Function at 0x100180ef
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a0
push ebx
push esi
push edi
push 6
mov dword [ebp - 0xac], ecx
pop ecx
push 1
mov dword [ebp - 0x14], 0xfffffff7
mov dword [ebp - 4], 0xada439be
pop esi
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x14]
push 0
mov dword [ebp - 4], eax
pop ebx
mov dword [ebp - 4], 0x16
cmp dword [ebp - 4], 0xfffffff2
push 0xffffffffffffffff
mov dword [ebp - 0xb4], edx
pop edi
jl 0x100181cf
mov dword [ebp - 0x18], 0x80444555
mov dword [ebp - 0x10], 0xf3faa32f
mov dword [ebp - 0x14], 0x1a05132d
mov dword [ebp - 0x10], esi
cmp dword [ebp - 0x18], ebx
je 0x1001815d
cmp dword [ebp - 4], ebx
jne 0x1001815f
mov esi, ebx
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x18]
cmp eax, edi
mov eax, dword [ebp - 4]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x14]
jl 0x1001818f
cmp dword [ebp - 4], ebx
je 0x1001818f
xor ecx, ecx
inc ecx
jmp 0x10018191
mov ecx, ebx
xor eax, eax
cmp ecx, 0xdae974ca
sete al
xor ecx, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp esi, eax
setle cl
mov dword [ebp - 0x10], ecx
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x100181bc
push ebx
call dword [sym.imp.USER32.dll_SetCursor]
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xfffffff2
push 1
pop esi
jge 0x1001813b
push 6
pop ecx
mov dword [ebp - 0x24], 0x1f2c29a3
mov dword [ebp - 0x14], 0xbe76d238
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], 0x3cc25429
mov dword [ebp - 0x14], 0xef068cd5
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x14], 0xfffffff6
mov dword [ebp - 0x14], 0xe6fc2e60
mov dword [ebp - 0x14], 0xfffffff7
mov dword [ebp - 0x14], 0x2e6c0b33
mov dword [ebp - 0x14], 0x3f6a0837
mov dword [ebp - 0x14], 0x3cef3392
mov dword [ebp - 0x14], 0x56e623b2
mov dword [ebp - 0x14], 0x8993dd61
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x14], 0xb4b26d8f
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], edi
push 5
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 0x890ba5fc
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x20], ebx
jmp 0x10018280
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x154], 0xfffa
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1001826f
mov dword [ebp - 0x24], ebx
jmp 0x100182b3
mov dword [ebp - 0x14], 0xdb785b64
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x100182a6
push 0xfbf
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], 0xd1a4e665
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1001828a
dec dword [ebp - 0x10]
mov dword [ebp - 0x24], 0xca4f833f
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x10], 0xfc3c737e
push 2
mov dword [ebp - 0x14], 0xa391de2f
mov dword [ebp - 0x20], ebx
pop edi
jmp 0x100182f2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x40], 0x8261
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x100182e4
mov dword [ebp - 0x68], esi
cmp dword [ebp - 0x68], ebx
jl 0x100183f8
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x20], ebx
jmp 0x10018319
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x34], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1001830f
mov dword [ebp - 0x34], ebx
jmp 0x100183e6
mov dword [ebp - 0xc], esi
mov dword [ebp - 0xc], esi
cmp dword [ebp - 0xc], ebx
jl 0x100183e3
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], esi
cmp dword [ebp - 4], ebx
jl 0x10018368
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10018363
push 0x241c
push 0x1aba
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
dec dword [ebp - 4]
jns 0x10018343
mov dword [ebp - 4], esi
cmp dword [ebp - 4], ebx
jl 0x100183da
mov dword [ebp - 0x18], 0x5493e623
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x64], ebx
je 0x100183c2
mov ecx, esi
cmp dword [ebp - 0x34], ebx
jne 0x1001838e
mov ecx, ebx
mov eax, dword [ebp - 0x6c]
imul eax, ecx
test eax, eax
je 0x100183a3
mov eax, dword [ebp - 0xc]
mov edx, esi
cmp dword [ebp + eax*4 - 0x40], ebx
jne 0x100183a5
mov edx, ebx
mov eax, dword [ebp - 0xc]
xor ecx, ecx
cmp edx, eax
setge cl
add ecx, dword [ebp - 4]
je 0x100183bc
cmp dword [ebp - 0x14], ebx
je 0x100183bc
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], eax
dec dword [ebp - 4]
jns 0x10018370
dec dword [ebp - 0xc]
jns 0x10018335
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jle 0x10018326
dec dword [ebp - 0x68]
jns 0x10018303
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
sub ecx, eax
cmp ecx, esi
setge dl
xor ecx, ecx
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x40]
cmp edx, eax
mov eax, dword [ebp - 0x40]
setl cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setg bl
xor ecx, ecx
cmp ebx, eax
setne cl
xor ebx, ebx
cmp ecx, dword [ebp - 0x40]
jl 0x1001844b
mov edx, ebx
cmp dword [ebp - 0x3c], ebx
je 0x1001844d
mov edx, esi
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp edx, eax
push 4
setl cl
xor edx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setle dl
xor ecx, ecx
cmp edx, eax
pop eax
sete cl
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x18], 0xb1cecb45
mov dword [ebp - 0x14], 0x2abb
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x2c], 0xf2fdad5
mov dword [ebp - 0x24], 0x79b69b2e
mov dword [ebp - 0x2c], 0x17473468
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x28], 0x4b67
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x20], ebx
jmp 0x100184e8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x194], 0xfffffff7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100184d7
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x24]
jg 0x1001850c
mov ecx, esi
cmp dword [ebp - 0x1c], ebx
jne 0x1001850e
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
dec dword [ebp - 0x2c]
cmp eax, ecx
mov eax, esi
cmovne eax, ebx
xor edx, edx
cmp eax, 0x7b332e0c
mov eax, dword [ebp - 0xcc]
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xada439be
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x20], ebx
jmp 0x1001856f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xe8], 0xbbca
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1001855e
push 3
pop ecx
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jl 0x10018752
mov dword [ebp - 4], 0x4cdb8faa
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x1001859f
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnregisterClassA]
push 3
pop ecx
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], ebx
jl 0x100185cc
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x100185c4
push ebx
push 0x23f9
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
dec dword [ebp - 4]
jns 0x100185a7
push 3
pop ecx
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], ebx
jl 0x10018749
mov dword [ebp - 0xc], 0xfffffffd
mov dword [ebp - 0x14], 4
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], ebx
jl 0x10018724
mov dword [ebp - 0x28], 0x8d3a18e4
mov dword [ebp - 0x18], 0xca779041
mov dword [ebp - 0x18], 0xe07ea4c5
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x1001871b
mov dword [ebp - 0x24], 0x17c10977
mov dword [ebp - 0x2c], 0xd058bbe5
mov dword [ebp - 0x20], ebx
jmp 0x10018633
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x128], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10018626
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ecx
jg 0x10018712
mov edx, 0xf15cc7c4
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xe8]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], esi
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xe8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xe8]
cmp edx, eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x24]
jge 0x100186fa
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20], 0x4c3f121f
cmp dword [ebp - 4], ebx
je 0x1001869d
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x18]
test eax, eax
jne 0x1001869f
mov esi, ebx
mov eax, dword [ebp - 0xc]
xor edx, edx
cmp eax, 0xff93
mov eax, dword [ebp - 0x128]
push 3
setle dl
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 4]
cmp eax, edx
setg cl
xor edx, edx
sub esi, ecx
add esi, dword [ebp - 0x20]
add esi, dword [ebp - 0x2c]
mov dword [ebp - 0x14], esi
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
sub ecx, 0x7a5e1371
cmp eax, ecx
mov eax, dword [ebp - 4]
setg dl
xor ecx, ecx
cmp edx, eax
mov edx, 0xf15cc7c4
setge cl
xor esi, esi
sub ecx, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x20], ecx
pop ecx
jmp 0x10018706
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x10018649
dec dword [ebp - 0x28]
jns 0x10018613
dec dword [ebp - 0xc]
jns 0x100185f2
mov dword [ebp - 0xc], ebx
jmp 0x1001873a
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xe8], 0x3b7d
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x10018729
dec dword [ebp - 4]
jns 0x100185d8
dec dword [ebp - 0x1c]
jns 0x10018584
mov dword [ebp - 4], ebx
jmp 0x10018764
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xc0], edi
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10018757
mov dword [ebp - 4], ebx
jmp 0x1001877f
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x98], 6
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x1001876e
mov dword [ebp - 0x24], ebx
jmp 0x10018893
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], ebx
jmp 0x100187a2
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x48], 0x77dd6887
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10018794
mov dword [ebp - 4], ebx
jmp 0x100187bd
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1a0], 7
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x100187ac
mov dword [ebp - 0x48], edi
cmp dword [ebp - 0x48], ebx
jl 0x10018890
or eax, 0xffffffff
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 4], ebx
jmp 0x100187f1
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa4], 0x302aff63
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x100187e0
mov dword [ebp - 4], ebx
jmp 0x10018808
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x130], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x100187fb
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0xc0], ebx
jne 0x1001886a
mov dword [ebp - 0x18], 0x8694a219
xor ebx, ebx
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xc0]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0xa4]
setg bl
imul edx, ebx
xor ecx, ecx
cmp edx, eax
setg cl
xor ebx, ebx
cmp ecx, dword [ebp - 0x14]
jle 0x1001886a
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0xc0]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0xc0]
mov dword [ebp - 0x98], 0x57a8360e
dec dword [ebp - 0x48]
jns 0x100187ce
push 3
pop ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x1001878c
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x100188b4
push ebx
push ebx
push 0xc1b
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0xc], 0x2ee6d058
or eax, 0xffffffff
mov dword [ebp - 0x10], 0xfffffffc
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x10], 0xcc09
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 4
mov dword [ebp - 0x10], 0xf7762406
mov dword [ebp - 0x14], 0xe525036f
mov dword [ebp - 0x1c], ebx
jmp 0x100188fd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd8], 7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x100188ec
mov eax, dword [ebp - 0xc]
xor edx, edx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
cmp ecx, eax
setne dl
mov dword [ebp - 0xd8], edx
xor edx, edx
mov dword [ebp - 0x10], esi
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, dword [ebp - 0xc]
je 0x10018941
mov edx, esi
cmp dword [ebp - 0xc], ebx
jne 0x10018943
mov edx, ebx
mov eax, dword [ebp - 0xc]
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
neg edx
sbb edx, edx
inc edx
sub eax, edx
je 0x1001897f
mov eax, esi
cmp dword [ebp - 0xd8], ebx
jne 0x10018981
mov eax, ebx
mov dword [ebp - 0x10], eax
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
cmp eax, 0xffffffff
setne cl
sub ecx, dword [ebp - 0xc]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, 0xdfdaf0b5
add ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0xc]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xfffb
setne al
xor edx, edx
cmp eax, 0xc7e7
mov eax, dword [ebp - 0xc]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0xfffffff7
setl al
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0xaabecba2
mov dword [ebp - 0x1c], ebx
jmp 0x10018a0f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x188], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10018a02
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x10018a30
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10018a2b
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
dec dword [ebp - 0x18]
jns 0x10018a1c
mov dword [ebp - 0x24], 0x2ee76f50
mov dword [ebp - 4], ebx
jmp 0x10018a49
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x140], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10018a3c
mov dword [ebp - 4], ebx
jmp 0x10018a64
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa0], 0xba394643
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10018a53
mov dword [ebp - 0xa0], ebx
jmp 0x10018ab6
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xb2bc40ed
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10018a8f
push 0x127b
call dword [sym.imp.USER32.dll_MessageBeep]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10018ab0
or eax, 0xffffffff
mov dword [ebp - 0x14], 0x79e672ca
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 0xa233712
dec dword [ebp - 0x18]
jns 0x10018a9a
inc dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], ebx
jle 0x10018a71
mov edi, dword [sym.imp.USER32.dll_RemoveMenu]
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10018ada
push 0x565
push 0x1cb2
push ebx
call edi
push 2
mov dword [ebp - 0x10], 0x5e314a5e
mov dword [ebp - 4], ebx
pop edx
jmp 0x10018af3
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x5c], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10018ae9
mov dword [ebp - 4], ebx
jmp 0x10018b0a
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa8], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10018afd
