Function at 0x10044464
Capabilities:
Delete directory
Get system information on windows

Disassembly:
mov eax, 0x10077854
call fcn.100764a8
sub esp, 0x1e4
push ebx
push esi
xor ebx, ebx
mov byte [ebp - 0x54], dl
push edi
mov dword [ebp - 0x10], esp
or esi, 0xffffffff
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 2
jge 0x1004449d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x84], esi
inc dword [ebp - 0x20]
jmp 0x10044488
mov dword [ebp - 0x84], 0xd
jmp 0x100444c5
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x100444bf
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
dec dword [ebp - 0x84]
cmp dword [ebp - 0x84], 0xc
jne 0x100444a9
mov dword [ebp - 0x24], 0xfffffffc
lea ecx, [ebp - 0xe0]
push 2
call fcn.100214a3
mov dword [ebp - 0x50], 0x7de7e859
mov dword [ebp - 0x20], ebx
jmp 0x10044501
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], 0x12e1dfe0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x100444ee
mov dword [ebp - 0x24], 0x11
cmp dword [ebp - 0x24], 3
jl 0x100446ae
xor ecx, ecx
inc ecx
mov dword [ebp - 0x30], 0xfa75c19c
mov dword [ebp - 0x28], 0xa3d88101
mov dword [ebp - 0x48], 0x93506f8a
dec dword [ebp - 0x30]
mov dword [ebp - 0x30], 0xfffffff7
cmp dword [ebp - 0x30], 0x16
jl 0x100446a1
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x18], ebx
jmp 0x10044643
mov dword [ebp - 0x20], 0xd7839892
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ebx
jl 0x10044640
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x34], ebx
jmp 0x1004457f
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x104], 0xd3ec93cc
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jl 0x1004456e
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], ebx
jl 0x10044637
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], ebx
jl 0x10044608
mov edx, dword [ebp - 0xe0]
xor edi, edi
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x30], ebx
je 0x100445f0
mov eax, dword [ebp - 0x100]
mov esi, 0xb9a31c0a
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xe0]
sub esi, dword [ecx + eax*4]
xor eax, eax
sub esi, dword [ecx + edx*4]
cmp esi, dword [ecx]
lea ecx, [edi + 1]
mov edx, dword [ebp - 0x2c]
setg al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
cmp dword [edx + 4], ebx
jne 0x100445f2
mov ecx, ebx
xor eax, eax
cmp ecx, dword [edx + 4]
setge al
mov dword [ebp - 0x104], eax
dec dword [ebp - 0x14]
jns 0x100445a7
or esi, 0xffffffff
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
push 1
setne dl
imul edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
pop ecx
sub eax, edx
neg eax
sbb eax, eax
inc eax
neg eax
mov dword [ebp - 0x14], eax
dec dword [ebp - 0x34]
jns 0x10044591
dec dword [ebp - 0x20]
jns 0x10044562
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffc
je 0x1004454f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], ebx
jne 0x10044661
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x50]
sub ecx, 2
cmp ecx, eax
push 1
setle dl
sub edx, 0xa8b0
neg edx
pop ecx
sbb edx, edx
inc edx
mov dword [ebp - 0x18], edx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x16
jge 0x10044544
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jge 0x1004451b
xor esi, esi
lea ecx, [ebp - 0xe0]
inc esi
call fcn.10021525
mov dword [ebp - 0x14], esi
mov edi, 0x1007d60c
mov dword [ebp - 0x48], 0xa9d19ac1
mov dword [ebp - 0x48], 0x2ba75a59
mov dword [ebp - 0x2c], 0x6c0e263
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x14], 0xfffffffd
jmp 0x10044746
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x40], 0xffffffff
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ebx
jne 0x1004470b
mov edi, ebx
cmp dword [ebp - 0x28], ebx
je 0x1004470d
mov edi, esi
mov eax, dword [ebp - 0x14]
xor edx, edx
inc eax
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x48]
cmp eax, ecx
setle dl
sub edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
neg edx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
sbb edx, edx
inc edx
add edx, edi
neg edx
sbb edx, edx
neg edx
imul eax, edx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x40]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xb
jge 0x100446ef
mov edi, dword [ebp + 8]
mov eax, dword [0x1007d60c]
mov dword [ebp - 0x48], eax
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov dword [edi + 0xc], ebx
cmp byte [ebp - 0x54], bl
je 0x10044997
cmp eax, esi
jne 0x10044997
push 2
lea ecx, [ebp - 0xc8]
call fcn.100214a3
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], 0x6d44418
mov dword [ebp - 0x20], ebx
jmp 0x100447a2
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0x57fd5464
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1004478f
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], ebx
jl 0x10044976
mov dword [ebp - 0x18], 0xbf2b2994
lea ecx, [ebp - 0xec]
push 2
call fcn.100214a3
mov byte [ebp - 4], 1
mov dword [ebp - 0x20], 0xfa014801
mov dword [ebp - 0x3c], 0x124380d3
mov dword [ebp - 0x24], ebx
jmp 0x100447f2
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xec]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100447df
mov dword [ebp - 0x24], ebx
jmp 0x1004480e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1f0], 1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x100447fd
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 1
jg 0x10044960
mov dword [ebp - 0x40], 0xfffffffa
mov dword [ebp - 0x44], 0xffffffff
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0x9d786592
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0xec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc8]
mov edx, dword [ebp - 0x40]
sub edx, dword [eax + ecx*4]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x20], edx
je 0x10044947
xor edi, edi
mov dword [ebp - 0x20], ebx
inc edi
cmp dword [ebp - 0x20], 4
jge 0x10044958
mov dword [ebp - 0x14], 0x7b52
cmp dword [ebp - 0x14], 0x7d23
jle 0x100448da
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x40], ebx
mov eax, esi
shl eax, cl
mov ecx, 0x1061e7b8
cdq
push edx
push eax
call fcn.10021267
mov ecx, dword [ebp - 0x40]
inc ecx
mov dword [ebp - 0x40], ecx
cmp ecx, 0x7c34
jl 0x100448b1
inc esi
cmp esi, 0x684a
jl 0x100448ac
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100448f2
push ebx
push 0x1a
push ebx
push 0x799
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov byte [ebp - 4], 2
cmp dword [ebp - 0x14], 0x7989
jge 0x1004490e
mov edx, 0x10008930
mov ecx, 0x1061e7b8
call fcn.100255e3
mov dword [ebp - 4], edi
inc dword [ebp - 0x20]
jmp 0x10044890
mov dword [ebp - 0x44], 0xb7be74fd
mov dword [ebp - 0x44], 0x19f8c517
dec dword [ebp - 0x3c]
inc dword [ebp - 0x18]
jmp 0x10044817
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], bl
call fcn.10021525
dec dword [ebp - 0x28]
jmp 0x100447ab
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc8]
call fcn.10021525
mov eax, dword [ebp + 8]
xor esi, esi
mov ecx, dword [ebp - 0x34]
inc esi
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x30]
mov dword [eax + 0xc], ecx
mov dword [ebp - 0x14], 7
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x3c], 0xc04ccb63
push esi
call fcn.100214a3
mov dword [ebp - 0x3c], 0x8e10e5e5
mov dword [ebp - 0x24], ebx
jmp 0x100449d0
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 0x4a0426a7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x100449bd
mov dword [ebp - 0x24], ebx
jmp 0x100449eb
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1c0], 0x9a9b8fa4
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x100449da
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10044a01
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp dword [ebp - 0x14], 0xb5486b6
je 0x10044a0d
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x134]
lea ecx, [ebp - 0x134]
setg dl
mov dword [eax], edx
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1b8], esi
call fcn.10021525
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x58], eax
jge 0x10045768
push 3
lea ecx, [ebp - 0xb4]
call fcn.100214a3
mov dword [ebp - 4], 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x24], ebx
push esi
call fcn.100214a3
mov byte [ebp - 4], 5
mov dword [ebp - 0x24], ebx
jmp 0x10044a8f
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10044a80
mov dword [ebp - 0x24], ebx
jmp 0x10044aad
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xd4]
mov dword [eax + ecx*4], 0xd9ba5f27
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10044a9a
push 2
mov dword [ebp - 0x24], ebx
pop edi
jmp 0x10044c9f
push 4
pop eax
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x18], 0xffffffff
push eax
call fcn.100214a3
mov dword [ebp - 0x50], 0xf6dae1d
mov dword [ebp - 0x18], ebx
jmp 0x10044af3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x188], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10044ae2
mov dword [ebp - 0x18], ebx
jmp 0x10044b0d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10044afe
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10044b27
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], edi
jg 0x10044c73
mov edx, dword [ebp - 0xb4]
mov dword [ebp - 0x3c], edx
mov eax, 0xb4d258d0
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x20], ebx
jmp 0x10044b6b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1e4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10044b5e
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov edi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
imul eax, dword [edx + 4]
xor edx, edx
mov esi, dword [ebp - 0xb4]
cmp eax, dword [esi + ecx*4]
mov eax, dword [ebp - 0xd4]
setl dl
xor ecx, ecx
cmp edx, 0x1c587c7a
setle cl
imul ecx, dword [esi + edi*4]
imul ecx, dword [eax]
mov eax, dword [ebp - 0x14]
sub ecx, eax
jne 0x10044bba
mov eax, dword [ebp - 0x24]
xor esi, esi
inc esi
mov dword [ebp - 0x18], esi
push 2
mov dword [ebp - 0x18], ebx
pop edi
cmp dword [ebp - 0x18], edi
jg 0x10044c64
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10044bea
push esi
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
mov eax, dword [ebp - 0xd4]
xor ecx, ecx
push 0xfffffffffffffff6
mov eax, dword [eax]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x184], eax
pop eax
setle cl
cmp eax, ecx
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x18]
jg 0x10044c17
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x168], 0x6082f4e5
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1e0]
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x18]
push 1
cmp dword [ecx + esi*4], eax
mov eax, 0xe96f77d9
mov ecx, dword [ebp - 0x2c]
setge dl
cmp eax, edx
pop esi
sbb eax, eax
neg eax
mov dword [ecx + 4], eax
mov dword [ebp - 0x50], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x10044bd8
inc dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
cmp dword [ebp - 0x14], edi
jle 0x10044b3c
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], ebx
jl 0x10044c91
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10044c8c
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommState]
dec dword [ebp - 0x18]
jns 0x10044c7b
lea ecx, [ebp - 0x110]
call fcn.10021525
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x10044abd
lea ecx, [ebp - 0xd4]
call fcn.10021525
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb4]
call fcn.10021525
mov eax, dword [ebp - 0x34]
add dword [ebp - 0x30], eax
cmp dword [ebp - 0x58], 0
mov dword [ebp - 0x2c], ebx
jle 0x100452b2
xor edx, edx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], ebx
inc edx
jmp 0x10044cea
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x7c], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10044ce0
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x10044d06
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x7c], ecx
dec dword [ebp - 0x20]
jns 0x10044cf7
mov ecx, dword [ebp - 0x30]
push edx
mov eax, dword [ecx]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x44], eax
call fcn.100214a3
push edi
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 6
call fcn.100214a3
xor esi, esi
mov dword [ebp - 0x14], ebx
inc esi
jmp 0x10044d48
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], 0x6bdd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10044d35
mov dword [ebp - 0x14], ebx
jmp 0x10044d62
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x9c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10044d52
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10044d7c
push ebx
push 0xa66
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
mov eax, dword [ebp - 0x9c]
mov dword [eax], ebx
mov dword [ebp - 0x18], 0x816210b9
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x20], 0xc7f05f43
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jg 0x10044e3e
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0xa8]
mov esi, dword [eax]
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
test eax, eax
je 0x10044e22
mov esi, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setl cl
dec eax
neg eax
sbb eax, eax
xor edx, edx
neg eax
cmp eax, ecx
mov eax, dword [ebp - 0x9c]
setg dl
xor ebx, ebx
mov ecx, dword [eax]
mov eax, dword [ebp - 0xa8]
cmp edx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x18]
setne bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x9c]
sete cl
xor ebx, ebx
sub ecx, dword [eax]
mov eax, dword [ebp - 0xa8]
cmp dword [eax + esi*4], ecx
jl 0x10044e25
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], 0xabc24891
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10044da1
xor esi, esi
inc esi
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x10044e8a
mov dword [ebp - 0x14], ebx
jmp 0x10044e6b
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10044e68
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10044e63
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
dec dword [ebp - 0x18]
jns 0x10044e53
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x10044e4b
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10044e85
push esi
push 0x25b7
call dword [sym.imp.USER32.dll_FlashWindow]
dec dword [ebp - 0x20]
jns 0x10044e46
mov eax, dword [ebp - 0x9c]
inc dword [eax]
cmp dword [eax], 0
jle 0x10044d84
lea ecx, [ebp - 0x9c]
call fcn.10021525
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa8]
call fcn.10021525
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x128]
add dword [ebp - 0x30], eax
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x3c], ebx
push 4
call fcn.100214a3
mov dword [ebp - 0x14], ebx
jmp 0x10044ee8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1cc], 0x15aa9614
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10044ed7
mov dword [ebp - 0x14], ebx
jmp 0x10044f06
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10044ef3
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x1c8], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], esi
mov edx, dword [ebp - 0x3c]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x128]
setg cl
mov dword [eax + 0xc], ecx
lea ecx, [ebp - 0x128]
call fcn.10021525
mov ecx, dword [ebp - 0x30]
push edi
mov eax, dword [ecx]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x14], eax
call fcn.100214a3
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x40], 0xffff
mov dword [ebp - 0x28], 0xe64f6cbc
mov dword [ebp - 0x3c], 0x8461e707
mov dword [ebp - 0x20], ebx
jmp 0x10044fa8
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10044f99
mov ecx, dword [ebp - 0x14c]
cmp dword [ecx + 4], ebx
jne 0x10044fc3
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x40], ebx
jne 0x10044fc3
mov eax, dword [ebp - 0x28]
xor eax, eax
cmp dword [ecx + 4], ebx
lea ecx, [ebp - 0x14c]
setne al
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0x16488a
call fcn.10021525
cmp dword [ebp - 0x14], 0
jne 0x10044ff2
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
lea eax, [eax + ecx*2]
mov dword [ebp - 0x30], eax
push 3
lea ecx, [ebp - 0x90]
call fcn.100214a3
mov dword [ebp - 0xb8], 0xbd13d8c5
mov dword [ebp - 0x14], 0xed99
mov dword [ebp - 0x3c], 0xd686a37b
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x40], 0x95b676bd
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x24], ebx
jmp 0x10045049
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x90]
mov dword [eax + ecx*4], 0x34d0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10045036
dec dword [ebp - 0x14]
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x5c], ecx
mov eax, dword [ecx + 4]
add eax, dword [ecx]
xor ecx, ecx
cmp eax, 0x33fd
mov eax, dword [ebp - 0x14]
setg cl
imul eax, ecx
cmp eax, 0xd4aa41a8
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, esi
setle cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
sub eax, ecx
je 0x100450dc
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100450b8
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
mov dword [ebp - 0x14], ebx
jmp 0x100450d1
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100450ce
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1c
jne 0x100450bd
jmp 0x10045291
mov dword [ebp - 0x24], 8
xor ecx, ecx
mov dword [ebp - 0x20], 0xa1e05bf5
mov dword [ebp - 0x38], 0x947d9ba7
mov dword [ebp - 0x3c], 0x1c6cb56a
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0x691cfe0c
mov eax, dword [ebp - 0x24]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
imul ecx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
xor ecx, ecx
cmp edx, 0x19ab
setge cl
xor eax, eax
cmp ecx, 5
setle al
cmp eax, dword [ebp - 0x14]
jne 0x10045153
mov ecx, ebx
cmp dword [ebp - 0x14], ebx
je 0x10045155
mov ecx, esi
push 0xfffffffffffffff7
pop eax
sub eax, ecx
sub eax, dword [ebp - 0x50]
neg eax
sbb eax, eax
inc eax
cmp dword [ebp - 0x28], eax
jge 0x10045178
cmp dword [ebp - 0x14], ebx
jne 0x10045178
mov eax, dword [ebp - 0x90]
mov ecx, ebx
cmp dword [eax], ebx
je 0x1004517a
mov ecx, esi
mov eax, dword [ebp - 0x40]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x20]
jle 0x10045196
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
cmp dword [eax], ecx
jg 0x100451de
mov dword [ebp - 0x38], 0xc605
mov dword [ebp - 0x50], 0xd5e33ab5
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], ebx
jl 0x1004524c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
cmp dword [eax + ecx*4], ebx
jne 0x1004524c
mov dword [ebp - 0x50], esi
dec dword [ebp - 0x18]
jns 0x100451c6
jmp 0x1004524c
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x40], 0x4b34
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0xb8]
add eax, dword [ecx + 4]
je 0x10045222
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
inc ecx
neg ecx
sbb ecx, ecx
xor edx, edx
add ecx, 0x56ab656a
cmp ecx, eax
mov eax, dword [ebp - 0x50]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
sub edx, 6
cmp eax, edx
setge cl
cmp ecx, 0x2f92bf7
jg 0x10045243
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], ebx
jl 0x10045291
xor ecx, ecx
mov dword [ebp - 0x38], esi
mov eax, dword [ebp - 0x24]
cmp eax, 0xe23b
mov eax, dword [ebp - 0x38]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setle dl
sub eax, 0x1d3
xor ecx, ecx
cmp eax, edx
setl cl
add ecx, 3
cmp ecx, 0x828161dd
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x20]
jns 0x10045254
lea ecx, [ebp - 0x90]
call fcn.10021525
mov eax, dword [ebp - 0x44]
add dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, dword [ebp - 0x58]
jl 0x10044cd5
mov dword [ebp - 0x44], 0xffffffff
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x44], 0x318d5816
push esi
call fcn.100214a3
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x2c], 0x8e1b8814
mov dword [ebp - 0x14], ebx
jmp 0x100452ec
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1d4], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100452db
mov dword [ebp - 0x14], ebx
jmp 0x10045309
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1a4]
mov dword [eax + ecx*4], 0x23ed15d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100452f6
dec dword [ebp - 0x2c]
lea ecx, [ebp - 0x1a4]
call fcn.10021525
mov ecx, dword [ebp - 0x30]
push 3
mov eax, dword [ecx]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x20], eax
call fcn.100214a3
mov dword [ebp - 0x58], 0x4f9a0237
push 3
mov dword [ebp - 0x2c], 0x5e04a276
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1004535b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x6c], 0x648261f9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1004534d
mov dword [ebp - 0x18], ebx
jmp 0x10045373
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c], 0x9be1d925
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10045365
mov dword [ebp - 0x18], ebx
jmp 0x10045390
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1004537d
mov dword [ebp - 0x4c], edi
cmp dword [ebp - 0x4c], ebx
jl 0x10045449
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x2c], 0xd77cccae
xor edx, edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp + eax*4 - 0x6c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x6c]
cmp ecx, eax
mov ecx, dword [ebp - 0x44]
setge dl
xor eax, eax
cmp edx, 0x66e9
setle al
cmp eax, dword [ecx + 8]
jg 0x100453e4
mov eax, dword [ebp - 0x4c]
mov ecx, esi
cmp dword [ebp + eax*4 - 0x6c], ebx
jne 0x100453e6
mov ecx, ebx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x6c]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp + eax*4 - 0x6c]
mov eax, dword [ebp - 0x4c]
cmp ecx, dword [ebp + eax*4 - 0x6c]
jge 0x10045417
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x68], ebx
je 0x1004541a
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x6c]
cmp eax, 0x285faafe
mov eax, dword [ebp - 0x4c]
setl cl
xor edx, edx
cmp ecx, dword [ebp - 0x2c]
setl dl
mov dword [ebp + eax*4 - 0x6c], edx
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x4c]
jns 0x100453aa
mov eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x2c], eax
call fcn.10021525
mov ecx, dword [ebp - 0x30]
push edi
mov eax, dword [ecx]
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x5c], eax
call fcn.100214a3
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0x3e141b6b
mov dword [ebp - 0x44], 0xfffa
mov dword [ebp - 0x38], 0x44bb323f
mov dword [ebp - 0x2c], 0xeb94
mov dword [ebp - 0x60], 0x3aa9c1c7
mov dword [ebp - 0x28], ebx
jmp 0x100454a8
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x10045499
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100454c6
push 0x2c2
push 0xea6
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [ebp - 0x2c], 0x81c5
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jne 0x100454f1
mov eax, dword [ebp - 0x140]
cmp dword [eax + 4], ebx
mov eax, ebx
je 0x100454f3
mov eax, esi
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x140]
call fcn.10021525
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x17c]
add dword [ebp - 0x30], eax
mov eax, 0xa5d6c05b
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
or eax, 0xffffffff
push 3
mov dword [ebp - 0x40], eax
pop edi
mov dword [ebp - 0x44], 0xd7c1188e
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], eax
push edi
call fcn.100214a3
mov dword [ebp - 4], 7
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x28], ebx
jmp 0x10045565
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x17c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x10045555
mov dword [ebp - 0x40], edi
cmp dword [ebp - 0x40], ebx
jl 0x1004567a
xor ecx, ecx
inc ecx
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0x38], 0x249aaed6
mov dword [ebp - 0x38], 4
mov dword [ebp - 0x38], 0x2530a9bc
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x38], 0xfa4c
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x38], 0x3b0639e6
mov dword [ebp - 0x14], ebx
jmp 0x100455c6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xfc], 0xf5a9c4c8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100455b5
mov dword [ebp - 0x14], ebx
jmp 0x100455e2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1b4], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x100455d1
mov dword [ebp - 0xf8], ebx
cmp dword [ebp - 0xf8], edi
jg 0x1004566e
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], ecx
push 0xfffffffffffffffd
mov dword [ebp - 0x38], 0xd49598aa
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x1b0]
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 0x4039ee49
push edi
call fcn.100214a3
mov dword [ebp - 0x2c], 0x2d50
mov dword [ebp - 0x28], ebx
jmp 0x1004564a
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1b0]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1004563b
inc dword [ebp - 0x2c]
lea ecx, [ebp - 0x1b0]
call fcn.10021525
inc dword [ebp - 0xf8]
push 1
pop ecx
cmp dword [ebp - 0xf8], edi
jle 0x100455f5
dec dword [ebp - 0x40]
jns 0x10045579
xor esi, esi
inc esi
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x38], eax
or dword [ebp - 4], 0xffffffff
call fcn.10021525
cmp dword [ebp - 0x5c], 0
jne 0x10045768
cmp byte [ebp - 0x54], 0
je 0x100456b3
cmp dword [ebp - 0x48], esi
jne 0x100456b3
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp + 8]
add dword [ecx + 8], eax
mov ecx, dword [ebp - 0x30]
push dword [ebp - 0x20]
mov eax, dword [ecx]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x44], eax
mov eax, dword [ecx]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], ecx
call fcn.100596b9
pop ecx
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x78]
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], ebx
push eax
push dword [ebp - 0x20]
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
call fcn.10049043
mov eax, dword [ebp - 0x20]
mov edi, ebx
mov ecx, dword [ebp - 0x78]
test eax, eax
jle 0x10045747
mov eax, edi
and eax, 0x80000001
jns 0x10045710
dec eax
or eax, 0xfffffffe
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x44]
add eax, edi
add eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x38]
jmp 0x10045725
lea eax, [edx + 1]
cdq
idiv dword [ebp - 0x20]
cmp word [ecx + edx*2], bx
jne 0x10045722
mov eax, dword [ebp - 0x30]
mov word [ecx + edx*2], si
mov al, byte [edx + eax]
mov edx, dword [ebp - 0x2c]
mov byte [edi + edx], al
inc edi
mov eax, dword [ebp - 0x20]
cmp edi, eax
jl 0x10045702
mov esi, dword [ebp + 8]
mov dword [esi], eax
mov eax, dword [ebp - 0x2c]
mov dword [esi + 4], eax
test ecx, ecx
je 0x1004576b
push ecx
call fcn.1005fbc7
pop ecx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
jmp 0x1004576b
mov esi, dword [ebp + 8]
xor eax, eax
lea ecx, [ebp - 0x158]
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x28], 0x2758e92e
mov dword [ebp + 8], eax
push eax
call fcn.100214a3
mov dword [ebp - 0x48], 0xaafa
xor edi, edi
mov dword [ebp + 8], 0x9236f914
inc edi
mov dword [ebp - 0x44], 0x919139f4
mov dword [ebp + 8], ebx
jmp 0x100457b3
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], ebx
inc dword [ebp + 8]
cmp dword [ebp + 8], edi
jl 0x100457a4
mov dword [ebp + 8], ebx
jmp 0x100457ca
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x170], ebx
inc dword [ebp + 8]
cmp dword [ebp + 8], 2
jl 0x100457bd
cmp dword [ebp - 0x34], ebx
jne 0x100457e4
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp eax, edi
setl cl
mov dword [ebp + 8], ecx
cmp dword [ebp - 0x28], ebx
je 0x1004581f
cmp dword [ebp - 0x34], ebx
je 0x1004581f
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + 8]
dec eax
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x28]
mov dword [ebp + 8], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x158]
mov dword [eax], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x48]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x48]
mov dword [ebp + 8], eax
mov eax, dword [ebp + 8]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x44]
setge dl
xor eax, eax
cmp edx, 0x32a5
setne al
xor edx, edx
cmp eax, ecx
lea ecx, [ebp - 0x158]
setne dl
mov dword [ebp - 0x16c], edx
call fcn.10021525
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret