Function at 0x10018c39
Capabilities:
Extract resource via kernel32 functions
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007fae3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf90
push esi
push edi
mov dword [ebp - 0x18c], 1
mov dword [ebp - 0x2b0], 0
jmp 0x10018c7c
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 1
jge 0x10018c98
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0xa08], 1
jmp 0x10018c6f
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18c]
mov dword [ebp + eax - 0xa08], ecx
mov dword [ebp - 0x18c], 0
jmp 0x10018cc4
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x1c
jg 0x10018cf5
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10018cf3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
jmp 0x10018cb7
mov dword [ebp - 0x190], 1
mov dword [ebp - 0x2b8], 0
jmp 0x10018d18
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 1
jge 0x10018d34
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0xb10], 1
jmp 0x10018d0b
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x190]
mov dword [ebp + eax - 0xb10], ecx
mov dword [ebp - 0x190], 0
jmp 0x10018d60
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x1c
jg 0x10018d91
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x10018d8f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
jmp 0x10018d53
mov dword [ebp - 0x1b4], 0x398
mov dword [ebp - 0x6dc], 0x7f5ed9a9
mov dword [ebp - 0x12c], 0
push 3
lea ecx, [ebp - 0xe60]
call fcn.10012648
and dword [ebp - 4], 0
mov dword [ebp - 0x2c0], 0
jmp 0x10018dd9
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 3
jge 0x10018df8
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0xe60]
call fcn.100126e6
and dword [eax], 0
jmp 0x10018dcc
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xdfc], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xdec], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x6dc], eax
jne 0x10018e36
mov dword [ebp - 0x9b0], 1
jmp 0x10018e3d
and dword [ebp - 0x9b0], 0
cmp dword [ebp - 0x9b0], 0xffff
jae 0x10018e55
mov dword [ebp - 0x9b8], 1
jmp 0x10018e5c
and dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x9b8]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x12c], 0
jmp 0x10018e81
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jg 0x10018ebe
mov byte [ebp - 0x102], 0
movzx eax, byte [ebp - 0x102]
test eax, eax
je 0x10018ebc
push 0
push 0x1201
push 0x26b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
jmp 0x10018e74
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe60]
call fcn.100126ca
push 2
lea ecx, [ebp - 0xc2c]
call fcn.10012648
mov dword [ebp - 4], 1
mov dword [ebp - 0x1bc], 0xbdba76aa
mov dword [ebp - 0x260], 0
jmp 0x10018f04
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 2
jge 0x10018f26
push dword [ebp - 0x260]
lea ecx, [ebp - 0xc2c]
call fcn.100126e6
mov dword [eax], 9
jmp 0x10018ef7
mov dword [ebp - 0x1bc], 1
jmp 0x10018f3f
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
jl 0x10018ff4
mov dword [ebp - 0x268], 0x888adae8
mov dword [ebp - 0x268], 1
jmp 0x10018f6f
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
jl 0x10018fbf
mov dword [ebp - 0x164], 8
mov dword [ebp - 0x164], 0
jmp 0x10018f9b
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x10018fbd
push dword [ebp - 0x164]
lea ecx, [ebp - 0xc2c]
call fcn.100126e6
mov dword [eax], 0xfa20bd03
jmp 0x10018f8e
jmp 0x10018f62
mov byte [ebp - 0xa8], 0
movzx eax, byte [ebp - 0xa8]
test eax, eax
je 0x10018fef
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
jmp 0x10018f32
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc2c]
call fcn.100126ca
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0xb18], 0xacd79536
mov dword [ebp - 0x134], 0
jmp 0x10019030
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x1b
jg 0x10019095
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x10019087
push 0x1439
push 0x1a8e
push 0x52d
push 0x24f1
push 0x1c59
push 0x134c
push 0x150e
push 0x90b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xb18], eax
jmp 0x10019023
mov dword [ebp - 0x180], 1
mov dword [ebp - 0x1c4], 0
jmp 0x100190b8
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jge 0x100190d4
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0xb20], 1
jmp 0x100190ab
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x180]
mov dword [ebp + eax - 0xb20], ecx
mov dword [ebp - 0x180], 0
jmp 0x10019100
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x1c
jg 0x10019131
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1001912f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
jmp 0x100190f3
mov dword [ebp - 0xf48], 0x176b0f73
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x1001915c
push 0
push 0x1b
push 0x133
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x1001917d
push 0
push 0x1762
push 0
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
mov dword [ebp - 0x1cc], 0x398
mov dword [ebp - 0x9c0], 0x7f5ed9a9
mov dword [ebp - 0x13c], 0
push 3
lea ecx, [ebp - 0xe70]
call fcn.10012648
mov dword [ebp - 4], 2
mov dword [ebp - 0x270], 0
jmp 0x100191c8
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 3
jge 0x100191e7
push dword [ebp - 0x270]
lea ecx, [ebp - 0xe70]
call fcn.100126e6
and dword [eax], 0
jmp 0x100191bb
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0xdf4], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0xe94], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x9c0], eax
jne 0x10019225
mov dword [ebp - 0x9c8], 1
jmp 0x1001922c
and dword [ebp - 0x9c8], 0
cmp dword [ebp - 0x9c8], 0xffff
jae 0x10019244
mov dword [ebp - 0x9d0], 1
jmp 0x1001924b
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x13c], 0
jmp 0x10019270
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 2
jg 0x100192ad
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x100192ab
push 0
push 0x1201
push 0x26b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
jmp 0x10019263
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe70]
call fcn.100126ca
mov dword [ebp - 0x60], 7
mov dword [ebp - 0x5c4], 0xffffffff
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x10c], 0xf4ed832c
mov dword [ebp - 0x278], 0
jmp 0x100192fa
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jge 0x10019316
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0xe80], 0x30467731
jmp 0x100192ed
cmp dword [ebp - 0x60], 0
jne 0x100194a2
cmp dword [ebp - 0x60], 0
je 0x10019398
cmp dword [ebp - 0x60], 0
je 0x1001934a
mov eax, 0x6e5dc64f
test eax, eax
je 0x1001934a
mov eax, 0x3cfcb8f
test eax, eax
je 0x1001934a
mov dword [ebp - 0x9d8], 1
jmp 0x10019351
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
sub eax, dword [ebp - 0x9d8]
jne 0x10019378
mov dword [ebp - 0x2e4], 1
jmp 0x1001937f
and dword [ebp - 0x2e4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax - 0xe80], ecx
mov eax, dword [ebp - 0x5c4]
mov eax, 0xca925f32
test eax, eax
je 0x100193bd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe80], 0
je 0x100193bd
mov dword [ebp - 0x9e0], 1
jmp 0x100193c4
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x9e0]
mov dword [ebp - 0x5c4], eax
mov eax, 0xa0e40209
test eax, eax
jne 0x100193ee
cmp dword [ebp - 0x1d4], 0
je 0x100193ee
mov dword [ebp - 0x798], 1
jmp 0x100193f5
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x798]
jne 0x1001940c
mov dword [ebp - 0x3b8], 1
jmp 0x10019413
and dword [ebp - 0x3b8], 0
cmp dword [ebp - 0x3b8], 6
jbe 0x10019428
mov dword [ebp - 0x7a0], 1
jmp 0x1001942f
and dword [ebp - 0x7a0], 0
cmp dword [ebp - 0x7a0], 0xf71d6917
jb 0x10019447
mov dword [ebp - 0x3c0], 1
jmp 0x1001944e
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x3c0]
cmp eax, 0xfff9
jae 0x1001946b
mov dword [ebp - 0x7a8], 1
jmp 0x10019472
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x7a8], eax
jg 0x10019489
mov dword [ebp - 0x3c8], 1
jmp 0x10019490
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x3c8], 1
jae 0x100194a2
and dword [ebp - 0x7b0], 0
jmp 0x100194ac
mov dword [ebp - 0x7b0], 1
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x7b0], eax
jg 0x100194c3
mov dword [ebp - 0x3d0], 1
jmp 0x100194ca
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x3d0]
sub eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x60]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x60]
jne 0x10019508
mov dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x7b8]
inc eax
mov dword [ebp - 0x7b8], eax
jmp 0x1001957f
mov dword [ebp - 0x3d8], 0x760e0689
mov byte [ebp - 0x103], 0
movzx eax, byte [ebp - 0x103]
test eax, eax
je 0x10019544
push 0
push 0x1201
push 0x26b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
mov dword [ebp - 0x10c], 0
jmp 0x1001955d
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jg 0x1001957f
mov dword [ebp - 0xd00], 0xffffffff
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
jmp 0x10019550
mov dword [ebp - 0x280], 3
mov dword [ebp - 0x37c], 0xddcef989
mov dword [ebp - 0x3e0], 0xfffffff7
push 1
lea ecx, [ebp - 0xea0]
call fcn.10012648
mov dword [ebp - 4], 3
mov dword [ebp - 0xb40], 0xa9683648
mov dword [ebp - 0x7e0], 0xb0ae28de
mov dword [ebp - 0x3f0], 0xfffffff6
push 4
lea ecx, [ebp - 0xcec]
call fcn.10012648
mov byte [ebp - 4], 4
mov dword [ebp - 0x7d8], 6
mov dword [ebp - 0x20], 0
jmp 0x100195fa
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10019616
push dword [ebp - 0x20]
lea ecx, [ebp - 0xea0]
call fcn.100126e6
mov dword [eax], 0x7ace
jmp 0x100195f3
mov dword [ebp - 0x20], 0
jmp 0x10019626
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x1001963c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xf74], 0x3d8c5378
jmp 0x1001961f
mov dword [ebp - 0x20], 0
jmp 0x1001964c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10019668
push dword [ebp - 0x20]
lea ecx, [ebp - 0xcec]
call fcn.100126e6
mov dword [eax], 0xa907865e
jmp 0x10019645
mov dword [ebp - 0x20], 0
jmp 0x10019678
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1001968e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xe90], 5
jmp 0x10019671
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0xd08], eax
cmp dword [ebp - 0x3e0], 0
je 0x100196b8
cmp dword [ebp - 0x280], 0
je 0x100196b8
mov dword [ebp - 0x7c0], 1
jmp 0x100196bf
and dword [ebp - 0x7c0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe90]
cmp dword [ebp - 0x7c0], eax
jg 0x100196e9
cmp dword [ebp - 0x3e0], 0
je 0x100196e9
mov dword [ebp - 0x7c8], 1
jmp 0x100196f0
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x7c8], eax
jge 0x1001970a
mov dword [ebp - 0x3e8], 1
jmp 0x10019711
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0xb650
jne 0x10019729
mov dword [ebp - 0xb28], 1
jmp 0x10019730
and dword [ebp - 0xb28], 0
mov eax, 0xd2ce6c1c
cmp eax, 0x5a1448af
je 0x10019748
mov dword [ebp - 0x7d0], 1
jmp 0x1001974f
and dword [ebp - 0x7d0], 0
push 1
lea ecx, [ebp - 0xcec]
call fcn.100126e6
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x7d0]
mov edx, dword [ebp - 0x36c]
mov edx, dword [edx]
dec edx
mov esi, dword [ebp - 0x36c]
mov dword [esi], edx
cmp eax, ecx
jl 0x1001979a
cmp dword [ebp - 0x37c], 0
je 0x1001979a
mov dword [ebp - 0x374], 1
jmp 0x100197a1
and dword [ebp - 0x374], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x374]
mov dword [ebp + eax - 0xe90], ecx
mov eax, dword [ebp - 0x374]
add eax, 0x3632cac2
cmp dword [ebp - 0x280], eax
jl 0x100197d3
mov dword [ebp - 0xb30], 1
jmp 0x100197da
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0xd18], eax
mov eax, dword [ebp - 0x37c]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xf74]
cmp dword [ebp - 0x280], eax
jle 0x10019819
mov dword [ebp - 0xb38], 1
jmp 0x10019820
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0xb40]
mov dword [ebp - 0xd20], eax
mov eax, dword [ebp - 0x7d8]
cmp dword [ebp - 0x7e0], eax
jl 0x10019846
mov dword [ebp - 0x384], 1
jmp 0x1001984d
and dword [ebp - 0x384], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x384]
mov dword [ebp + eax - 0xf74], ecx
cmp dword [ebp - 0x384], 0
je 0x1001987e
cmp dword [ebp - 0x7d8], 0
je 0x1001987e
mov dword [ebp - 0x3f8], 1
jmp 0x10019885
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x7e0], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xcec]
call fcn.100126ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xea0]
call fcn.100126ca
mov dword [ebp - 0xd28], 0x176b0f73
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x100198da
push 0
push 0x1b
push 0x133
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x100198fb
push 0
push 0x1762
push 0
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
mov dword [ebp - 0x288], 0x398
mov dword [ebp - 0x400], 0x7f5ed9a9
mov dword [ebp - 0x16c], 0
push 3
lea ecx, [ebp - 0xeb0]
call fcn.10012648
mov dword [ebp - 4], 5
mov dword [ebp - 0x1dc], 0
jmp 0x10019946
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x10019965
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0xeb0]
call fcn.100126e6
and dword [eax], 0
jmp 0x10019939
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0xd30], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x400], eax
jne 0x100199a3
mov dword [ebp - 0x7e8], 1
jmp 0x100199aa
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x7e8], 0xffff
jae 0x100199c2
mov dword [ebp - 0x408], 1
jmp 0x100199c9
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x16c], 0
jmp 0x100199ee
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 2
jg 0x10019a2b
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x10019a29
push 0
push 0x1201
push 0x26b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
jmp 0x100199e1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xeb0]
call fcn.100126ca
mov dword [ebp - 0x58], 7
mov dword [ebp - 0x7f8], 0xffffffff
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x118], 0xf4ed832c
mov dword [ebp - 0x1e4], 0
jmp 0x10019a78
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 3
jge 0x10019a94
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xec0], 0x30467731
jmp 0x10019a6b
cmp dword [ebp - 0x58], 0
jne 0x10019c20
cmp dword [ebp - 0x58], 0
je 0x10019b16
cmp dword [ebp - 0x58], 0
je 0x10019ac8
mov eax, 0x6e5dc64f
test eax, eax
je 0x10019ac8
mov eax, 0x3cfcb8f
test eax, eax
je 0x10019ac8
mov dword [ebp - 0x7f0], 1
jmp 0x10019acf
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x290]
dec eax
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
sub eax, dword [ebp - 0x7f0]
jne 0x10019af6
mov dword [ebp - 0x370], 1
jmp 0x10019afd
and dword [ebp - 0x370], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x370]
mov dword [ebp + eax - 0xec0], ecx
mov eax, dword [ebp - 0x7f8]
mov eax, 0xca925f32
test eax, eax
je 0x10019b3b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xec0], 0
je 0x10019b3b
mov dword [ebp - 0x410], 1
jmp 0x10019b42
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x7f8], eax
mov eax, 0xa0e40209
test eax, eax
jne 0x10019b6c
cmp dword [ebp - 0x290], 0
je 0x10019b6c
mov dword [ebp - 0x418], 1
jmp 0x10019b73
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x418]
jne 0x10019b8a
mov dword [ebp - 0x800], 1
jmp 0x10019b91
and dword [ebp - 0x800], 0
cmp dword [ebp - 0x800], 6
jbe 0x10019ba6
mov dword [ebp - 0x420], 1
jmp 0x10019bad
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x420], 0xf71d6917
jb 0x10019bc5
mov dword [ebp - 0x808], 1
jmp 0x10019bcc
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x808]
cmp eax, 0xfff9
jae 0x10019be9
mov dword [ebp - 0x428], 1
jmp 0x10019bf0
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x428], eax
jg 0x10019c07
mov dword [ebp - 0x810], 1
jmp 0x10019c0e
and dword [ebp - 0x810], 0
cmp dword [ebp - 0x810], 1
jae 0x10019c20
and dword [ebp - 0x430], 0
jmp 0x10019c2a
mov dword [ebp - 0x430], 1
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x430], eax
jg 0x10019c41
mov dword [ebp - 0x818], 1
jmp 0x10019c48
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x818]
sub eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x58]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x58]
jne 0x10019c86
mov dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
inc eax
mov dword [ebp - 0x438], eax
jmp 0x10019cfd
mov dword [ebp - 0x820], 0x760e0689
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x10019cc2
push 0
push 0x1201
push 0x26b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
mov dword [ebp - 0x118], 0
jmp 0x10019cdb
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jg 0x10019cfd
mov dword [ebp - 0xd40], 0xffffffff
mov eax, dword [ebp - 0x820]
inc eax
mov dword [ebp - 0x820], eax
jmp 0x10019cce
mov dword [ebp - 0x70], 0x5121ac48
mov dword [ebp - 0x298], 0x83674579
push 4
lea ecx, [ebp - 0xb70]
call fcn.10012648
mov dword [ebp - 4], 6
mov dword [ebp - 0xb50], 1
mov dword [ebp - 0x1ec], 0
jmp 0x10019d45
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 4
jge 0x10019d67
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0xb70]
call fcn.100126e6
mov dword [eax], 0x7bdd4840
jmp 0x10019d38
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x10019d94
push 0x1a78
push 0
push 0x1065
push 0
push 0x4d9
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
cmp dword [ebp - 0x70], 0xffffffff
jle 0x10019da6
mov dword [ebp - 0x440], 1
jmp 0x10019dad
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x298]
add eax, dword [ebp - 0x440]
add eax, dword [ebp - 0x70]
cmp eax, 0x1311e2db
je 0x10019dcf
mov dword [ebp - 0x828], 1
jmp 0x10019dd6
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0x828]
sub eax, dword [ebp - 0x298]
add eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x298]
jge 0x10019df9
mov dword [ebp - 0xb48], 1
jmp 0x10019e00
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xd48], eax
mov esi, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x70]
sub edx, 0x3a80c632
sub ecx, edx
sub eax, ecx
imul esi, eax
push 3
lea ecx, [ebp - 0xb70]
call fcn.100126e6
cmp esi, dword [eax]
jl 0x10019e3f
mov dword [ebp - 0x448], 1
jmp 0x10019e46
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x70], eax
jge 0x10019e66
mov dword [ebp - 0x830], 1
jmp 0x10019e6d
and dword [ebp - 0x830], 0
push 3
lea ecx, [ebp - 0xb70]
call fcn.100126e6
mov ecx, dword [ebp - 0x830]
cmp ecx, dword [eax]
jne 0x10019e90
mov dword [ebp - 0x450], 1
jmp 0x10019e97
and dword [ebp - 0x450], 0
push 3
lea ecx, [ebp - 0xb70]
call fcn.100126e6
mov ecx, dword [ebp - 0x450]
cmp ecx, dword [eax]
jg 0x10019eba
mov dword [ebp - 0x838], 1
jmp 0x10019ec1
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0xb50], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb70]
call fcn.100126ca
mov dword [ebp - 0x1f4], 3
mov dword [ebp - 0x2f4], 0xddcef989
mov dword [ebp - 0x840], 0xfffffff7
push 1
lea ecx, [ebp - 0xee0]
call fcn.10012648
mov dword [ebp - 4], 7
mov dword [ebp - 0xa5c], 0xa9683648
mov dword [ebp - 0x478], 0xb0ae28de
mov dword [ebp - 0x850], 0xfffffff6
push 4
lea ecx, [ebp - 0xc44]
call fcn.10012648
mov byte [ebp - 4], 8
mov dword [ebp - 0x470], 6
mov dword [ebp - 0x24], 0
jmp 0x10019f57
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10019f73
push dword [ebp - 0x24]
lea ecx, [ebp - 0xee0]
call fcn.100126e6
mov dword [eax], 0x7ace
jmp 0x10019f50
mov dword [ebp - 0x24], 0
jmp 0x10019f83
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10019f99
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xf84], 0x3d8c5378
jmp 0x10019f7c
mov dword [ebp - 0x24], 0
jmp 0x10019fa9
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10019fc5
push dword [ebp - 0x24]
lea ecx, [ebp - 0xc44]
call fcn.100126e6
mov dword [eax], 0xa907865e
jmp 0x10019fa2
mov dword [ebp - 0x24], 0
jmp 0x10019fd5
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10019feb
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xed0], 5
jmp 0x10019fce
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0xd50], eax
cmp dword [ebp - 0x840], 0
je 0x1001a015
cmp dword [ebp - 0x1f4], 0
je 0x1001a015
mov dword [ebp - 0x458], 1
jmp 0x1001a01c
and dword [ebp - 0x458], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xed0]
cmp dword [ebp - 0x458], eax
jg 0x1001a046
cmp dword [ebp - 0x840], 0
je 0x1001a046
mov dword [ebp - 0x460], 1
jmp 0x1001a04d
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x460], eax
jge 0x1001a067
mov dword [ebp - 0x848], 1
jmp 0x1001a06e
and dword [ebp - 0x848], 0
cmp dword [ebp - 0x848], 0xb650
jne 0x1001a086
mov dword [ebp - 0xb58], 1
jmp 0x1001a08d
and dword [ebp - 0xb58], 0
mov eax, 0xd2ce6c1c
cmp eax, 0x5a1448af
je 0x1001a0a5
mov dword [ebp - 0x468], 1
jmp 0x1001a0ac
and dword [ebp - 0x468], 0
push 1
lea ecx, [ebp - 0xc44]
call fcn.100126e6
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x468]
mov edx, dword [ebp - 0x2ec]
mov edx, dword [edx]
dec edx
mov esi, dword [ebp - 0x2ec]
mov dword [esi], edx
cmp eax, ecx
jl 0x1001a0f7
cmp dword [ebp - 0x2f4], 0
je 0x1001a0f7
mov dword [ebp - 0x368], 1
jmp 0x1001a0fe
and dword [ebp - 0x368], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x368]
mov dword [ebp + eax - 0xed0], ecx
mov eax, dword [ebp - 0x368]
add eax, 0x3632cac2
cmp dword [ebp - 0x1f4], eax
jl 0x1001a130
mov dword [ebp - 0xb60], 1
jmp 0x1001a137
and dword [ebp - 0xb60], 0
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0xd58], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0xd60], eax
mov eax, dword [ebp - 0x2f4]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xf84]
cmp dword [ebp - 0x1f4], eax
jle 0x1001a176
mov dword [ebp - 0xacc], 1
jmp 0x1001a17d
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0xa5c]
mov dword [ebp - 0xd68], eax
mov eax, dword [ebp - 0x470]
cmp dword [ebp - 0x478], eax
jl 0x1001a1a3
mov dword [ebp - 0x344], 1
jmp 0x1001a1aa
and dword [ebp - 0x344], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x344]
mov dword [ebp + eax - 0xf84], ecx
cmp dword [ebp - 0x344], 0
je 0x1001a1db
cmp dword [ebp - 0x470], 0
je 0x1001a1db
mov dword [ebp - 0x858], 1
jmp 0x1001a1e2
and dword [ebp - 0x858], 0
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0x478], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xc44]
call fcn.100126ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xee0]
call fcn.100126ca
mov dword [ebp - 0xd70], 0x176b0f73
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x1001a237
push 0
push 0x1b
push 0x133
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x1001a258
push 0
push 0x1762
push 0
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
mov dword [ebp - 0x2a0], 0xe60f951f
mov dword [ebp - 0x860], 0xfffffffc
push 4
lea ecx, [ebp - 0xbd4]
call fcn.10012648
mov dword [ebp - 4], 9
push 2
lea ecx, [ebp - 0xca4]
call fcn.10012648
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xc0], 0x2aff6358
mov dword [ebp - 0x144], 0x6d0c11e0
mov dword [ebp - 0x38], 0
jmp 0x1001a2b5
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1001a2cb
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xef0], 0xd203
jmp 0x1001a2ae
mov dword [ebp - 0x38], 0
jmp 0x1001a2db
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x1001a2f7
push dword [ebp - 0x38]
lea ecx, [ebp - 0xbd4]
call fcn.100126e6
mov dword [eax], 0x14f4e797
jmp 0x1001a2d4
mov dword [ebp - 0x38], 0
jmp 0x1001a307
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x1001a323
push dword [ebp - 0x38]
lea ecx, [ebp - 0xca4]
call fcn.100126e6
mov dword [eax], 0x6cc9ca31
jmp 0x1001a300
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x2a0], eax
jg 0x1001a33d
mov dword [ebp - 0x878], 1
jmp 0x1001a344
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x860], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xef0]
add eax, 0x1af7
mov dword [ebp - 0x480], eax
push 1
lea ecx, [ebp - 0xbd4]
call fcn.100126e6
mov ecx, dword [ebp - 0x480]
mov dword [eax], ecx
mov eax, dword [ebp - 0x860]
cmp eax, dword [ebp - 0x480]
jl 0x1001a396
mov dword [ebp - 0x868], 1
jmp 0x1001a39d
and dword [ebp - 0x868], 0
mov eax, 0x6b471dfd
sub eax, dword [ebp - 0x868]
mov dword [ebp - 0x488], eax
push 1
lea ecx, [ebp - 0xca4]
call fcn.100126e6
mov ecx, dword [ebp - 0x488]
mov dword [eax], ecx
cmp dword [ebp - 0x488], 0x74e8
jne 0x1001a3e1
cmp dword [ebp - 0xc0], 0
jne 0x1001a3e1
and dword [ebp - 0x870], 0
jmp 0x1001a3eb
mov dword [ebp - 0x870], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xef0]
imul eax, dword [ebp - 0x870]
cmp eax, dword [ebp - 0x2a0]
jl 0x1001a413
mov dword [ebp - 0x490], 1
jmp 0x1001a41a
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x490], eax
je 0x1001a434
mov dword [ebp - 0x498], 1
jmp 0x1001a43b
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x878]
add eax, dword [ebp - 0x498]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x144], 0
jmp 0x1001a466
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x33
jg 0x1001a544
mov dword [ebp - 0x2a8], 0
jmp 0x1001a48c
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 1
jge 0x1001a4a8
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0xa20], 0
jmp 0x1001a47f
mov dword [ebp - 0xc0], 0
jmp 0x1001a4c1
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jg 0x1001a53f
mov dword [ebp - 0x2fc], 0xb7c39c9d
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0xa18], eax
push dword [ebp - 0xc0]
lea ecx, [ebp - 0xbd4]
call fcn.100126e6
mov eax, dword [eax]
mov dword [ebp - 0xadc], eax
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0xa18]
cmp eax, dword [ebp - 0xadc]
jle 0x1001a520
mov dword [ebp - 0x880], 1
jmp 0x1001a527
and dword [ebp - 0x880], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x880]
mov dword [ebp + eax - 0xa20], ecx
jmp 0x1001a4b4
jmp 0x1001a459
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xca4]
call fcn.100126ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbd4]
call fcn.100126ca
mov dword [ebp - 0x378], 0x3185
mov dword [ebp - 0xaf8], 0x647dc4b4
mov dword [ebp - 0xd78], 0xae97
mov dword [ebp - 0xd80], 1
mov dword [ebp - 0xd88], 0
mov dword [ebp - 0xa28], 0x4a1d2daf
cmp dword [ebp - 0x378], 0
je 0x1001a5b5
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0xaf8], eax
jmp 0x1001a5cf
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x1001a5cf
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp dword [ebp - 0x378], 1
jl 0x1001a5e4
mov dword [ebp - 0x4a0], 1
jmp 0x1001a5eb
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0xa28], eax
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0x890], 0xffffffff
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x110], 0xf4ed832c
mov dword [ebp - 0x26c], 0
jmp 0x1001a635
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jge 0x1001a651
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0xf00], 0x30467731
jmp 0x1001a628
cmp dword [ebp - 0x5c], 0
jne 0x1001a7dd
cmp dword [ebp - 0x5c], 0
je 0x1001a6d3
cmp dword [ebp - 0x5c], 0
je 0x1001a685
mov eax, 0x6e5dc64f
test eax, eax
je 0x1001a685
mov eax, 0x3cfcb8f
test eax, eax
je 0x1001a685
mov dword [ebp - 0x888], 1
jmp 0x1001a68c
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
sub eax, dword [ebp - 0x888]
jne 0x1001a6b3
mov dword [ebp - 0x304], 1
jmp 0x1001a6ba
and dword [ebp - 0x304], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x304]
mov dword [ebp + eax - 0xf00], ecx
mov eax, dword [ebp - 0x890]
mov eax, 0xca925f32
test eax, eax
je 0x1001a6f8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf00], 0
je 0x1001a6f8
mov dword [ebp - 0x4a8], 1
jmp 0x1001a6ff
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x890], eax
mov eax, 0xa0e40209
test eax, eax
jne 0x1001a729
cmp dword [ebp - 0x20c], 0
je 0x1001a729
mov dword [ebp - 0x4b0], 1
jmp 0x1001a730
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x4b0]
jne 0x1001a747
mov dword [ebp - 0x898], 1
jmp 0x1001a74e
and dword [ebp - 0x898], 0
cmp dword [ebp - 0x898], 6
jbe 0x1001a763
mov dword [ebp - 0x4b8], 1
jmp 0x1001a76a
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x4b8], 0xf71d6917
jb 0x1001a782
mov dword [ebp - 0x4c8], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x4c8], eax
jg 0x1001a7fe
mov dword [ebp - 0x8b0], 1
jmp 0x1001a805
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x8b0]
sub eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x5c]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x5c]
jne 0x1001a843
mov dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
inc eax
mov dword [ebp - 0x4d0], eax
jmp 0x1001a8ba
mov dword [ebp - 0x8b8], 0x760e0689
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x1001a87f
push 0
push 0x1201
push 0x26b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
mov dword [ebp - 0x110], 0
jmp 0x1001a898
cmp dword [ebp - 0x110], 0
jg 0x1001a8ba
mov dword [ebp - 0xd90], 0xffffffff
mov eax, dword [ebp - 0x8b8]
inc eax
mov dword [ebp - 0x8b8], eax
jmp 0x1001a88b
mov dword [ebp - 0x18], 0x70ad
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10012648
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x184], 0x334adc6f
mov dword [ebp - 0x2c4], 0
jmp 0x1001a8f8