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], esi
jg 0x100194c6
mov dword [ebp - 0x14], esi
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10018b37
push 0x16b1
push 0x1071
call dword [sym.imp.USER32.dll_SetCaretPos]
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10018b51
push 0x26b5
push 0x7a7
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov eax, 0xfab8c3ad
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xc], 0x19e9
mov dword [ebp - 0xc], 0xcff0ea75
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x20], 0xc0f1fa6f
mov dword [ebp - 0x10], 6
mov dword [ebp - 0x14], 0xce85662b
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 0xc], 0xffffffe7
jle 0x10018c50
or edi, 0xffffffff
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x14], 0xfffffff7
mov dword [ebp - 0x10], 0xf8ef5d3c
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 4]
test eax, eax
jne 0x10018bd3
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x28], 0x6add
test eax, eax
jne 0x10018bf9
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x20]
jne 0x10018c14
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x20]
cmp eax, 0xfffffffb
setne cl
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], 0x1992
cmp dword [ebp - 0x28], ebx
jne 0x10018c4a
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffe7
jg 0x10018b9c
mov edi, dword [sym.imp.USER32.dll_RemoveMenu]
or edx, 0xffffffff
mov dword [ebp - 0x20], edx
mov dword [ebp - 0xc], 0x1a049fe3
mov dword [ebp - 0xf8], edx
mov dword [ebp - 0xf4], edx
mov dword [ebp - 0xf0], edx
mov dword [ebp - 0xec], edx
mov dword [ebp - 0xc], 0xfffffff1
jmp 0x10018d06
mov dword [ebp - 4], edx
mov dword [ebp - 0x14], 0x509e71b3
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], 0xfffffff0
jle 0x10018d03
mov dword [ebp - 0x10], ebx
xor edx, edx
mov dword [ebp - 0x18], 0xffff
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setl dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 4]
setge bl
xor ecx, ecx
cmp eax, ebx
setne cl
xor ebx, ebx
cmp ecx, dword [ebp - 4]
jle 0x10018cd2
cmp dword [ebp - 0x18], ebx
jne 0x10018cd2
mov ecx, ebx
cmp dword [ebp - 4], ebx
je 0x10018cd4
mov ecx, esi
mov eax, dword [ebp - 0xc]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setne dl
xor ecx, ecx
imul edx, eax
mov dword [ebp - 0xec], edx
mov eax, dword [ebp - 0x10]
cmp eax, edx
setle cl
mov dword [ebp - 0x14], ecx
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xfffffff0
jg 0x10018c94
or edx, 0xffffffff
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xd
jne 0x10018c81
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x28], 0x9b55bb2c
mov dword [ebp - 4], ebx
jmp 0x10018d2c
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x14c], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10018d1f
push 2
mov dword [ebp - 4], ebx
pop ecx
jmp 0x10018d4b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x120], 0xfffffffe
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10018d3a
mov dword [ebp - 0x28], 0xb
jmp 0x10018e0e
mov dword [ebp - 0xc], 0x417be18
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], ebx
jl 0x10018e08
mov dword [ebp - 4], ebx
jmp 0x10018d7e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x54], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10018d74
mov dword [ebp - 4], ebx
jmp 0x10018d99
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x180], 0x7b30498
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10018d88
mov dword [ebp - 0x50], ebx
jmp 0x10018df7
mov dword [ebp - 0x14], 0x5da2282d
xor edx, edx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x50]
push 2
mov ecx, dword [ebp + eax*4 - 0x14c]
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x14c], ecx
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setge dl
xor ecx, ecx
cmp eax, esi
setl cl
sub edx, ecx
xor ecx, ecx
mov dword [ebp - 0x11c], edx
mov eax, dword [ebp - 0x50]
cmp edx, eax
setl cl
mov dword [ebp - 0x180], ecx
inc dword [ebp - 0x50]
pop ecx
cmp dword [ebp - 0x50], ecx
jle 0x10018da4
dec dword [ebp - 0xc]
push 0xffffffffffffffff
pop edx
jns 0x10018d6f
inc dword [ebp - 0x28]
push 0xffffffffffffffff
pop edx
cmp dword [ebp - 0x28], 0x11
jne 0x10018d5c
or edx, 0xffffffff
mov dword [ebp - 0x14], edx
mov dword [ebp - 4], ebx
jmp 0x10018e30
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x150], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10018e23
mov dword [ebp - 4], ebx
jmp 0x10018e4b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x94], 0xba394643
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10018e3a
mov dword [ebp - 0x94], ebx
jmp 0x10018e9d
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xb2bc40ed
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10018e79
push 0x127b
call dword [sym.imp.USER32.dll_MessageBeep]
or edx, 0xffffffff
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10018e97
mov dword [ebp - 0x14], 0x79e672ca
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x14], 0xa233712
dec dword [ebp - 0x18]
jns 0x10018e81
inc dword [ebp - 0x94]
cmp dword [ebp - 0x94], ebx
jle 0x10018e58
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10018ebb
push 0x565
push 0x1cb2
push ebx
call edi
mov dword [ebp - 0x7c], esi
cmp dword [ebp - 0x7c], ebx
jl 0x10019247
or edi, 0xffffffff
mov dword [ebp - 0x10], 0xbdfadf62
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], 7
mov dword [ebp - 0x1c], ebx
jmp 0x10018f01
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x13c], 0x8bfc4f27
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10018ef0
mov dword [ebp - 0x10], 0x452a
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], ebx
je 0x10018f19
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x18]
dec eax
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jl 0x10018f78
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10018f73
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
dec dword [ebp - 0x28]
jns 0x10018f5c
cmp dword [ebp - 0x24], ebx
jne 0x10018fa3
mov eax, dword [ebp - 0x78]
xor edx, edx
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp + eax*4 - 0x5c]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setg dl
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0x5c]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], esi
cmp dword [ebp - 0xc], ebx
jl 0x10019238
mov dword [ebp - 0x1c], 0xffff
mov dword [ebp - 0x18], 0x9a488d51
mov dword [ebp - 0x14], 0x2a1efe0c
mov dword [ebp - 0x2c], 0x2169
mov dword [ebp - 0x10], 0x72f
push 4
mov dword [ebp - 0x14], 0x5a258d3b
mov dword [ebp - 4], ebx
pop ecx
jmp 0x10019000
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x118], 0xa8eac8b
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10018fef
mov dword [ebp - 4], ebx
jmp 0x1001901b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x8c], 5
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001900a
mov dword [ebp - 0x80], ebx
jmp 0x10019034
mov eax, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0x118], ebx
jne 0x1001903a
inc dword [ebp - 0x80]
cmp dword [ebp - 0x80], 3
jle 0x10019025
cmp dword [ebp - 0x118], ebx
je 0x10019071
cmp dword [ebp - 0x80], ebx
je 0x10019068
mov eax, dword [ebp - 0x10]
mov edx, esi
inc dword [ebp - 0x10]
test eax, eax
cmovg edx, ebx
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
mov eax, esi
setg cl
cmp dword [ebp - 0x1c], ecx
jle 0x1001906a
mov eax, ebx
mov edx, esi
cmp eax, dword [ebp - 0x2c]
jl 0x10019073
mov edx, ebx
mov eax, dword [ebp - 0x110]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x80]
setge cl
sub ecx, eax
mov eax, dword [ebp - 0x2c]
sub ecx, eax
xor eax, eax
add ecx, dword [ebp - 0x8c]
cmp ecx, 0x757a
setne al
imul eax, eax, 0x5697
cmp eax, 0x4aec7014
jl 0x100190af
mov edx, esi
cmp dword [ebp - 0x80], ebx
jne 0x100190b1
mov edx, ebx
mov eax, dword [ebp - 0x80]
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x118], ecx
mov eax, dword [ebp - 0x1c]
imul eax, ecx
test eax, eax
je 0x100190db
mov eax, esi
cmp dword [ebp - 0x8c], ebx
jne 0x100190dd
mov eax, ebx
cmp edi, eax
mov eax, dword [ebp - 0x2c]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], ebx
jmp 0x10019102
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x30], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x100190f8
mov dword [ebp - 4], ebx
jmp 0x1001911d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xb0], 3
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x1001910c
mov dword [ebp - 0x30], ebx
jmp 0x10019218
mov dword [ebp - 0x28], 0x4768c0aa
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x1c], ebx
jmp 0x1001914a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x174], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1001913d
mov dword [ebp - 0x28], 3
cmp dword [ebp - 0x28], ebx
jl 0x10019215
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x14], 0x9953
mov dword [ebp - 0x1c], ebx
jmp 0x10019181
cmp dword [ebp - 0x1c], esi
jl 0x10019173
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 8
jge 0x1001912a
mov byte [ebp - 0x35], bl
lea edx, [ebp - 0x35]
xor cl, cl
call fcn.10019648
dec dword [ebp - 0xc]
jns 0x10018fbd
dec dword [ebp - 0x7c]
jns 0x10018eca
mov edi, dword [sym.imp.USER32.dll_RemoveMenu]
mov dword [ebp - 0x18], 0xada439be
mov dword [ebp - 0x10], 0xfffffffa
mov dword [ebp - 0x1c], ebx
jmp 0x1001926b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x108], 0xbbca
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1001925a
push 3
pop ecx
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
jl 0x1001944f
mov dword [ebp - 4], 0x4cdb8faa
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x1001929b
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnregisterClassA]
push 3
pop ecx
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], ebx
jl 0x100192c8
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x100192c0
push ebx
push 0x23f9
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
dec dword [ebp - 4]
jns 0x100192a3
push 3
pop ecx
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], ebx
jl 0x10019446
mov dword [ebp - 0xc], 0xfffffffd
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], ebx
jl 0x10019421
mov dword [ebp - 0x2c], 0x8d3a18e4
mov dword [ebp - 0x10], 0xca779041
mov dword [ebp - 0x10], 0xe07ea4c5
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], ebx
jl 0x10019418
mov dword [ebp - 0x28], 0x17c10977
mov dword [ebp - 0x14], 0xd058bbe5
mov dword [ebp - 0x1c], ebx
jmp 0x1001932f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x164], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10019322
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ecx
jg 0x1001940f
mov edx, 0xf15cc7c4
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x108]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], esi
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x108]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x108]
cmp edx, eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x28]
jge 0x100193f7
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x1c], 0x4c3f121f
cmp dword [ebp - 4], ebx
je 0x1001939a
mov eax, dword [ebp - 0x10]
dec dword [ebp - 0x10]
test eax, eax
jne 0x1001939c
mov esi, ebx
mov eax, dword [ebp - 0xc]
xor edx, edx
cmp eax, 0xff93
mov eax, dword [ebp - 0x164]
push 3
setle dl
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 4]
cmp eax, edx
setg cl
xor edx, edx
sub esi, ecx
add esi, dword [ebp - 0x1c]
add esi, dword [ebp - 0x14]
mov dword [ebp - 0x10], esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
sub ecx, 0x7a5e1371
cmp eax, ecx
mov eax, dword [ebp - 4]
setg dl
xor ecx, ecx
cmp edx, eax
mov edx, 0xf15cc7c4
setge cl
xor esi, esi
sub ecx, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x1c], ecx
pop ecx
jmp 0x10019403
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jle 0x10019346
dec dword [ebp - 0x2c]
jns 0x1001930f
dec dword [ebp - 0xc]
jns 0x100192ee
mov dword [ebp - 0xc], ebx
jmp 0x10019437
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x108], 0x3b7d
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x10019426
dec dword [ebp - 4]
jns 0x100192d4
dec dword [ebp - 0x18]
jns 0x10019280
mov ecx, dword [ebp - 0x58]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setne dl
imul eax, edx
mov dword [ebp - 0x7c], eax
test eax, eax
je 0x10019470
mov ecx, esi
cmp dword [ebp - 0x5c], ebx
jne 0x10019472
mov ecx, ebx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x24]
neg ecx
mov eax, dword [ebp - 0x58]
sbb ecx, ecx
xor eax, eax
neg ecx
cmp eax, ecx
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0x8f7cf8fb
setne cl
mov dword [ebp - 0xa8], ecx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x10018b1b
push 2
pop edx
mov dword [ebp - 4], 0xfffffffc
mov dword [ebp - 0x10], 0xfffffff9
mov dword [ebp - 0x14], 0x33ee6768
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], edx
jge 0x100194f8
or ecx, 0xffffffff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x15c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100194e6
mov dword [ebp - 4], 0xfffffffd
jmp 0x1001958a
mov dword [ebp - 0x20], 0xa654
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x14], 0xc0a9c5a7
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x10], ebx
jne 0x1001953b
mov eax, dword [ebp - 0x20]
mov ecx, ebx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
dec eax
neg eax
sbb eax, eax
neg eax
inc eax
neg eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 4]
jge 0x1001953d
mov ecx, esi
mov eax, dword [ebp - 0x20]
add eax, ecx
cmp eax, 0xc312fbb6
je 0x10019550
mov eax, ebx
cmp dword [ebp - 0x10], ebx
je 0x10019552
mov eax, esi
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], ebx
jmp 0x10019582
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x15c], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10019575
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x17
jne 0x10019504
mov eax, dword [ebp - 0xb4]
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, dword [ebp - 0xac]
mov esi, edx
mov edi, eax
call fcn.1001807d
add eax, esi
add eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret