Function at 0x11826000
Capabilities:
Check os version
Clear file content
Delete file

Disassembly:
mov eax, 0x1006618c
call fcn.10060c78
sub esp, 0x7dc
push ebx
push esi
mov dword [ebp - 0x38], 0xab8c3ad3
or esi, 0xffffffff
mov dword [ebp - 0x4c], 0xd697e780
push edi
mov dword [ebp - 0x60], ecx
lea ecx, [ebp - 0x4b4]
mov dword [ebp - 0x28], 0xd19c9214
mov dword [ebp - 0x4c], 0x9e843631
mov dword [ebp - 0x34], esi
push 2
mov byte [ebp - 0x59], dl
call fcn.1000b4e9
xor ebx, ebx
mov dword [ebp - 0x20], 0xe712c519
push 1
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x11826068
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x4b4]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x11826059
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
imul ecx, eax
test ecx, ecx
jne 0x11826091
mov ecx, ebx
cmp dword [ebp - 0x20], ebx
je 0x11826093
mov ecx, edx
mov eax, dword [ebp - 0x4b4]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x4b4]
call fcn.1000ba34
xor ecx, ecx
inc ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x10], 0x5a136951
mov dword [ebp - 0x28], 0xfffffff9
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 0xffffffe2
jmp 0x118260d7
cmp dword [ebp - 0x28], ebx
jne 0x118260dd
cmp dword [ebp - 0x34], ebx
jne 0x118260dd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x18
je 0x118260ca
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x10], ebx
jmp 0x118260f6
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7d8], 0x9841
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x118260e5
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x28], 0x1b68
cmp dword [ebp - 0x28], 0x1179
jge 0x11826336
xor eax, eax
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 4], eax
mov esi, eax
mov dword [ebp - 0x158], esi
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], eax
mov byte [ebp - 4], cl
jmp 0x118262fc
mov edx, dword [ebp - 0x74]
xor edi, edi
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0x154], esi
test edx, edx
jle 0x118261b1
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x10007c7c
call fcn.1004833b
add esp, 0xc
lea eax, [ebp - 0xa0]
lea ecx, [ebp - 0xf8]
push eax
call fcn.10041b1a
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x158]
call fcn.10041b1a
mov edx, dword [ebp - 0x74]
inc edi
cmp edi, edx
jl 0x1182615e
mov ebx, dword [ebp - 0xf8]
mov esi, dword [ebp - 0x158]
xorps xmm1, xmm1
xorps xmm2, xmm2
xor edi, edi
movsd qword [ebp - 0xa8], xmm1
movsd qword [ebp - 0xa0], xmm2
test edx, edx
jle 0x1182621e
sub ebx, esi
mov ecx, esi
mov dword [ebp - 0x28], ebx
mov eax, edi
and eax, 0x80000001
jns 0x118261e2
dec eax
or eax, 0xfffffffe
inc eax
jne 0x118261f7
addsd xmm2, qword [ebx + ecx]
movsd qword [ebp - 0xa0], xmm2
addsd xmm1, qword [ecx]
jmp 0x11826208
subsd xmm2, qword [ebx + ecx]
movsd qword [ebp - 0xa0], xmm2
subsd xmm1, qword [ecx]
inc edi
movsd qword [ebp - 0xa8], xmm1
add ecx, 8
cmp edi, edx
jl 0x118261d4
mov ebx, dword [ebp - 0xf8]
sub esp, 0x10
movsd qword [esp + 8], xmm1
movsd qword [esp], xmm2
push edx
push 0x10007c88
call fcn.10048556
and dword [ebp - 0x40], 0
add esp, 0x18
mov eax, dword [ebp - 0x74]
dec eax
test eax, eax
jle 0x118262f1
movsd xmm1, qword [ebp - 0xa8]
mov edi, esi
movsd xmm2, qword [ebp - 0xa0]
movsd xmm3, qword [0x10007df0]
mov dword [ebp - 0x28], ebx
sub ebx, esi
mov esi, dword [ebp - 0x40]
movsd xmm0, qword [edi]
sub esp, 0x10
mulsd xmm0, xmm3
subsd xmm0, xmm1
movsd qword [esp + 8], xmm0
movsd xmm0, qword [edi + ebx]
mulsd xmm0, xmm3
subsd xmm0, xmm2
movsd qword [esp], xmm0
push 0x10007c98
call fcn.10048556
movsd xmm2, qword [edi + ebx]
add esp, 0x14
movsd xmm3, qword [0x10007df0]
inc esi
mov eax, dword [ebp - 0x74]
mulsd xmm2, xmm3
subsd xmm2, qword [ebp - 0xa0]
movsd qword [ebp - 0xa0], xmm2
movsd xmm1, qword [edi]
add edi, 8
mulsd xmm1, xmm3
dec eax
subsd xmm1, qword [ebp - 0xa8]
movsd qword [ebp - 0xa8], xmm1
cmp esi, eax
jl 0x1182626c
mov esi, dword [ebp - 0x158]
mov ebx, dword [ebp - 0xf8]
push 0x10007b10
call fcn.10048556
pop ecx
lea eax, [ebp - 0x74]
push eax
push 0x10007784
call fcn.1004833b
pop ecx
pop ecx
cmp eax, 1
je 0x11826149
lea ecx, [ebp - 0x158]
call fcn.1000ba34
or eax, 0xffffffff
lea ecx, [ebp - 0xf8]
mov dword [ebp - 4], eax
call fcn.1000ba34
xor ecx, ecx
xor ebx, ebx
inc ecx
mov dword [ebp - 0x34], 0x5f27a412
mov esi, ebx
mov dword [ebp - 0x30], 0xedb5
mov dword [ebp - 0x28], 0x9aa6f576
cmp dword [ebp - 0x14], ebx
je 0x11826354
mov esi, ecx
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setle dl
xor ecx, ecx
imul edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg cl
sub esi, eax
add esi, dword [ebp - 0x14]
imul ecx, esi
test ecx, ecx
jne 0x1182638d
cmp dword [ebp - 0x14], ebx
jne 0x1182638d
xor esi, esi
mov edx, ebx
inc esi
jmp 0x11826392
xor esi, esi
inc esi
mov edx, esi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
mov dword [ebp - 0x3c], 3
push 7
setl cl
imul ecx, dword [ebp - 0x14]
pop edi
cmp ecx, dword [ebp - 0x14]
jg 0x118263bd
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], eax
jmp 0x118265ba
mov dword [ebp - 0x38], 0xfffffffc
lea ecx, [ebp - 0x260]
push 2
call fcn.1000b4e9
push 2
pop edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x2c], ebx
jmp 0x118263ee
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x260]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edx
jl 0x118263df
push 3
mov dword [ebp - 0x2c], ebx
pop ecx
jmp 0x1182640c
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x574], 0xa0997736
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x118263fb
mov dword [ebp - 0x28], 0x2553
cmp dword [ebp - 0x28], 0x722
jge 0x118264fc
push edx
lea ecx, [ebp - 0x29c]
call fcn.1004389a
lea ecx, [ebp - 0x29c]
mov byte [0x10067004], bl
call fcn.100438f5
lea eax, [ebp - 0x68]
push eax
call fcn.1004185c
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x2c8], ebx
push eax
push dword [ebp - 0x68]
lea ecx, [ebp - 0x3f4]
call fcn.1000b539
push 3
pop eax
mov byte [ebp - 4], al
cmp dword [ebp - 0x68], 0
mov esi, dword [ebp - 0x3f4]
jle 0x11826489
mov edi, esi
push edi
call fcn.1004185c
inc ebx
add edi, 4
cmp ebx, dword [ebp - 0x68]
jl 0x1182647a
push dword [ebp - 0x3f0]
push esi
call fcn.1000ea31
pop ecx
pop ecx
mov ecx, dword [ebp - 0x68]
xor ebx, ebx
inc ebx
mov edx, ebx
lea eax, [ecx - 1]
cmp eax, ebx
jle 0x118264c1
mov ecx, dword [esi + edx*4]
mov eax, dword [esi + edx*4 + 4]
mov dword [esi + edx*4], eax
mov dword [esi + edx*4 + 4], ecx
add edx, 2
mov ecx, dword [ebp - 0x68]
lea eax, [ecx - 1]
cmp edx, eax
jl 0x118264a6
xor ebx, ebx
mov edi, ebx
test ecx, ecx
jle 0x118264e3
push dword [esi + edi*4]
call fcn.10041982
mov edx, 0x10007ca8
mov ecx, eax
call fcn.1000eaa5
inc edi
cmp edi, dword [ebp - 0x68]
jl 0x118264c9
push 0x10652ef8
call fcn.1000ea73
pop ecx
lea ecx, [ebp - 0x3f4]
call fcn.1000ba34
push 7
pop edi
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x11826512
push 0x85c
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov eax, dword [ebp - 0x260]
xor esi, esi
xor ecx, ecx
inc esi
cmp dword [eax], esi
setle cl
cmp ecx, 0xbc5f93be
jne 0x11826531
mov eax, ebx
cmp dword [ebp - 0x10], ebx
je 0x11826533
mov eax, esi
mov ecx, edi
sub ecx, eax
mov eax, dword [ebp - 0x260]
imul ecx, dword [eax]
mov dword [ebp - 0x56c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x570]
add eax, dword [ebp - 0x14]
cmp eax, 0xb79a
mov eax, dword [ebp - 0x14]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x260]
sete dl
xor ecx, ecx
cmp dword [eax], edx
setg cl
mov dword [eax], ecx
lea ecx, [ebp - 0x260]
mov eax, dword [ebp - 0x40]
dec eax
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x34]
neg eax
sbb eax, eax
add eax, 0x54c4
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x56c]
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1000ba34
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x118265ca
push ebx
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
push 3
pop edx
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
jl 0x11826615
xor eax, eax
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x10], eax
jmp 0x118265f6
mov dword [ebp - 0x28], 0x33843046
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jle 0x118265ec
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x11826610
push 0x850
call ebx
push 3
xor eax, eax
pop edx
dec dword [ebp - 0x20]
jns 0x118265dd
or eax, 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], ecx
jmp 0x11826633
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7e8], 0x9841
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x11826622
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ecx
jl 0x11826679
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x10], ecx
jmp 0x1182665a
mov dword [ebp - 0x28], 0x33843046
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jle 0x11826650
mov byte [ebp - 0x15], cl
cmp byte [ebp - 0x15], 0
je 0x11826674
push 0x850
call ebx
push 3
xor ecx, ecx
pop edx
dec dword [ebp - 0x20]
jns 0x11826641
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x10], 0x5a136951
mov dword [ebp - 0x28], 0xfffffff9
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 0xffffffe2
jmp 0x118266a6
cmp dword [ebp - 0x28], ecx
jne 0x118266ac
cmp dword [ebp - 0x34], ecx
jne 0x118266ac
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x18
je 0x11826699
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x34], 0x5f27a412
mov dword [ebp - 0x30], 0xedb5
mov dword [ebp - 0x28], 0x9aa6f576
cmp dword [ebp - 0x14], ecx
jne 0x118266ce
mov esi, ecx
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setle dl
xor ecx, ecx
imul edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg cl
sub esi, eax
add esi, dword [ebp - 0x14]
imul ecx, esi
test ecx, ecx
jne 0x11826709
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x11826709
xor esi, esi
mov edx, eax
inc esi
jmp 0x1182670e
xor esi, esi
inc esi
mov edx, esi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setl cl
imul ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x14]
jg 0x11826733
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], eax
jmp 0x1182683a
mov dword [ebp - 0x38], 0xfffffffc
lea ecx, [ebp - 0x270]
push 2
call fcn.1000b4e9
xor edx, edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], edx
jmp 0x11826760
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x270]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x11826751
push 3
mov dword [ebp - 0x2c], edx
pop ecx
jmp 0x1182677f
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x40c], 0xa0997736
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x1182676e
mov byte [ebp - 0x15], dl
cmp byte [ebp - 0x15], dl
je 0x1182679b
push 0x85c
push edx
push edx
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
xor edx, edx
mov eax, dword [ebp - 0x270]
xor ecx, ecx
cmp dword [eax], esi
setle cl
cmp ecx, 0xbc5f93be
jne 0x118267b7
mov eax, edx
cmp dword [ebp - 0x10], edx
je 0x118267b9
mov eax, esi
mov ecx, edi
sub ecx, eax
mov eax, dword [ebp - 0x270]
imul ecx, dword [eax]
mov dword [ebp - 0x404], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x408]
add eax, dword [ebp - 0x14]
cmp eax, 0xb79a
mov eax, dword [ebp - 0x14]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x270]
sete dl
xor ecx, ecx
cmp dword [eax], edx
setg cl
mov dword [eax], ecx
lea ecx, [ebp - 0x270]
mov eax, dword [ebp - 0x28]
dec eax
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x34]
neg eax
sbb eax, eax
add eax, 0x54c4
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x404]
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
call fcn.1000ba34
xor eax, eax
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], al
je 0x1182684d
push eax
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x4cc]
mov dword [ebp - 0x10], 0xffff
mov dword [ebp - 0x28], 0xb090aec5
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x40], 8
push 2
call fcn.1000b4e9
xor edx, edx
mov dword [ebp - 0x24], edx
jmp 0x11826892
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x4cc]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x11826882
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1c], edx
je 0x118268a6
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x20], edx
jmp 0x118268e8
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4cc]
mov dword [eax + ecx*4], 0x6dcf
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x118268d5
lea ecx, [ebp - 0x4cc]
call fcn.1000ba34
xor ecx, ecx
mov dword [ebp - 0x10], ecx
jmp 0x11826911
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7c8], 0x9841
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x11826900
push 3
pop edx
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], ecx
jl 0x11827290
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 0xfffffffa
jg 0x118269a1
xor ebx, ebx
push 2
lea ecx, [ebp - 0x424]
call fcn.1000b4e9
or eax, 0xffffffff
push 2
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x11826962
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x424]
mov dword [eax + ecx*4], 0xa9ac70c3
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1182694f
mov dword [ebp - 0x10], ebx
jmp 0x1182697f
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x424]
mov dword [eax + ecx*4], 0xb1658084
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1182696c
lea ecx, [ebp - 0x424]
call fcn.1000ba34
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffa
jle 0x11826934
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 3
pop edx
mov dword [ebp - 0x20], esi
lea ecx, [ebp - 0x1e4]
or eax, 0xffffffff
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x10], 0x2cc9105f
push edx
call fcn.1000b4e9
xor edx, edx
mov dword [ebp - 0x4c], 0xbca0becc
mov dword [ebp - 0x44], edx
push 3
mov dword [ebp - 0x10], edx
pop eax
cmp dword [ebp - 0x10], eax
jge 0x118269f8
push eax
pop ebx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1e4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x118269dd
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x24], 0xffffffe6
cmp dword [ebp - 0x24], 0xffffffea
jge 0x11826a8b
or ebx, 0xffffffff
mov dword [ebp - 0x10], 0xb8ee41b
mov eax, 0xdd168b5b
mov dword [ebp - 0x28], 0x889e
mov ecx, dword [ebp - 0x24]
sub ecx, 0x884515fd
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
add eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], edx
je 0x11826a41
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp eax, 0x9986
setle cl
cmp ecx, ebx
sbb eax, eax
inc eax
mov dword [ebp - 0x10], eax
mov byte [ebp - 0x15], dl
cmp byte [ebp - 0x15], 0
je 0x11826a7c
push 0x1d6e
push 0x2328
push 0x499
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
xor edx, edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffea
jl 0x11826a0c
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x10], 0x19d87263
cmp dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x1e4]
je 0x11826aeb
mov eax, dword [eax]
lea ecx, [eax*2 + 0x21c9f542]
mov eax, dword [ebp - 0x10]
sub eax, ecx
je 0x11826ab4
mov eax, esi
cmp dword [ebp - 0x30], edx
jne 0x11826ab6
mov eax, edx
cmp eax, 0x8e12b6a3
sbb ecx, ecx
add ecx, 0x73260bc2
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x44]
neg ecx
sbb ecx, ecx
imul eax, dword [ebp - 0x24]
inc ecx
imul eax, eax, 7
inc dword [ebp - 0x44]
cmp eax, ecx
mov eax, dword [ebp - 0x1e4]
mov ecx, esi
cmovl ecx, edx
cmp ecx, dword [eax]
mov ecx, esi
jge 0x11826aed
mov ecx, edx
mov dword [eax], ecx
lea ecx, [ebp - 0x1e4]
call fcn.1000ba34
mov dword [ebp - 0x28], 0xfffffff7
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0x1c], 0x5c8094a
mov dword [ebp - 0x10], ecx
inc edx
jmp 0x11826b23
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x90], 0x9b31
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x11826b12
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ecx
jl 0x11826dc9
push 3
xor ebx, ebx
pop ecx
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x10], ebx
jmp 0x11826b52
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7a0], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x11826b45
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x11826db8
mov dword [ebp - 0x14], 0x13034d00
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jg 0x11826d99
or esi, 0xffffffff
mov dword [ebp - 0x34], esi
mov ecx, edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x20], 0xde2a9078
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x90]
mov eax, dword [ebp - 0x24]
sub ecx, eax
sub ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x90]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setne dl
mov eax, dword [ebp + eax*4 - 0x90]
imul eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x34]
imul eax, edx
cmp eax, 0x58a9
jge 0x11826bd9
cmp dword [ebp - 0x14], ebx
je 0x11826bd9
xor edx, edx
inc edx
jmp 0x11826bdb
mov edx, ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x90]
cmp edx, eax
sete cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x34]
jle 0x11826bfa
mov eax, dword [ebp - 0x14]
push 3
pop eax
push eax
lea ecx, [ebp - 0x52c]
call fcn.1000b4e9
mov dword [ebp - 4], 4
mov dword [ebp - 0x28], 0x1d06
cmp dword [ebp - 0x28], 0x3ef
jge 0x11826d18
call fcn.1004a257
push eax
push 0x10007b1c
push 0x10007b20
call fcn.1004a5ef
add esp, 0xc
call fcn.1004a257
add eax, 0x20
push eax
push 0x10007b28
push 0x10007b2c
call fcn.1004a5ef
add esp, 0xc
mov dword [ebp - 0x694], ebx
lea ecx, [ebp - 0x6a4]
mov dword [ebp - 0x690], ebx
push ebx
push ebx
call fcn.1000b844
push ebx
push ebx
lea ecx, [ebp - 0x6d4]
mov dword [ebp - 0x6c4], ebx
mov dword [ebp - 0x6c0], ebx
call fcn.1000b844
lea eax, [ebp - 0x200]
mov byte [ebp - 4], 6
push eax
mov ecx, 0x10652fb0
call fcn.1000b1d9
mov esi, dword [ebp - 0x200]
test esi, esi
jle 0x11826cf8
lea edx, [ebp - 0x6a4]
mov ecx, 0x10652fb0
call fcn.1001639b
lea edx, [ebp - 0x6d4]
mov ecx, eax
call fcn.1001639b
lea edx, [ebp - 0x6d4]
lea ecx, [ebp - 0x6a4]
call fcn.1003b94d
mov ecx, 0x10652ef8
mov edx, 0x10007cac
test al, al
jne 0x11826ce9
mov edx, 0x10007cb8
call fcn.1000eaa5
push eax
call fcn.1000ea73
pop ecx
dec esi
jne 0x11826ca8
xor esi, esi
lea ecx, [ebp - 0x6d4]
push ebx
inc esi
push esi
call fcn.1000b844
push ebx
push esi
lea ecx, [ebp - 0x6a4]
call fcn.1000b844
or esi, 0xffffffff
push 3
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x11826d33
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x52c]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x11826d20
mov eax, dword [ebp - 0x52c]
mov dword [eax], 0x9b885b3d
mov dword [ebp - 0x20], ebx
jmp 0x11826d6e
mov dword [ebp - 0x10], ebx
jmp 0x11826d66
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x11826d63
push 0xbe5
push ebx
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x11826d4e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x11826d49
lea ecx, [ebp - 0x52c]
mov dword [ebp - 4], esi
call fcn.1000ba34
cmp dword [ebp - 0x1c], ebx
jne 0x11826d96
inc dword [ebp - 0x14]
push 1
pop edx
cmp dword [ebp - 0x14], ebx
jle 0x11826b80
xor edx, edx
inc edx
mov dword [ebp - 0x14], 0xfffffffd
mov eax, ebx
cmp dword [ebp - 0x14], ebx
je 0x11826da9
mov eax, edx
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x24]
jns 0x11826b63
push 3
pop ecx
dec dword [ebp - 0x1c]
jns 0x11826b39
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
push 3
mov dword [ebp - 0x20], ecx
pop eax
cmp dword [ebp - 0x20], eax
jg 0x11826f14
xor ebx, ebx
or esi, 0xffffffff
jmp 0x11826de2
xor edx, edx
inc edx
mov dword [ebp - 0x1c], 0x5a136951
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], 0x5dc1b6ea
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x10], ebx
jmp 0x11826e0c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x84], 0xc0ae9714
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x11826dfb
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x11826e2e
push 0x6a6
push 0x687
push 0x1fb8
call dword [sym.imp.GDI32.dll_LineTo]
mov dword [ebp - 0x1c], ebx
jmp 0x11826eef
mov dword [ebp - 0x34], 0x7c869b7d
xor edx, edx
mov dword [ebp - 0x28], 0x261718bc
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x84]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ebx
imul ecx, dword [ebp - 0x34], 0xcf81
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x84]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
inc ecx
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
sub eax, 0xcd44
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xfffffffc
mov eax, dword [ebp - 0x38]
setle cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setl dl
add edx, dword [ebp + eax*4 - 0x84]
mov eax, dword [ebp - 0x1c]
cmp edx, 0xf5047c4d
sbb ecx, ecx
neg ecx
cmp dword [ebp + eax*4 - 0x84], ecx
jge 0x11826ebf
cmp dword [ebp - 0x30], ebx
je 0x11826ebf
xor edx, edx
inc edx
jmp 0x11826ec1
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, esi
setle al
mov dword [ebp - 0x84], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x11826e36
mov dword [ebp - 0x28], 0x33843046
inc dword [ebp - 0x20]
push 3
pop eax
cmp dword [ebp - 0x20], eax
jle 0x11826ddf
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
lea ecx, [ebp - 0x5d8]
inc esi
push esi
call fcn.1000b4e9
push 0xfffffffffffffffb
pop eax
xor edx, edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], edx
jmp 0x11826f40
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x5d8]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x11826f30
mov byte [ebp - 0x15], dl
cmp byte [ebp - 0x15], dl
je 0x11826f57
push edx
push edx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
xor edx, edx
mov dword [ebp - 0x10], edx
jmp 0x11826f70
mov byte [ebp - 0x15], dl
cmp byte [ebp - 0x15], 0
je 0x11826f6d
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
xor edx, edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jle 0x11826f5c
lea ecx, [ebp - 0x5d8]
call fcn.1000ba34
mov byte [ebp - 0x15], 0
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x14], 0x42eb90da
push 4
call fcn.1000b4e9
push 4
lea ecx, [ebp - 0x4e4]
mov dword [ebp - 4], edi
call fcn.1000b4e9
xor edx, edx
mov byte [ebp - 4], 8
mov dword [ebp - 0x14], edx
jmp 0x11826fc6
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1f0]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x11826fb3
mov dword [ebp - 0x14], edx
jmp 0x11826fe0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4e4]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x11826fd1
mov dword [ebp - 0x14], 0xf
cmp dword [ebp - 0x14], 0xfffffff3
jne 0x11827086
mov esi, dword [ebp - 0x1f0]
xor ebx, ebx
mov edi, dword [ebp - 0x4e4]
mov dword [ebp - 0x34], 0xfffffffc
lea ecx, [ebp - 0x43c]
push 1
call fcn.1000b4e9
xor edx, edx
mov dword [ebp - 0x10], ebx
inc edx
jmp 0x11827031
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x43c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x11827021
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], 0xfffe
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1f0]
cmp dword [eax], ebx
mov eax, dword [ebp - 0x43c]
sete cl
add ecx, dword [edi + 4]
mov dword [eax], ecx
lea ecx, [ebp - 0x43c]
call fcn.1000ba34
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff3
je 0x11827005
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
push 7
xor edx, edx
inc esi
pop edi
mov dword [ebp - 0x14], edx
jmp 0x1182709e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1f0]
mov dword [eax + ecx*4], 0xf62c4df8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1182708b
lea ecx, [ebp - 0x4e4]
call fcn.1000ba34
or eax, 0xffffffff
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 4], eax
call fcn.1000ba34
cmp byte [ebp - 0x15], 0
je 0x11827281
push esi
lea ecx, [ebp - 0x368]
call fcn.1000b4e9
push 3
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x55c]
pop eax
mov dword [ebp - 0x28], 0xd15de05d
mov dword [ebp - 0x34], 0x7c04ccb6
push eax
call fcn.1000b4e9
xor edx, edx
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x14], edx
jmp 0x11827118
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x368]
mov dword [eax + ecx*4], 3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x11827105
push 3
mov dword [ebp - 0x14], edx
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x1182714b
push ecx
pop ebx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x55c]
mov dword [eax + ecx*4], 0x278fa8f9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1182712a
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 3
pop ecx
mov eax, dword [ebp - 0x368]
cmp dword [eax], edx
je 0x1182719d
mov dword [ebp - 0x4c], esi
or eax, 0xffffffff
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x4c], esi
push 9
pop eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x38], 0xffcf
mov dword [ebp - 0x10], edx
jmp 0x1182718d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7b8], 0x56f9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1182717c
inc dword [ebp - 0x34]
dec dword [ebp - 0x38]
jmp 0x1182725e
or eax, 0xffffffff
mov dword [ebp - 0x30], 0x5f88e10e
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x454]
push esi
call fcn.1000b4e9
mov dword [ebp - 0x10], 0
jmp 0x118271d2
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x454]
mov dword [eax + ecx*4], 0xd8c65816
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x118271bf
cmp dword [ebp - 0x30], 0xea28c7ff
mov esi, dword [ebp - 0x55c]
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0x15f
setle cl
xor edx, edx
cmp ecx, 0x2b7b88cd
setge dl
xor eax, eax
cmp edx, dword [esi + 8]
setle al
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xa2ef7e29
je 0x11827218
xor eax, eax
cmp dword [esi + 8], eax
je 0x1182721b
xor eax, eax
inc eax
xor edx, edx
cmp eax, dword [esi + 8]
mov eax, dword [ebp - 0x30]
sete dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x454]
setne cl
xor edx, edx
mov dword [eax], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x368]
lea ecx, [ebp - 0x454]
setne dl
mov dword [ebp - 0x28], edx
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
call fcn.1000ba34
xor esi, esi
inc esi
lea ecx, [ebp - 0x55c]
call fcn.1000ba34
or eax, 0xffffffff
lea ecx, [ebp - 0x368]
mov dword [ebp - 4], eax
call fcn.1000ba34
push 0x850
call ebx
dec dword [ebp - 0x2c]
push 0
pop ecx
push 3
pop edx
jns 0x11826926
push 2
or eax, 0xffffffff
xor ebx, ebx
pop ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x34], 0xdfa01480
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 0x4fd57441
mov dword [ebp - 0x14], ebx
jmp 0x118272c5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x224], 0xd64c9d8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x118272b4
mov dword [ebp - 0x14], ebx
jmp 0x118272e0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x730], 0x279329bf
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x118272cf
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add eax, 0xf381
je 0x118272f5
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x224], 0x15ebf
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x224]
sub ecx, eax
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setle dl
xor ecx, ecx
cmp edx, 8
setge cl
xor eax, eax
cmp ecx, 0x65ee6d54
setle al
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x20]
neg eax
sbb eax, eax
xor edx, edx
add eax, 0xfffffffb
add ecx, eax
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], 0x971db956
mov dword [ebp - 0x28], 0x25ea
cmp dword [ebp - 0x28], 0x109e
jge 0x11827495
call fcn.1004a257
push eax
push 0x10007b1c
push 0x10007cc4
call fcn.1004a5ef
add esp, 0xc
call fcn.1004a257
add eax, 0x20
push eax
push 0x10007b28
push 0x10007cd0
call fcn.1004a5ef
add esp, 0xc
lea eax, [ebp - 0xb0]
push eax
push 0x10007784
call fcn.1004833b
lea eax, [ebp - 0x138]
mov esi, 0x10007cdc
push eax
lea eax, [ebp - 0x12c]
push eax
push esi
call fcn.1004833b
add esp, 0x14
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x148]
push eax
push esi
call fcn.1004833b
add esp, 0xc
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x140]
push eax
push esi
call fcn.1004833b
mov eax, dword [ebp - 0xb0]
add esp, 0xc
cmp dword [ebp - 0x12c], eax
jne 0x1182743b
mov eax, dword [ebp - 0x138]
jmp 0x11827448
cmp dword [ebp - 0x138], eax
cmove eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x148], eax
jne 0x11827458
mov eax, dword [ebp - 0x128]
jmp 0x11827465
cmp dword [ebp - 0x128], eax
cmove eax, dword [ebp - 0x148]
cmp dword [ebp - 0x140], eax
jne 0x11827475
mov eax, dword [ebp - 0x130]
jmp 0x11827482
cmp dword [ebp - 0x130], eax
cmove eax, dword [ebp - 0x140]
push eax
push 0x10007a24
mov dword [ebp - 0xb0], eax
call fcn.10048556
pop ecx
pop ecx
mov dword [ebp - 0x1c], 0xfffffffa
cmp dword [ebp - 0x1c], 0xffffffe3
jl 0x1182760c
xor esi, esi
inc esi
or eax, 0xffffffff
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x44], 9
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jne 0x118275ff
mov dword [ebp - 0x34], 0x85c2f4fe
mov dword [ebp - 0x10], ebx
jmp 0x118274e9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd8], 0x80c170c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x118274d8
mov dword [ebp - 0xd4], ebx
jmp 0x118275d9
push 3
pop eax
push eax
lea ecx, [ebp - 0x380]
call fcn.1000b4e9
mov dword [ebp - 0x34], 0xab83eb61
push 3
mov dword [ebp - 0x34], 0x3e1b8d81
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x11827532
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x380]
mov dword [eax + ecx*4], 0x56974edf
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1182751f
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], esi
cmp dword [ebp - 0x10], ebx
je 0x11827554
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], 9
xor edx, edx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x380]
cmp ecx, dword [eax + 8]
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp edx, eax
sete cl
cmp ecx, esi
jge 0x118275ae
push 3
pop eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jne 0x118275a7
mov eax, ebx
cmp dword [ebp - 0x30], ebx
je 0x118275a9
mov eax, esi
mov dword [ebp - 0x10], eax
jmp 0x118275b3
cmp dword [ebp - 0x10], ebx
jne 0x118275e8
mov dword [ebp - 0x20], 0xfffffff7
jmp 0x118275c2
dec dword [ebp - 0x44]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffef
jg 0x118275bc
lea ecx, [ebp - 0x380]
call fcn.1000ba34
inc dword [ebp - 0xd4]
cmp dword [ebp - 0xd4], 0x12
jle 0x118274fa
jmp 0x118275f3
lea ecx, [ebp - 0x380]
call fcn.1000ba34
inc dword [ebp - 0x24]
je 0x118274cc
or eax, 0xffffffff
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe3
jge 0x118274ac
push 2
xor ecx, ecx
pop edx
mov dword [ebp - 0x10], edx
inc ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x4c], 0xdc4b4e12
mov dword [ebp - 0x4c], 0xfffffffc
mov dword [ebp - 0x4c], 0xaaeb9ae7
mov dword [ebp - 0x4c], 0x1ded6804
mov dword [ebp - 0x4c], 0xdfe4d9ed
mov dword [ebp - 0x4c], 0x3f6085e0
mov dword [ebp - 0x34], 0x5132d7af
mov dword [ebp - 0x14], ebx
jmp 0x1182765b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x770], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1182764e
push 3
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x11827675
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7ac], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x11827668
dec dword [ebp - 0x34]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x1182769f
push ebx
push 0x1b6c
push ebx
push 0xb7a
push 0x22f1
call dword [sym.imp.GDI32.dll_ExtCreatePen]
xor ecx, ecx
inc ecx
or edi, 0xffffffff
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x2c], 0x68206240
mov dword [ebp - 0x14], 0x37d660f1
mov dword [ebp - 0x34], 0x894628ae
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x3b8], ecx
mov dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x3b0], ecx
mov dword [ebp - 0x3ac], ecx
push ecx
lea ecx, [ebp - 0x58c]
call fcn.1000b4e9
xor esi, esi
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x24], ebx
inc esi
jmp 0x11827703
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58c]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x118276f0
push 0xfffffffffffffffb
pop eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x11
jge 0x11827837
lea edi, [ebp - 0x64c]
lea eax, [ebp - 0x63c]
movdqa xmm0, xmmword [0x10007e40]
push ecx
push eax
push edi
lea ecx, [ebp - 0x398]
movdqu xmmword [ebp - 0x64c], xmm0
call fcn.1003655e
cmp dword [ebp - 0x2c], ebx
je 0x1182778b
mov eax, dword [ebp - 0x398]
xor ecx, ecx
cmp dword [eax], 0xeb59
setne cl
cmp dword [ebp - 0x2c], ecx
jge 0x1182778b
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x11827816
push 0x5f4
push 0xd41
push ebx
push ebx
push 0x160c
push 0x16b7
call dword [sym.imp.USER32.dll_ToUnicode]
jmp 0x11827816
push 3
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x24], ebx
pop ecx
jmp 0x118277a7
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1b0], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1182779a
mov dword [ebp - 0x1a8], 0xfffffffd
jmp 0x1182780d
mov dword [ebp - 0x30], esi
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1a8], eax
jge 0x118277e5
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov edx, esi
mov eax, dword [ebp - 0x398]
cmp dword [eax], ebx
mov eax, dword [ebp - 0x2c]
setne cl
add eax, 0xfffffffb
add eax, ecx
jne 0x118277e7
mov edx, ebx
mov eax, dword [ebp - 0x398]
xor ecx, ecx
mov dword [eax], edx
mov eax, dword [ebp - 0x30]
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0x9676
setge al
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x1a8]
cmp dword [ebp - 0x1a8], 0xfffffff2
jle 0x118277b8
lea ecx, [ebp - 0x398]
call fcn.1000ba34
inc dword [ebp - 0x2c]
lea eax, [ebp - 0x63c]
cmp dword [ebp - 0x2c], 0x11
jl 0x11827724
or edi, 0xffffffff
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
jmp 0x118278a7
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x11827890
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + eax*4 - 0x3b8]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x3b8], ecx
inc dword [ebp - 0x2c]
push 3
pop eax
cmp dword [ebp - 0x2c], eax
jle 0x11827880
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 0xe
je 0x1182790f
mov dword [ebp - 0x24], edi
mov ecx, 0x89f4
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
sub ecx, eax
imul eax, ecx, 0x3f20
sub eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xc81
je 0x118278e0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
neg esi
mov eax, dword [ebp - 0x14]
sbb esi, esi
xor edx, edx
neg esi
cmp ecx, eax
setne dl
imul edx, dword [ebp - 0x30]
imul edx, esi
mov dword [ebp - 0x2c], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xe
jne 0x118278b8
xor esi, esi
inc esi
lea ecx, [ebp - 0x58c]
mov dword [ebp - 4], edi
call fcn.1000ba34
push 2
pop edi
mov dword [ebp - 0x34], 0xdfa01480
lea ecx, [ebp - 0x5f0]
mov dword [ebp - 0x28], 0xc60edac7
mov dword [ebp - 0x4c], 0xfffffffd
push edi
call fcn.1000b4e9
push 0xc
pop eax
push edi
lea ecx, [ebp - 0x3c4]
mov dword [ebp - 4], eax
call fcn.1000b4e9
mov dword [ebp - 0x40], 0x26ed4bca
mov dword [ebp - 0x14], ebx
jmp 0x11827972
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5f0]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1182795f
mov dword [ebp - 0x14], ebx
jmp 0x1182798f
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c4]
mov dword [eax + ecx*4], 0xfcb8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1182797c
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp eax, esi
mov eax, dword [ebp - 0x3c4]
setle dl
xor ecx, ecx
cmp edx, dword [eax + 4]
setge cl
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x3c4]
call fcn.1000ba34
or eax, 0xffffffff
lea ecx, [ebp - 0x5f0]
mov dword [ebp - 4], eax
call fcn.1000ba34
or eax, 0xffffffff
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x1a4], ebx
mov dword [ebp - 0x1a0], ebx
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x24], ebx
jmp 0x118279fe
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x638], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x118279f1
mov dword [ebp - 0x28], 0x1979
cmp dword [ebp - 0x28], 0x741
jge 0x11827ad4
lea eax, [ebp - 0x7c]
push eax
push 0x10007794
call fcn.1004833b
pop ecx
pop ecx
lea eax, [ebp - 0x280]
mov dword [ebp - 0x280], ebx
push eax
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x1fc]
call fcn.1000b539
mov edi, ebx
mov dword [ebp - 4], 0xd
mov ebx, dword [ebp - 0x1fc]
cmp dword [ebp - 0x7c], edi
jle 0x11827a6e
mov esi, ebx
push esi
push 0x10007788
call fcn.1004833b
inc edi
add esi, 4
pop ecx
pop ecx
cmp edi, dword [ebp - 0x7c]
jl 0x11827a58
push dword [ebp - 0x1f8]
push ebx
call fcn.1000ea31
xor eax, eax
xorps xmm0, xmm0
mov ebx, eax
movlpd qword [ebp - 0x50], xmm0
pop ecx
pop ecx
mov ecx, eax
cmp dword [ebp - 0x7c], eax
jle 0x11827ab4
mov edi, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x50]
mov eax, dword [ebp - 0x1fc]
mov eax, dword [eax + ecx*4]
cdq
cmp edi, edx
jg 0x11827aae
jl 0x11827aa9
cmp esi, eax
ja 0x11827aae
add esi, eax
adc edi, edx
inc ebx
inc ecx
cmp ecx, dword [ebp - 0x7c]
jl 0x11827a95
push ebx
push 0x10007794
call fcn.10048556
pop ecx
pop ecx
or eax, 0xffffffff
lea ecx, [ebp - 0x1fc]
mov dword [ebp - 4], eax
call fcn.1000ba34
xor ebx, ebx
xor edx, edx
inc edx
mov dword [ebp - 0x19c], edx
cmp dword [ebp - 0x19c], ebx
jl 0x11827b58
mov dword [ebp - 0x1c], 0x3eee2fde
mov eax, dword [ebp - 0x19c]
cmp dword [ebp + eax*4 - 0x638], ebx
jne 0x11827b58
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], ebx
jl 0x11827b50
push edx
lea ecx, [ebp - 0x46c]
call fcn.1000b4e9
xor edx, edx
mov dword [ebp - 0x24], ebx
inc edx
jmp 0x11827b2a
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x46c]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x11827b17
mov ecx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x46c]
mov dword [eax], ecx
lea ecx, [ebp - 0x46c]
call fcn.1000ba34
dec dword [ebp - 0x1c]
push 1
pop edx
jns 0x11827b03
dec dword [ebp - 0x19c]
jns 0x11827ae5
mov edi, 0x4fd57441
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x1c], 0xb1b6fd43
mov dword [ebp - 0x14], ebx
push 4
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x24], ebx
pop esi
jmp 0x11827b8a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x788], 0xfffffffd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x11827b79
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jle 0x11827baf
mov ecx, ebx
cmp dword [ebp - 0x1c], ebx
je 0x11827bb1
mov ecx, edx
xor eax, eax
cmp ecx, 0x87a5
setge al
xor ecx, ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, 0xd1cb
setle cl
sub ecx, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, edx
sete al
cmp eax, 0x40e13f5e
jle 0x11827be6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x14]
dec ecx
cmp ecx, eax
push 3
setne dl
xor ecx, ecx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
cmp eax, 0x4f9a
pop eax
setne cl
imul ecx, dword [ebp - 0x34]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jl 0x11827c27
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x788], ebx
jne 0x11827c27
dec dword [ebp - 0x14]
jns 0x11827c16
mov dword [ebp - 0x1c], 0x8a61928c
or ecx, 0xffffffff
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x4c], 0xca8fecf7
mov dword [ebp - 0x4c], 0x93bd5de1
push 2
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x14], ebx
pop esi
jmp 0x11827c5e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x768], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x11827c4d
mov dword [ebp - 0x14], ebx
jmp 0x11827c79
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x778], 0x9e3d3b0c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x11827c68
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0x1d
jle 0x11827cbd
mov dword [ebp - 0x30], 0xb165
xor edx, edx
mov dword [ebp - 0x28], ebx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setne dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1d
jg 0x11827c87
or ecx, 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x11827d5d
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x40], 0x3e0566a9
mov dword [ebp - 0x4c], 0x67d50f82
mov dword [ebp - 0x4c], 0x4dc41fd9
mov dword [ebp - 0x4c], 0x5466bc65
mov dword [ebp - 0x4c], 0xb6917ab6
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x4c], 0xd06721f7
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x4c], 0x7626a9d9
mov dword [ebp - 0x4c], 0xfffffff7
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x4c], 0xf4864854
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x6b0]
push esi
call fcn.1000b4e9
mov dword [ebp - 0x24], ebx
jmp 0x11827d3e
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x6b0]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x11827d2b
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x6b0]
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x38]
call fcn.1000ba34
dec dword [ebp - 0x1c]
push 0xffffffffffffffff
pop ecx
cmp dword [ebp - 0x1c], 0xfffffff5
jge 0x11827cc5
mov dword [ebp - 0x14], ebx
jmp 0x11827d7d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x294], 0xd64c9d8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x11827d6c
push 3
mov dword [ebp - 0x14], ebx
pop ecx
jmp 0x11827d9b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x748], 0x279329bf
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x11827d8a
xor esi, esi
inc esi
mov dword [ebp - 0x4c], esi
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x11827db6
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x11827dc8
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add eax, 0xf381
je 0x11827dd8
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x294], 0x15ebf
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x294]
sub ecx, eax
neg ecx
push 2
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setle dl
xor ecx, ecx
cmp edx, 8
setge cl
xor eax, eax
cmp ecx, 0x65ee6d54
setle al
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x294]
mov ecx, dword [ebp - 0x20]
neg eax
sbb eax, eax
xor edx, edx
add eax, 0xfffffffb
add ecx, eax
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x740], eax
or eax, 0xffffffff
pop ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x34], 0xdfa01480
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], ebx
jmp 0x11827e8b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x238], 0xd64c9d8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x11827e7a
push 3
mov dword [ebp - 0x14], ebx
pop ecx
jmp 0x11827ea9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x718], 0x279329bf
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x11827e98
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add eax, 0xf381
je 0x11827ebe
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x238], 0x15ebf
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x20]
neg eax
push 3
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setle dl
xor ecx, ecx
cmp edx, 8
setge cl
xor eax, eax
cmp ecx, 0x65ee6d54
setle al
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x20]
neg eax
sbb eax, eax
xor edx, edx
add eax, 0xfffffffb
add ecx, eax
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x710], eax
mov dword [ebp - 0x20], 0x73838a1f
mov dword [ebp - 0x10], ebx
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x11827f67
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2fc], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x11827f55
mov dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], ebx
jl 0x11827f9e
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x2fc], ebx
jne 0x11827f8f
mov edi, dword [sym.imp.GDI32.dll_GetRegionData]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x11827fb9