Function at 0x100187e7
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20c
mov dword [ebp - 0x5c], edx
mov eax, 0x76820624
mov dword [ebp - 0x7c], eax
push ebx
mov dword [ebp - 0x78], eax
xor ebx, ebx
mov dword [ebp - 0x74], eax
push esi
mov dword [ebp - 0x70], eax
push edi
mov dword [ebp - 0x18], ebx
mov edi, ecx
mov dword [ebp - 0x7c], 0xffffffee
jmp 0x10018832
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x1001882f
push 0x323
push 0x1cea
call dword [sym.imp.KERNEL32.dll_Beep]
dec dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], 0xffffffe9
jge 0x10018817
mov dword [ebp - 0x74], 0xff55e00f
xor ecx, ecx
mov dword [ebp - 0xc], 9
inc ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 4], ebx
jmp 0x10018862
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x174], 0x69b42c51
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x10018851
mov esi, 0xab5c2947
cmp dword [ebp - 0x78], ebx
jne 0x100188ad
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x70]
imul ecx, eax, 0xffff
mov eax, dword [ebp - 0x7c]
cmp ecx, eax
sete dl
sub edx, 0xfffb
neg edx
sbb edx, edx
inc edx
cmp esi, edx
sbb eax, eax
xor ecx, ecx
inc eax
inc ecx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], 3
cmp dword [ebp - 4], ebx
jl 0x100188d4
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x100188cc
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
dec dword [ebp - 4]
jns 0x100188bc
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0xc], 0xffff
mov dword [ebp - 0x18], 0xc01e6e2b
mov dword [ebp - 0x1c], 0x9193c1de
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x10018915
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd4], 0xf5ae
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10018904
mov dword [ebp - 0x14], ebx
jmp 0x10018930
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xac], 0xb597857
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001891f
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0xc]
cmp eax, ecx
setle dl
cmp edx, dword [ebp - 0xc]
jge 0x10018951
cmp dword [ebp - 0xc], ebx
je 0x10018951
xor ecx, ecx
inc ecx
jmp 0x10018953
mov ecx, ebx
mov eax, dword [ebp - 0x18]
sub eax, ecx
je 0x1001895d
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor eax, eax
test ecx, ecx
setg al
xor ecx, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp eax, 0x5849
mov eax, dword [ebp - 0xd4]
setne cl
imul ecx, eax
mov eax, dword [ebp - 0xc]
imul eax, ecx
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x14], ebx
jmp 0x100189bd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xac], 8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x100189ac
mov dword [ebp - 0x38], 0xea5d6c05
mov dword [ebp - 0x38], 0xffffffec
cmp dword [ebp - 0x38], 0x19
push 0xfffffffffffffff6
pop eax
jle 0x10019494
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x30], 0xeede0b40
push 3
mov dword [ebp - 0x100], 0xc821
pop edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 4], ebx
jmp 0x10018a0e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x68], 0x4a8c
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10018a00
push 2
mov dword [ebp - 0x10], ebx
pop ecx
jmp 0x10018be5
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x68], ebx
je 0x10018ba3
mov dword [ebp - 0x18], 0x6fb9
mov dword [ebp - 0x14], ebx
jmp 0x10018a44
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x120], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10018a37
mov dword [ebp - 0x14], ebx
jmp 0x10018a5c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x158], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10018a4f
mov dword [ebp - 0x118], ebx
cmp dword [ebp - 0x118], ecx
jg 0x10018be2
mov dword [ebp - 0x14], 0xfffffff9
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], ebx
jl 0x10018b8c
mov dword [ebp - 0xc], 0xfffffffb
mov dword [ebp - 0xc], ebx
jmp 0x10018b7a
mov dword [ebp - 0x1c], 0x437f1bd5
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x118]
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x68], 1
je 0x10018ac0
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x68], ebx
jne 0x10018ac0
mov ecx, ebx
jmp 0x10018ac3
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x68]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
imul edx, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x68]
cmp edx, eax
setle cl
cmp ecx, 0xff3e
jne 0x10018af8
cmp dword [ebp - 0x18], ebx
jne 0x10018af8
mov eax, ebx
jmp 0x10018afb
xor eax, eax
inc eax
mov dword [ebp - 0x1c], eax
xor ebx, ebx
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setl bl
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x10]
sub ebx, eax
mov eax, dword [ebp - 0x10]
cmp ebx, ecx
setne dl
imul edx, dword [ebp + eax*4 - 0x68]
cmp edx, 0xffffffff
sbb eax, eax
neg eax
cmp eax, 5
mov eax, dword [ebp - 0xc]
sbb edx, edx
xor ecx, ecx
neg edx
mov eax, dword [ebp + eax*4 - 0x68]
cmp eax, edx
setg cl
xor ebx, ebx
mov dword [ebp - 0x154], ecx
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10018b74
push 0x306
push 0x45b
push ebx
push ebx
push 0xae4
push 0x1a86
call dword [sym.imp.USER32.dll_ToUnicode]
inc dword [ebp - 0xc]
push 2
pop ecx
cmp dword [ebp - 0xc], ecx
jle 0x10018a95
dec dword [ebp - 0x14]
jns 0x10018a86
inc dword [ebp - 0x118]
cmp dword [ebp - 0x118], ecx
jle 0x10018a73
push 3
pop edx
jmp 0x10018be2
mov dword [ebp - 4], ebx
jmp 0x10018bb9
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x12c], 9
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10018ba8
mov dword [ebp - 0x124], ecx
cmp dword [ebp - 0x124], ebx
jl 0x10018be2
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 0xfffffffa
dec dword [ebp - 0x124]
jns 0x10018bcc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jle 0x10018a1e
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10018c0b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetParent]
mov dword [ebp - 0x108], 1
mov dword [ebp - 0x30], 0x16
jmp 0x1001947a
mov dword [ebp - 0x34], 0xfffffffe
or eax, 0xffffffff
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 4], ebx
jmp 0x10018c56
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x3c], 0xfffffffb
inc dword [ebp - 4]
cmp dword [ebp - 4], 1
jl 0x10018c48
mov dword [ebp - 0x3c], ebx
jmp 0x10018c8d
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10018c8a
push 0x10c
push ebx
push 0x8de
push 0x5cc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 3
jle 0x10018c61
mov dword [ebp - 0xf4], 7
mov dword [ebp - 4], ebx
jmp 0x10018cb3
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xe0], 0xf5540d7f
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10018ca2
mov dword [ebp - 0xe0], 0xffffffe4
jmp 0x10018cdc
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10018cd6
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnregisterClassA]
inc dword [ebp - 0xe0]
cmp dword [ebp - 0xe0], 0xffffffe8
jge 0x10018cc5
mov dword [ebp - 0x34], 0x13
jmp 0x1001946d
mov dword [ebp - 0xc], 0xbb7ab61b
xor ecx, ecx
mov dword [ebp - 0x1c], ebx
inc ecx
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 2
jge 0x10018d1d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa4], ecx
inc dword [ebp - 0x14]
jmp 0x10018d08
mov dword [ebp - 0x14], ebx
jmp 0x10018d2c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x28], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10018d22
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x10018e14
mov dword [ebp - 0x10], 7
mov dword [ebp - 0x10], ebx
jmp 0x10018da5
mov dword [ebp - 0x18], 0x1c17
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x10]
cmp eax, 0x7563
mov eax, dword [ebp - 0x18]
setg cl
xor ebx, ebx
cmp ecx, edx
setle bl
xor ecx, ecx
cmp ebx, eax
setl cl
xor ebx, ebx
mov dword [ebp - 0xc], ecx
xor ecx, ecx
mov dword [ebp - 0xc], ebx
inc ecx
cmp dword [ebp - 0xc], 2
jge 0x10018da2
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xa4], ecx
inc dword [ebp - 0xc]
jmp 0x10018d8d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jle 0x10018d49
mov dword [ebp - 0x10], ebx
jmp 0x10018e06
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x3062a4b1
jl 0x10018dc8
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jle 0x10018dd7
cmp dword [ebp - 0xc], ebx
jne 0x10018dd7
mov ecx, ebx
mov eax, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xa4]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0xffff
setne al
xor ecx, ecx
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
inc ecx
cmp dword [ebp - 0x10], ecx
jle 0x10018daf
dec dword [ebp - 0x28]
jns 0x10018d3d
mov dword [ebp - 0xf8], 7
mov dword [ebp - 0xc], 0x2b165808
mov dword [ebp - 0x10], 0xe229
mov dword [ebp - 0x1c], 0x17ab6dad
mov dword [ebp - 4], 9
mov dword [ebp - 0x18], 0x57863718
mov dword [ebp - 0x14], 6
mov dword [ebp - 4], ebx
jmp 0x10018e5b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x50], 0xfffffffc
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x10018e4d
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0xc]
cmp eax, ecx
setle dl
add edx, dword [ebp - 0x10]
mov dword [ebp - 4], edx
xor edx, edx
mov eax, dword [ebp - 4]
inc edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], 0x84edc022
mov dword [ebp - 4], ebx
jmp 0x1001905b
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], 0x7ee0456b
mov dword [ebp - 0x24], edx
mov dword [ebp - 0xc], ebx
jmp 0x10018ed5
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xa8], 0xb1cb454
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x10018ec4
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], ebx
jl 0x10019058
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], 0xfa57a880
mov dword [ebp - 0xc], ebx
jmp 0x10018f02
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1a0], ebx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x10018ef5
mov dword [ebp - 0xc], ebx
jmp 0x10018f1b
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x54], 0x3bc6c2db
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x10018f0d
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], ebx
jl 0x10019038
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x194]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x20]
sub eax, 0x5c2bbbb3
je 0x10018f54
mov ecx, edx
cmp dword [ebp - 0x198], ebx
jne 0x10018f56
mov ecx, ebx
mov eax, dword [ebp - 0x198]
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
cmp eax, 0xfffb
sbb eax, eax
add eax, 0xfffffff8
dec dword [ebp - 0x1c]
add ecx, eax
je 0x10018f79
mov eax, edx
cmp dword [ebp - 0x20], ebx
jne 0x10018f7b
mov eax, ebx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x24]
add eax, 3
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
dec eax
jne 0x10018fa4
mov eax, ebx
cmp dword [ebp - 0x24], ebx
je 0x10018fa6
mov eax, edx
mov dword [ebp - 0x18], eax
xor ebx, ebx
mov eax, dword [ebp - 0x10]
push 0
mov ecx, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setge bl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x50]
cmp eax, ebx
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xfffc
pop ebx
setne cl
cmp eax, ecx
push 1
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x676e
pop edx
setle cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], 0xe808e27f
dec dword [ebp - 0x10]
jns 0x10018f2c
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x1001904c
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
dec dword [ebp - 0x14]
push 1
pop edx
jns 0x10018ee6
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jle 0x10018ea7
mov dword [ebp - 0x110], edx
mov dword [ebp - 0x14], 0x29aa
mov dword [ebp - 0x18], 0x67f8b4df
mov dword [ebp - 0x1c], 0xa8f1edd1
mov dword [ebp - 0x18], 0x64d9248e
mov dword [ebp - 0x10], ebx
jmp 0x1001909c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10c], 0x5637
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001908b
mov dword [ebp - 0x10], ebx
jmp 0x100190b7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1e8], 0x4ed383de
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100190a6
mov dword [ebp - 0x10], ebx
jmp 0x100190d3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1d0], 0x60bc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100190c2
cmp dword [ebp - 0x14], ebx
je 0x1001912e
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
dec eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x18], eax
jg 0x1001912a
cmp dword [ebp - 0x18], ebx
je 0x1001912e
mov ecx, edx
jmp 0x10019130
mov ecx, ebx
mov eax, dword [ebp - 0x14]
imul eax, ecx
neg eax
sbb eax, eax
neg eax
cmp eax, edx
mov eax, dword [ebp - 0x1c8]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, 0xfffffffa
setl al
mov dword [ebp - 0x18], eax
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10019174
push 0x26aa
push 0x1c19
push ebx
call dword [sym.imp.GDI32.dll_OffsetRgn]
mov dword [ebp - 0xfc], 0x639e6a4
xor edx, edx
inc edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x1c], 0xfffffffa
mov dword [ebp - 4], ebx
jmp 0x100191a8
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x20c], 0xfffffff6
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x10019197
mov dword [ebp - 4], 0xffffffed
jmp 0x10019210
mov dword [ebp - 0x24], 0x2c36544d
mov dword [ebp - 0x18], 0xfffffff8
mov dword [ebp - 0x18], 0xf340
mov dword [ebp - 0xc], ebx
jmp 0x100191df
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x6c], 0xfffffff9
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x100191d1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6c]
neg ecx
dec dword [ebp - 0x18]
cmp ecx, eax
jl 0x100191fe
cmp dword [ebp - 0x1c], ebx
je 0x10019208
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1c], eax
mov eax, ebx
jge 0x1001920a
mov eax, edx
mov dword [ebp - 0x6c], eax
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x19
jne 0x100191b7
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0x18], 0x19ac
mov dword [ebp - 0x18], 0xad744d02
push 2
mov dword [ebp - 0x18], 0x68819570
pop ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1c], 0xbb8bffbe
mov dword [ebp - 4], ebx
jmp 0x10019255
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1fc], 0x4801897a
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10019244
dec dword [ebp - 0x18]
mov byte [ebp - 5], bl
mov dword [ebp - 0x10], ebx
jmp 0x10019277
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x9c], 0x638ecf54
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10019266
mov dword [ebp - 0x10], ebx
jmp 0x10019293
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xc8], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10019282
mov dword [ebp - 0x10], ebx
jmp 0x100192ae
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x160], 0xf4cc511e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1001929d
mov ecx, dword [ebp - 0x98]
xor edx, edx
mov eax, dword [ebp - 0x90]
cmp ecx, eax
setge dl
xor ecx, ecx
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0xc4]
cmp eax, 0x8331
mov eax, dword [ebp - 0xc4]
setg cl
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x98]
setg dl
imul ecx, edx
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x98]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x98]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x98]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x98]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x98]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x94]
setg cl
xor edx, edx
cmp ecx, 0xb09b
setge dl
xor ebx, ebx
cmp edx, eax
setl bl
xor ecx, ecx
mov dword [ebp - 0x94], ebx
mov eax, dword [ebp - 0xc4]
cmp ebx, eax
mov eax, dword [ebp - 0xc4]
setl cl
add eax, ecx
mov dword [ebp - 0x160], eax
cmp byte [ebp - 5], 0
je 0x100193a0
push 0x90d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
lea eax, [ebp - 0xf4]
xor ebx, ebx
push eax
lea eax, [ebp - 0x110]
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.10019e05
mov dword [ebp - 4], 0x25e7
add esp, 0x28
mov dword [ebp - 0x18], 0x4d073ff8
cmp dword [ebp - 4], ebx
je 0x1001940e
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x1001944e
push 1
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x1001944e
mov dword [ebp - 4], ebx
jmp 0x10019424
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x17c], 1
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x10019413
mov dword [ebp - 4], ebx
jmp 0x10019448
mov dword [ebp - 0x18], 9
inc dword [ebp - 0x18]
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x17c], ebx
jne 0x1001944e
inc dword [ebp - 4]
cmp dword [ebp - 4], 1
jle 0x1001942f
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x1001946a
push ebx
push 0x12eb
push ebx
push ebx
push 0x134d
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffeb
jl 0x10018cf1
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffef
jne 0x10018c21
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x19
jg 0x100189e4
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x1c], 0x31c0a9c5
mov dword [ebp - 0x18], 0xa4a2c6eb
mov dword [ebp - 0x18], 9
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0xc], ebx
jmp 0x100194ec
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1c0], 0x8129ec6e
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x100194db
mov dword [ebp - 0xc], ebx
jmp 0x10019508
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x16c], 1
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x100194f7
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xb4], eax
test eax, eax
jne 0x1001952f
cmp dword [ebp - 0xb8], ebx
je 0x10019539
cmp dword [ebp - 0x10], ebx
je 0x10019539
xor ecx, ecx
inc ecx
jmp 0x1001953b
mov ecx, ebx
mov eax, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x1c], eax
jne 0x1001954e
cmp dword [ebp - 0x10], ebx
jne 0x1001954e
mov esi, ebx
jmp 0x10019551
xor esi, esi
inc esi
mov dword [ebp - 0x18], 1
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setg dl
cmp edx, esi
je 0x10019575
cmp dword [ebp - 0xc0], ebx
jne 0x10019575
mov eax, ebx
jmp 0x10019578
xor eax, eax
inc eax
mov dword [ebp - 0x1c0], eax
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, 7
setg cl
sub ecx, dword [ebp - 0x10]
je 0x100195ac
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x164]
cmp ecx, eax
setne dl
cmp dword [ebp - 0x10], edx
jl 0x100195e9
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x1001960e
push 0x8ce
push 0x2425
push ebx
call dword [sym.imp.GDI32.dll_PtInRegion]
jmp 0x1001960e
mov dword [ebp - 0x18], 4
cmp dword [ebp - 0x1c0], ebx
je 0x10019609
cmp dword [ebp - 0xb4], 0xffff37b9
jge 0x10019609
xor eax, eax
inc eax
jmp 0x1001960b
mov eax, ebx
mov dword [ebp - 0x18], eax
cmp dword [edi + 0x10], ebx
jne 0x1001961a
xor al, al
jmp 0x10019dc0
mov eax, dword [ebp - 0x5c]
push 2
pop esi
mov dword [eax], ebx
mov dword [ebp - 4], 0xfffffffa
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 0xfffffffe
mov dword [ebp - 0x18], 0x24c00011
mov dword [ebp - 4], ebx
jmp 0x10019654
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1f0], 0x477862fd
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10019643
mov dword [ebp - 4], ebx
jmp 0x1001966b
mov dword [ebp - 0x1c], 0x756a3367
inc dword [ebp - 0x18]
inc dword [ebp - 4]
cmp dword [ebp - 4], 1
jle 0x1001965e
mov eax, dword [ebp - 0x18]
cmp dword [edi + 0x14], 0x10
mov dword [ebp - 0x18], eax
jb 0x10019681
mov ecx, dword [edi]
jmp 0x10019683
mov ecx, edi
cmp dword [edi + 0x14], 0x10
mov dword [ebp - 0x48], ecx
jb 0x10019690
mov edx, dword [edi]
jmp 0x10019692
mov edx, edi
mov eax, dword [edi + 0x10]
add eax, edx
cmp ecx, eax
je 0x10019d75
or eax, 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x18], eax
inc ecx
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], ebx
jmp 0x100196d9
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x190], 0x434678dc
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x100196c8
mov dword [ebp - 0xc], ebx
jmp 0x100196f5
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xb0], 0x2bf33880
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x100196e4
mov eax, dword [ebp - 4]
xor ecx, ecx
cmp eax, 6
mov eax, dword [ebp - 0x188]
setne cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0xec]
setle dl
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x18c]
cmp eax, 4
setne cl
dec dword [ebp - 0xec]
cmp ecx, edx
jne 0x1001973f
cmp dword [ebp - 0xf0], ebx
je 0x1001973f
xor ecx, ecx
inc ecx
jmp 0x10019741
mov ecx, ebx
mov eax, dword [ebp - 0xb0]
sub ecx, eax
xor eax, eax
cmp ecx, 0x51c76d7b
setl al
xor ecx, ecx
cmp eax, 0x760fc5c2
setg cl
xor edx, edx
cmp ecx, 0xfffffff9
setle dl
xor eax, eax
cmp edx, 0xa33e
setge al
mov dword [ebp - 0xb0], eax
mov dword [ebp - 4], ebx
jmp 0x1001979a
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10019797
push 0x1186
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
inc dword [ebp - 4]
cmp dword [ebp - 4], ebx
jle 0x1001977c
mov dword [ebp - 0x18], 0x4dd03248
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x1c], 0x844a7543
mov dword [ebp - 4], ebx
jmp 0x100197d1
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1dc], 0x534bf8f0
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x100197c0
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
push 0x5444
setl dl
xor ecx, ecx
mov dword [ebp - 0x1dc], edx
mov eax, dword [ebp - 0x18]
neg eax
cmp edx, eax
push 0x33de
setl cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
neg eax
push 0x6eec
mov dword [ebp - 0x1c], eax
push ebx
call fcn.1001c13e
mov dword [ebp - 0x20], 0xf4c
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xc], ebx
jmp 0x10019840
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x44], 0x13b91020
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x10019832
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10019859
push 0x1eff
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
push 0xffffffffffffffe2
pop eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], eax
jle 0x10019a34
mov dword [ebp - 0xc], 0xe55059b8
mov dword [ebp - 0x14], 0x60fc5c2f
mov dword [ebp - 0xc], ebx
jmp 0x1001988c
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xd0], 0xe8384627
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x1001987b
mov dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], ebx
jl 0x10019a11
mov dword [ebp - 0x24], 4
xor edx, edx
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 0x20], 0xa84cbed5
mov dword [ebp - 0x18], 0xb748abb7
mov dword [ebp - 0x18], 0x35c2
mov dword [ebp - 0x1c], 0xfe35fe57
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xd0]
inc dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xcc]
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x44]
setne bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x24]
setle cl
xor edx, edx
cmp ecx, 0x44c1
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x18]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setg dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0xc]
setne bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 4]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setge dl
xor ebx, ebx
cmp edx, eax
setl bl
sub ebx, dword [ebp - 0x40]
mov eax, dword [ebp - 4]
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, eax
mov eax, 0xc1f5e2d0
setle cl
cmp eax, ecx
mov ecx, 0xcebb36e9
sbb eax, eax
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0x40]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
setne dl
add ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setg dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg bl
xor ecx, ecx
cmp ebx, eax
setne cl
xor ebx, ebx
cmp ecx, dword [ebp - 4]
je 0x100199ed
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0xd0], ebx
je 0x100199ed
xor eax, eax
inc eax
jmp 0x100199ef
mov eax, ebx
cmp eax, dword [ebp - 0x14]
jne 0x100199fe
cmp dword [ebp - 0x1c], ebx
je 0x100199fe
xor eax, eax
inc eax
jmp 0x10019a00
mov eax, ebx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x40], ebx
jne 0x10019a11
dec dword [ebp - 0xc]
jns 0x100198a1
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 4]
cmp eax, ecx
setle dl
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xffffffe2
jg 0x10019868
mov eax, dword [ebp - 0x48]
mov al, byte [eax]
cmp al, 0x30
jl 0x10019a5b
cmp al, 0x39
jg 0x10019a5b
push ebx
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.1001b46e
mov ecx, dword [ebp - 0x48]
add esp, 0xc
inc ecx
jmp 0x10019683
mov dword [ebp - 0x10], ebx
push 4
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], ebx
pop edi
jmp 0x10019a7a
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x14c], 0xfffffff8
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10019a69
lea eax, [ebp - 0x29]
mov byte [ebp - 0x29], bl
push eax
push 0x1869
push 0x29f3
push 0xc06
push ebx
call fcn.1001b3ed
mov dword [ebp - 0x10], ebx
add esp, 0x14
cmp dword [ebp - 0x10], 0xfffffffa
jge 0x10019c5c
mov esi, 0xc1846e97
mov dword [ebp - 0x14], 0x53aa9ac7
mov dword [ebp - 4], 0xfffffff6
mov dword [ebp - 0x14], 0x16
jmp 0x10019c45
mov dword [ebp - 0xc], 0x816f
xor ecx, ecx
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x58], 0xfffa
mov dword [ebp - 0x1c], 0x41209775
mov dword [ebp - 0x1c], 0xb30732ba
imul edx, dword [ebp - 0x10], 0xdc41
mov eax, dword [ebp - 0x14]
sub eax, 0x61235702
cmp eax, edx
setl cl
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], ebx
jne 0x10019b19
cmp dword [ebp - 0x10], ebx
jne 0x10019b19
cmp dword [ebp - 0xc], ebx
jne 0x10019b19
mov eax, ebx
jmp 0x10019b1c
xor eax, eax
inc eax
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x144], ebx
je 0x10019ba5
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 4], 3
cmp dword [ebp - 4], ebx
jl 0x10019c42
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0xc], 3
cmp dword [ebp - 0xc], ebx
jl 0x10019b9b
mov dword [ebp - 0x1c], 0x8dacb314
mov dword [ebp - 0x20], ebx
jmp 0x10019b79
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x150], 0xb63e91cb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x10019b68
push ebx
lea eax, [ebp - 0x58]
push 0x491b
push eax
call fcn.1001b4d0
add esp, 0xc
cmp dword [ebp - 0x14], ebx
jne 0x10019b9b
dec dword [ebp - 0xc]
jns 0x10019b5c
dec dword [ebp - 4]
jns 0x10019b4d
jmp 0x10019c42
mov dword [ebp - 0x13c], esi
xor edx, edx
mov dword [ebp - 0x138], esi
mov dword [ebp - 0x134], esi
mov dword [ebp - 0x130], esi
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x148]
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setne dl
sub edx, eax
xor eax, eax
cmp edx, 0xfffffffc
setg al
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jne 0x10019bfa
cmp dword [ebp - 0x134], ebx
jne 0x10019bfa
mov eax, ebx
jmp 0x10019bfd
xor eax, eax
inc eax
cmp eax, dword [ebp - 0x18]
jg 0x10019c05
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x138]
mov edx, dword [ebp - 0xc]
sub edx, eax
mov eax, dword [ebp - 4]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
cmp ecx, 0x48a24e22
jne 0x10019c3d
cmp dword [ebp - 0xc], ebx
je 0x10019c3d
xor eax, eax
inc eax
jmp 0x10019c3f
mov eax, ebx
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 9
jg 0x10019aca
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffffa
jl 0x10019ab0
lea eax, [ebp - 0x5c]
push eax
push ebx
call fcn.1001b728
mov eax, 0x76820624
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
pop ecx
mov dword [ebp - 0x18], ebx
pop ecx
mov dword [ebp - 0x8c], 0xffffffee
jmp 0x10019ca7
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10019ca1
push ebx
call fcn.1001b701
pop ecx
dec dword [ebp - 0x8c]
cmp dword [ebp - 0x8c], 0xffffffe9
jge 0x10019c91
mov dword [ebp - 0x84], 0xff55e00f
xor esi, esi
mov dword [ebp - 0xc], 9
inc esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x20], ebx
jmp 0x10019cdd
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x184], 0x69b42c51
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10019ccc
cmp dword [ebp - 0x88], ebx
jne 0x10019d2b
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x80]
imul ecx, eax, 0xffff
mov eax, dword [ebp - 0x8c]
cmp ecx, eax
mov eax, 0xab5c2947
sete dl
sub edx, 0xfffb
neg edx
sbb edx, edx
inc edx
cmp eax, edx
sbb eax, eax
inc eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], 3
cmp dword [ebp - 4], ebx
jl 0x10019d5b
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10019d56
push ebx
push 0x2483
push 0x2acf
call fcn.10019f63
add esp, 0xc
dec dword [ebp - 4]
jns 0x10019d3a
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x8c], eax
jmp 0x10019613
mov dword [ebp - 4], 0xfffffffc
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x10019d8c
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
mov dword [ebp - 4], ebx
jmp 0x10019db8
mov dword [ebp - 0x20], ebx
jmp 0x10019da7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x104], 3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x10019d96
cmp dword [ebp - 0x104], ebx
jne 0x10019dbe
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x13
jg 0x10019d91
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret