Function at 0x10017dbf
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x204
push ebx
push esi
push edi
mov dword [ebp - 0xb0], ecx
xor ebx, ebx
mov dword [ebp - 0x14], 0xc9b7
xor ecx, ecx
push 4
mov dword [ebp - 0xd0], edx
inc ecx
mov dword [ebp - 0x34], 0x38f738f5
mov dword [ebp - 4], ebx
pop edx
jmp 0x10017dfc
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x38], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10017df2
mov dword [ebp - 4], ebx
jmp 0x10017e10
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x68], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10017e06
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x10017e28
push ebx
push ebx
call dword [sym.imp.USER32.dll_EnumWindows]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x5c], ebx
push 0xfffffffffffffff8
pop esi
cmp dword [ebp - 0x5c], ebx
jl 0x10017f07
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 4], ebx
jmp 0x10017e5b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xb4], 0xdf860956
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10017e4a
mov dword [ebp - 4], ebx
jmp 0x10017e76
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1b4], 0xcfdfe924
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10017e65
mov eax, dword [ebp - 0x5c]
xor edx, edx
push 0
mov eax, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x38]
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x38]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1ac], ecx
mov eax, dword [ebp - 0x60]
cmp ecx, eax
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x64]
setle dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x5c]
sete dl
xor ebx, ebx
mov eax, dword [ebp + eax*4 - 0x38]
cmp eax, edx
mov eax, dword [ebp - 0x5c]
setl bl
xor ecx, ecx
neg ebx
mov eax, dword [ebp + eax*4 - 0x38]
cmp ebx, eax
mov eax, dword [ebp - 0x64]
setl cl
imul eax, ecx
xor ecx, ecx
pop ebx
push 1
cmp eax, esi
setl cl
mov dword [ebp - 0x30], ecx
dec dword [ebp - 0x5c]
pop ecx
jns 0x10017e37
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x34], 0x1fc
mov dword [ebp - 0x30], 0x1145714f
mov dword [ebp - 0x28], 0x799333c7
mov dword [ebp - 0x28], 0x495761be
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0xbbd4
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov eax, dword [ebp - 0x10]
neg ecx
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
sbb ecx, ecx
xor ebx, ebx
inc ecx
cmp ecx, eax
setg bl
sub ebx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, 0x4b28
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x34]
setne cl
cmp ecx, 9
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
setl dl
sub edx, 0x76373a4c
neg edx
sbb edx, edx
xor ebx, ebx
inc edx
mov dword [ebp - 0x30], edx
dec dword [ebp - 0x1c]
mov dword [ebp - 0x28], 0x799a
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x10017fc3
push ebx
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetClipBox]
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x10017fd8
push 0xea7
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x28], 0x3eb60693
mov dword [ebp - 0x34], 0xbc7dcd66
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x30], ebx
mov dword [ebp - 4], 0xb4495231
mov dword [ebp - 4], ebx
jmp 0x10018014
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xec], 0x7571177e
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10018003
push 4
mov dword [ebp - 4], ebx
pop ecx
jmp 0x10018033
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x84], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10018022
mov dword [ebp - 4], ebx
jmp 0x1001804e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1dc], 3
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001803d
mov dword [ebp - 0x78], 2
cmp dword [ebp - 0x78], ebx
jl 0x100181af
mov dword [ebp - 0x28], 0xc96c7979
mov dword [ebp - 0x14], 0x7e71
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0x10], ebx
jmp 0x1001808e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x19c], 1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1001807d
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0xec]
inc eax
jne 0x1001816f
mov eax, dword [ebp - 0x78]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0xec]
mov eax, dword [ebp - 0x14]
inc eax
cmp eax, edx
setge cl
mov dword [ebp - 0x198], ecx
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0xec]
cmp eax, dword [ebp - 0x78]
jle 0x1001816f
mov dword [ebp - 0x24], 0x208af066
mov dword [ebp - 0x1c], 1
mov dword [ebp - 4], ebx
jmp 0x1001810c
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x100180fb
push ebx
push ebx
call esi
push eax
push ebx
push ebx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x10018109
call dword [sym.imp.USER32.dll_GetCapture]
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jle 0x100180e6
mov dword [ebp - 0x1dc], 0xfffffffb
mov dword [ebp - 0x1c], 0xfffffffc
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], 0x30054750
mov ecx, dword [ebp - 4]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
imul ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x7c]
setge dl
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0xec]
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setg dl
mov dword [ebp - 0x24], edx
jmp 0x10018172
mov dword [ebp - 4], ebx
mov dword [ebp - 4], ebx
jmp 0x100181a0
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x1001819d
push 0x10d9
push ebx
push ebx
push 0x24db
push 0x2378
push ebx
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jle 0x10018177
dec dword [ebp - 0x78]
jns 0x10018063
mov dword [ebp - 0x28], 0x7631615e
mov dword [ebp - 4], 0xbac64a68
mov dword [ebp - 0x2c], 0x7440
mov dword [ebp - 8], 0xc8ef34ea
mov dword [ebp - 0x10], ebx
jmp 0x100181e1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x184], 0x744e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100181d0
mov dword [ebp - 4], 0xfffffffd
cmp dword [ebp - 4], 0xffffffeb
jl 0x100182da
xor ecx, ecx
inc ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x14], 0x8f738f58
mov dword [ebp - 0x1c], 3
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], ebx
jmp 0x10018221
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb8], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10018214
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], 0xffffffff
jg 0x100182cd
mov dword [ebp - 8], ebx
jmp 0x10018246
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x74], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x10018238
cmp dword [ebp - 0x70], ebx
jne 0x10018257
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 4]
mov eax, dword [ebp - 0xb8]
cmp edx, eax
mov eax, dword [ebp - 4]
setle cl
xor edx, edx
add ecx, 0x25e
cmp ecx, eax
setg dl
mov dword [ebp - 0x1c], edx
xor edx, edx
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x70]
setge dl
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setl cl
xor edx, edx
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x70]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 8], edx
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffff
jle 0x10018233
xor ecx, ecx
inc ecx
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffeb
jge 0x100181fb
mov dword [ebp - 8], 2
cmp dword [ebp - 8], ebx
jl 0x10018305
mov dword [ebp - 0x14], 0x1c17854c
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x184]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x14], eax
dec dword [ebp - 8]
jns 0x100182e6
mov dword [ebp - 0x28], 0xade661fb
xor ecx, ecx
mov dword [ebp - 8], 0xfffffff7
inc ecx
mov dword [ebp - 0x24], 0x279a
mov edx, 0xffff
mov dword [ebp - 0x2c], 0x87d6364d
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x18], 0x167d
mov dword [ebp - 0x1c], 0x5b6062cf
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x20], 0x49b8ae05
mov dword [ebp - 4], ebx
jmp 0x1001835a
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x44], 0xc0136ef6
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001834c
mov dword [ebp - 4], ebx
jmp 0x10018375
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1c4], 2
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x10018364
mov eax, dword [ebp - 8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 8], ebx
jne 0x10018397
cmp dword [ebp - 0x10], edx
jb 0x10018394
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
xor edx, edx
mov dword [ebp - 0x2c], 0xfffffffa
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setg dl
sub eax, edx
xor edx, edx
imul eax, eax, 0xcbe
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 8]
cmp eax, ecx
mov eax, dword [ebp - 8]
mov ecx, 0x284
setne dl
sub eax, edx
xor edx, edx
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x18]
sub ecx, eax
add ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
cmp ecx, 0xdfda
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 8]
jle 0x1001840b
cmp dword [ebp - 0x10], ebx
je 0x1001840b
xor ecx, ecx
inc ecx
jmp 0x1001840d
mov ecx, ebx
mov eax, dword [ebp - 0x44]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, dword [ebp - 0x1c]
jle 0x10018429
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
xor ecx, ecx
mov dword [ebp - 0x2c], edx
xor edx, edx
mov eax, dword [ebp - 0x2c]
inc edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
cmp eax, edx
mov eax, 0xc2076acb
setle cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x1001848c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf4], 0xb57f
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001847b
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], ebx
jl 0x100184c3
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], ebx
jl 0x100184be
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0xf4]
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf4], ecx
dec dword [ebp - 0x24]
jns 0x100184a5
dec dword [ebp - 0x10]
jns 0x1001849a
mov dword [ebp - 8], 0x6fe7d8a8
mov dword [ebp - 0x14], edx
mov dword [ebp - 4], ebx
jmp 0x100184e0
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x40], 0x40d7
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x100184d2
mov dword [ebp - 4], ebx
jmp 0x100184fb
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa0], 0x6c849023
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x100184ea
mov dword [ebp - 8], ebx
jmp 0x1001858f
mov dword [ebp - 0x10], 0xe5a945cb
mov dword [ebp - 0x10], ebx
jmp 0x1001851e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6c], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10018514
mov dword [ebp - 0x6c], ebx
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x40], ebx
je 0x10018557
mov eax, dword [ebp - 8]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x40]
cmp ecx, eax
mov eax, dword [ebp - 8]
setne dl
cmp edx, dword [ebp + eax*4 - 0x40]
jl 0x10018554
xor edx, edx
inc edx
mov eax, edx
jmp 0x10018559
xor edx, edx
inc edx
mov eax, ebx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x40]
mov dword [ebp - 0x10], ebx
mov eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], ebx
jl 0x1001858c
cmp dword [ebp - 0x6c], ebx
jne 0x1001858c
dec dword [ebp - 0x10]
jns 0x10018582
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jle 0x10018508
mov dword [ebp - 0x20], 0xe0cf5720
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x100185ad
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x100185bc
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov dword [ebp - 0x20], 4
push 3
mov dword [ebp - 0x20], ebx
mov dword [ebp - 4], ebx
pop edx
jmp 0x100185df
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x190], 0xa53d06ce
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x100185ce
xor ecx, ecx
mov dword [ebp - 4], ebx
inc ecx
cmp dword [ebp - 4], 2
jge 0x100185fc
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x58], ecx
inc dword [ebp - 4]
jmp 0x100185ea
mov dword [ebp - 4], ebx
jmp 0x10018612
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x9c], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10018601
mov dword [ebp - 0x54], ebx
jmp 0x1001862d
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x190], 0x288a137b
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], edx
jl 0x1001861c
mov dword [ebp - 0x94], ebx
cmp dword [ebp - 0x94], 0x18
jge 0x100186a0
mov dword [ebp - 0x20], 0xfb1c0380
mov edx, ecx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jne 0x1001865d
mov edx, ebx
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, 8
jne 0x10018676
cmp dword [ebp - 0x98], ebx
jne 0x1001869d
jmp 0x1001868b
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x1001868b
push ebx
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
inc dword [ebp - 0x94]
cmp dword [ebp - 0x94], 0x18
push 1
pop ecx
jl 0x10018641
push 3
pop edx
push 5
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0x9978f3c3
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x20], 0xa87b8b0d
mov dword [ebp - 4], ebx
jmp 0x100186db
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x144], 0x7642
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x100186ca
mov dword [ebp - 4], ebx
jmp 0x100186f6
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x124], 0xfffffffd
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x100186e5
mov eax, dword [ebp - 8]
xor ecx, ecx
mov eax, dword [ebp - 8]
mov edx, 0xffff55cf
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x140], edx
mov eax, dword [ebp - 0x14]
cmp eax, edx
setle cl
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 8], ebx
jmp 0x10018770
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1f4], 1
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x1001875f
mov dword [ebp - 0x14], 0xdc0e3e76
mov dword [ebp - 0x20], 0xbc1c234a
push 4
mov dword [ebp - 0x20], 0x79ae4f78
mov dword [ebp - 8], ebx
pop ecx
jmp 0x100187a4
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xe0], 0xfffffffd
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x10018793
mov dword [ebp - 8], ebx
jmp 0x100187bb
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x16c], ebx
