Function at 0x10018e4d
Capabilities:
Get common file path
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x254
push ebx
push esi
mov dword [ebp - 0xc], 0xffffffff
xor esi, esi
push edi
mov dword [ebp - 0x10], 0xffffffff
inc esi
mov dword [ebp - 0x1c], 0x3d12
xor ebx, ebx
push 4
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0xc], ebx
pop ecx
jmp 0x10018e95
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xd4], 7
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x10018e84
push 3
mov dword [ebp - 0xc], ebx
pop edi
jmp 0x10018eb3
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x13c], 8
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x10018ea2
mov dword [ebp - 0x10], edi
cmp dword [ebp - 0x10], ebx
jl 0x10019004
mov dword [ebp - 8], 9
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x14], ebx
jmp 0x10018ee7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x144], 0x5062d7bc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10018ed6
mov dword [ebp - 0x14], ebx
jmp 0x10018f03
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x17c], 0x8472
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10018ef2
mov dword [ebp - 0x14], ebx
jmp 0x10018f1e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1ec], 0x67d7132c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10018f0d
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xd4]
dec dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd4], edi
mov eax, dword [ebp - 8]
cmp eax, 0x743e62c9
setne cl
sub ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x28]
neg ecx
mov eax, dword [ebp - 0x10]
sbb ecx, ecx
sub edx, edi
inc ecx
neg edx
sbb edx, edx
inc edx
sub edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 8]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
je 0x10018f8d
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xd4]
mov ecx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x10]
neg ecx
push 4
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x1ec], ecx
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0xc8]
sub ecx, eax
mov eax, dword [ebp - 0x134]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x170]
setne dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
pop ecx
setle dl
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x13c], eax
dec dword [ebp - 0x10]
jns 0x10018ec4
mov dword [ebp - 0xc], 0xea5d6c05
mov dword [ebp - 0xc], ebx
jmp 0x1001906d
mov dword [ebp - 0x18], 0xeede0b40
mov dword [ebp - 0x18], 0x1a
jmp 0x10019064
mov dword [ebp - 8], ebx
jmp 0x10019033
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x40], 0x3c891c55
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10019025
mov dword [ebp - 0x40], 0x19
jmp 0x1001905b
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jne 0x10019061
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10019058
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x16
jg 0x10019041
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xb
jle 0x10019020
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x10
jne 0x10019010
mov dword [ebp - 0x18], 0x824a8c6a
mov dword [ebp - 0x2c], esi
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1001908d
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0x18], ebx
jmp 0x1001915e
mov dword [ebp - 0x10], 0xb1c0
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], 4
cmp dword [ebp - 0x18], ebx
je 0x100190d4
cmp dword [ebp - 0x18], 8
je 0x100190bc
mov edx, ebx
cmp dword [ebp - 0x10], ebx
jne 0x100190be
mov edx, esi
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x18]
jge 0x100190d4
mov ecx, esi
cmp dword [ebp - 0x10], ebx
jne 0x100190d6
mov ecx, ebx
xor eax, eax
cmp ecx, 0x9384
sete al
add eax, 0x9271
jne 0x100190ef
mov eax, ebx
cmp dword [ebp - 0x10], ebx
je 0x100190f1
mov eax, esi
cmp eax, dword [ebp - 0x10]
jge 0x100190fd
mov edx, ebx
cmp dword [ebp - 0x10], ebx
je 0x100190ff
mov edx, esi
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x10]
cmp edx, eax
sete cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x18]
jne 0x1001912f
mov eax, ebx
cmp dword [ebp - 0x10], ebx
je 0x10019131
mov eax, esi
xor ecx, ecx
cmp eax, edi
mov eax, dword [ebp - 0x10]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
add edx, 0xfffd
cmp edx, eax
setg cl
cmp esi, ecx
sbb eax, eax
neg eax
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe5
jle 0x10019095
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x30], 0xf5720e83
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x10019193
push ebx
push 0x3db
call edi
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x100191a2
push ebx
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
mov dword [ebp - 0x1c], 0x3d12
push 9
pop ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0xc], 0x92e3f915
mov dword [ebp - 0x20], 0xab0c
mov dword [ebp - 0xc], ebx
jmp 0x100191d9
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x204], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x100191cc
mov dword [ebp - 0xc], ebx
jmp 0x100191f1
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x128], ebx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x100191e4
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov ecx, ebx
setne dl
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
je 0x1001920f
mov ecx, esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x204], esi
mov eax, dword [ebp - 0x10]
imul eax, ecx
push 2
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setne dl
imul eax, dword [ebp - 0x10]
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x10]
cmp edx, eax
mov eax, dword [ebp - 0x10]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
pop edx
setle cl
add ecx, esi
mov dword [ebp - 0xc], ecx
xor ecx, ecx
mov dword [ebp - 0xc], edx
inc ecx
cmp dword [ebp - 0xc], ebx
jl 0x100192e9
mov dword [ebp - 0x30], 0x2e4ed383
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x30], 0xb6b7be2d
mov dword [ebp - 0x30], 0x6f37d437
mov dword [ebp - 0x30], 0x2ae45661
mov dword [ebp - 8], ebx
jmp 0x100192ac
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x254], 0x8264d924
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x1001929b
mov dword [ebp - 0x18], ebx
jmp 0x100192df
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 8], ebx
jmp 0x100192d4
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x130], 0xcea2ff3e
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x100192c3
dec dword [ebp - 0x20]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x100192b7
dec dword [ebp - 0xc]
jns 0x10019270
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x2c], 0x2e07
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0xf4926a67
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0xc], ebx
jmp 0x10019326
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x38], edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x1001931c
mov dword [ebp - 0xc], ebx
jmp 0x10019341
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x158], 0xca718ba3
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x10019330
mov edx, ecx
cmp dword [ebp - 0x10], ebx
jne 0x1001934f
mov edx, ebx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
neg ecx
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
sbb ecx, ecx
xor ebx, ebx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle bl
sub ebx, eax
mov dword [ebp - 0x38], ebx
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setne dl
xor ecx, ecx
add edx, ebx
cmp edx, eax
setne cl
xor ebx, ebx
add ecx, dword [ebp - 0x10]
je 0x100193ba
cmp dword [ebp - 0x10], ebx
je 0x100193ba
mov byte [ebp - 1], bl
cmp byte [ebp - 1], al
je 0x100193de
push ebx
push ebx
push 0x1ae2
call edi
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x100193de
mov dword [ebp - 0xc], 0xfffffffe
jmp 0x100193d8
mov byte [ebp - 1], bl
cmp byte [ebp - 1], 0
je 0x100193d5
call edi
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x13
jle 0x100193c3
inc dword [ebp - 0x2c]
mov esi, dword [ebp - 0x2c]
neg esi
sbb esi, esi
neg esi
cmp dword [ebp - 0x38], ebx
jne 0x1001940f
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
test eax, eax
jne 0x10019408
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x10]
mov eax, ebx
jmp 0x10019412
xor eax, eax
inc eax
xor ecx, ecx
cmp eax, 0xffffffff
setl cl
sub ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp eax, edx
setge cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xc]
imul eax, esi
cmp eax, 9
mov eax, dword [ebp - 0xc]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0x6e89be30
jl 0x1001947c
cmp dword [ebp - 0x38], ebx
jne 0x1001947c
xor esi, esi
mov edx, ebx
inc esi
jmp 0x10019481
xor esi, esi
inc esi
mov edx, esi
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0xc], edx
jmp 0x100194af
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xe4], 7
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x1001949e
mov dword [ebp - 8], 0xde713a47
mov dword [ebp - 0x18], 0x1b583dc0
mov dword [ebp - 0xc], edx
jmp 0x100194d2
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x5c], esi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x100194c8
mov dword [ebp - 0xc], edx
jmp 0x100194e6
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x64], edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x100194dc
mov ebx, dword [sym.imp.USER32.dll_PeekMessageA]
cmp dword [ebp - 8], edx
je 0x10019569
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x64], eax
test eax, eax
je 0x10019514
mov edx, esi
mov eax, dword [ebp - 8]
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, dword [ebp - 8]
jle 0x1001952c
mov eax, esi
cmp dword [ebp - 0x5c], edx
jne 0x1001952e
mov eax, edx
neg eax
je 0x10019535
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x18], edx
jmp 0x10019551
cmp byte [ebp - 1], 0
je 0x1001954e
push 0xc0f
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
xor edx, edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x12
mov byte [ebp - 1], dl
jne 0x1001953a
cmp byte [ebp - 1], 0
je 0x10019589
push edx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
jmp 0x10019587
mov byte [ebp - 1], dl
cmp byte [ebp - 1], dl
je 0x10019589
push 0xcc6
push 0x15b3
push 0x2446
call edi
push eax
push 0
call ebx
xor edx, edx
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x1001959c
push edx
push edx
call dword [sym.imp.GDI32.dll_RectInRegion]
xor edx, edx
push 3
mov dword [ebp - 0xc], edx
pop ecx
jmp 0x100195b5
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x120], 8
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x100195a4
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], edx
jl 0x10019a34
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0xc], 0x76f5020f
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x18], 0x99843334
mov dword [ebp - 0xc], edx
jmp 0x100195fb
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x3c], 5
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x100195ed
mov dword [ebp - 0xc], edx
jmp 0x10019613
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x58], 0x9642e40c
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x10019605
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], edx
jl 0x10019724
mov dword [ebp - 8], 0x3e86f8c7
mov dword [ebp - 0x2c], 0x347d1701
mov dword [ebp - 8], edx
jmp 0x10019648
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x23c], 0x540ee1d4
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x10019637
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x3c]
test eax, eax
mov eax, dword [ebp - 0xc]
sete dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x3c]
sub eax, 0x502ee26a
cmp eax, edx
setge cl
xor edx, edx
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], edx
je 0x1001969b
cmp dword [ebp - 0x3c], edx
jne 0x10019685
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x3c]
imul eax, dword [ebp - 8], 0x4a5e
cmp eax, dword [ebp - 0x3c]
jl 0x1001969b
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x58], edx
mov dword [ebp - 8], edx
cmp dword [ebp - 8], edx
jl 0x1001971b
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], 6
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
inc dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0xc]
cmovl esi, edx
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x58]
mov dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
sete dl
xor ecx, ecx
cmp edx, esi
setge cl
xor esi, esi
inc esi
cmp esi, eax
sbb eax, eax
xor edx, edx
neg eax
cmp ecx, eax
je 0x10019700
mov byte [ebp - 1], dl
cmp byte [ebp - 1], dl
je 0x10019716
call edi
push eax
call dword [sym.imp.USER32.dll_ShowCaret]
xor edx, edx
jmp 0x10019716
mov dword [ebp - 0x18], edx
jmp 0x10019711
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x3c], edx
jne 0x10019716
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x10019705
dec dword [ebp - 8]
jns 0x100196a6
dec dword [ebp - 0xc]
jns 0x10019624
or ecx, 0xffffffff
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x1c], 0x6e85fcb
mov dword [ebp - 0x2c], 0x723
mov dword [ebp - 8], edx
jmp 0x10019753
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x8c], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10019746
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x100197ab
push edx
push 0x14d8
push 0xa8a
push 0x2665
push 0x1806
push 0x20a2
push 0x1c7e
push 0xa94
push 0xf24
push 0x5b8
push 0x1eda
push 0x1385
push 0x1b4a
push 0x250b
call dword [sym.imp.GDI32.dll_CreateFontA]
xor edx, edx
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x50], edx
jne 0x100197b6
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
dec ecx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setl dl
xor ecx, ecx
mov dword [ebp - 0x8c], edx
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setne cl
cmp dword [ebp - 0x4c], ecx
je 0x100197fa
cmp dword [ebp - 0x50], 0
jne 0x100197fa
xor edx, edx
jmp 0x100197fc
mov edx, esi
mov eax, dword [ebp - 0x50]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x50]
cmp eax, edx
mov eax, dword [ebp - 0x50]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setle dl
sub edx, eax
xor ecx, ecx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x14], ecx
jmp 0x10019835
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x168], 0x5062d7bc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10019824
mov dword [ebp - 0x14], ecx
jmp 0x10019851
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1b0], 0x8472
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10019840
push 7
pop eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x190], eax
push 3
mov dword [ebp - 8], ecx
mov dword [ebp - 8], ecx
pop edx
jmp 0x100198a9
mov byte [ebp - 1], cl
cmp byte [ebp - 1], 0
je 0x100198a6
push ecx
push 0x1bc7
push 0x1ceb
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetPixel]
push 3
xor ecx, ecx
pop edx
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jle 0x1001987d
mov dword [ebp - 0x14], ecx
jmp 0x100198c4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1c8], 0x67d7132c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100198b3
mov dword [ebp - 0xc], 0x3d06ce12
mov dword [ebp - 8], ecx
jmp 0x100198e6
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1bc], 4
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x100198d5
mov dword [ebp - 0xc], ecx
jmp 0x10019901
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1bc], 0x16df251d
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x100198f0
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 9
jle 0x10019954
mov dword [ebp - 8], 0xfffffff7
mov dword [ebp - 8], 0xffffffe9
jmp 0x10019931
cmp byte [ebp - 1], 0
je 0x1001992e
push ecx
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
xor ecx, ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffffc
mov byte [ebp - 1], cl
jg 0x1001991f
cmp byte [ebp - 1], 0
je 0x10019948
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
xor ecx, ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 9
jg 0x1001990f
push 3
pop edx
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xe4]
dec dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe4], edx
mov eax, dword [ebp - 0x28]
cmp eax, 0x743e62c9
setne cl
sub ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
neg ecx
mov eax, dword [ebp - 0x10]
sbb ecx, ecx
sub edx, 3
inc ecx
neg edx
sbb edx, edx
inc edx
sub edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
je 0x100199bf
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xe4]
mov ecx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x10]
neg ecx
push 0
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x1c8], ecx
mov ecx, dword [ebp - 0xd8]
sub ecx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x118]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1a4]
setne dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
setle dl
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x120], eax
dec dword [ebp - 0x10]
pop edx
jns 0x100195c6
mov dword [ebp - 8], 0xfffffff7
mov dword [ebp - 0xc], 0x7c7747bb
mov dword [ebp - 0x18], 0xa9dade66
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x30], 0xecf4
mov dword [ebp - 0xc], 0x7182b474
cmp dword [ebp - 0xc], edx
je 0x10019a69
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov esi, 0xe213
mov eax, dword [ebp - 8]
mov edi, dword [sym.imp.GDI32.dll_Ellipse]
mov dword [ebp - 0x18], 0xfff7
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 8]
jle 0x10019b1d
xor eax, eax
mov dword [ebp - 0x20], edx
inc eax
mov ecx, esi
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
sub ecx, eax
neg ecx
sbb ecx, ecx
neg ecx
cmp dword [ebp - 0x10], ecx
jg 0x10019ac0
cmp dword [ebp - 0x28], edx
jne 0x10019ac0
xor ecx, ecx
mov eax, edx
inc ecx
jmp 0x10019ac5
xor ecx, ecx
inc ecx
mov eax, ecx
cmp eax, dword [ebp - 0x20]
jg 0x10019ad1
mov eax, edx
cmp dword [ebp - 0x28], edx
je 0x10019ad3
mov eax, ecx
mov ecx, dword [ebp - 0x10]
cmp eax, 0xd385e13c
sbb eax, eax
inc eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 8]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
xor eax, eax
inc eax
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
cmp eax, ecx
setne dl
mov dword [ebp - 0x24], edx
jmp 0x10019c8b
xor ecx, ecx
mov dword [ebp - 0x1c], 0xffffffff
inc ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x18], 0xffffffee
jmp 0x10019c76
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x30], 0x8b7552f0
mov dword [ebp - 0xc], edx
jmp 0x10019b5a
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x88], 0xfffffffe
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x10019b49
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], edx
jl 0x10019c73
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x14], edx
jmp 0x10019b84
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x94], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10019b77
mov dword [ebp - 0x14], edx
jmp 0x10019ba0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xc4], 0xe3135590
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10019b8f
mov dword [ebp - 0x14], edx
jmp 0x10019bbc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9c], 0xb6ef5427
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10019bab
mov dword [ebp - 0x10], edx
jmp 0x10019be4
mov dword [ebp - 0x30], 0xbf8c3261
mov dword [ebp - 0x30], 0xf3a4b440
inc dword [ebp - 0x94]
dec dword [ebp - 0x98]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jle 0x10019bc7
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], edx
jg 0x10019c6a
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x10019c1e
push 0x1d37
push 0x1ee8
push 0x2f1
push 0x1b86
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xc4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xc4]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x88]
cmp eax, 0x2b4b20f9
mov eax, dword [ebp - 0x10]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xc]
setne cl
xor edx, edx
mov dword [ebp + eax*4 - 0xc0], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jle 0x10019bf1
xor ecx, ecx
inc ecx
dec dword [ebp - 0xc]
jns 0x10019b6b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffff
je 0x10019b36
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 8]
sub ecx, eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x1c], 0x3d12
xor ecx, ecx
mov dword [ebp - 8], 0xfffffff8
mov dword [ebp - 8], ecx
jmp 0x10019cb2
cmp byte [ebp - 1], 0
je 0x10019caf
push ecx
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
xor ecx, ecx
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffff8
mov byte [ebp - 1], cl
jg 0x10019ca0
cmp byte [ebp - 1], 0
je 0x10019cd1
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
xor ecx, ecx
mov dword [ebp - 8], 0x91a049fe
mov dword [ebp - 8], 0xfffffff2
cmp dword [ebp - 8], 0xffffffed
jl 0x10019d42
xor eax, eax
inc eax
mov dword [ebp - 0xc], 8
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0xfffffffc
jle 0x10019d39
mov dword [ebp - 0x18], ecx
jmp 0x10019d11
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1e0], 0x34ee
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10019d00
mov ecx, dword [ebp - 8]
xor edx, edx
mov eax, dword [ebp - 0x1e0]
cmp eax, ecx
push 0
setl dl
mov dword [ebp - 0x24], edx
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xfffffffc
pop ecx
jg 0x10019cfb
xor eax, eax
inc eax
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xffffffed
jge 0x10019ce8
mov dword [ebp - 8], 0xfffffff7
mov dword [ebp - 0xc], 0x7c7747bb
mov dword [ebp - 0x18], 0xa9dade66
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x30], 0xecf4
mov dword [ebp - 0xc], 0x7182b474
cmp dword [ebp - 0xc], ecx
je 0x10019d77
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], 0xfff7
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 8]
jle 0x10019e0f
xor edi, edi
mov dword [ebp - 0x20], ecx
inc edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
sub esi, eax
neg esi
sbb esi, esi
neg esi
cmp dword [ebp - 0x10], esi
jg 0x10019db8
mov eax, ecx
cmp dword [ebp - 0x28], ecx
je 0x10019dba
mov eax, edi
cmp eax, dword [ebp - 0x20]
jg 0x10019dc6
mov eax, ecx
cmp dword [ebp - 0x28], ecx
je 0x10019dc8
mov eax, edi
mov ecx, dword [ebp - 0x10]
cmp eax, 0xd385e13c
sbb eax, eax
inc eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 8]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 8], edi
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
cmp eax, ecx
setne dl
mov dword [ebp - 0x24], edx
jmp 0x10019f7b
xor edx, edx
mov dword [ebp - 0x1c], 0xffffffff
inc edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x18], 0xffffffee
jmp 0x10019f63
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x30], 0x8b7552f0
mov dword [ebp - 0xc], ecx
jmp 0x10019e49
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x7c], 0xfffffffe
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x10019e3b
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], ecx
jl 0x10019f60
push 2
pop esi
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x14], ecx
jmp 0x10019e76
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xac], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10019e69
mov dword [ebp - 0x14], ecx
jmp 0x10019e91
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb8], 0xe3135590
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10019e80
mov dword [ebp - 0x14], ecx
jmp 0x10019ead
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa4], 0xb6ef5427
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10019e9c
mov dword [ebp - 0x10], ecx
jmp 0x10019ed4
mov dword [ebp - 0x30], 0xbf8c3261
mov dword [ebp - 0x30], 0xf3a4b440
inc dword [ebp - 0xac]
dec dword [ebp - 0xa0]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jle 0x10019eb7
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], ecx
jg 0x10019f57
mov byte [ebp - 1], cl
cmp byte [ebp - 1], 0
je 0x10019f0e
push 0x1d37
push 0x1ee8
push 0x2f1
push 0x1b86
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xb8]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xb8]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp eax, 0x2b4b20f9
mov eax, dword [ebp - 0x10]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xc]
setne cl
mov dword [ebp + eax*4 - 0xb4], ecx
xor ecx, ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jle 0x10019ee1
xor edx, edx
inc edx
dec dword [ebp - 0xc]
jns 0x10019e5d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffff
je 0x10019e28
mov eax, dword [ebp - 0x1c]
xor edi, edi
mov ecx, dword [ebp - 8]
sub ecx, eax
inc edi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 0
mov dword [ebp - 8], 0x3de76903
mov dword [ebp - 0x20], 0xc12f69a0
mov dword [ebp - 0x24], 0xaf83
mov dword [ebp - 0x30], 0xfffffffe
mov byte [ebp - 1], 0
cmp byte [ebp - 1], 0
je 0x10019fc2
push 0xcc6
push 0x15b3
push 0x2446
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
call ebx
xor ebx, ebx
mov ecx, ebx
cmp dword [ebp - 0x14], ebx
je 0x10019fcd
mov ecx, edi
mov eax, dword [ebp - 0x14]
sub ecx, eax
je 0x10019fdb
mov ecx, edi
cmp dword [ebp - 0x14], ebx
jne 0x10019fdd
mov ecx, ebx
mov eax, dword [ebp - 0x14]
add ecx, 0x621e
xor edx, edx
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 0x6c849023
setge al
sub eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
test eax, eax
je 0x1001a00a
mov edx, edi
cmp dword [ebp - 0x14], ebx
jne 0x1001a00c
mov edx, ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setl cl
xor ebx, ebx
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
setge bl
xor edx, edx
cmp ecx, eax
setl dl
cmp edx, ebx
jl 0x1001a040
xor ebx, ebx
cmp dword [ebp - 0x14], ebx
je 0x1001a042
mov ecx, edi
jmp 0x1001a044
xor ebx, ebx
mov ecx, ebx
mov eax, dword [ebp - 0x14]
imul eax, ecx
test eax, eax
je 0x1001a0c2
mov dword [ebp - 8], ebx
jmp 0x1001a064
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xf4], 0x95cd1d2a
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x1001a053
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0xf4]
je 0x1001a07f
mov ecx, edi
cmp dword [ebp - 0x14], ebx
jne 0x1001a081
mov ecx, ebx
mov eax, dword [ebp - 0x14]
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setle dl
neg edx
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xf4]
neg edx
mov eax, dword [ebp - 0xf4]
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 8]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 8], 0x8ea47160
jmp 0x1001a142
mov dword [ebp - 0x18], ebx
mov dword [ebp - 8], 0xffffffe4
jmp 0x1001a13c
mov dword [ebp - 0x1c], 0x61e9426c
xor edx, edx
mov dword [ebp - 0x20], 0xfffffffd
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], edi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setg cl
xor edx, edx
cmp ecx, 0x15f74462
setg dl
xor ecx, ecx
cmp eax, edx
setge cl
add ecx, 0x7f49
je 0x1001a120
mov eax, edi
cmp dword [ebp - 0x18], ebx
jne 0x1001a122
mov eax, ebx
xor edx, edx
cmp eax, 0x285b5f73
mov eax, dword [ebp - 0x18]
sete dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x20], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x17
jge 0x1001a0ce
mov dword [ebp - 0x30], edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], ebx
jmp 0x1001a15b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x78], 9
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001a14d
mov esi, dword [sym.imp.USER32.dll_EnableMenuItem]
mov dword [ebp - 0xc], ebx
jmp 0x1001a1bd
mov dword [ebp - 8], ebx
mov byte [ebp - 1], bl
cmp byte [ebp - 1], 0
je 0x1001a185
push 0xcc0
push 0x1c3a
push ebx
call esi
mov dword [ebp - 8], edi
cmp dword [ebp - 8], ebx
jl 0x1001a1ba
mov dword [ebp - 0x18], 0x3f9e923e
mov dword [ebp - 0x18], ebx
jmp 0x1001a1a7
mov ecx, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x78], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
mov eax, dword [ebp - 8]
jle 0x1001a199
cmp dword [ebp + eax*4 - 0x78], ebx
jne 0x1001a1ba
dec dword [ebp - 8]
jns 0x1001a18d
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x13
jge 0x1001a16c
mov dword [ebp - 0x14], ebx
mov dword [ebp - 8], 0x3de76903
mov dword [ebp - 0x20], 0xc12f69a0
mov dword [ebp - 0x24], 0xaf83
mov dword [ebp - 0x1c], 0xfffffffe
mov byte [ebp - 1], bl
cmp byte [ebp - 1], 0
je 0x1001a208
push 0xcc6
push 0x15b3
push 0x2446
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push ebx
call dword [sym.imp.USER32.dll_PeekMessageA]
mov ecx, ebx
cmp dword [ebp - 0x14], ebx
je 0x1001a211
mov ecx, edi
mov eax, dword [ebp - 0x14]
sub ecx, eax
je 0x1001a21f
mov ecx, edi
cmp dword [ebp - 0x14], ebx
jne 0x1001a221
mov ecx, ebx
mov eax, dword [ebp - 0x14]
add ecx, 0x621e
xor edx, edx
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 0x6c849023
setge al
sub eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
test eax, eax
je 0x1001a24e
mov edx, edi
cmp dword [ebp - 0x14], ebx
jne 0x1001a250
mov edx, ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setl cl
xor ebx, ebx
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
setge bl
xor edx, edx
cmp ecx, eax
setl dl
cmp edx, ebx
jl 0x1001a284
xor ebx, ebx
cmp dword [ebp - 0x14], ebx
je 0x1001a286
mov ecx, edi
jmp 0x1001a288
xor ebx, ebx
mov ecx, ebx
mov eax, dword [ebp - 0x14]
imul eax, ecx
test eax, eax
je 0x1001a306
mov dword [ebp - 8], ebx
jmp 0x1001a2a8
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x114], 0x95cd1d2a
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x1001a297
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x114]
je 0x1001a2c3
mov ecx, edi
cmp dword [ebp - 0x14], ebx
jne 0x1001a2c5
mov ecx, ebx
mov eax, dword [ebp - 0x14]
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setle dl
neg edx
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x114]
neg edx
mov eax, dword [ebp - 0x114]
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 8]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 8], 0x8ea47160
jmp 0x1001a386
mov dword [ebp - 0x18], ebx
mov dword [ebp - 8], 0xffffffe4
jmp 0x1001a380
mov dword [ebp - 0x1c], 0x61e9426c
xor edx, edx
mov dword [ebp - 0x20], 0xfffffffd
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], edi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setg cl
xor edx, edx
cmp ecx, 0x15f74462
setg dl
xor ecx, ecx
cmp eax, edx
setge cl
add ecx, 0x7f49
je 0x1001a364
mov eax, edi
cmp dword [ebp - 0x18], ebx
jne 0x1001a366
mov eax, ebx
xor edx, edx
cmp eax, 0x285b5f73
mov eax, dword [ebp - 0x18]
sete dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x20], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x17
jge 0x1001a312
mov dword [ebp - 0x14], 0xfffffff9
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], 0x321210cb
mov dword [ebp - 0x24], 0x8bfa0855
mov dword [ebp - 0x10], ebx
jmp 0x1001a3b8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x60], 0x3b15a8d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1001a3aa
push 3
mov dword [ebp - 0x10], ebx
pop ecx
jmp 0x1001a3d6
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1f8], 0xddfdaf0b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1001a3c5
mov dword [ebp - 0x10], ebx
jmp 0x1001a3f1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x210], 0x6c49a7e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1001a3e0
cmp dword [ebp - 0x14], ebx
je 0x1001a467