Function at 0x180004490
Capabilities:
Get file attributes

Disassembly:
sub rsp, 0xe8
mov dword [rsp + 0xdc], 0x2fc3
mov dword [rsp + 0x48], 0x3554
mov dword [rsp + 0x44], 0x79fa
mov dword [rsp + 0x40], 0x3fdb
mov dword [rsp + 0x4c], 0x37c7
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x58], eax
jmp 0x1800044d6
mov eax, dword [rsp + 0x58]
dec eax
mov dword [rsp + 0x58], eax
mov eax, dword [0x18001ca00]
cmp dword [rsp + 0x58], eax
jl 0x180004578
mov eax, dword [rsp + 0x40]
cmp dword [0x18001ca08], eax
jl 0x18000452b
mov eax, dword [0x18001ca08]
cmp dword [rsp + 0x48], eax
jle 0x18000450a
mov eax, dword [rsp + 0x44]
cmp dword [0x18001c9f4], eax
jl 0x18000452b
mov r9d, dword [rsp + 0x4c]
mov r8d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x40]
mov ecx, 0x6bcaf
call qword [sym.imp.GDI32.dll_SetPixelV]
cmp eax, dword [0x18001ca08]
jbe 0x180004573
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x44]
mov eax, edx
mov ecx, dword [rsp + 0x4c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x80], eax
mov eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x44]
mov eax, edx
mov ecx, dword [rsp + 0x80]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x40], eax
mov eax, dword [0x18001ca00]
cmp dword [rsp + 0x44], eax
je 0x18000452b
jmp 0x1800044cc
xor ecx, ecx
call fcn.180001470
mov ecx, eax
call fcn.1800088a4
call fcn.1800062f0
mov eax, dword [rsp + 0x48]
cmp dword [0x18001ca0c], eax
jge 0x1800045a1
mov eax, dword [rsp + 0x48]
cmp dword [rsp + 0x44], eax
jg 0x1800045af
mov eax, dword [rsp + 0x4c]
cmp dword [rsp + 0x48], eax
jl 0x1800059a5
mov eax, dword [rsp + 0x44]
cmp dword [0x18001c9fc], eax
je 0x1800053cf
mov eax, dword [rsp + 0x44]
cmp dword [rsp + 0x4c], eax
jl 0x1800053cf
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x5c], eax
jmp 0x1800045e1
mov eax, dword [rsp + 0x5c]
dec eax
mov dword [rsp + 0x5c], eax
mov eax, dword [0x18001ca00]
cmp dword [rsp + 0x5c], eax
jl 0x1800053ca
mov eax, dword [rsp + 0x44]
imul eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
sar eax, cl
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x40]
add eax, 0xf949
mov ecx, dword [rsp + 0x48]
sar eax, cl
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x44]
imul eax, dword [rsp + 0x40]
imul ecx, dword [rsp + 0x44], 0x180a4
lea eax, [rax + rcx + 0x5c9b]
sub eax, dword [rsp + 0x40]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x60], eax
jmp 0x18000464b
mov eax, dword [rsp + 0x60]
dec eax
mov dword [rsp + 0x60], eax
mov eax, dword [0x18001c9fc]
cmp dword [rsp + 0x60], eax
jne 0x1800053c5
mov eax, dword [rsp + 0x48]
imul eax, dword [rsp + 0x44]
add eax, dword [rsp + 0x40]
and eax, 0xcabf
mov ecx, dword [rsp + 0x40]
imul ecx, dword [rsp + 0x44]
and eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x4c], eax
mov eax, dword [0x18001ca14]
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x50], 0x3688
je 0x180004877
cmp dword [rsp + 0x50], 0x43e2
je 0x180004c20
cmp dword [rsp + 0x50], 0x706a
je 0x1800047ab
cmp dword [rsp + 0x50], 0x15dc4
je 0x1800046c7
jmp 0x180004ecb
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x4c]
sub ecx, eax
mov eax, ecx
sub eax, 0x149b2
movzx ecx, al
mov eax, dword [rsp + 0x44]
shl eax, cl
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x4c]
add eax, 0xa7c4
or eax, dword [rsp + 0x40]
mov dword [0x18001ca0c], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
sub ecx, eax
mov eax, ecx
imul ecx, dword [rsp + 0x44], 0x1678
add eax, ecx
mov dword [rsp + 0x40], eax
imul eax, dword [rsp + 0x4c], 0x4249
sub eax, dword [rsp + 0x44]
sub eax, 0x648d
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
add eax, dword [rsp + 0x48]
imul ecx, dword [rsp + 0x44], 0x15706
sub ecx, dword [rsp + 0x48]
or eax, ecx
mov dword [rsp + 0x44], eax
mov eax, dword [0x18001ca00]
cmp dword [rsp + 0x4c], eax
jl 0x1800046c7
mov eax, dword [rsp + 0x48]
sub eax, 0x1147f
mov ecx, dword [rsp + 0x44]
imul ecx, dword [rsp + 0x48]
mov edx, dword [rsp + 0x48]
lea ecx, [rcx + rdx - 0x1969]
or eax, ecx
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
cdq
idiv dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
imul eax, dword [rsp + 0x40]
mov dword [rsp + 0x44], eax
mov edx, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x48]
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [rsp + 0x4c], eax
mov r8d, dword [rsp + 0x44]
mov edx, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
call fcn.1800023a0
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x44]
mov eax, edx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x48], eax
mov r8d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
call fcn.1800023a0
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
mov dword [rsp + 0x84], eax
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x48]
add eax, 0xc0de
mov ecx, dword [rsp + 0x84]
and ecx, eax
mov eax, ecx
mov dword [0x18001c9f4], eax
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x48]
mov eax, edx
add eax, dword [rsp + 0x4c]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x40]
mov eax, edx
mov dword [rsp + 0x48], eax
mov eax, 0x72f50ac0
cdq
idiv dword [rsp + 0x40]
mov eax, edx
mov ecx, dword [rsp + 0x4c]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x44]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cmp dword [0x18001ca10], eax
jge 0x1800047ab
mov ecx, dword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x4c], eax
call qword [sym.imp.KERNEL32.dll_GetErrorMode]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x4c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x44]
mov dword [rsp + 0x48], eax
mov eax, dword [0x18001ca00]
cmp dword [rsp + 0x4c], eax
je 0x1800048d0
mov eax, dword [rsp + 0x48]
cmp dword [0x18001ca0c], eax
je 0x1800049e0
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x48], eax
call fcn.180002a10
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x48]
sub eax, dword [rsp + 0x48]
sub eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
or ecx, eax
mov eax, ecx
mov dword [0x18001c9f8], eax
mov r8d, dword [rsp + 0x44]
mov edx, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x48]
call fcn.180002770
mov eax, dword [rsp + 0x44]
imul eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x44]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x44], eax
mov eax, 0x2138
cdq
idiv dword [rsp + 0x48]
mov ecx, 0x4bb4
mov dword [rsp + 0x88], ecx
movzx ecx, al
mov eax, dword [rsp + 0x88]
sar eax, cl
mov ecx, dword [rsp + 0x4c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov eax, 0x1132b
sub eax, dword [rsp + 0x44]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x48]
movzx ecx, al
mov eax, dword [rsp + 0x40]
shl eax, cl
mov ecx, dword [rsp + 0x44]
mov edx, dword [rsp + 0x48]
add edx, ecx
mov ecx, edx
or eax, ecx
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x4c]
mov dword [rsp + 0x8c], eax
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
mov ecx, dword [rsp + 0x8c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov edx, 0x2331d
mov ecx, dword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
imul ecx, dword [rsp + 0x48], 0xaf2e
add eax, ecx
mov dword [rsp + 0x48], eax
jmp 0x180004c0b
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x48]
mov edx, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x4c]
call fcn.180003280
cmp dword [rsp + 0x48], eax
jb 0x180004a13
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x40], eax
jl 0x180004c0b
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x64], eax
jmp 0x180004a27
mov eax, dword [rsp + 0x64]
inc eax
mov dword [rsp + 0x64], eax
mov eax, dword [0x18001c9f4]
cmp dword [rsp + 0x64], eax
je 0x180004c0b
mov eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
cdq
idiv dword [rsp + 0x48]
mov eax, edx
mov dword [0x18001ca10], eax
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x48]
mov ecx, dword [rsp + 0x48]
imul ecx, dword [rsp + 0x44]
sar ecx, 0xee
and eax, ecx
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x48]
mov eax, edx
sub eax, dword [rsp + 0x40]
mov dword [rsp + 0x4c], eax
mov eax, dword [0x18001c9f8]
cmp dword [rsp + 0x4c], eax
jle 0x180004c06
mov eax, dword [rsp + 0x4c]
cmp dword [0x18001ca08], eax
je 0x180004c06
mov eax, dword [0x18001ca08]
cmp dword [rsp + 0x40], eax
je 0x180004c06
mov eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x40]
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
mov dword [0x18001ca14], eax
mov eax, dword [rsp + 0x48]
imul eax, dword [rsp + 0x4c]
mov dword [0x18001ca0c], eax
mov dword [rsp + 0x44], 0x20fc1
mov edx, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x4c]
call qword [sym.imp.ole32.dll_RegisterDragDrop]
mov dword [rsp + 0x40], eax
imul eax, dword [rsp + 0x48], 0x141d
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x44]
imul eax, dword [rsp + 0x44]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x40]
cmp dword [0x18001ca10], eax
jg 0x180004b7d
mov r8d, dword [rsp + 0x44]
mov edx, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x44]
call fcn.180002770
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
mov ecx, dword [rsp + 0x44]
imul ecx, dword [rsp + 0x40]
add eax, ecx
mov dword [rsp + 0x90], eax
mov eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
mov ecx, dword [rsp + 0x90]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x48]
imul eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x48]
mov edx, dword [rsp + 0x4c]
sub edx, ecx
mov ecx, edx
sar eax, cl
mov dword [0x18001ca0c], eax
mov eax, dword [0x18001c9f0]
cmp dword [rsp + 0x4c], eax
jge 0x180004afe
mov eax, dword [rsp + 0x4c]
cmp dword [0x18001ca04], eax
ja 0x180004ac9
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x4c]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x40]
imul ecx, dword [rsp + 0x4c]
sub eax, ecx
sub eax, dword [rsp + 0x48]
mov dword [rsp + 0x44], eax
mov eax, dword [0x18001ca04]
cmp dword [rsp + 0x40], eax
jne 0x180004ab2
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x40]
mov eax, edx
mov dword [rsp + 0x94], eax
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x44]
mov eax, edx
mov ecx, dword [rsp + 0x94]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x4c]
sub edx, ecx
mov ecx, edx
shl eax, cl
mov dword [rsp + 0x40], eax
jmp 0x180004a1d
mov eax, dword [0x18001ca00]
cmp dword [rsp + 0x44], eax
jg 0x1800048a7
jmp 0x180005387
mov eax, 0x9bd
sub eax, dword [rsp + 0x4c]
add eax, dword [rsp + 0x4c]
add eax, dword [rsp + 0x48]
sub eax, dword [rsp + 0x4c]
add eax, dword [rsp + 0x48]
mov dword [rsp + 0x48], eax
mov ecx, 0xb991f
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov dword [rsp + 0x40], eax
call fcn.180002a10
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x44]
shl eax, cl
mov ecx, dword [rsp + 0x40]
imul ecx, dword [rsp + 0x48]
shl eax, cl
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x48]
cmp dword [0x18001c9f8], eax
jg 0x180004cbb
mov eax, dword [rsp + 0x48]
cmp dword [0x18001ca10], eax
je 0x180004cbb
mov eax, dword [rsp + 0x40]
cmp dword [0x18001c9f4], eax
jg 0x180004cbb
mov edx, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
call fcn.180003500
cmp dword [0x18001ca00], eax
jne 0x180004e22
mov edx, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
call fcn.180003480
cmp eax, dword [0x18001c9f4]
jg 0x180004cdc
mov eax, dword [rsp + 0x40]
cmp dword [0x18001c9f0], eax
jle 0x180004cf4
mov eax, dword [0x18001c9f8]
cmp dword [rsp + 0x48], eax
je 0x180004cf4
mov eax, dword [0x18001ca00]
cmp dword [rsp + 0x44], eax
jle 0x180004d2d
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x48]
mov eax, edx
imul eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x44]
mov eax, edx
movzx ecx, al
mov eax, dword [rsp + 0x40]
shl eax, cl
mov dword [rsp + 0x44], eax
jmp 0x180004e1d
mov eax, dword [0x18001c9f0]
cmp dword [rsp + 0x40], eax
jge 0x180004e1d
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x4c], eax
mov r8d, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
call fcn.180003300
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x48]
sub eax, 0x50e0fe51
movzx ecx, al
mov eax, dword [rsp + 0x40]
shl eax, cl
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
movzx ecx, al
mov eax, dword [rsp + 0x4c]
shl eax, cl
mov dword [rsp + 0x4c], eax
mov ecx, dword [rsp + 0x4c]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x48]
mov ecx, 0x802a
mov dword [rsp + 0x98], ecx
movzx ecx, al
mov eax, dword [rsp + 0x98]
shl eax, cl
mov dword [rsp + 0x9c], eax
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
mov ecx, dword [rsp + 0x4c]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x9c]
and ecx, eax
mov eax, ecx
and eax, 0xe9f4
mov dword [rsp + 0x40], eax
mov eax, 0x2b8e
cdq
idiv dword [rsp + 0x44]
mov eax, edx
mov dword [rsp + 0x4c], eax
mov r8d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
call fcn.180002770
imul eax, dword [rsp + 0x44], 0x9db
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cmp dword [0x18001ca08], eax
jne 0x180004d3d
jmp 0x180004ecb
mov ecx, dword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x48], eax
mov eax, 0xefcb
cdq
idiv dword [rsp + 0x4c]
mov dword [rsp + 0x48], eax
mov r9d, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x44]
call fcn.180001530
mov eax, 0x10b2a
sub eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x48]
sub edx, ecx
mov ecx, edx
mov edx, dword [rsp + 0x44]
lea ecx, [rcx + rdx + 0x1e5c]
sar eax, cl
mov dword [0x18001ca14], eax
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x4c]
mov dword [0x18001ca08], eax
mov r8d, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x44]
call fcn.180002770
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x4c]
imul eax, dword [rsp + 0x4c]
add eax, dword [rsp + 0x4c]
add eax, dword [rsp + 0x44]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x4c]
imul eax, dword [rsp + 0x4c]
add eax, 0x8d99
mov ecx, dword [rsp + 0x44]
imul ecx, dword [rsp + 0x48]
mov edx, dword [rsp + 0x48]
add edx, ecx
mov ecx, edx
or eax, ecx
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x48]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
sub ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x44]
mov dword [0x18001ca0c], eax
mov eax, dword [0x18001ca04]
cmp dword [rsp + 0x48], eax
jae 0x180004fe3
call fcn.180002ab0
cmp eax, dword [0x18001ca14]
jbe 0x180004fe3
mov r8d, dword [rsp + 0x48]
mov edx, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
call fcn.180003690
cmp eax, dword [0x18001ca00]
jbe 0x180004fe3
mov eax, 0x16919
sub eax, dword [rsp + 0x48]
add eax, dword [rsp + 0x48]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x44]
mov eax, edx
mov ecx, dword [rsp + 0x40]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x4c]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x44]
add eax, 0xc281
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
add eax, 0x13b37
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x40]
sub edx, ecx
mov ecx, edx
add ecx, dword [rsp + 0x4c]
shl eax, cl
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x4c]
imul eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44], eax
jmp 0x180005387
mov eax, dword [0x18001ca04]
cmp dword [rsp + 0x40], eax
je 0x1800052e4
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x4c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xa0], eax
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
imul eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x44]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0xa0]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c], eax
mov ecx, dword [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
cmp eax, dword [0x18001ca00]
jb 0x180005166
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
lea eax, [rax + rcx + 0x5fc5]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
or ecx, eax
mov eax, ecx
or eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
mov eax, 0x2318
cdq
idiv dword [rsp + 0x44]
mov eax, edx
mov ecx, dword [rsp + 0x4c]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x48]
sar eax, cl
mov dword [rsp + 0x40], eax
mov eax, 0x98ce
cdq
idiv dword [rsp + 0x44]
mov eax, edx
mov ecx, dword [rsp + 0x40]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x48], eax
mov ecx, dword [rsp + 0x40]
call qword [sym.imp.UxTheme.dll_GetBufferedPaintTargetDC]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x40]
mov eax, edx
cdq
idiv dword [rsp + 0x40]
imul eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x44]
mov eax, edx
or eax, dword [rsp + 0x48]
mov dword [rsp + 0x40], eax
mov edx, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x4c]
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x44], eax
mov r9d, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x48]
mov edx, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
call fcn.180001530
mov eax, dword [rsp + 0x44]
imul eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x40]
imul eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x48]
sub edx, ecx
mov ecx, edx
mov dword [rsp + 0xa4], ecx
mov edx, dword [rsp + 0x48]
movzx ecx, dl
mov edx, dword [rsp + 0xa4]
sar edx, cl
mov ecx, edx
or eax, ecx
mov dword [rsp + 0x44], eax
jmp 0x1800052df
mov r8d, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
call fcn.180003300
cmp dword [0x18001ca18], eax
jle 0x18000522d
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x40]
mov dword [rsp + 0xa8], eax
mov ecx, dword [rsp + 0x48]
mov edx, 0x6786
sar edx, cl
mov ecx, edx
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x40]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0xa8]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x48]
and eax, 0x86f8
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x44]
add eax, dword [rsp + 0x4c]
mov dword [rsp + 0x48], eax
mov r9d, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x44]
call fcn.180001530
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
imul ecx, dword [rsp + 0x44], 0x3837
and eax, ecx
mov dword [rsp + 0x48], eax
jmp 0x1800052df
mov eax, 0x83a6
sub eax, dword [rsp + 0x40]
add eax, 0xeede
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
sub eax, 0x15ba0
sub eax, dword [rsp + 0x40]
mov dword [rsp + 0xac], eax
mov eax, 0x39ca
cdq
idiv dword [rsp + 0x44]
mov ecx, dword [rsp + 0xac]
sub ecx, eax
mov eax, ecx
and eax, dword [rsp + 0x40]
mov dword [rsp + 0x44], eax
imul eax, dword [rsp + 0x44], 0x7b53
mov ecx, 0x1827c
sub ecx, dword [rsp + 0x48]
shl eax, cl
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x44]
cdq
mov ecx, 0x17133
idiv ecx
mov eax, edx
sub eax, dword [rsp + 0x44]
sub eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x4c]
add edx, ecx
mov ecx, edx
or eax, ecx
mov dword [rsp + 0x48], eax
mov edx, dword [rsp + 0x48]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PtInRect]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x4c], eax
jmp 0x180005387
mov edx, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetWindow]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x48]
imul eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x48]
mov eax, edx
cdq
mov ecx, 0x8862
idiv ecx
imul eax, dword [rsp + 0x48]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x4c]
sub ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x44]
mov dword [rsp + 0x48], eax
mov r9d, dword [rsp + 0x48]
mov r8d, dword [rsp + 0x48]
mov edx, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x44]
call fcn.180001480
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x44]
add eax, dword [rsp + 0x4c]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x48]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x40]
cdq
mov ecx, 0xcd0b
idiv ecx
mov eax, edx
mov dword [0x18001ca10], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x4c], eax
mov eax, dword [0x18001ca0c]
cmp dword [rsp + 0x40], eax
jl 0x18000467c
mov eax, dword [rsp + 0x44]
imul eax, dword [rsp + 0x48]
sub eax, dword [rsp + 0x4c]
mov ecx, 0x983c
mov dword [rsp + 0xb0], ecx
movzx ecx, al
mov eax, dword [rsp + 0xb0]
sar eax, cl
mov dword [rsp + 0x44], eax
jmp 0x180004641
jmp 0x1800045d7
jmp 0x1800059a0
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x44], eax
jne 0x180005425
mov eax, dword [0x18001c9f0]
mov dword [rsp + 0x68], eax
jmp 0x1800053ef
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x48]
cmp dword [rsp + 0x68], eax
jge 0x180005420
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x44]
mov eax, edx
mov dword [rsp + 0x4c], eax
imul eax, dword [rsp + 0x48], 0x4b79
cdq
idiv dword [rsp + 0x48]
imul eax, dword [rsp + 0x40]
mov dword [rsp + 0x44], eax
jmp 0x1800053e5
jmp 0x1800059a0
mov eax, dword [0x18001ca10]
cmp dword [rsp + 0x44], eax
jl 0x1800059a0
mov eax, dword [0x18001ca14]
mov dword [rsp + 0x54], eax
cmp dword [rsp + 0x54], 0x38ba
je 0x18000564c
cmp dword [rsp + 0x54], 0xcb24
je 0x180005627
cmp dword [rsp + 0x54], 0x145d1
je 0x180005478
cmp dword [rsp + 0x54], 0x14b9c
je 0x180005727
jmp 0x18000599b
mov eax, dword [rsp + 0x48]
imul eax, dword [rsp + 0x4c]
imul eax, dword [rsp + 0x48]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x4c]
imul eax, dword [rsp + 0x44]
add eax, dword [rsp + 0x4c]
sub eax, dword [rsp + 0x48]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
cdq
mov ecx, 0xd051
idiv ecx
add eax, dword [rsp + 0x4c]
sub eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
lea eax, [rax + rcx + 0x7999]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x4c]
cdq
mov ecx, 0xfc6a
idiv ecx
mov eax, edx
add eax, 0x3f50
mov dword [rsp + 0xb4], eax
mov eax, 0xfa65
cdq
idiv dword [rsp + 0x44]
mov eax, edx
mov ecx, dword [rsp + 0xb4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x4c]
sar eax, 0xaf
mov ecx, dword [rsp + 0x40]
sar eax, cl
mov dword [rsp + 0xb8], eax
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
mov ecx, dword [rsp + 0x40]
add ecx, eax
mov eax, ecx
movzx ecx, al
mov eax, dword [rsp + 0xb8]
sar eax, cl
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
sub ecx, eax
mov eax, ecx
sub eax, 0xb003
mov dword [rsp + 0x48], eax
mov edx, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x48]
call qword [sym.imp.USER32.dll_GetWindow]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x48], eax
mov r8d, dword [rsp + 0x44]
mov edx, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
call fcn.180002770
mov eax, 0xffffd187
sub eax, dword [rsp + 0x48]
mov dword [rsp + 0xbc], eax
mov eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x44]
mov ecx, dword [rsp + 0xbc]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x40]
imul eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x44]
add eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x48]
shl eax, cl
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x44]
cmp dword [0x18001ca10], eax
jl 0x18000552e
mov eax, dword [0x18001ca0c]
cmp dword [rsp + 0x44], eax
jg 0x1800054c2
mov eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x48]
mov eax, edx
cdq
mov ecx, 0xf547
idiv ecx
sub eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
imul ecx, dword [rsp + 0x40]
add eax, ecx
mov dword [0x18001c9fc], eax
mov eax, dword [rsp + 0x4c]
cmp dword [0x18001ca00], eax
jge 0x1800054c2
mov eax, dword [rsp + 0x40]
imul eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x4c]
add eax, 0x7e86
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x4c]
imul eax, dword [rsp + 0x4c]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x44]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x4c]
and eax, dword [rsp + 0x4c]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x48]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x40]
mov dword [0x18001ca0c], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x4c]
sub ecx, eax
mov eax, ecx
imul ecx, dword [rsp + 0x40], 0xe8b3
add eax, ecx
sub eax, dword [rsp + 0x4c]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
cmp dword [0x18001c9f4], eax
je 0x180005722
mov edx, dword [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateDIBPatternBrushPt]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
movzx ecx, al
mov eax, dword [rsp + 0x4c]
sar eax, cl
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x4c]
imul eax, dword [rsp + 0x4c]
add eax, 0x2777
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
cdq
idiv dword [rsp + 0x40]
mov eax, edx
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x48]
add eax, dword [rsp + 0x44]
add eax, dword [rsp + 0x40]
mov dword [rsp + 0xc0], eax
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
mov ecx, dword [rsp + 0xc0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44], eax
jmp 0x18000599b
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x40]
imul ecx, dword [rsp + 0x44]
imul ecx, dword [rsp + 0x4c]
add eax, ecx
mov dword [rsp + 0x40], eax
mov r9d, dword [rsp + 0x48]
mov r8d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
call fcn.180001480
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x48], eax
mov r8d, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x44]
call fcn.180002770
mov eax, dword [rsp + 0x44]
and eax, 0x1245d
mov dword [rsp + 0x44], eax
call fcn.180002f70
cmp dword [0x18001ca18], eax
jne 0x18000586d
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
imul ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x48]
add edx, eax
mov eax, edx
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov eax, 0x5bbb
cdq
idiv dword [rsp + 0x48]
mov eax, edx
cdq
idiv dword [rsp + 0x40]
mov eax, edx
sub eax, dword [rsp + 0x40]
mov dword [0x18001ca00], eax
mov eax, dword [rsp + 0x48]
mov dword [0x18001ca10], eax
mov eax, dword [rsp + 0x40]
movzx ecx, al
mov eax, dword [rsp + 0x4c]
sar eax, cl
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x44]
mov eax, edx
cdq
idiv dword [rsp + 0x48]
mov eax, edx
cdq
idiv dword [rsp + 0x48]
mov ecx, 0xddcb
sub ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x44]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x40]
shl eax, 0x5c
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
cmp dword [0x18001c9f8], eax
jge 0x1800057e6
mov eax, dword [0x18001ca0c]
cmp dword [rsp + 0x40], eax
jl 0x180005796
imul eax, dword [rsp + 0x48], 0xb62a
cdq
idiv dword [rsp + 0x40]
sub eax, dword [rsp + 0x40]
mov dword [rsp + 0x4c], eax
jmp 0x180005963
call fcn.180002ab0
cmp dword [0x18001ca00], eax
jne 0x180005963
mov eax, dword [rsp + 0x44]
imul eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov ecx, dword [rsp + 0x4c]
call fcn.180001620
mov eax, dword [rsp + 0x40]
movzx ecx, al
mov eax, dword [rsp + 0x44]
shl eax, cl
mov dword [rsp + 0xc4], eax
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x44]
movzx ecx, al
mov eax, dword [rsp + 0xc4]
sar eax, cl
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
movzx ecx, al
mov eax, dword [rsp + 0x48]
shl eax, cl
imul ecx, dword [rsp + 0x48], 0x3b4b
and eax, ecx
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x48], eax
call fcn.180002a10
mov eax, dword [rsp + 0x48]
imul eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x4c]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x48]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov edx, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetWindow]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x48]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
mov dword [0x18001ca00], eax
mov eax, dword [rsp + 0x40]
sub eax, 0x14d3
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x40]
cmp dword [0x18001ca0c], eax
je 0x18000587e
mov eax, dword [0x18001c9f0]
cmp dword [rsp + 0x44], eax
jle 0x180005766
mov eax, dword [rsp + 0x48]
imul eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x44]
mov eax, edx
cdq
idiv dword [rsp + 0x40]
sub eax, dword [rsp + 0x48]
movzx ecx, al
mov eax, dword [rsp + 0x40]
sar eax, cl
mov dword [0x18001ca14], eax
jmp 0x180005425
jmp 0x1800061e4
mov eax, dword [0x18001ca18]
mov dword [rsp + 0x6c], eax
jmp 0x1800059bb
mov eax, dword [rsp + 0x6c]
dec eax
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x4c]
cmp dword [rsp + 0x6c], eax
jg 0x1800061d4
mov r8d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
call fcn.180002770
mov eax, dword [rsp + 0x4c]
imul eax, dword [rsp + 0x4c]
add eax, 0xe178
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x44]
mov edx, dword [rsp + 0x44]
sub edx, ecx
mov ecx, edx
and eax, ecx
mov dword [0x18001ca0c], eax
mov eax, dword [0x18001ca0c]
cmp dword [rsp + 0x4c], eax
jne 0x180005c66
mov eax, dword [rsp + 0x48]
imul eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x48]
mov ecx, dword [rsp + 0x4c]
sar eax, cl
mov ecx, dword [rsp + 0x4c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
cdq
idiv dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x4c]
sar eax, cl
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x48]
mov edx, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x44]
call qword [sym.imp.GDI32.dll_ExtTextOutA]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x44]
mov dword [rsp + 0xc8], eax
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x40]
mov ecx, dword [rsp + 0xc8]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x48]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c], eax
mov dword [rsp + 0x48], 0x943c
mov eax, 0x613b
sub eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x44]
imul ecx, dword [rsp + 0x40]
sub eax, ecx
mov ecx, dword [rsp + 0x40]
sar eax, cl
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x4c]
lea eax, [rax + rcx + 0x13f3d]
sub eax, dword [rsp + 0x40]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x44]
sub eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x44]
imul ecx, dword [rsp + 0x48]
lea eax, [rax + rcx - 0x80f2]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x40]
cdq
mov ecx, 0x142d2
idiv ecx
mov eax, edx
cdq
idiv dword [rsp + 0x4c]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x40]
mov eax, edx
mov ecx, dword [rsp + 0x48]
imul ecx, dword [rsp + 0x4c]
add eax, ecx
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x44]
movzx ecx, al
mov eax, dword [rsp + 0x44]
shl eax, cl
mov dword [rsp + 0x44], eax
mov r8d, dword [rsp + 0x44]
mov edx, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x4c]
call fcn.180002770
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x44]
mov edx, dword [rsp + 0x48]
lea ecx, [rcx + rdx + 0x12300]
or eax, ecx
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x48]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x40]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x44]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x48]
cmp dword [0x18001ca04], eax
je 0x180005b53
mov eax, dword [rsp + 0x40]
cmp dword [0x18001c9fc], eax
je 0x180005b39
mov eax, dword [rsp + 0x48]
cmp dword [0x18001ca04], eax
jb 0x180005b39
mov eax, dword [rsp + 0x4c]
cmp dword [0x18001c9f0], eax
jl 0x180005ac4
mov eax, 0xd2a7
cdq
idiv dword [rsp + 0x48]
imul eax, dword [rsp + 0x44]
sub eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
shl eax, cl
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
movzx ecx, al
mov eax, dword [rsp + 0x44]
sar eax, cl
mov ecx, dword [rsp + 0x4c]
sar eax, cl
mov ecx, dword [rsp + 0x44]
sar eax, cl
mov dword [rsp + 0x40], eax
mov eax, dword [0x18001ca14]
cmp dword [rsp + 0x48], eax
je 0x180005abc
jmp 0x1800061cf
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x48]
imul eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x40]
sar eax, cl
mov ecx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x4c]
sub edx, ecx
mov ecx, edx
and eax, ecx
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x4c]
sub ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x4c]
mov dword [rsp + 0xcc], eax
mov eax, 0xa2f1
cdq
idiv dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x44]
mov ecx, dword [rsp + 0xcc]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [0x18001ca10]
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x70], 0x4821
je 0x180005fbf
cmp dword [rsp + 0x70], 0xafa4
je 0x180005d01
cmp dword [rsp + 0x70], 0x1513a
je 0x180005e0f
jmp 0x18000601f
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x44]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x44], eax
mov eax, dword [0x18001c9f4]
mov dword [rsp + 0x74], eax
jmp 0x180005d2f
mov eax, dword [rsp + 0x74]
dec eax
mov dword [rsp + 0x74], eax
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x74], eax
jle 0x180005e0f
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xd0], eax
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x40]
mov eax, edx
cdq
idiv dword [rsp + 0x4c]
mov ecx, dword [rsp + 0xd0]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x4c]
sar eax, cl
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x4c]
add eax, 0x1de8
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x44]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0xd4], eax
mov eax, 0x58a4
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
mov ecx, dword [rsp + 0xd4]
and ecx, eax
mov eax, ecx
mov dword [0x18001ca0c], eax
mov eax, dword [rsp + 0x48]
add eax, 0x17be0
mov ecx, dword [rsp + 0x4c]
sar eax, cl
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x40]
mov eax, edx
imul eax, eax, 0x13c24
imul eax, dword [rsp + 0x4c]
sub eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x44]
sar eax, cl
mov dword [rsp + 0x44], eax
mov ecx, dword [rsp + 0x44]
call fcn.180001620
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x48]
add eax, dword [rsp + 0x44]
mov dword [rsp + 0x48], eax
jmp 0x180005d25
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x40]
mov eax, edx
mov ecx, dword [rsp + 0x48]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x48]
sub edx, ecx
mov ecx, edx
shl eax, cl
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x40]
mov dword [0x18001ca14], eax
mov edx, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
call qword [sym.imp.GDI32.dll_GetTextMetricsA]
mov dword [rsp + 0x40], eax
mov r8d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x44]
call fcn.1800023a0
mov eax, dword [rsp + 0x40]
imul eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x40]
imul ecx, dword [rsp + 0x40]
add eax, ecx
sub eax, dword [rsp + 0x4c]
mov dword [rsp + 0x48], eax
mov eax, dword [0x18001ca00]
mov dword [rsp + 0x78], eax
jmp 0x180005e94
mov eax, dword [rsp + 0x78]
dec eax
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x44]
cmp dword [rsp + 0x78], eax
jle 0x180005f86
mov ecx, dword [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
mov dword [rsp + 0x44], eax
mov r8d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x4c]
call fcn.1800023a0
mov eax, dword [rsp + 0x4c]
movzx ecx, al
mov eax, dword [rsp + 0x40]
shl eax, cl
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x40]
mov eax, edx
imul eax, dword [rsp + 0x44]
and eax, dword [rsp + 0x44]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x40]
imul eax, dword [rsp + 0x48]
add eax, dword [rsp + 0x48]
mov dword [rsp + 0x40], eax
imul eax, dword [rsp + 0x4c], 0x108a1
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x4c]
cdq
idiv dword [rsp + 0x44]
mov eax, edx
mov ecx, dword [rsp + 0x48]
lea eax, [rcx + rax - 0x57ef]
mov dword [rsp + 0x44], eax
imul eax, dword [rsp + 0x4c], 0xb3e2
add eax, dword [rsp + 0x40]
mov dword [rsp + 0xd8], eax
mov eax, 0x12400
cdq
idiv dword [rsp + 0x4c]
mov ecx, dword [rsp + 0xd8]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x44], eax
mov edx, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x44]
call qword [sym.imp.GDI32.dll_GetTextMetricsA]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
lea eax, [rax + rcx + 0x10fba]
mov ecx, dword [rsp + 0x4c]
sar eax, cl
mov dword [rsp + 0x4c], eax
jmp 0x180005e8a
mov eax, dword [rsp + 0x40]
cmp dword [0x18001ca08], eax
jg 0x180005e3e
call fcn.180002a10
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x4c]
mov eax, edx
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x4c]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x44]
lea eax, [rax + rcx + 0x98e3]
sub eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x44], eax
imul eax, dword [rsp + 0x48], 0xd9e2
movzx ecx, al
mov eax, dword [rsp + 0x40]
sar eax, cl
shl eax, 0x93
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x48], eax
mov eax, dword [0x18001c9fc]
cmp dword [rsp + 0x40], eax
jle 0x180005fe6
jmp 0x1800061cf
mov eax, dword [rsp + 0x48]
cdq
mov ecx, 0x121b6
idiv ecx
mov dword [0x18001c9f4], eax
mov r8d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x48]
call qword [sym.imp.USER32.dll_CheckDlgButton]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x48]
cdq
idiv dword [rsp + 0x44]
imul eax, dword [rsp + 0x44]
mov ecx, 0x4198
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x44]
imul eax, dword [rsp + 0x48]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x44]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x44]
cdq
idiv dword [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
sub ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x4c]
imul ecx, dword [rsp + 0x48]
sar eax, cl
mov dword [rsp + 0x44], eax
mov eax, dword [0x18001ca04]
mov dword [rsp + 0x7c], eax
jmp 0x1800060ba
mov eax, dword [rsp + 0x7c]
dec eax
mov dword [rsp + 0x7c], eax
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x7c], eax
jge 0x18000612d
call fcn.1800024d0
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x40]
imul ecx, dword [rsp + 0x44]
imul ecx, dword [rsp + 0x48]
imul ecx, dword [rsp + 0x40]
add eax, ecx
mov dword [rsp + 0x4c], eax
call fcn.180002a10
mov eax, dword [rsp + 0x40]
cdq
mov ecx, 0x12d94
idiv ecx
sub eax, dword [rsp + 0x48]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x48], 0x11ee7
mov eax, dword [rsp + 0x4c]
imul eax, dword [rsp + 0x48]
imul ecx, dword [rsp + 0x40], 0x15591
imul ecx, dword [rsp + 0x4c]
sub eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x1800060b0
mov eax, dword [0x18001ca00]
cmp dword [rsp + 0x40], eax
je 0x180006080
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x48]
add eax, dword [rsp + 0x4c]
imul ecx, dword [rsp + 0x4c], 0x3855
shl eax, cl
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x48]
imul eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
cmp dword [0x18001ca04], eax
ja 0x18000601f
mov ecx, 0xaab6a
call qword [sym.imp.UxTheme.dll_GetBufferedPaintTargetDC]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x40]
imul eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x4c]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x48]
add eax, 0x39bc
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x4c]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x4c]
add eax, dword [rsp + 0x44]
sub eax, dword [rsp + 0x4c]
mov dword [0x18001ca10], eax
jmp 0x1800059b1
mov eax, dword [rsp + 0x44]
cmp dword [0x18001c9f0], eax
jle 0x1800059a5
add rsp, 0xe8
ret