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x100187ae
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x100187d4
push ebx
push 0x263c
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x14], 0xfffffffc
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x14], eax
jg 0x10018801
cmp dword [ebp - 0xd8], ebx
je 0x10018801
xor edx, edx
inc edx
mov ecx, edx
jmp 0x10018806
xor edx, edx
mov ecx, ebx
inc edx
mov eax, dword [ebp - 0x16c]
imul eax, ecx
xor ecx, ecx
cmp eax, 8
setne cl
cmp ecx, dword [ebp - 0x16c]
jl 0x10018829
mov eax, ebx
cmp dword [ebp - 0xd8], ebx
je 0x1001882b
mov eax, edx
xor edx, edx
cmp eax, 0xd700
mov eax, dword [ebp - 0xd4]
setne dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x20], ecx
mov dword [ebp - 8], ebx
jmp 0x1001885b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x138], 0x29a2a67f
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x1001884a
mov dword [ebp - 4], 0x6deec541
push 2
mov dword [ebp - 0x10], 0xeea53061
mov dword [ebp - 8], ebx
pop ecx
jmp 0x10018888
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x10c], 1
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x10018877
mov dword [ebp - 8], ebx
jmp 0x100188a3
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x15c], 0xdb84c6a3
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x10018892
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [ebp - 0x10], 0xf44401d1
mov eax, dword [ebp - 0x10]
cmp eax, 0x51ebf0dd
mov eax, dword [ebp - 4]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
imul eax, ecx, 0xdacd
mov ecx, dword [ebp - 4]
sub ecx, eax
sub ecx, dword [ebp - 4]
mov eax, dword [ebp - 4]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 4]
setge dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 4]
setl cl
sub edx, ecx
xor ecx, ecx
add edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp edx, eax
setl cl
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x10], 0xffffffe3
jmp 0x1001893a
mov dword [ebp - 0x14], 0x229a
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10c], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x1d
jl 0x10018911
mov dword [ebp - 0x18], 0x261f9c28
push 7
pop eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x20], 0x9fff12f3
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x10018987
push 0x10a6
push ebx
push ebx
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
push 7
pop eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1c
jl 0x10018a42
push 3
pop ecx
mov dword [ebp - 4], 0xcf2e5664
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], ebx
jl 0x10018a21
mov dword [ebp - 8], ebx
jmp 0x100189bc
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xac], 0xafe30f58
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x100189ab
mov dword [ebp - 8], ebx
jmp 0x100189d7
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1a8], 1
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x100189c6
mov dword [ebp - 0xa4], ebx
jmp 0x10018a14
mov dword [ebp - 0x10], 0x7d8cf4c5
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], ebx
jl 0x10018a04
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x11c], ebx
jne 0x10018a04
dec dword [ebp - 0x10]
jns 0x100189f3
mov dword [ebp - 0x1a0], 0x310c13fe
inc dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], ecx
jle 0x100189e4
dec dword [ebp - 4]
jns 0x100189a6
mov dword [ebp - 4], ebx
jmp 0x10018a30
mov dword [ebp - 0x20], 0xb6fd43dd
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jle 0x10018a26
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1c
jge 0x10018997
lea eax, [ebp - 0x39]
mov byte [ebp - 0x39], bl
push ebx
push eax
call fcn.1001b122
pop ecx
pop ecx
mov dword [ebp - 0x24], 0x1a
jmp 0x10018ea0
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x1c], 0xa43b2b74
mov dword [ebp - 0x18], ebx
jmp 0x10018a81
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x12c], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10018a70
mov dword [ebp - 0x10], 0xb
cmp dword [ebp - 0x10], 0x15
jg 0x10018b31
xor edi, edi
inc edi
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10018ab4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x90], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10018aa3
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x10], ebx
je 0x10018b1e
mov dword [ebp - 0x2c], 0x69be541
cmp dword [ebp - 0x88], ebx
je 0x10018b0c
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jle 0x10018b0c
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x88], ebx
jne 0x10018af9
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x8c]
mov edx, edi
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x88], edi
jmp 0x10018b0e
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x12c], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x15
jle 0x10018a9b
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x10], 0x526d2e85
mov dword [ebp - 8], 0xaf1124f0
mov dword [ebp - 8], ebx
jmp 0x10018b6a
mov dword [ebp - 0x20], 0xfffffff8
mov dword [ebp - 0x14], 0x67215912
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x10018b67
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffff2
jl 0x10018b44
mov eax, dword [ebp - 8]
xor edx, edx
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp ecx, eax
setl dl
imul eax, edx, 0xbb6b
test eax, eax
je 0x10018b94
cmp dword [ebp - 8], ebx
je 0x10018b94
xor ecx, ecx
inc ecx
jmp 0x10018b96
mov ecx, ebx
mov eax, dword [ebp - 8]
imul eax, ecx
xor ecx, ecx
inc ecx
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], 9
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 4], 0x2c9cc141
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], 0x5f7f7777
mov dword [ebp - 0x20], ecx
mov dword [ebp - 8], ebx
jmp 0x10018be1
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x50], 0xdc7555b7
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x10018bd3
mov dword [ebp - 8], ebx
jmp 0x10018bfd
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x178], 0x88b9abc1
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x10018bec
mov eax, ecx
cmp dword [ebp - 0x48], ebx
jne 0x10018c0c
mov eax, ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cmp ecx, eax
mov dword [ebp - 4], ebx
sbb eax, eax
inc eax
imul eax, eax, 0xbf38
test eax, eax
je 0x10018cb0
jmp 0x10018c42
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x10018c3f
push ebx
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffe4
jne 0x10018c2a
jmp 0x10018cb6
mov dword [ebp - 0x18], ebx
jmp 0x10018c60
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc4], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10018c4f
mov dword [ebp - 0xbc], ebx
jmp 0x10018c85
mov dword [ebp - 0x20], 0xb8bffbef
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x50]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0xbc]
cmp dword [ebp - 0xbc], 2
jle 0x10018c6e
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x10018cad
push ebx
push 0x1f21
push 0x82d
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_SetPixel]
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jle 0x10018c4a
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp eax, 0xdcefbde2
setne cl
xor edx, edx
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x4c]
lea ecx, [edx + 1]
mov eax, dword [ebp - 0x48]
sub ecx, eax
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x48]
je 0x10018cec
lea eax, [edx + 1]
cmp dword [ebp - 0x1c], ebx
jne 0x10018cee
mov eax, ebx
mov dword [ebp - 0x14], eax
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x14], 0x1422
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x48]
sub edx, eax
mov eax, dword [ebp - 0x4c]
cmp edx, eax
push 3
setl cl
xor edx, edx
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
inc eax
inc edx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 0x244d513c
mov dword [ebp - 8], edx
mov dword [ebp - 0x20], 0x274952f
mov dword [ebp - 0x20], 0x1b17d72b
mov dword [ebp - 0x20], 9
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x14], 0x4361
mov dword [ebp - 0x20], 0x263b0a6d
mov dword [ebp - 4], ebx
pop ecx
jmp 0x10018d6f
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x154], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10018d62
mov dword [ebp - 4], ebx
jmp 0x10018d8a
cmp dword [ebp - 0x24], 0xb
je 0x10018a5d
mov dword [ebp - 0x24], 0x41b3c692
xor eax, eax
mov dword [ebp - 0x28], 0xffffffff
inc eax
mov dword [ebp - 0x28], 0xc8d46758
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x28], 0x920a6ff6
mov dword [ebp - 0x30], eax
mov dword [ebp - 8], ebx
jmp 0x10018ee9
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x204], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x10018ed8
mov dword [ebp - 8], ebx
jmp 0x10018f05
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1cc], 0x9bc00ead
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x10018ef4
mov dword [ebp - 0x24], 0xfffffff4
jmp 0x10018f23
mov dword [ebp - 0x28], 0x48f69f7f
cmp dword [ebp - 0x28], ebx
jne 0x10018f29
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x18
jl 0x10018f14
mov eax, dword [ebp - 0xd0]
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, dword [ebp - 0xb0]
dec dword [ebp - 0x30]
mov edi, edx
mov esi, eax
call fcn.10017d4d
add eax, esi
add eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret