Function at 0x1001c912
Capabilities:
Accept command line arguments
Delete directory
Get graphical window text
Identify system language via api
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1008c175
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x228
movdqa xmm0, xmmword [0x10008400]
lea eax, [esp + 0x1d8]
push ebx
push esi
push edi
mov dword [esp + 0x4c], ecx
xor ebx, ebx
push dword [esp + 0x4c]
lea ecx, [esp + 0x6c]
mov dword [esp + 0xe0], edx
push eax
lea eax, [esp + 0x1dc]
mov dword [esp + 0x70], ebx
push eax
push ebx
movdqu xmmword [esp + 0x1e4], xmm0
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
call fcn.1001c10b
mov dword [esp + 0x18], 5
push 3
mov dword [esp + 0x20], 0x1d0b827b
pop eax
mov dword [esp + 0x24], ebx
mov dword [esp + 0x18], ebx
push 1
pop esi
cmp dword [esp + 0x18], eax
jg 0x1001ca49
mov dword [esp + 0x30], 0x40ca7005
xor ecx, ecx
mov dword [esp + 0x30], 0xfffffffd
mov dword [esp + 0x28], 0xbc22
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x68]
mov eax, dword [esi + eax*4]
cmp eax, dword [esi + edx*4]
setle cl
imul ecx, dword [esi + edi*4]
test ecx, ecx
jne 0x1001c9e8
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x68]
mov ecx, dword [eax + ecx*4]
sub ecx, dword [eax + edx*4]
je 0x1001ca6d
push 3
pop edi
mov dword [esp + 0x28], edi
cmp dword [esp + 0x28], ebx
jl 0x1001ca20
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x68]
cmp dword [eax + ecx*4], ebx
jne 0x1001ca20
dec dword [esp + 0x28]
jns 0x1001ca0d
xor esi, esi
inc esi
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1001ca3b
push ebx
push 0x88b
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edi
jle 0x1001c9a9
lea ecx, [esp + 0x68]
call fcn.1001ac9b
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [esp + 0x28], 0xc03342eb
mov dword [esp + 0x30], ebx
mov dword [esp + 0x28], ebx
jmp 0x1001cc27
xor esi, esi
mov dword [esp + 0x20], 0x67b
inc esi
mov dword [esp + 0x3c], esi
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1001ca8d
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
cmp dword [esp + 0x20], ebx
jg 0x1001cb27
mov ecx, dword [esp + 0x68]
cmp dword [ecx + 4], ebx
je 0x1001cae0
mov eax, dword [esp + 0x20]
mov edx, 0xfff9
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x3c], 0x4605dd88
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
neg eax
sbb eax, eax
neg eax
cmp eax, esi
sbb eax, eax
inc eax
cmp edx, eax
sbb eax, eax
inc eax
cmp eax, dword [ecx + 4]
je 0x1001cae4
cmp dword [esp + 0x1c], ebx
jne 0x1001cae4
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x68]
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, dword [eax]
mov eax, dword [esp + 0x1c]
setg cl
add eax, ecx
je 0x1001cb10
mov ecx, dword [esp + 0x18]
mov edx, esi
mov eax, dword [esp + 0x68]
cmp dword [eax + ecx*4], ebx
jne 0x1001cb12
mov edx, ebx
mov eax, dword [esp + 0x20]
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, 0x1e97
mov ecx, esi
jne 0x1001cb29
mov ecx, ebx
mov eax, dword [esp + 0x28]
sub ecx, eax
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x1c]
push 3
mov dword [esp + 0x28], eax
pop edi
jmp 0x1001ca23
mov dword [esp + 0x2c], ebx
jmp 0x1001cb5c
mov eax, dword [esp + 0x2c]
mov dword [esp + eax*4 + 0x130], 0xfffffffe
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], 4
jl 0x1001cb49
mov dword [esp + 0x134], 4
jmp 0x1001cc01
push dword [esp + 0x4c]
movdqa xmm0, xmmword [0x100083e0]
lea eax, [esp + 0x1d8]
push eax
lea eax, [esp + 0x1cc]
mov dword [esp + 0xe8], ebx
push eax
push ebx
lea ecx, [esp + 0xf0]
mov dword [esp + 0xf4], ebx
movdqu xmmword [esp + 0x1d4], xmm0
mov dword [esp + 0xf8], ebx
call fcn.1001c10b
push 3
mov dword [esp + 0x24], 2
pop eax
mov dword [esp + 0x20], eax
cmp dword [esp + 0x20], ebx
jl 0x1001cbee
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0xe0]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov eax, dword [esp + 0x28]
dec dword [esp + 0x20]
jns 0x1001cbcf
lea ecx, [esp + 0xe0]
call fcn.1001ac9b
inc dword [esp + 0x134]
cmp dword [esp + 0x134], 7
je 0x1001cb73
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1001cc23
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
dec dword [esp + 0x28]
cmp dword [esp + 0x28], 0xffffffe6
jle 0x1001cb43
mov dword [esp + 0x20], 2
mov dword [esp + 0x28], 0x4c506d44
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x28], ebx
je 0x1001cc6e
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1001ccb8
push 0x1668
push 0x23d2
push 0xbe3
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
jmp 0x1001ccb8
mov dword [esp + 0x28], ebx
jmp 0x1001ccb1
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1001cc85
push ebx
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [esp + 0x20], ebx
jmp 0x1001cca6
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1001cca2
push ebx
push 0x264c
push ebx
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 0x38
jle 0x1001cc8b
inc dword [esp + 0x28]
cmp dword [esp + 0x28], 0x30
jge 0x1001cc74
mov dword [esp + 0x28], ebx
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], 0x11e9a9d0
mov dword [esp + 0x30], 0x32c2a4e6
mov dword [esp + 0x2c], ebx
jmp 0x1001ccf1
mov eax, dword [esp + 0x2c]
mov dword [esp + eax*4 + 0x190], 0x97a4a12b
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], 4
jl 0x1001ccde
push 3
cmp dword [esp + 0x2c], ebx
je 0x1001cd4a
mov dword [esp + 0x28], 0xb64b5c6f
mov dword [esp + 0x2c], ebx
pop ecx
jmp 0x1001cd3b
mov dword [esp + 0x2c], 0xefa9d19a
mov dword [esp + 0x34], 0x4d0289a6
mov dword [esp + 0x2c], ebx
jmp 0x1001cd31
mov dword [esp + 0x34], 0xbf38c088
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], ecx
jle 0x1001cd25
inc dword [esp + 0x28]
cmp dword [esp + 0x28], ecx
jle 0x1001cd0f
dec dword [esp + 0x24]
jmp 0x1001ce2f
mov dword [esp + 0x18], 5
pop eax
mov dword [esp + 0x20], eax
cmp dword [esp + 0x20], ebx
jl 0x1001ce2f
mov dword [esp + 0x18], esi
mov dword [esp + 0x38], 0x66ef
mov eax, dword [esp + 0x20]
cmp dword [esp + eax*4 + 0x190], ebx
jne 0x1001cd82
mov eax, ebx
cmp dword [esp + 0x14], ebx
je 0x1001cd84
mov eax, esi
cmp eax, dword [esp + 0x28]
jne 0x1001cda4
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + eax*4 + 0x190]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + eax*4 + 0x190]
mov eax, dword [esp + 0x14]
xor edx, edx
inc eax
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x18]
cmp eax, ecx
setl dl
mov dword [esp + 0x14], edx
mov dword [esp + 0x2c], ebx
cmp dword [esp + 0x2c], 0xfffffff4
jne 0x1001ce25
push 3
pop ecx
mov dword [esp + 0x24], 0xab3ae5d5
mov eax, dword [esp + 0x24]
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], ebx
jmp 0x1001ce14
mov dword [esp + 0x38], ebx
jmp 0x1001ce0a
mov dword [esp + 0x14], ebx
jmp 0x1001ce00
mov dword [esp + 0x24], 7
dec dword [esp + 0x24]
inc dword [esp + 0x14]
cmp dword [esp + 0x14], ecx
jle 0x1001cdf0
inc dword [esp + 0x38]
cmp dword [esp + 0x38], ecx
jle 0x1001cdea
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ecx
jle 0x1001cde4
dec dword [esp + 0x2c]
cmp dword [esp + 0x2c], 0xfffffff4
je 0x1001cdce
dec dword [esp + 0x20]
jns 0x1001cd61
mov dword [esp + 0x20], 6
mov eax, 0xf90350d8
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], eax
mov dword [esp + 0x24], 0xffffffff
push 0xfffffffffffffff7
pop eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x34], 0xfffffffb
mov dword [esp + 0x38], 0xee05243b
mov dword [esp + 0x2c], ebx
jmp 0x1001ce90
mov eax, dword [esp + 0x2c]
mov dword [esp + eax*4 + 0x20c], 0xd228d5fe
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], 4
jl 0x1001ce7d
push 0xfffffffffffffffc
pop ecx
cmp dword [esp + 0x20], ebx
je 0x1001cef3
xor edx, edx
inc edx
cmp dword [esp + 0x20], edx
jle 0x1001cead
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x124], eax
mov dword [esp + 0x218], eax
cmp eax, dword [esp + 0x20]
jl 0x1001ced8
mov eax, edx
cmp dword [esp + 0x128], ebx
jne 0x1001ceda
mov eax, ebx
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x6411d7fe
setne cl
lea eax, [ecx + 0x5d732ada]
test eax, eax
jne 0x1001cef5
mov edx, ebx
mov dword [esp + 0x24], edx
xor edx, edx
mov eax, dword [esp + 0x24]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
cmp eax, 0x1a094951
mov eax, dword [esp + 0x34]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [esp + 0x38], ecx
mov dword [esp + 0x38], ebx
jmp 0x1001cf43
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1001cf3f
push 0xd6c
push 0x265d
push ebx
call dword [sym.imp.GDI32.dll_PtInRegion]
dec dword [esp + 0x38]
cmp dword [esp + 0x38], 0xfffffffa
jge 0x1001cf24
push 3
mov dword [esp + 0x3c], 0x9ad59e57
mov dword [esp + 0x30], ebx
pop ecx
jmp 0x1001cf6a
mov eax, dword [esp + 0x2c]
mov dword [esp + eax*4 + 0x17c], ebx
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], ecx
jl 0x1001cf5b
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1001cf8d
push ebx
push ebx
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
push 2
pop esi
xor edi, edi
mov dword [esp + 0x38], esi
inc edi
cmp dword [esp + 0x38], ebx
jl 0x1001d15c
mov dword [esp + 0x20], 0xf0a290be
mov eax, dword [esp + 0x38]
cmp dword [esp + eax*4 + 0x17c], ebx
jne 0x1001d15c
mov dword [esp + 0x20], ebx
jmp 0x1001d148
push esi
lea ecx, [esp + 0x118]
call fcn.1001ac19
mov dword [esp + 0x14], ebx
jmp 0x1001cfe5
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0xcc], edi
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 4
jl 0x1001cfd6
mov dword [esp + 0x14], ebx
jmp 0x1001d008
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x114]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1001cff2
mov dword [esp + 0xd8], ebx
jmp 0x1001d12b
mov dword [esp + 0x24], ebx
mov dword [esp + 0x2c], ebx
jmp 0x1001d034
mov eax, dword [esp + 0x2c]
mov dword [esp + eax*4 + 0x54], 0x95aad853
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], esi
jl 0x1001d024
mov dword [esp + 0x58], ebx
cmp dword [esp + 0x58], esi
jg 0x1001d124
mov esi, dword [esp + 0x114]
mov dword [esp + 0x2c], 0x6a6c
mov eax, dword [esp + 0x38]
mov eax, dword [esp + eax*4 + 0x17c]
mov eax, dword [esp + 0xd8]
mov dword [esi + 4], eax
cmp dword [esp + 0x58], ebx
jg 0x1001d078
cmp dword [esp + 0x20], ebx
jne 0x1001d080
mov edx, ebx
cmp dword [esp + 0x2c], ebx
je 0x1001d082
mov edx, edi
mov eax, dword [esp + 0x58]
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x58]
setl cl
xor edx, edx
cmp ecx, 0x68729207
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
neg edx
sbb edx, edx
neg edx
mov ecx, dword [esp + eax*4 + 0x17c]
mov eax, dword [esp + 0xd8]
sub edx, eax
add ecx, edx
je 0x1001d0e3
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], bl
je 0x1001d112
push ebx
push 0x2ec
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
jmp 0x1001d112
mov dword [esp + 0x24], 0x90a
mov dword [esp + 0x2c], 2
cmp dword [esp + 0x2c], ebx
jl 0x1001d105
cmp dword [esp + 0x58], ebx
jne 0x1001d105
dec dword [esp + 0x2c]
jns 0x1001d0f9
mov eax, dword [esp + 0x114]
mov eax, dword [eax]
mov dword [esp + 0x24], eax
inc dword [esp + 0x58]
cmp dword [esp + 0x58], 2
jle 0x1001d04f
push 2
pop esi
inc dword [esp + 0xd8]
cmp dword [esp + 0xd8], esi
jle 0x1001d01a
lea ecx, [esp + 0x114]
call fcn.1001ac9b
inc dword [esp + 0x20]
cmp dword [esp + 0x20], esi
jle 0x1001cfc3
dec dword [esp + 0x38]
jns 0x1001cfa1
push 3
pop eax
mov dword [esp + 0x2c], 0xe60f951
lea ecx, [esp + 0x1a8]
mov dword [esp + 0x44], 0xb16b
push eax
call fcn.1001ac19
mov dword [esp + 0x23c], ebx
mov dword [esp + 0x14], 0xfb6318d5
push 3
mov dword [esp + 0x34], ebx
mov dword [esp + 0x1c], ebx
pop ecx
jmp 0x1001d1ab
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x98], 9
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ecx
jl 0x1001d198
mov dword [esp + 0x18], ebx
jmp 0x1001d1c7
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x74], 0xfb023ed1
inc dword [esp + 0x18]
cmp dword [esp + 0x18], esi
jl 0x1001d1b7
mov dword [esp + 0x18], ebx
jmp 0x1001d1e6
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x1f4], 0xffffffff
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ecx
jl 0x1001d1d3
mov dword [esp + 0x98], ebx
jmp 0x1001d293
mov dword [esp + 0x24], 0xfffffff9
cmp dword [esp + 0x14], ebx
jne 0x1001d2a1
mov dword [esp + 0x14], ebx
jmp 0x1001d286
mov eax, dword [esp + 0x14]
cmp dword [esp + eax*4 + 0x74], ebx
je 0x1001d260
mov eax, dword [esp + 0x14]
cmp dword [esp + eax*4 + 0x74], 9
jne 0x1001d231
mov eax, dword [esp + 0x14]
mov edx, ebx
cmp dword [esp + eax*4 + 0x74], ebx
je 0x1001d233
mov edx, edi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + eax*4 + 0x74]
mov eax, dword [esp + 0x14]
sub ecx, edx
xor edx, edx
mov eax, dword [esp + eax*4 + 0x74]
cmp eax, ecx
mov eax, dword [esp + 0x14]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
neg ecx
cmp ecx, 7
mov ecx, edi
je 0x1001d262
mov ecx, ebx
mov eax, dword [esp + 0x24]
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x98]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [esp + 0x1f4], ecx
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jle 0x1001d210
inc dword [esp + 0x98]
cmp dword [esp + 0x98], 0x14
jg 0x1001d1f8
push 0xfffffffffffffff8
pop esi
mov dword [esp + 0x40], ebx
lea ecx, [esp + 0x158]
mov dword [esp + 0x40], esi
mov eax, 0x598aaf0a
push 0xfffffffffffffffb
pop edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
push 2
call fcn.1001ac19
mov byte [esp + 0x23c], 1
mov dword [esp + 0x14], 0x9e6a
mov dword [esp + 0x1c], esi
push 2
mov dword [esp + 0x44], ebx
pop esi
jmp 0x1001d31d
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x158]
mov dword [eax + ecx*4], 0xfffd
inc dword [esp + 0x40]
cmp dword [esp + 0x40], esi
jl 0x1001d307
mov dword [esp + 0x40], ebx
jmp 0x1001d403
mov dword [esp + 0x24], 0x3248c66f
mov dword [esp + 0x34], 0x91c5
mov dword [esp + 0x30], edi
mov dword [esp + 0x30], 0x754320e3
mov dword [esp + 0x30], 0x7249aaed
mov dword [esp + 0x30], 0xb963ab19
mov dword [esp + 0x30], 0x3bd6525
mov dword [esp + 0x30], edi
mov dword [esp + 0x30], 1
cmp dword [esp + 0x24], ebx
jne 0x1001d38f
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1001d389
push 0xaa7
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov eax, dword [esp + 0x34]
jmp 0x1001d3ff
push dword [esp + 0x4c]
movdqa xmm0, xmmword [0x100083a0]
lea eax, [esp + 0x1f8]
push eax
lea eax, [esp + 0x1ec]
mov dword [esp + 0x104], ebx
push eax
push ebx
lea ecx, [esp + 0x10c]
mov dword [esp + 0x110], ebx
movdqu xmmword [esp + 0x1f4], xmm0
mov dword [esp + 0x114], ebx
call fcn.1001c10b
mov eax, dword [esp + 0x158]
lea ecx, [esp + 0xfc]
mov dword [esp + 0x30], 0x58fc5674
mov dword [esp + 0x24], 0x9964
inc dword [eax]
dec dword [esp + 0x24]
call fcn.1001ac9b
inc dword [esp + 0x40]
cmp dword [esp + 0x40], esi
jge 0x1001d32c
push 3
pop eax
xor edi, edi
mov dword [esp + 0x14], eax
inc edi
cmp dword [esp + 0x14], ebx
jl 0x1001d4ca
mov dword [esp + 0x24], ebx
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1001d437
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov eax, dword [esp + 0x14]
cmp dword [esp + eax*4 + 0x88], ebx
je 0x1001d4ba
mov eax, dword [esp + 0x14]
cmp dword [esp + eax*4 + 0x88], ebx
je 0x1001d455
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
xor edx, edx
mov ecx, dword [esp + eax*4 + 0x88]
sub ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
add ecx, dword [esp + eax*4 + 0x88]
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x24]
cmp eax, 0x67268f57
mov eax, dword [esp + 0x3c]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
test ecx, ecx
setns al
xor edx, edx
imul ecx, eax, 0xfffffffb
mov eax, dword [esp + 0x14]
mov eax, dword [esp + eax*4 + 0x88]
cmp ecx, eax
mov eax, dword [esp + 0x14]
setge dl
imul edx, dword [esp + eax*4 + 0x88]
mov eax, edi
test edx, edx
jne 0x1001d4bc
mov eax, ebx
mov dword [esp + 0x24], eax
dec dword [esp + 0x14]
jns 0x1001d421
lea ecx, [esp + 0x158]
mov byte [esp + 0x23c], bl
call fcn.1001ac9b
mov dword [esp + 0x30], 0x668451f1
mov dword [esp + 0x18], 0x1824a8c6
mov dword [esp + 0x1c], 0x5860bc23
mov dword [esp + 0x14], 0xfffffffa
mov dword [esp + 0x28], 0x4592404e
mov dword [esp + 0x3c], 0xb1c5adf8
mov dword [esp + 0x18], 0x1b
jmp 0x1001d816
mov dword [esp + 0x38], 0xffffffff
xor ecx, ecx
mov dword [esp + 0x20], 0x141b6ba0
inc ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x44], 0x9dfeee83
mov dword [esp + 0x40], ebx
jmp 0x1001d54b
mov eax, dword [esp + 0x40]
mov dword [esp + eax*4 + 0x50], ebx
inc dword [esp + 0x40]
cmp dword [esp + 0x40], ecx
jl 0x1001d53f
mov eax, dword [esp + 0x50]
mov eax, dword [esp + 0x50]
mov eax, dword [esp + 0x50]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
add eax, 0x4690c82c
cmp eax, dword [esp + 0x34]
jne 0x1001d584
mov edx, ecx
cmp dword [esp + 0x1c], ebx
jne 0x1001d586
mov edx, ebx
mov eax, dword [esp + 0x18]
xor ecx, ecx
cmp edx, eax
push 3
setle cl
pop eax
cmp eax, ecx
sbb eax, eax
xor edx, edx
inc eax
imul eax, dword [esp + 0x38]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x14]
cmp eax, ecx
setl dl
mov dword [esp + 0x28], edx
cmp dword [esp + 0x28], ebx
jne 0x1001d5c8
cmp dword [esp + 0x38], ebx
jne 0x1001d5c8
xor edi, edi
mov edx, ebx
inc edi
jmp 0x1001d5cd
xor edi, edi
inc edi
mov edx, edi
mov eax, dword [esp + 0x3c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x44]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x3c]
setne dl
xor ecx, ecx
sub edx, 0x40cc
cmp edx, eax
mov eax, dword [esp + 0x34]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x18]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x44]
setne cl
add ecx, 5
mov dword [esp + 0x24], ecx
xor ecx, ecx
cmp dword [esp + 0x24], eax
setle cl
xor eax, eax
cmp ecx, 0x250d
setg al
cmp eax, dword [esp + 0x18]
jg 0x1001d633
mov eax, dword [esp + 0x44]
cmp dword [esp + 0x38], ebx
je 0x1001d801
mov dword [esp + 0x28], edi
lea ecx, [esp + 0xbc]
mov dword [esp + 0x24], ebx
push esi
call fcn.1001ac19
mov dword [esp + 0x40], ebx
jmp 0x1001d66a
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0xbc]
mov dword [eax + ecx*4], edi
inc dword [esp + 0x40]
cmp dword [esp + 0x40], esi
jl 0x1001d658
mov eax, dword [esp + 0x14]
xor edx, edx
mov dword [esp + 0x20], ebx
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
add ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
cmp ecx, eax
mov eax, dword [esp + 0x1c]
setg dl
xor ecx, ecx
cmp edx, 0xb202
setne cl
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, 0xffffffff
setg al
xor edx, edx
cmp eax, 0x1f62131a
mov eax, dword [esp + 0x14]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [esp + 0x28], ecx
cmp dword [esp + 0x24], ebx
je 0x1001d75e
cmp dword [esp + 0x44], ebx
je 0x1001d7f3
lea ecx, [esp + 0xbc]
call fcn.1001ac9b
cmp dword [esp + 0x1c], ebx
jne 0x1001d744
mov eax, dword [esp + 0x18]
push 3
pop ecx
cmp ecx, eax
mov eax, dword [esp + 0x14]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [esp + 0x28]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [esp + 0x14]
setl cl
mov dword [esp + 0x24], ecx
xor ecx, ecx
cmp dword [esp + 0x24], eax
setne cl
mov dword [esp + 0x28], ecx
mov ecx, ebx
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
cmp dword [esp + 0x14], ebx
je 0x1001d746
mov ecx, edi
mov eax, dword [esp + 0x18]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebx
jmp 0x1001d835
mov dword [esp + 0x44], 0x2ec3
cmp dword [esp + 0x20], ebx
je 0x1001d7dd
mov dword [esp + 0x34], ebx
xor edx, edx
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x3c]
cmp eax, ecx
mov eax, dword [esp + 0x34]
setg dl
xor ecx, ecx
add edx, 0xf01e8351
cmp edx, eax
mov eax, dword [esp + 0x3c]
setl cl
mov dword [esp + 0x34], ecx
xor ecx, ecx
cmp dword [esp + 0x34], eax
setge cl
mov dword [esp + 0x28], ecx
cmp dword [esp + 0x28], ebx
je 0x1001d7b7
mov ecx, edi
cmp dword [esp + 0x24], ebx
jne 0x1001d7b9
mov ecx, ebx
mov eax, dword [esp + 0x18]
sub eax, ecx
imul eax, dword [esp + 0x20]
test eax, eax
je 0x1001d7d0
mov ecx, edi
cmp dword [esp + 0x44], ebx
jne 0x1001d7d2
mov ecx, ebx
mov eax, dword [esp + 0xbc]
mov dword [eax], ecx
jmp 0x1001d7ef
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1001d7ef
push ebx
call dword [sym.imp.USER32.dll_CreateIconIndirect]
cmp dword [esp + 0x3c], ebx
lea ecx, [esp + 0xbc]
call fcn.1001ac9b
jmp 0x1001d812
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1001d812
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xd
jle 0x1001d51a
jmp 0x1001d6f6
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x21c], ebx
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1001d826
push edi
lea ecx, [esp + 0x144]
call fcn.1001ac19
mov dword [esp + 0x30], 0x8872fa4a
mov dword [esp + 0x30], 0xa164e62b
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x30], esi
mov dword [esp + 0x1c], ebx
jmp 0x1001d880
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x140]
mov dword [eax + ecx*4], 0x1f7e2799
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jl 0x1001d86a
mov eax, dword [esp + 0x140]
lea ecx, [esp + 0x140]
mov byte [esp + 0x23c], bl
mov dword [eax], 0xfffffff2
call fcn.1001ac9b
push 3
mov dword [esp + 0x18], ebx
pop edx
jmp 0x1001d8c5
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1a8]
mov dword [eax + ecx*4], 0xe57f6cc9
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edx
jl 0x1001d8af
xor eax, eax
mov dword [esp + 0x3c], 0xfffffffa
inc eax
mov dword [esp + 0x14], 0xb7c7ce53
mov dword [esp + 0x34], eax
lea ecx, [esp + 0xa4]
mov dword [esp + 0x24], eax
push eax
call fcn.1001ac19
mov dword [esp + 0x18], 0xf0aa
xor edx, edx
mov dword [esp + 0x20], 0x6193
inc edx
mov dword [esp + 0x34], edx
mov dword [esp + 0x1c], ebx
jmp 0x1001d926
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0xa4]
mov dword [eax + ecx*4], 0x66f5a9c4
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edx
jl 0x1001d910
dec dword [esp + 0x18]
mov dword [esp + 0x34], edx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
jne 0x1001d946
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x3c]
sub ecx, eax
mov eax, dword [esp + 0xa4]
imul ecx, dword [eax]
mov eax, dword [esp + 0x24]
imul edx, ecx, 0x639e
xor ecx, ecx
sub edx, eax
mov eax, dword [esp + 0xa4]
cmp dword [eax], edx
setge cl
xor eax, eax
cmp ecx, 0x1c84132d
setne al
xor edx, edx
mov dword [esp + 0x34], eax
xor ecx, ecx
mov eax, dword [esp + 0x34]
inc edx
mov eax, dword [esp + 0x14]
cmp eax, edx
setg cl
mov dword [esp + 0x24], ecx
cmp dword [esp + 0x24], ebx
jne 0x1001d9ac
mov eax, dword [esp + 0xa4]
cmp dword [eax], ebx
mov eax, ebx
je 0x1001d9ae
mov eax, edx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
cmp dword [esp + 0x14], eax
jle 0x1001d9ea
mov dword [esp + 0x30], 0x8d535dd2
mov dword [esp + 0x18], 0xffffffef
jmp 0x1001d9de
mov dword [esp + 0x24], 0x23020f62
dec dword [esp + 0x24]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x21
jg 0x1001d9ce
jmp 0x1001da90
mov dword [esp + 0x24], 0xb4b1
mov dword [esp + 0x1c], ebx
jmp 0x1001da0b
mov eax, dword [esp + 0x1c]
mov dword [esp + eax*4 + 0x188], 0xffffffff
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], esi
jl 0x1001d9f8
mov dword [esp + 0x18], ebx
jmp 0x1001da7e
mov dword [esp + 0x20], 0xfffffff6
jmp 0x1001da5f
cmp byte [esp + 0x13], 0
je 0x1001da39
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
xor edx, edx
inc edx
mov dword [esp + 0x14], ebx
jmp 0x1001da55
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0xa4]
mov dword [eax + ecx*4], 0xf57f54ab
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edx
jl 0x1001da3f
dec dword [esp + 0x20]
cmp dword [esp + 0x20], 0xffffffe2
mov byte [esp + 0x13], bl
jge 0x1001da21
cmp byte [esp + 0x13], 0
je 0x1001da7a
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor edx, edx
inc edx
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x2b
jne 0x1001da17
mov eax, dword [esp + 0x24]
mov dword [esp + 0x188], eax
lea ecx, [esp + 0xa4]
call fcn.1001ac9b
mov eax, dword [esp + 0x2c]
xor eax, eax
inc eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], ebx
jmp 0x1001e38e
mov dword [esp + 0x2c], ebx
jmp 0x1001e380
mov dword [esp + 0x24], eax
lea ecx, [esp + 0x170]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x34], 0xfffffff6
mov dword [esp + 0x1c], 0xba29
mov dword [esp + 0x40], 0xffffffff
push 4
call fcn.1001ac19
xor edi, edi
mov dword [esp + 0x14], ebx
inc edi
jmp 0x1001db03
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0xc8], 0x329b3a00
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jl 0x1001daf0
mov dword [esp + 0x14], ebx
jmp 0x1001db22
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x170]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 4
jl 0x1001db0f
mov eax, dword [esp + 0x24]
xor edx, edx
cmp eax, 0xd42c
mov eax, dword [esp + 0x3c]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x1c]
sub ecx, 0xaf8b5131
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [esp + 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xfc371865
setl cl
cmp eax, ecx
sbb eax, eax
neg eax
mov dword [esp + 0xc8], eax
je 0x1001db85
cmp dword [esp + 0x40], ebx
jne 0x1001db87
mov edi, ebx
mov eax, dword [esp + 0x24]
xor edx, edx
cmp eax, edi
mov eax, dword [esp + 0x24]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x170]
setg cl
mov dword [eax], ecx
lea ecx, [esp + 0x170]
call fcn.1001ac9b
mov dword [esp + 0x40], ebx
jmp 0x1001e36f
mov dword [esp + 0x1c], 0x3c7730f9
lea ecx, [esp + 0xb0]
push esi
call fcn.1001ac19
push 3
pop eax
mov byte [esp + 0x23c], al
lea ecx, [esp + 0xf0]
mov dword [esp + 0x64], 0xfffffff9
mov dword [esp + 0x18], 0xe075257
mov dword [esp + 0x24], ebx
mov dword [esp + 0x3c], 0x19583e35
push esi
call fcn.1001ac19
mov dword [esp + 0x34], 0x22cbd4da
mov dword [esp + 0x38], 0xffff
mov dword [esp + 0x14], ebx
jmp 0x1001dc2f
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0xb0]
mov dword [eax + ecx*4], 0x2a43
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1001dc19
mov dword [esp + 0x14], ebx
jmp 0x1001dc51
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0xf0]
mov dword [eax + ecx*4], 6
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1001dc3b
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1001dc6a
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommState]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0xb0]
cmp dword [eax], 0x11accbad
jg 0x1001ddbc
mov dword [esp + 0x28], 0xa00d0e75
xor edi, edi
mov dword [esp + 0x30], 0x8700d35d
inc edi
mov dword [esp + 0x30], 8
mov dword [esp + 0x30], 0x7d0d1d8
mov dword [esp + 0x20], esi
mov dword [esp + 0x14], 0x6728ad64
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x30], ebx
mov dword [esp + 0x30], 0x366e5232
mov dword [esp + 0x30], 0x200d40a7
mov dword [esp + 0x30], 0xb71808ad
mov dword [esp + 0x30], ebx
mov dword [esp + 0x24], 0xfffb
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x1c], ebx
jmp 0x1001dcfa
mov eax, dword [esp + 0x1c]
mov dword [esp + eax*4 + 0x60], 4
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jl 0x1001dcea
cmp dword [esp + 0x28], ebx
je 0x1001dd68
mov eax, dword [esp + 0x60]
xor edx, edx
dec dword [esp + 0x24]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x38]
cmp eax, ecx
mov eax, dword [esp + 0xf0]
setle dl
mov dword [eax + 4], edx
mov edx, edi
mov eax, dword [esp + 0x34]
inc dword [esp + 0x34]
cmp eax, 0x3d38
mov eax, dword [esp + 0x18]
cmovl edx, ebx
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x24]
sub ecx, dword [esp + 0x64]
mov eax, dword [esp + 0xb0]
imul ecx, dword [eax]
imul eax, ecx, 0x15e
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x14]
xor edx, edx
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x3c]
cmp ecx, eax
setne dl
mov dword [esp + 0x1c], edx
mov eax, dword [esp + 0x1c]
sub eax, 0xaf8b5131
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x30], eax
jne 0x1001dd9e
mov eax, dword [esp + 0xb0]
cmp dword [eax], ebx
je 0x1001dda6
mov edx, edi
cmp dword [esp + 0x20], ebx
jne 0x1001dda8
mov edx, ebx
mov eax, dword [esp + 0xb0]
xor ecx, ecx
cmp edx, dword [eax]
setle cl
mov dword [esp + 0x20], ecx
jmp 0x1001de04
xor eax, eax
mov dword [esp + 0x30], 0xeddd8d7c
inc eax
mov dword [esp + 0x3c], eax
cmp dword [esp + 0x3c], ebx
jl 0x1001ddf3
mov dword [esp + 0x24], 6
mov dword [esp + 0x38], ebx
jmp 0x1001dde7
inc dword [esp + 0x24]
inc dword [esp + 0x38]
cmp dword [esp + 0x38], eax
jle 0x1001dddf
dec dword [esp + 0x3c]
jns 0x1001ddd1
mov ecx, dword [esp + 0x30]
xor edi, edi
mov eax, dword [esp + 0xf0]
inc edi
mov dword [eax + 4], ecx
lea ecx, [esp + 0xf0]
call fcn.1001ac9b
lea ecx, [esp + 0xb0]
mov byte [esp + 0x23c], bl
call fcn.1001ac9b
mov dword [esp + 0x18], 0xa339
lea ecx, [esp + 0x14c]
mov dword [esp + 0x3c], 0x9d44c039
mov dword [esp + 0x34], 0x37c1d6b3
mov dword [esp + 0x20], 0xffffffff
push edi
call fcn.1001ac19
mov dword [esp + 0x30], 0xc712
xor edx, edx
mov dword [esp + 0x24], 0x265879a2
inc edx
mov dword [esp + 0x1c], ebx
jmp 0x1001de7f
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14c]
mov dword [eax + ecx*4], 0x6bd0d42a
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edx
jl 0x1001de69
cmp dword [esp + 0x18], ebx
jne 0x1001deaf
mov eax, dword [esp + 0x18]
neg eax
add eax, eax
je 0x1001de9d
mov eax, edx
cmp dword [esp + 0x3c], ebx
jne 0x1001de9f
mov eax, ebx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
cmp eax, dword [esp + 0x3c]
mov eax, ebx
jne 0x1001deb1
mov eax, edx
mov dword [esp + 0x20], eax
cmp dword [esp + 0x20], ebx
je 0x1001dec1
cmp dword [esp + 0x3c], ebx
jne 0x1001dec3
mov edx, ebx
mov eax, dword [esp + 0x18]
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
add ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x3c]
cmp ecx, eax
mov eax, dword [esp + 0x18]
setle dl
sub eax, dword [esp + 0x18]
neg eax
sbb eax, eax
inc eax
add edx, eax
add edx, dword [esp + 0x18]
je 0x1001dff3
xor eax, eax
inc eax
cmp dword [esp + 0x40], eax
jle 0x1001dbbb
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], esi
jle 0x1001dab9
inc dword [esp + 0x44]
cmp dword [esp + 0x44], eax
jle 0x1001dab0
or edi, 0xffffffff
lea ecx, [esp + 0x1a8]
mov dword [esp + 0x23c], edi
call fcn.1001ac9b
mov dword [esp + 0x44], 0x8a87013d
xor ecx, ecx
mov dword [esp + 0x20], 0xfffffffb
inc ecx
mov dword [esp + 0x24], 0x3a0f0f5e
mov dword [esp + 0x30], 0xf2e07230
mov dword [esp + 0x1c], ebx
jmp 0x1001e3e3
mov eax, dword [esp + 0x1c]
mov dword [esp + eax*4 + 0x5c], edi
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], ecx
jl 0x1001e3d7
cmp dword [esp + 0x44], ebx
je 0x1001e415
cmp dword [esp + 0x44], edi
jae 0x1001e415
mov byte [esp + 0x13], bl
cmp byte [esp + 0x13], 0
je 0x1001e4e5
push 0x1cab
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x1001e4e5
mov dword [esp + 0x3c], 0x135e1f6f
mov dword [esp + 0x24], 9
mov dword [esp + 0x1c], ebx
jmp 0x1001e43a
mov eax, dword [esp + 0x1c]
mov dword [esp + eax*4 + 0x1a0], ecx
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], esi
jl 0x1001e42b
cmp dword [esp + 0x3c], ebx
jne 0x1001e490
mov eax, dword [esp + 0x20]
xor edx, edx
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x24]
cmp eax, ecx
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x3c]
setne dl
add ecx, 0x2f1e
add ecx, edx
xor edx, edx
cmp ecx, eax
setg dl
add edx, dword [esp + 0x5c]
mov eax, dword [esp + 0x20]
sub edx, 0x758b39d2
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
inc ecx
sub edx, eax
mov edx, ebx
je 0x1001e492
mov edx, ecx
mov eax, dword [esp + 0x20]
imul eax, edx
test eax, eax
jne 0x1001e4a1
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x5c]
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x5c], ebx
je 0x1001e4b9
cmp dword [esp + 0x20], ebx
jne 0x1001e4bb
mov ecx, ebx
mov eax, dword [esp + 0x44]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x44]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x1a4], edi
mov eax, dword [esp + 0xdc]
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, dword [esp + 0x4c]
mov esi, edx
mov edi, eax
call fcn.1001c8a0
mov ecx, dword [esp + 0x234]
add eax, esi
add eax, edi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret