Function at 0x100136af
Capabilities:
Check os version
Create pipe
Get common file path

Disassembly:
mov eax, 0x1006fe45
call fcn.1006f298
sub esp, 0xb34
mov dword [ebp - 0x1c], 0x8885
mov dword [ebp - 0x2c], 0x815cbcef
mov dword [ebp - 0x28], 0x822cb3a3
push ebx
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x34], 0x8de6
push esi
mov dword [ebp - 0x30], 0x378470ed
mov eax, dword [ebp - 0x1c]
push edi
mov byte [ebp - 0x57], dl
xor edx, edx
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
push 0
pop ebx
setle dl
cmp edx, dword [ebp - 0x28]
push 1
pop edx
jle 0x1001372c
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setne dl
imul edx, dword [ebp - 0x1c]
test edx, edx
je 0x10013729
xor edx, edx
inc edx
mov ecx, edx
jmp 0x1001372e
xor edx, edx
inc edx
mov ecx, ebx
xor eax, eax
cmp ecx, 0xced4
setne al
cmp eax, dword [ebp - 0x1c]
jl 0x10013743
cmp dword [ebp - 0x1c], ebx
je 0x1001374a
mov eax, edx
cmp dword [ebp - 0x34], ebx
jne 0x1001374c
mov eax, ebx
mov esi, 0xe0b
mov edi, 0x1550
cmp eax, dword [ebp - 0x30]
jne 0x1001376c
cmp dword [ebp - 0x30], ebx
je 0x1001376c
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xc4365de
jmp 0x1001379b
mov dword [ebp - 0x2c], 0x6a37bd55
mov dword [ebp - 0x10], 0xffffffe3
jmp 0x10013784
cmp dword [ebp - 0x2c], ebx
jne 0x1001378a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x17
jl 0x1001377c
mov byte [ebp - 0x35], bl
cmp byte [ebp - 0x35], 0
je 0x1001379b
push esi
push edi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x1c], 0x8885
xor edx, edx
mov dword [ebp - 0x2c], 0x815cbcef
mov dword [ebp - 0x28], 0x822cb3a3
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x34], 0x8de6
mov dword [ebp - 0x30], 0x378470ed
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
setle dl
cmp edx, dword [ebp - 0x28]
jle 0x100137f6
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setne dl
imul edx, dword [ebp - 0x1c]
test edx, edx
je 0x100137f6
xor edx, edx
inc edx
mov ecx, edx
jmp 0x100137fb
xor edx, edx
mov ecx, ebx
inc edx
xor eax, eax
cmp ecx, 0xced4
setne al
cmp eax, dword [ebp - 0x1c]
jl 0x10013810
cmp dword [ebp - 0x1c], ebx
je 0x10013817
mov eax, edx
cmp dword [ebp - 0x34], ebx
jne 0x10013819
mov eax, ebx
cmp eax, dword [ebp - 0x30]
jne 0x1001382f
cmp dword [ebp - 0x30], ebx
je 0x1001382f
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xc4365de
jmp 0x1001385e
mov dword [ebp - 0x2c], 0x6a37bd55
mov dword [ebp - 0x10], 0xffffffe3
jmp 0x10013847
cmp dword [ebp - 0x2c], ebx
jne 0x1001384d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x17
jl 0x1001383f
mov byte [ebp - 0x35], bl
cmp byte [ebp - 0x35], 0
je 0x1001385e
push esi
push edi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x44], 0x3a4a
lea ecx, [ebp - 0x760]
mov dword [ebp - 0x44], 0x6aabecba
mov dword [ebp - 0x44], 5
mov dword [ebp - 0x44], 0xae8c9f36
push 3
call fcn.1000f401
push 0xfffffffffffffffa
pop esi
push 3
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x100138a8
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x760]
mov dword [eax + ecx*4], 0x87f2fb5a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10013895
mov dword [ebp - 0x18], ebx
jmp 0x100138c3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x644], 0xfffffffd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100138b2
inc dword [ebp - 0x63c]
lea ecx, [ebp - 0x760]
call fcn.1000fd61
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], 0xfffe
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], 0x9c3cbaa6
mov dword [ebp - 0x2c], 0x2152
cmp dword [ebp - 0x2c], 0x10f8
jge 0x10013983
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x158]
push eax
push 0x100082a0
call fcn.10055adb
mov esi, dword [ebp - 0x158]
add esp, 0x10
mov ecx, dword [ebp - 0x130]
mov eax, esi
cdq
idiv ecx
mov eax, ecx
sub eax, edx
cdq
idiv ecx
mov edi, edx
test edi, edi
cmove edi, ecx
lea eax, [edi + esi]
cmp eax, dword [ebp - 0x194]
jle 0x10013960
push 0x100081f0
call fcn.10055ec6
pop ecx
jmp 0x10013983
push edi
push 0x100081c4
call fcn.10055d0f
add edi, dword [ebp - 0x130]
mov eax, dword [ebp - 0x158]
add eax, edi
pop ecx
pop ecx
cmp eax, dword [ebp - 0x194]
jle 0x10013960
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 0x1ec7
cmp dword [ebp - 0x2c], 0x10b8
push 7
pop esi
jge 0x10013a21
lea eax, [ebp - 0x2e0]
push eax
push 0x10008178
call fcn.10055adb
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e0]
mov eax, ecx
and eax, 0x80000003
jns 0x100139c8
dec eax
or eax, 0xfffffffc
inc eax
je 0x10013a16
mov eax, ecx
cdq
idiv esi
test edx, edx
je 0x10013a16
mov eax, ecx
push 0x2c
cdq
pop esi
idiv esi
test edx, edx
je 0x10013a16
mov eax, ecx
push 0x2f
cdq
pop esi
idiv esi
test edx, edx
je 0x10013a16
mov eax, ecx
push 0x4a
cdq
pop esi
idiv esi
test edx, edx
je 0x10013a16
mov eax, ecx
push 0x4d
cdq
pop esi
idiv esi
test edx, edx
je 0x10013a16
mov eax, ecx
lea ecx, [esi + 0x55]
cdq
idiv ecx
test edx, edx
je 0x10013a16
push 0x100082b4
jmp 0x10013a1b
push 0x100082ac
call fcn.10055d0f
pop ecx
mov dword [ebp - 0x2c], 0xfffffffb
push 2
mov dword [ebp - 0x44], 0x689bb5c
mov dword [ebp - 0x10], ebx
pop edi
jmp 0x10013a48
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa8], 0xd7d7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10013a37
xor eax, eax
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], ebx
jne 0x10013a97
mov ecx, dword [ebp - 0xa8]
xor edx, edx
mov eax, dword [ebp - 0xa4]
cmp eax, ecx
setle dl
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], ebx
jne 0x10013a85
cmp dword [ebp - 0xa4], ebx
jne 0x10013a85
mov eax, ebx
jmp 0x10013a88
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x30]
xor eax, eax
movdqa xmm0, xmmword [0x10008a10]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xcce3f50e
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
xor edx, edx
inc edx
cmp ecx, edx
lea ecx, [ebp - 0x97c]
push ecx
setg al
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x30]
neg eax
movdqu xmmword [ebp - 0x97c], xmm0
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x96c]
push eax
push ecx
mov dword [ebp - 0x20], 0x8885
lea ecx, [ebp - 0x65c]
call fcn.1000f45f
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], ebx
jmp 0x10013b65
mov dword [ebp - 0x1c], 0x6b950ba1
mov dword [ebp - 0x1c], ebx
jmp 0x10013b5c
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x65c]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x10013b44
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jle 0x10013b38
lea ecx, [ebp - 0x65c]
call fcn.1000fd61
mov dword [ebp - 0x54], 0x815cbcef
or esi, 0xffffffff
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], ebx
jmp 0x10013ce3
xor ecx, ecx
mov dword [ebp - 0x24], 0xffff
inc ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x2c], 0xbaaa4f69
mov dword [ebp - 0x10], ebx
jmp 0x10013bb4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x438], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10013ba7
inc dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
add edx, 0x4f2887cf
cmp edx, eax
setl cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], 0xef8a6ebb
cmp dword [ebp - 0x24], ebx
je 0x10013c1b
cmp dword [ebp - 0x434], ebx
je 0x10013c1b
xor edx, edx
inc edx
mov eax, edx
jmp 0x10013c20
xor edx, edx
mov eax, ebx
inc edx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jne 0x10013c2f
mov ecx, ebx
cmp dword [ebp - 0x18], ebx
je 0x10013c31
mov ecx, edx
xor eax, eax
cmp ecx, 0xf4c5
sete al
imul eax, dword [ebp - 0x434]
test eax, eax
je 0x10013c68
mov byte [ebp - 0x35], bl
cmp byte [ebp - 0x35], 0
je 0x10013ce0
push 0x1f85
push ebx
push 0x1210
push ebx
call dword [sym.imp.USER32.dll_LoadStringA]
jmp 0x10013ce0
push edx
lea ecx, [ebp - 0x4d8]
call fcn.1000f401
xor edx, edx
mov dword [ebp - 0x10], ebx
inc edx
jmp 0x10013c8b
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x4d8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10013c7c
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4d8]
mov dword [eax], edx
mov dword [ebp - 0x10], 0xffffffeb
jmp 0x10013ccf
mov dword [ebp - 0x28], edx
xor ecx, ecx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], edi
mov edx, dword [ebp - 0x28]
add edx, 0x17c9
imul edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
push 1
cmp edx, eax
pop edx
setle cl
neg ecx
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 9
jl 0x10013ca4
lea ecx, [ebp - 0x4d8]
call fcn.1000fd61
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffe
je 0x10013b8e
mov byte [ebp - 0x35], bl
cmp byte [ebp - 0x35], 0
je 0x10013d01
push 0x124f
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x28], 0x822cb3a3
xor eax, eax
inc eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x2c], 0xffff
mov dword [ebp - 0x30], 0xdba1dd79
mov byte [ebp - 0x35], bl
cmp byte [ebp - 0x35], 0
je 0x10013d41
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov ecx, dword [ebp - 0x1c]
setle dl
sub ecx, 0xfffb
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp edx, ecx
mov ecx, 0xa54e
setg al
sub ecx, eax
add ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
dec dword [ebp - 0x34]
cmp ecx, eax
jge 0x10013d8a
xor eax, eax
lea edx, [eax + 1]
jmp 0x10013d8c
mov edx, ebx
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setl cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x2c], ebx
jne 0x10013daa
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x2c], 0x8de6
mov dword [ebp - 0x30], 0x378470ed
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x54]
cmp eax, ecx
setle dl
cmp edx, dword [ebp - 0x28]
jle 0x10013df6
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setne dl
imul edx, dword [ebp - 0x20]
test edx, edx
je 0x10013df6
xor edx, edx
inc edx
mov ecx, edx
jmp 0x10013dfb
xor edx, edx
mov ecx, ebx
inc edx
xor eax, eax
cmp ecx, 0xced4
setne al
cmp eax, dword [ebp - 0x20]
jl 0x10013e10
cmp dword [ebp - 0x20], ebx
je 0x10013e17
mov eax, edx
cmp dword [ebp - 0x2c], ebx
jne 0x10013e19
mov eax, ebx
push 0xfffffffffffffff8
pop ecx
cmp eax, dword [ebp - 0x30]
jne 0x10014143
cmp dword [ebp - 0x30], ebx
je 0x10014143
push 3
mov dword [ebp - 0x3c], ebx
lea ecx, [ebp - 0x580]
pop esi
mov dword [ebp - 0x1c], 0xc204e2db
mov dword [ebp - 0x10], 0x74952f34
mov dword [ebp - 0x28], 0xe45bbbde
push esi
call fcn.1000f401
xor eax, eax
mov dword [ebp - 4], ebx
inc eax
mov dword [ebp - 0x20], 0xaeb8efb6
mov dword [ebp - 0x50], ebx
lea ecx, [ebp - 0x4f0]
push eax
call fcn.1000f401
xor edx, edx
inc edx
mov byte [ebp - 4], dl
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x44], 0x74354af3
mov dword [ebp - 0x18], ebx
jmp 0x10013e95
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x580]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10013e86
mov dword [ebp - 0x18], ebx
jmp 0x10013eb2
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4f0]
mov dword [eax + ecx*4], 0xda73
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10013e9f
push 0xa
pop eax
mov dword [ebp - 0x1c], eax
jmp 0x10014111
mov dword [ebp - 0x18], 0xb143e95a
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x24], ebx
jmp 0x10013ee9
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x27c], 0x389f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10013ed8
mov byte [ebp - 0x35], bl
cmp byte [ebp - 0x35], 0
je 0x10013f09
push ebx
push ebx
push 0x412
push ebx
push ebx
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
xor edx, edx
inc edx
cmp dword [ebp - 0x18], ebx
jne 0x10013f23
mov dword [ebp - 0x10], 0xffff
cmp dword [ebp - 0x10], ebx
je 0x10013f1d
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], 0x29bf3901
jge 0x10013fff
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x54], 0x8317d239
mov dword [ebp - 0x18], 0xffffffea
cmp dword [ebp - 0x18], 0xd
jne 0x1001410e
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x58c]
push edx
call fcn.1000f401
xor edx, edx
mov dword [ebp - 0x24], ebx
inc edx
jmp 0x10013f84
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58c]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10013f71
mov dword [ebp - 0x28], 0xfffffff6
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, edx
mov eax, dword [ebp - 0x278]
setl cl
imul ecx, eax
mov eax, dword [ebp - 0x30]
imul eax, ecx
xor ecx, ecx
cmp eax, 0x2570d978
setle cl
xor eax, eax
cmp ecx, 9
setge al
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x58c]
mov dword [eax], ecx
lea ecx, [ebp - 0x58c]
mov eax, dword [ebp - 0x54]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x10], eax
call fcn.1000fd61
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xd
push 1
pop edx
je 0x10013f5a
jmp 0x1001410b
mov dword [ebp - 0x2c], 0x8a1d
mov dword [ebp - 0x44], 0x5f6f594a
mov dword [ebp - 0x54], 0x234d
cmp dword [ebp - 0x54], 0xd71
jge 0x10014071
lea eax, [ebp - 0x30c]
push eax
push 0x1000817c
call fcn.10055adb
pop ecx
pop ecx
mov ecx, dword [ebp - 0x30c]
mov eax, ecx
and eax, 0x80000001
jns 0x10014044
dec eax
or eax, 0xfffffffe
inc eax
je 0x10014057
lea eax, [ecx + 1]
imul eax, eax
cdq
and edx, esi
add eax, edx
sar eax, 2
push eax
jmp 0x10014065
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
lea ecx, [eax + 1]
imul ecx, eax
push ecx
push 0x100081bc
call fcn.10055d0f
pop ecx
pop ecx
mov edx, dword [ebp - 0x580]
xor eax, eax
inc eax
mov dword [ebp - 0x24], 0xfffffffd
mov dword [ebp - 0x54], 0xfffffffb
xor ecx, ecx
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x20]
cmp eax, 1
setle cl
sub ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0x278]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
sub eax, 0x99d6db78
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x278]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x30], ebx
je 0x10014106
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x50]
inc ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x4f0]
cmp ecx, dword [eax]
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0xfffffff6
setne cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x3c]
jle 0x10014106
xor eax, eax
inc eax
jmp 0x10014108
mov eax, ebx
mov dword [edx + 4], eax
xor edx, edx
inc edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1c
je 0x10013ec2
lea ecx, [ebp - 0x4f0]
call fcn.1000fd61
or esi, 0xffffffff
lea ecx, [ebp - 0x580]
mov dword [ebp - 4], esi
call fcn.1000fd61
mov dword [ebp - 0x3c], 0xc4365de
jmp 0x10014a8b
mov dword [ebp - 0x50], 0x6a37bd55
mov dword [ebp - 0x1c], 0x62d5e48d
mov dword [ebp - 0x1c], ecx
jmp 0x10014176
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], ebx
jmp 0x1001416d
mov dword [ebp - 0x3c], 0xddbc3707
cmp dword [ebp - 0x3c], ebx
jne 0x10014173
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x1c
jl 0x1001415e
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff1
je 0x10014156
mov dword [ebp - 0x10], 0xffffffe3
jmp 0x1001418d
cmp dword [ebp - 0x50], ebx
jne 0x10014193
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x17
jl 0x10014185
movdqa xmm0, xmmword [0x10008a60]
lea ecx, [ebp - 0x99c]
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x98c]
push ecx
mov dword [ebp - 0x24], 0xefa1e1c5
mov dword [ebp - 0x20], 0x21046671
push eax
mov dword [ebp - 0x10], 0xa8c98aac
push ecx
mov dword [ebp - 0x34], 0x674fa72d
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x1c], 0xfffffffd
movdqu xmmword [ebp - 0x99c], xmm0
call fcn.1000f45f
lea ecx, [ebp - 0x9bc]
mov dword [ebp - 4], edi
movdqa xmm0, xmmword [0x10008a50]
lea eax, [ebp - 0x9ac]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x674]
movdqu xmmword [ebp - 0x9bc], xmm0
call fcn.1000f45f
mov byte [ebp - 4], 3
cmp dword [ebp - 0x18], ebx
je 0x10014266
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], ebx
je 0x10014231
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
cmp dword [ebp - 0x18], eax
jge 0x10014266
xor eax, eax
lea edx, [eax + 1]
jmp 0x10014268
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setge dl
imul ecx, edx, 0xfa8f
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], ebx
jl 0x10014468
mov ebx, dword [ebp - 0x674]
mov dword [ebp - 0x54], ebx
push 5
pop eax
mov dword [ebp - 0x18], eax
xor edx, edx
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0x28], 0xfffa
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], 3
jg 0x10014410
mov dword [ebp - 0x30], 0x6ae20245
xor edx, edx
mov dword [ebp - 0x3c], 0xfc5a51f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c8]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x10], eax
mov edi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
sub ecx, 0x7903
mov esi, dword [ebp - 0x1c8]
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp dword [esi + edi*4], eax
mov eax, dword [ebp - 0x24]
setl cl
sub ecx, edx
add eax, ecx
je 0x10014350
or esi, 0xffffffff
xor edx, edx
mov dword [ebp - 0x30], esi
cmp dword [ebp - 0x30], edx
jne 0x1001433e
cmp dword [ebp - 0x18], edx
jne 0x1001433e
mov ecx, edx
jmp 0x10014343
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x30]
sub eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x100143fd
movdqa xmm0, xmmword [0x10008a20]
lea ecx, [ebp - 0x88c]
xor eax, eax
inc eax
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x87c]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x7c8]
movdqu xmmword [ebp - 0x88c], xmm0
call fcn.1000f45f
mov dword [ebp - 0x50], 0x6fef6f1a
cmp dword [ebp - 0x3c], 0
jne 0x100143da
mov edi, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x1c8]
mov eax, dword [ebp - 0x7c8]
mov ecx, dword [esi + 8]
sub ecx, dword [eax + 8]
xor eax, eax
cmp ecx, 0x266c0953
setl al
xor edx, edx
cmp eax, dword [esi + edi*4]
mov eax, dword [ebp - 0x50]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0x1c8]
sbb ecx, ecx
neg ecx
cmp ecx, dword [eax + ebx*4]
jne 0x100143da
xor eax, eax
jmp 0x100143dd
xor eax, eax
inc eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x7c8]
mov dword [ebp - 0x30], 0xe8bd61c0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c], eax
call fcn.1000fd61
xor edx, edx
or esi, 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x100142db
mov ebx, dword [ebp - 0x54]
push 2
pop edi
xor ecx, ecx
inc ecx
mov eax, ecx
cmp dword [ebp - 0x18], edx
jne 0x1001441c
mov eax, edx
neg eax
jne 0x1001442f
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x10], eax
jl 0x1001442f
cmp dword [ebp - 0x28], edx
jne 0x1001442f
mov ecx, edx
mov eax, dword [ebp - 0x1c8]
cmp dword [eax], ecx
jg 0x10014442
cmp dword [ebp - 0x28], edx
jne 0x10014442
mov eax, edx
jmp 0x10014445
xor eax, eax
inc eax
cmp edi, eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
setle dl
mov dword [ebx + 8], edx
dec dword [ebp - 0x1c]
jns 0x100142b8
xor ebx, ebx
lea ecx, [ebp - 0x674]
call fcn.1000fd61
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 4], esi
call fcn.1000fd61
mov dword [ebp - 0x18], 0x162c9cc1
lea ecx, [ebp - 0x508]
mov dword [ebp - 0x34], 0xa733e34b
mov dword [ebp - 0x28], 0x45d
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x1c], 0x56a4
push 3
call fcn.1000f401
push 4
pop eax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x92c]
movdqa xmm0, xmmword [0x10008a10]
lea eax, [ebp - 0x91c]
push ecx
push eax
push ecx
mov dword [ebp - 0x3c], 0x32d45ab6
lea ecx, [ebp - 0x770]
movdqu xmmword [ebp - 0x92c], xmm0
call fcn.1000f45f
mov dword [ebp - 0x50], esi
push 4
mov dword [ebp - 0x20], ebx
pop edx
cmp dword [ebp - 0x20], edx
jge 0x1001450a
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x354], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x100144f8
mov dword [ebp - 0x20], ebx
jmp 0x10014520
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x144], 0xfffffffe
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1001450f
mov dword [ebp - 0x20], ebx
jmp 0x10014539
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x508]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1001452a
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
sub edx, 0x92c6
neg edx
sbb edx, edx
inc edx
cmp edx, eax
mov edx, dword [ebp - 0x18]
setl cl
add edx, ecx
xor ecx, ecx
mov dword [ebp - 0x348], edx
mov eax, dword [ebp - 0x34]
cmp eax, 0xfffffff7
setg cl
xor eax, eax
cmp ecx, edx
mov ecx, 0xbae0fc36
setne al
cmp ecx, eax
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x18]
jge 0x100145a4
cmp dword [ebp - 0x18], ebx
jne 0x100145a4
mov ecx, ebx
jmp 0x100145a9
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
push 5
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x348]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x350]
setle dl
xor ecx, ecx
cmp edx, eax
pop eax
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x354]
cmp edx, eax
setle cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x348]
add eax, dword [ebp - 0x34]
je 0x10014619
cmp dword [ebp - 0x140], ebx
je 0x10014619
xor eax, eax
lea ecx, [eax + 1]
jmp 0x1001461b
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
push 7
setl dl
xor ecx, ecx
mov dword [ebp - 0x348], edx
mov eax, dword [ebp - 0x18]
cmp edx, eax
pop eax
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x508]
setg dl
mov dword [eax + 8], edx
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
cmp eax, 0x7f79
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x140]
jge 0x10014691
cmp dword [ebp - 0x1c], ebx
jne 0x10014691
mov eax, ebx
jmp 0x10014694
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x30]
sub ecx, eax
mov eax, dword [ebp - 0x770]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x770]
dec dword [ebp - 0x30]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x50], eax
call fcn.1000fd61
lea ecx, [ebp - 0x508]
mov dword [ebp - 4], esi
call fcn.1000fd61
mov byte [ebp - 0x11], bl
mov dword [ebp - 0x18], 0x49fe387
mov dword [ebp - 0x3c], esi
cmp dword [ebp - 0x18], ebx
je 0x10014715
push 7
pop eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x35], bl
cmp byte [ebp - 0x35], 0
je 0x10014815
push 0x141a
push ebx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
jmp 0x10014815
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x1c], 0xd8af8716
mov dword [ebp - 0x34], 0x949
mov dword [ebp - 0x24], 0xd58e7ea
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x20], esi
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jne 0x10014759
cmp dword [ebp - 0x18], ebx
je 0x10014765
cmp dword [ebp - 0x1c], ebx
je 0x10014765
xor eax, eax
lea edx, [eax + 1]
jmp 0x10014767
mov edx, ebx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
add eax, edx
add ecx, eax
mov dword [ebp - 0x3c], ecx
je 0x10014780
cmp dword [ebp - 0x1c], ebx
je 0x10014780
xor eax, eax
inc eax
jmp 0x10014782
mov eax, ebx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp esi, eax
mov eax, dword [ebp - 0x18]
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x30]
jl 0x100147ab
mov eax, dword [ebp - 0x34]
dec dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 4
setne al
xor edx, edx
add eax, 0xfff9
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setge dl
mov dword [ebp - 0x34], edx
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
setne dl
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x18], 0xf4aedf2f
cmp byte [ebp - 0x11], 0
je 0x10014a8b
xor edx, edx
inc edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], 0xacc4b7c7
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x44], 0xfa08
mov dword [ebp - 0x50], 0x617092ff
push 4
mov dword [ebp - 0x3c], 0xde87
mov dword [ebp - 0x10], ebx
pop ecx
jmp 0x10014860
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x450], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10014853
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 3
jg 0x100148da
mov dword [ebp - 0x28], 0x9bacde9e
xor ecx, ecx
mov dword [ebp - 0x28], esi
mov eax, dword [ebp - 0x20]
push 1
mov eax, dword [ebp + eax*4 - 0x450]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x450]
cmp eax, edx
mov eax, dword [ebp - 0x20]
setl cl
xor edx, edx
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x448]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
cmp edx, eax
pop edx
setne cl
mov dword [ebp - 0x24], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x1001486e
cmp dword [ebp - 0x44c], ebx
je 0x1001490d
mov dword [ebp - 0x44], 0x8d23
mov dword [ebp - 0x44], 0xfffffffe
mov dword [ebp - 0x44], 0xe66b6c7e
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x44], 0xa6b9
mov dword [ebp - 0x24], 9
jmp 0x10014a7b
mov dword [ebp - 0x10], edx
mov ecx, 0x2da0
mov dword [ebp - 0x28], 0xedcddcde
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x10], 0xffff
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sub ecx, eax
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setge dl
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x1c], 0xffffffe7
jmp 0x10014a71
mov dword [ebp - 0x30], 0xb03c7580
lea ecx, [ebp - 0x5b0]
push 3
call fcn.1000f401
mov dword [ebp - 0x18], ebx
jmp 0x10014981
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x5b0]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10014972
push 4
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x100149a0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x9f8], 0x413ed762
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001498f
mov dword [ebp - 0x20], ebx
jmp 0x10014a59
mov dword [ebp - 0x18], 0xfffd
cmp dword [ebp - 0x30], ebx
jne 0x10014a40
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setl dl
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x44c]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
neg ecx
sub eax, ecx
xor ecx, ecx
imul eax, eax, 0x8e6a
inc ecx
cmp ecx, eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x50]
test eax, eax
je 0x10014a00
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x5b0]
imul eax, dword [eax], 0x3c28
neg eax
sbb eax, eax
xor edx, edx
neg eax
cmp eax, 0x5c2
mov eax, dword [ebp - 0x30]
setge dl
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, 0x9ac8
setg al
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x10]
cmp eax, 0xf159e9dc
setg cl
mov dword [ebp - 0x9f8], ecx
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff1
jne 0x100149ad
lea ecx, [ebp - 0x5b0]
call fcn.1000fd61
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x20
jle 0x10014959
push 0xe0b
push 0x1550
call dword [sym.imp.USER32.dll_GetWindowLongA]
xor edx, edx
inc edx
mov dword [ebp - 0x3b4], edx
mov dword [ebp - 0x3b0], edx
mov dword [ebp - 0x3ac], edx
mov dword [ebp - 0x3a8], edx
mov dword [ebp - 0x20], 9
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
mov byte [ebp - 0x11], bl
je 0x10014ad2
cmp byte [ebp - 0x11], 0
je 0x10014aec
push ebx
push 0x1c91
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x10014ae9
cmp byte [ebp - 0x11], 0
je 0x10014aec
push ebx
push 0x1a4a
push 0x2a9
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
xor edx, edx
inc edx
mov dword [ebp - 0x20], 0x72226312
cmp dword [ebp - 0x20], ebx
je 0x10014b49
mov dword [ebp - 0x20], ebx
jmp 0x10014b3e
mov dword [ebp - 0x10], 0x576c5165
mov dword [ebp - 0x3c], edx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10014b23
push 0x527
push 0xc1d
call dword [sym.imp.USER32.dll_GetWindowLongW]
xor edx, edx
inc edx
mov dword [ebp - 0x10], 0xb
jmp 0x10014b35
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe4
jle 0x10014b2c
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffeb
jge 0x10014afd
jmp 0x10014c2c
mov dword [ebp - 0x18], 0xb4ef66b1
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 3
jg 0x10014bfa
jmp 0x10014b62
xor edx, edx
inc edx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], ebx
jmp 0x10014b70
dec dword [ebp - 0x18]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x10014b6a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x3b4]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x3b4], ecx
test ecx, ecx
jne 0x10014b95
mov esi, ebx
cmp dword [ebp - 0x24], ebx
je 0x10014b97
mov esi, edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
neg eax
push 0xffffffffffffffff
sbb eax, eax
xor edx, edx
inc eax
sub ecx, eax
sub ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp esi, ecx
pop esi
setl al
xor edx, edx
imul eax, dword [ebp - 0x24]
xor ecx, ecx
inc edx
cmp eax, edx
mov eax, dword [ebp - 0x20]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x24], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x10014b5f
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 3
jg 0x10014c2c
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x28]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10014c23
push 0xe3
call dword [sym.imp.USER32.dll_PostQuitMessage]
xor eax, eax
inc eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x10014c06
push 5
mov dword [ebp - 0x44], 0x3a4a
lea ecx, [ebp - 0x81c]
pop esi
mov dword [ebp - 0x44], 0x6aabecba
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x44], 0xae8c9f36
push 3
call fcn.1000f401
push 3
mov dword [ebp - 0x44], 0xfffffffa
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10014c76
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x81c]
mov dword [eax + ecx*4], 0x87f2fb5a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10014c63
mov dword [ebp - 0x18], ebx
jmp 0x10014c91
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x68c], 0xfffffffd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10014c80
inc dword [ebp - 0x684]
lea ecx, [ebp - 0x81c]
call fcn.1000fd61
xor ecx, ecx
mov dword [ebp - 0x1c], 0xaa32b1ce
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x10014cc4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x70], 0xfffffffd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10014cb6
mov dword [ebp - 0x18], ebx
jmp 0x10014cdf
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x344], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10014cce
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10014cf9
push ebx
push 0x19dc
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x10014f0e
mov dword [ebp - 0x20], 0x9f7fd1e8
lea ecx, [ebp - 0x1e4]
push 3
call fcn.1000f401
mov dword [ebp - 4], esi
mov dword [ebp - 0x28], 0xd3624b67
mov dword [ebp - 0x20], ebx
jmp 0x10014d3b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1e4]
mov dword [eax + ecx*4], 0x635290ce
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10014d28
xor ecx, ecx
mov dword [ebp - 0x20], ebx
inc ecx
jmp 0x10014d5a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x13c], 0x540fff06
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10014d49
mov dword [ebp - 0x20], ebx
jmp 0x10014d75
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x248], 0x2bc8f961
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10014d64
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jg 0x10014e8a
lea edi, [ebp - 0x7d8]
lea eax, [ebp - 0x7c8]
movdqa xmm0, xmmword [0x10008a70]
push ecx
push eax
push edi
lea ecx, [ebp - 0x1d8]
movdqu xmmword [ebp - 0x7d8], xmm0
call fcn.1000f45f
xor edx, edx
mov dword [ebp - 0x10], ebx
inc edx
jmp 0x10014dc9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x330], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10014db8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1e4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
add eax, ecx
xor ecx, ecx
cmp eax, 0xfffe
mov eax, dword [ebp - 0x1c]
setne cl
add eax, ecx
je 0x10014dfe
mov eax, dword [ebp - 0x1e4]
mov ecx, edx
cmp dword [eax], ebx
jne 0x10014e00
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
add eax, ecx
jne 0x10014e0a
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1d8]
xor ecx, ecx
xor esi, esi
inc esi
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x20]
cmp eax, esi
setg cl
xor eax, eax
cmp edx, ecx
setl al
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1d8]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x70], ecx
xor eax, eax
cmp ecx, esi
lea ecx, [ebp - 0x1d8]
setne al
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x1d8]
call fcn.1000fd61
inc dword [ebp - 0x20]
lea eax, [ebp - 0x7c8]
cmp dword [ebp - 0x20], ebx
jle 0x10014d92
xor ecx, ecx
inc ecx
inc dword [ebp - 0x340]
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jg 0x10014ef3
mov esi, dword [ebp - 0x1e4]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x70], 0x69d0
je 0x10014eda
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x70]
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jne 0x10014ed7
cmp dword [ebp - 0x340], ebx
jne 0x10014ed7
mov ecx, ebx
jmp 0x10014eda
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, dword [esi + 8]
push 1
setg al
mov dword [ebp - 0x13c], eax
inc dword [ebp - 0x20]
pop ecx
cmp dword [ebp - 0x20], ebx
jle 0x10014e9e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
call fcn.1000fd61
dec dword [ebp - 0x1c]
push 5
pop esi
jns 0x10014d05
mov dword [ebp - 0x18], 0xf5540d7f
mov dword [ebp - 0x3c], 0x18aa
cmp dword [ebp - 0x3c], 0x827
jge 0x10014fd1
lea eax, [ebp - 0x8c]
push eax
push 0x1000817c
call fcn.10055adb
pop ecx
pop ecx
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x3d0]
call fcn.1000f401
mov dword [ebp - 4], 6
cmp dword [ebp - 0x8c], 0
mov esi, dword [ebp - 0x3d0]
jle 0x10014f86
push 4
mov edi, esi
pop esi
push edi
push 0x1000817c
call fcn.10055adb
inc ebx
add edi, esi
pop ecx
pop ecx
cmp ebx, dword [ebp - 0x8c]
jl 0x10014f68
mov esi, dword [ebp - 0x3d0]
push dword [ebp - 0x3cc]
push esi
call fcn.10012087
mov edi, dword [ebp - 0x8c]
xor ebx, ebx
pop ecx
dec edi
mov edx, ebx
pop ecx
mov ecx, ebx
test edi, edi
jle 0x10014fb5
mov eax, dword [esi + ecx*4 + 4]
sub eax, dword [esi + ecx*4]
add ecx, 2
add edx, eax
cmp ecx, edi
jl 0x10014fa5
push edx
push 0x100081bc
call fcn.10055d0f
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x3d0]
call fcn.1000fd61
lea ecx, [ebp - 0x8ac]
xorps xmm0, xmm0
push ecx
lea eax, [ebp - 0x89c]
push eax
push ecx
lea ecx, [ebp - 0x6a4]
movdqu xmmword [ebp - 0x8ac], xmm0
call fcn.1000f45f
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x18], 0x10
jmp 0x1001516d
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x10015026
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7a8], 0x44d4e2b7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10015015
mov dword [ebp - 0x1c], ebx
jmp 0x10015160
xor edx, edx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x10], ebx
inc edx
jmp 0x10015050
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x774], 0x8a0c0902
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001503f
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 3
jg 0x10015121
mov esi, dword [ebp - 0x6a4]
mov dword [ebp - 0x10], 0xfffffff8
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10015081
call dword [sym.imp.KERNEL32.dll_GetACP]
xor edx, edx
inc edx
mov dword [ebp - 0x24], 0x2bb2
xor ecx, ecx
mov eax, dword [ebp - 0x20]
neg eax
cmp eax, dword [esi + 4]
setle cl
cmp ecx, dword [ebp - 0x20]
jg 0x100150a1
mov eax, ebx
cmp dword [ebp - 0x20], ebx
je 0x100150a3
mov eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x7a8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x1c]
jle 0x100150d8
mov dword [ebp - 0x28], 0xfffe
inc dword [ebp - 0x28]
jmp 0x10015111
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x10015111
mov dword [ebp - 0x10], ebx
jmp 0x10015106
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10015100
push 0x28b
push ebx
push ebx
push 0x1800
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jle 0x100150e5
dec dword [ebp - 0x24]
jns 0x100150e0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
push 1
pop edx
jle 0x10015068
mov dword [ebp - 0x20], ebx
jmp 0x10015157
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10015154
push ebx
push 0xa
pop eax
push eax
push 0x289
push 0x7fd
push 0x2581
push 0x2414
push 0x1a0d
push ebx
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xc
jl 0x10015126
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffe
jg 0x10015034
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10015009
lea ecx, [ebp - 0x6a4]
call fcn.1000fd61
xor edx, edx
inc edx
mov dword [ebp - 0x394], edx
mov dword [ebp - 0x390], edx
mov dword [ebp - 0x38c], edx
mov dword [ebp - 0x388], edx
mov dword [ebp - 0x20], 9
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
mov byte [ebp - 0x11], bl
je 0x100151c9
cmp byte [ebp - 0x11], 0
je 0x100151e3
push ebx
push 0x1c91
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x100151e0
cmp byte [ebp - 0x11], 0
je 0x100151e3
push ebx
push 0x1a4a
push 0x2a9
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
xor edx, edx
inc edx
mov dword [ebp - 0x20], 0x72226312
cmp dword [ebp - 0x20], ebx
je 0x1001533a
mov dword [ebp - 0x20], ebx
jmp 0x1001532b
mov dword [ebp - 0x10], 0x576c5165
mov dword [ebp - 0x3c], edx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10015221
push 0x527
push 0xc1d
call dword [sym.imp.USER32.dll_GetWindowLongW]
xor edx, edx
inc edx
mov dword [ebp - 0x10], 0xb
cmp dword [ebp - 0x10], 0xffffffe4
jg 0x10015328
mov dword [ebp - 0x3c], 0x13e1
cmp dword [ebp - 0x3c], 0x800
jge 0x10015313
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffeb
jge 0x100151fb
jmp 0x10015420
mov dword [ebp - 0x18], 0xb4ef66b1
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 3
jg 0x100153ee
jmp 0x10015353
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x10015365
dec dword [ebp - 0x18]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x1001535f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x394]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x394], ecx
test ecx, ecx
jne 0x1001538a
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 3
jg 0x10015420
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x28]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10015417
push 0xe3
call dword [sym.imp.USER32.dll_PostQuitMessage]
xor eax, eax
inc eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x100153fa
xor eax, eax
inc eax
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x20], 9
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
je 0x1001546e
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001555e
push ebx
push 0x1c91
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x1001555e
mov dword [ebp - 0x3c], 0x1df3
cmp dword [ebp - 0x3c], 0x10be
jge 0x10015544
lea eax, [ebp - 0x11c]
mov ecx, 0x10661f98
push eax
call fcn.10021ab3
mov esi, dword [ebp - 0x11c]
jmp 0x10015535
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1001555e
mov dword [ebp - 0x20], 0x72226312
cmp dword [ebp - 0x20], ebx
je 0x100155bb