov esi, ebx
lea ecx, [esi + edi]
shl eax, cl
lea ecx, [ebp - 0x204]
cdq
push edx
push eax
call fcn.1001098e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100655c9
mov eax, dword [eax]
push eax
call fcn.1006abb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x204]
call fcn.100213a8
mov eax, dword [ebp - 0x14]
inc esi
cmp esi, 0x4bc6
jl 0x100655ac
inc edi
cmp edi, 0x7ed7
jl 0x100655aa
dec eax
dec dword [ebp - 0x3c]
mov dword [ebp - 0x14], eax
jne 0x100655a8
mov esi, dword [ebp - 0x44]
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x1b9e
jl 0x1006559c
call dword [sym.imp.USER32.dll_EndMenu]
xor esi, esi
inc esi
cmp dword [ebp - 0x10], 0x6dca
jge 0x10065628
push 0x1000eef0
call fcn.1006abb3
pop ecx
mov dword [ebp - 0x38], 0x4a98
cmp dword [ebp - 0x38], 0x4bb6
jle 0x100656bd
mov edi, ebx
mov dword [ebp - 0x10], ebx
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov ecx, esi
and ecx, edi
mov edi, ebx
mov dword [ebp - 0x44], ecx
mov esi, ebx
mov dword [ebp - 0x3c], 0x2844
mov eax, esi
xor eax, ecx
lea ecx, [ebp - 0x18c]
cdq
push edx
push eax
call fcn.1001098e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10065674
mov eax, dword [eax]
push eax
call fcn.1006abb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x18c]
call fcn.100213a8
mov ecx, dword [ebp - 0x44]
add esi, edi
dec dword [ebp - 0x3c]
jne 0x10065658
inc edi
cmp edi, 0x3fe4
jl 0x1006564f
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x10]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x6d25
jl 0x10065646
inc edi
mov dword [ebp - 0x10], edi
cmp edi, 0x2914
jl 0x10065641
xor esi, esi
inc esi
mov dword [ebp - 0x14], ebx
jmp 0x100656d0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x50], 0xfffffffc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100656c2
cmp dword [ebp - 0x38], 0x492f
jge 0x100656e9
push 0x1000ef58
call fcn.1006abb3
pop ecx
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x100656f9
push ebx
call dword [sym.imp.USER32.dll_RegisterClassW]
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x50], ebx
je 0x10065704
mov eax, dword [ebp - 0x50]
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], 0x9bb816e1
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x58], eax
jmp 0x100657e5
mov dword [ebp - 0x10], 0xfffffff6
mov dword [ebp - 0x18], 0xf2cfeaa3
mov dword [ebp - 0x38], 0x43a44ade
mov dword [ebp - 0x14], ebx
jmp 0x10065750
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa0], 0x21979897
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1006573f
mov eax, dword [ebp - 0x10]
neg eax
je 0x10065760
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
xor edx, edx
neg eax
cmp eax, esi
setge dl
xor ecx, ecx
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
cmp edx, eax
setl cl
mov dword [ebp - 0xa0], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x38], 0x1bba4ba9
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x3c], eax
jg 0x100657a7
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xa0], eax
imul eax, eax, 0x58ec
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
imul eax, ecx
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x2c]
or eax, 0xffffffff
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0x1e7bff44
mov dword [ebp - 0x20], 0x4e26c12a
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], 0x421dd2eb
mov dword [ebp - 0x14], ebx
jmp 0x1006582c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8c], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1006581f
mov eax, dword [ebp - 0x24]
xor ecx, ecx
test eax, eax
push 9
setle cl
pop edx
cmp ecx, 0xffff
jae 0x10065857
cmp dword [ebp - 0x24], edx
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x24]
test eax, eax
mov eax, esi
jne 0x10065859
mov eax, ebx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, esi
cmp dword [ebp - 0x24], ebx
jne 0x10065868
mov eax, ebx
mov esi, dword [ebp + 8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov edi, dword [0x1008d01c]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x18], eax
push 0xfffffffffffffffe
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], 0xfafbf261
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x18], 0x95534fd3
mov dword [ebp - 0x40], 0x6946cb4f
mov dword [ebp - 0x3c], 0xfffd
mov dword [ebp - 0x30], 0x2b783560
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x44], edi
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
cmp dword [ebp - 0x14], eax
jge 0x10065a3a
mov dword [ebp - 0x10], 0xa136951a
mov dword [ebp - 0x10], 0x1d
cmp dword [ebp - 0x10], 0xa
jge 0x10065a21
or esi, 0xffffffff
push dword [ebp + 8]
movdqa xmm0, xmmword [0x1000f500]
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x154]
mov dword [ebp - 0x2c], 0x5943e2f7
push eax
mov dword [ebp - 0x18], 0x869b7d6b
lea ecx, [ebp - 0x7c]
push ebx
movdqu xmmword [ebp - 0x154], xmm0
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
call fcn.10023ce6
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0x5ec3
setg al
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0x9ca4
setne cl
xor eax, eax
cmp ecx, esi
mov ecx, dword [ebp - 0x7c]
setg al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
xor eax, eax
cmp dword [ecx + 4], ebx
setne al
xor ecx, ecx
cmp eax, esi
setne cl
add ecx, 0x12ecddd4
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x7c]
mov dword [eax + 0xc], ecx
mov dword [ebp - 0x20], 0x6eff
cmp dword [ebp - 0x20], 0x71f1
jle 0x100659e1
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
lea eax, [ebx + esi]
mov ecx, 0x10085b58
add eax, edi
cdq
push edx
push eax
call fcn.100208d8
inc ebx
cmp ebx, 0x64c1
jl 0x100659ae
inc esi
push 0
pop ebx
cmp esi, 0x2eb6
jl 0x100659ab
inc edi
cmp edi, 0x2ca4
jl 0x100659a9
or esi, 0xffffffff
mov byte [ebp - 0x25], bl
cmp dword [ebp - 0x20], 0x6edd
jge 0x100659fc
mov edx, 0x1000ef98
mov ecx, 0x10085b58
call fcn.10023628
cmp byte [ebp - 0x25], 0
je 0x10065a09
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], esi
call fcn.10020c74
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xa
jl 0x100658f1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffe
jl 0x100658d6
mov esi, dword [ebp + 8]
mov edi, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
inc dword [ebp - 0x3c]
cmp ecx, eax
jge 0x10065a4c
xor edx, edx
inc edx
jmp 0x10065a4e
mov edx, ebx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setg cl
cmp byte [ebp - 0x45], 0
mov dword [ebp - 0x24], ecx
je 0x10065b7d
cmp edi, 1
jne 0x10065b7d
mov dword [ebp - 0x24], 0x38ecf54c
xor edx, edx
mov dword [ebp - 0x18], 0xcddd1d8f
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x14], edi
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setle dl
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], edx
xor edx, edx
cmp dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp eax, edx
setle cl
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x14], 0xffffffe5
jmp 0x10065ad9
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10065ad6
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff6
jne 0x10065ac4
mov dword [ebp - 0x1c], 0x7d45
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x18], edi
mov dword [esi + 8], 4
mov dword [ebp - 0x14], ebx
jmp 0x10065b09
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x84], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10065afc
mov eax, dword [ebp - 0x1c]
dec eax
neg eax
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
imul eax, ecx, 0xa
cmp eax, dword [ebp - 0x1c]
jg 0x10065b39
mov ecx, ebx
cmp dword [ebp - 0x2c], ebx
je 0x10065b3b
mov ecx, edi
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp eax, edx
setg cl
cmp ecx, 0xd77cccae
sbb eax, eax
inc eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x18], 4
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10065b74
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov dword [esi + 0xc], 0x1008d01c
jmp 0x10065b80
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0xb8]
call fcn.10020bf2
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x1c], 0xbe9fb1c0
mov dword [ebp - 0x3c], 5
push 4
call fcn.10020bf2
mov byte [ebp - 4], 2
mov dword [ebp - 0x20], 0x3cde
cmp dword [ebp - 0x20], 0x40a4
jle 0x10065c12
mov ecx, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
and eax, esi
and eax, edi
or eax, ecx
mov ecx, 0x10085b58
cdq
push edx
push eax
call fcn.100208d8
mov ecx, dword [ebp - 0x14]
inc ebx
cmp ebx, 0x23c6
jl 0x10065bcd
inc esi
push 0
pop ebx
cmp esi, 0x268b
jl 0x10065bca
inc edi
cmp edi, 0x3482
jl 0x10065bc8
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 0x7aed
jl 0x10065bc6
xor edi, edi
inc edi
mov dword [ebp - 0x14], 0xfffffffe
cmp dword [ebp - 0x20], 0x3944
jge 0x10065c31
mov edx, 0x1000efb0
mov ecx, 0x10085b58
call fcn.10023628
mov dword [ebp - 0x10], ebx
jmp 0x10065c44
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x4c], 0x8c6a53d0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10065c36
mov dword [ebp - 0x10], ebx
jmp 0x10065c61
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0x3ee32743
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10065c4e
mov dword [ebp - 0x38], 0x72ce
cmp dword [ebp - 0x38], 0x742e
jle 0x10065ce2
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov ecx, edi
mov esi, ebx
shl eax, cl
mov dword [ebp - 0x40], eax
mov edi, eax
mov dword [ebp - 0x18], ebx
mov ecx, esi
sar edi, cl
mov eax, edi
mov ecx, 0x10085b58
and eax, ebx
cdq
push edx
push eax
call fcn.100208d8
inc ebx
cmp ebx, 0x8ee
jl 0x10065c92
mov eax, dword [ebp - 0x40]
inc esi
push 0
pop ebx
cmp esi, 0x1f77
jl 0x10065c89
mov edi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x3f69
jl 0x10065c80
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x1bac
jl 0x10065c7b
push ebx
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
xor edi, edi
inc edi
mov dword [ebp - 0x10], ebx
jmp 0x10065cf6
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x100]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10065ce7
cmp dword [ebp - 0x38], 0x7138
jge 0x10065d14
mov edx, 0x1000f000
mov ecx, 0x10085b58
call fcn.10023628
cmp dword [ebp - 0x4c], ebx
je 0x10065e0a
mov dword [ebp - 0x38], 0x175a
cmp dword [ebp - 0x38], 0x1a4a
jle 0x10065d84
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov ecx, esi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x40], ebx
shl edi, cl
mov eax, edi
mov ecx, 0x10085b58
or eax, ebx
cdq
push edx
push eax
call fcn.100208d8
inc ebx
cmp ebx, 0x183f
jl 0x10065d45
mov edi, dword [ebp - 0x20]
inc esi
push 0
pop ebx
cmp esi, 0x5223
jl 0x10065d3b
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x2906
jl 0x10065d39
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
cmp dword [ebp - 0x38], 0x143b
jge 0x10065d9c
mov edx, 0x1000f03c
mov ecx, 0x10085b58
call fcn.10023628
xor edi, edi
inc edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x14], ebx
jmp 0x10065db8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x174], 0x1dfe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10065da7
mov ecx, dword [ebp - 0x168]
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], ebx
jne 0x10065ddb
mov esi, ebx
cmp dword [ebp - 0x1c], ebx
je 0x10065ddd
mov esi, edi
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x20], ebx
mov edx, dword [ebp - 0x20]
sub edx, dword [eax + 0xc]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp esi, edx
setg cl
xor eax, eax
cmp ecx, edi
setle al
mov dword [ebp - 0x14], eax
jmp 0x10065e93
mov dword [ebp - 0x24], 0xffff
or eax, 0xffffffff
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x18], 9
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x3c], ebx
jne 0x10065e30
mov ecx, ebx
cmp dword [ebp - 0x24], ebx
je 0x10065e32
mov ecx, edi
mov eax, dword [ebp - 0xb8]
push 5
pop edx
mov dword [eax], edx
xor eax, eax
test ecx, ecx
sete al
mov dword [ebp - 0x14], eax
imul eax, dword [ebp - 0x14], 3
add eax, edx
jne 0x10065e52
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x40], ebx
jne 0x10065e87
mov eax, ebx
cmp dword [ebp - 0x3c], ebx
je 0x10065e89
mov eax, edi
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 0xfffffffd
mov byte [ebp - 0x25], bl
mov dword [ebp - 0x38], 0x1ebe
cmp dword [ebp - 0x38], 0x2203
jle 0x10065f14
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov ecx, esi
mov dword [ebp - 0x18], eax
mov esi, eax
mov edi, ebx
shl esi, cl
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x1a4]
cdq
push edx
push eax
call fcn.1001098e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10065ed9
mov eax, dword [eax]
push eax
call fcn.1006abb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1a4]
call fcn.100213a8
inc edi
cmp edi, 0xb5f
jl 0x10065ebb
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x362f
jl 0x10065eb0
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x867
jl 0x10065eab
cmp byte [ebp - 0x25], 0
je 0x10065f24
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
cmp dword [ebp - 0x38], 0x1e6b
jge 0x10065f38
push 0x1000f058
call fcn.1006abb3
pop ecx
lea ecx, [ebp - 0x100]
call fcn.10020c74
or esi, 0xffffffff
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], esi
call fcn.10020c74
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x34], eax
jge 0x10066989
push 4
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x14], ebx
pop ecx
jmp 0x10065f7c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x138], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10065f6b
push 3
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x10065fd3
mov dword [ebp - 0x1c], 0xa772304b
mov dword [ebp - 0x20], 0x1a9c2132
mov dword [ebp - 0x1c], ebx
jmp 0x10065fab
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x138], ebx
jne 0x10065fb0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jle 0x10065f9c
cmp dword [ebp - 0x1c], ebx
jne 0x10065fb8
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1c], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jle 0x10065f89
mov dword [ebp - 0x10], ebx
jmp 0x10065fee
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x138], 0x621ec218
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10065fdd
mov dword [ebp - 0x18], 0x4a8b
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x18], 0xfffffff8
mov edi, 0x1008d020
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x18], 0x1fc3eee
push edx
mov dword [ebp - 0x24], edi
call fcn.10020bf2
mov dword [ebp - 4], 3
mov dword [ebp - 0x38], 0x6d59
cmp dword [ebp - 0x38], 0x6dfd
jle 0x10066091
push ebx
call dword [sym.imp.USER32.dll_DestroyCursor]
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x20], 0x74e9
mov dword [ebp - 0x18], ebx
mov ecx, ebx
mov eax, edi
shl eax, cl
mov ecx, 0x10085b58
cdq
push edx
push eax
call fcn.100208d8
inc ebx
cmp ebx, 0x2d11
jl 0x1006604f
add edi, esi
dec dword [ebp - 0x20]
push 0
pop ebx
jne 0x1006604c
inc esi
cmp esi, 0x6edf
jl 0x10066043
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetScrollRange]
mov edi, 0x1008d020
or esi, 0xffffffff
cmp dword [ebp - 0x38], 0x6af7
jge 0x100660a9
mov edx, 0x1000f0b0
mov ecx, 0x10085b58
call fcn.10023628
mov dword [ebp - 0x18], esi
lea ecx, [ebp - 0x128]
xor esi, esi
mov dword [ebp - 0x30], 0x8963ec58
inc esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x30], 0xee24b2e8
push esi
call fcn.10020bf2
push 3
mov dword [ebp - 0x2c], 0x16709e14
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x100660ee
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 0xbbef7d65
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x100660db
mov dword [ebp - 0x10], ebx
jmp 0x10066109
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xac], 0xdbbe
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x100660f8
mov dword [ebp - 0x10], ebx
jmp 0x10066126
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0xdd484073
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10066113
inc dword [ebp - 0xa8]
xor edx, edx
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setne dl
or eax, 0xffffffff
cmp eax, edx
mov eax, dword [ebp - 0xc4]
sbb ecx, ecx
xor edx, edx
neg ecx
mov dword [eax + 4], ecx
inc dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xa4]
cmp ecx, eax
mov esi, dword [ebp - 0xc4]
setg dl
imul ecx, edx, 0x3671
sub ecx, 0xb5e4
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0x38e5
setle al
xor ecx, ecx
cmp dword [esi + 8], eax
mov eax, dword [ebp - 0x18]
setne cl
add eax, ecx
lea ecx, [ebp - 0x128]
mov dword [esi + 8], eax
call fcn.10020c74
or eax, 0xffffffff
lea ecx, [ebp - 0xc4]
mov dword [ebp - 4], eax
call fcn.10020c74
cmp dword [ebp - 0x34], 0
jle 0x10066347
mov dword [ebp - 0x1c], 0xac204e2d
xor edx, edx
mov dword [ebp - 0x10], 0x95aad853
inc edx
push 0xfffffffffffffffe
mov dword [ebp - 0x18], 0x6a6c65b0
mov dword [ebp - 0x1c], 0xfffffff3
pop esi
cmp dword [ebp - 0x1c], esi
jge 0x10066243
mov dword [ebp - 0x18], esi
xor ecx, ecx
mov dword [ebp - 0x18], 0xcc9105fa
mov dword [ebp - 0x20], 0x87263b0a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x20], 0xfffffffc
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x10]
cmp eax, edx
setg cl
sub ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add eax, 0x62992195
add eax, ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 6
cmp dword [ebp - 0x10], ebx
je 0x1006623e
mov dword [ebp - 0x18], 0x6a5b5cf0
cmp dword [ebp - 0x18], ebx
jne 0x1006623e
dec dword [ebp - 0x10]
jne 0x1006622d
inc dword [ebp - 0x1c]
jmp 0x100661e0
mov dword [ebp - 0x10], 0xffffffe3
jmp 0x1006626a
mov dword [ebp - 0x18], edx
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10066262
push ebx
call dword [sym.imp.USER32.dll_IsZoomed]
xor edx, edx
inc edx
cmp dword [ebp - 0x18], ebx
jne 0x10066270
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffffa
jne 0x1006624c
mov esi, dword [edi]
lea ecx, [ebp - 0x11c]
push 2
call fcn.10020bf2
mov dword [ebp - 4], 4
or eax, 0xffffffff
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], 0xc0d37ad4
mov dword [ebp - 0x18], 0xf6802998
mov dword [ebp - 0x20], 0x96c7979b
mov dword [ebp - 0x14], ebx
jmp 0x100662b9
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100662a6
mov dword [ebp - 0x24], ebx
jmp 0x10066315
mov dword [ebp - 0x18], 0xfffffff6
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x18], 0x63f9e923
mov dword [ebp - 0x18], 7
push 4
call fcn.10020bf2
mov dword [ebp - 0x14], ebx
jmp 0x100662fe
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x144]
mov dword [eax + ecx*4], 0x81ced8f6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100662eb
dec dword [ebp - 0x20]
lea ecx, [ebp - 0x144]
call fcn.10020c74
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jle 0x100662c4
or eax, 0xffffffff
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], eax
call fcn.10020c74
mov eax, dword [edi + 4]
add edi, 8
test eax, eax
jne 0x10066339
add edi, 8
add edi, esi
dec dword [ebp - 0x34]
jne 0x100661be
mov dword [ebp - 0x24], edi
push 2
lea ecx, [ebp - 0xdc]
call fcn.10020bf2
mov dword [ebp - 4], 5
or eax, 0xffffffff
mov dword [ebp - 0x34], 0xeb0647dc
mov dword [ebp - 0x30], 0x80444555
mov dword [ebp - 0x1c], 0xe64fd9e2
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0x130dfdda
push 7
pop eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf32f520a
mov dword [ebp - 0x3c], 0x19f0
cmp dword [ebp - 0x3c], 0x1d48
jle 0x1006641a
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x20], 0x6716
mov edi, dword [ebp - 0x2c]
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x1bc]
cdq
push edx
push eax
call fcn.1001098e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100663e2
mov eax, dword [eax]
push eax
call fcn.1006abb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1bc]
call fcn.100213a8
inc esi
cmp esi, 0xb7c
jl 0x100663c4
mov edi, dword [ebp - 0x38]
add dword [ebp - 0x2c], edi
dec dword [ebp - 0x20]
jne 0x100663bf
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x3656
jl 0x100663b5
mov edi, dword [ebp - 0x24]
cmp dword [ebp - 0x3c], 0x17be
jge 0x1006642e
push 0x1000f0f0
call fcn.1006abb3
pop ecx
push 2
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x10066449
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xdc]
mov dword [eax + ecx*4], 0x1852
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10066436
mov dword [ebp - 0x10], ebx
jmp 0x10066464
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x15c], 0x4ab19f88
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10066453
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xdc]
cmp ecx, dword [eax]
jge 0x10066485
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor esi, esi
mov eax, dword [ebp - 0x30]
inc esi
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], esi
cmp dword [ebp - 0x34], ebx
je 0x100664e7
mov dword [ebp - 0x18], 0x39e0
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x14], ebx
jmp 0x100664c3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x164], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100664b2
inc dword [ebp - 0x30]
mov dword [ebp - 0x14], ebx
jmp 0x100664df
mov dword [ebp - 0x18], esi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xe8], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffee
jge 0x100664d0
jmp 0x10066537
mov dword [ebp - 0x30], 0xd0bd2f23
xor ecx, ecx
mov dword [ebp - 0x34], 0xc653ddb
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x40], 0xfffffff8
dec dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
cmp eax, 0x93f8
setg cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], esi
or eax, 0xffffffff
lea ecx, [ebp - 0xdc]
mov dword [ebp - 4], eax
call fcn.10020c74
mov eax, dword [edi]
mov dword [ebp - 0x14], eax
or eax, 0xffffffff
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x30], 0x1e7bff44
mov dword [ebp - 0x30], 0x4e26c12a
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x421dd2eb
mov dword [ebp - 0x1c], ebx
jmp 0x1006657d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x88], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10066570
mov dword [ebp - 0x20], 0x7c1f
cmp dword [ebp - 0x20], 0x7da0
jle 0x10066601
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_CreateCaret]
mov edx, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x1ec]
and eax, edx
cdq
push edx
push eax
call fcn.1001098e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100665c5
mov eax, dword [eax]
push eax
call fcn.1006abb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1ec]
call fcn.100213a8
mov edx, dword [ebp - 0x34]
inc esi
cmp esi, 0x7664
jl 0x100665a5
inc edi
cmp edi, 0x3e7b
jl 0x100665a3
inc edx
mov dword [ebp - 0x34], edx
cmp edx, 0x740d
jl 0x100665a1
mov edi, dword [ebp - 0x24]
xor esi, esi
inc esi
mov eax, dword [ebp - 0x10]
xor ecx, ecx
test eax, eax
setle cl
cmp ecx, 0xffff
jae 0x10066625
cmp dword [ebp - 0x10], 9
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x10]
test eax, eax
mov eax, esi
jne 0x10066627
mov eax, ebx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, esi
cmp dword [ebp - 0x10], ebx
jne 0x10066636
mov eax, ebx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0x790d
jge 0x1006665f
push 0x1000f104
call fcn.1006abb3
pop ecx
mov eax, dword [edi + 4]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x24], ebx
jmp 0x10066678
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x64], 0xfffffff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1006666a
mov dword [ebp - 0x5c], ebx
jmp 0x100666f6
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x30], 0xdb785b64
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xd
jne 0x100666ee
or ebx, 0xffffffff
mov dword [ebp - 0x30], 0xfa32
mov dword [ebp - 0x18], 0xfffffffa
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x64]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x30]
setl dl
imul eax, dword [ebp - 0x5c]
cmp esi, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp edx, eax
setg cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xd
je 0x1006669d
xor ebx, ebx
cmp dword [ebp - 0x5c], ebx
jne 0x100666fc
dec dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 0xffffffec
je 0x10066683
mov dword [ebp - 0x1c], 0xa87013dc
add edi, 8
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x10], ebx
jmp 0x1006672c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd0], 0xd7f825e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1006671b
mov dword [ebp - 0x10], ebx
jmp 0x10066744
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x110], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10066737
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], ebx
jl 0x100668bb
mov dword [ebp - 0x18], 0xfffffff8
mov dword [ebp - 0x38], 0x2270
cmp dword [ebp - 0x38], 0x2494
jle 0x100667ea
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov ecx, esi
mov dword [ebp - 0x30], 0x6dbc
mov dword [ebp - 0x34], ecx
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
xor eax, ecx
lea ecx, [ebp - 0x21c]
cdq
push edx
push eax
call fcn.1001098e
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100667a3
mov eax, dword [eax]
push eax
call fcn.1006abb3
pop ecx
xor eax, eax
lea ecx, [ebp - 0x21c]
push ebx
inc eax
push eax
call fcn.100213a8
mov ecx, dword [ebp - 0x34]
inc edi
cmp edi, 0x6307
jl 0x10066786
inc esi
cmp esi, 0x7dab
jl 0x10066784
dec ecx
dec dword [ebp - 0x30]
mov dword [ebp - 0x34], ecx
jne 0x10066782
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x6bcb
jl 0x10066776
xor esi, esi
inc esi
cmp dword [ebp - 0x38], 0x1f93
jge 0x100667fe
push 0x1000f128
call fcn.1006abb3
pop ecx
mov dword [ebp - 0x10], ebx
jmp 0x10066811
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x80], 0x8b39d205
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10066803
mov dword [ebp - 0x10], ebx
jmp 0x1006682c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe4], 0xaba9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1006681b
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xd0]
inc dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2c], 9
cmp eax, 0x945cb81e
setne dl
inc edx
sub edx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0xe4]
jl 0x10066871
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xd0]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x80]
add eax, 0x5d3e8ea4
jne 0x10066894
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x10c]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0xcc], eax
dec dword [ebp - 0x3c]
dec dword [ebp - 0x1c]
jns 0x1006675a
mov edi, dword [ebp - 0x24]
cmp dword [ebp - 0x40], 0
jne 0x1006699b
cmp byte [ebp - 0x45], 0
je 0x100668de
cmp dword [ebp - 0x44], esi
mov esi, dword [ebp - 0x14]
jne 0x100668e1
mov ecx, dword [ebp + 8]
lea eax, [esi + 0x10]
add dword [ecx + 8], eax
jmp 0x100668e1
mov esi, dword [ebp - 0x14]
mov eax, dword [edi]
mov dword [ebp - 0x18], eax
mov eax, dword [edi + 4]
add edi, 8
push esi
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x24], edi
call fcn.10069689
pop ecx
mov edi, eax
mov dword [ebp - 0x90], ebx
lea eax, [ebp - 0x90]
mov dword [ebp - 0x70], ebx
push eax
push esi
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
call fcn.100677ae
test esi, esi
mov ecx, ebx
mov esi, dword [ebp - 0x70]
jle 0x1006696a
mov eax, ecx
and eax, 0x80000001
jns 0x10066931
dec eax
or eax, 0xfffffffe
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x18]
add eax, ecx
add eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x40]
jmp 0x10066946
lea eax, [edx + 1]
cdq
idiv dword [ebp - 0x14]
cmp word [esi + edx*2], bx
jne 0x10066943
xor eax, eax
inc eax
mov word [esi + edx*2], ax
mov eax, dword [ebp - 0x24]
mov al, byte [edx + eax]
mov byte [ecx + edi], al
inc ecx
mov eax, dword [ebp - 0x14]
cmp ecx, eax
jl 0x10066923
jmp 0x1006696d
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov dword [ecx + 4], edi
test esi, esi
je 0x1006698c
push esi
call fcn.1006ad89
pop ecx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov ecx, dword [ebp + 8]
xor esi, esi
inc esi
mov dword [ebp - 0x14], 0x13dd33a4
mov dword [ebp + 8], ebx
jmp 0x100669b1
mov ecx, dword [ebp + 8]
jmp 0x1006698f
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x94], 0x1bd97a8
inc dword [ebp + 8]
cmp dword [ebp + 8], esi
jl 0x100669a0
mov dword [ebp - 0x14], ebx
jmp 0x100669f4
mov dword [ebp + 8], 0x9f3690f1
mov dword [ebp + 8], ebx
jmp 0x100669ec
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], ebx
jl 0x100669e9
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x94], 8
dec dword [ebp - 0x34]
jns 0x100669d6
inc dword [ebp + 8]
cmp dword [ebp + 8], ebx
jle 0x100669c7
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe3
jge 0x100669bb
pop edi
mov eax, ecx
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret