Function at 0x1001aa14
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10083a4e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1a8
push ebx
push esi
push edi
xor eax, eax
mov dword [esp + 0x44], ecx
inc eax
mov dword [esp + 0x6c], edx
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x124]
mov dword [esp + 0x1c], 0x32667a87
xor ebx, ebx
mov dword [esp + 0x1c], 0xfffffff7
mov dword [esp + 0x1c], 0x696a485b
push 7
pop edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x1c], 9
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x1c], 0xfffffffd
mov dword [esp + 0x1c], eax
push 2
call fcn.10018b26
mov dword [esp + 0x20], 0xfffffffe
mov dword [esp + 0xc], ebx
jmp 0x1001aab3
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x190], 1
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x1001aaa0
mov dword [esp + 0xc], ebx
jmp 0x1001aad3
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x124]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x1001aac0
inc dword [esp + 0x20]
lea ecx, [esp + 0x124]
call fcn.100193b8
mov dword [esp + 0xc], 0x1e559696
xor ecx, ecx
mov dword [esp + 0x18], 0x55205300
inc ecx
mov dword [esp + 0x10], ebx
jmp 0x1001ab0f
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x34], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ecx
jl 0x1001ab03
mov dword [esp + 0xc], ebx
cmp dword [esp + 0xc], ebx
jl 0x1001ab35
mov dword [esp + 0x24], 0x8974b66
mov dword [esp + 0x24], 0xffffffff
dec dword [esp + 0xc]
jns 0x1001ab1f
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x34], ebx
je 0x1001ab4f
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
cmp ecx, eax
push 0xfffffffffffffffa
sbb edx, edx
xor ecx, ecx
neg edx
sub edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
cmp edx, eax
setne cl
xor esi, esi
sub ecx, 0xe3a4
inc esi
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x110]
mov dword [esp + 0x1c], 0x7e2799ac
mov dword [esp + 0x20], 0xfd4914d2
mov dword [esp + 0x20], esi
mov dword [esp + 0x20], edi
pop edi
mov dword [esp + 0x1c], 0xfffffff7
mov dword [esp + 0x1c], edi
push 3
call fcn.10018b26
mov dword [esp + 0x1bc], ebx
lea ecx, [esp + 0xf4]
mov dword [esp + 0x1c], esi
push 3
call fcn.10018b26
push 3
mov dword [esp + 0x20], ebx
mov dword [esp + 0x10], ebx
pop edx
jmp 0x1001abfa
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10c]
mov dword [eax + ecx*4], 0x76881957
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x1001abe4
mov dword [esp + 0xc], ebx
jmp 0x1001ac19
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x184], 8
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x1001ac06
mov dword [esp + 0xc], ebx
jmp 0x1001ac3b
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xf4]
mov dword [eax + ecx*4], 0xffff
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x1001ac25
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x18], edi
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
jl 0x1001ad09
mov esi, dword [esp + 0xf4]
mov dword [esp + 0x1c], 0xfffffffe
xor eax, eax
mov dword [esp + 0x1c], 0x4ad744d0
inc eax
mov dword [esp + 0x1c], 0x3e34b64b
mov dword [esp + 0x1c], 0xb8bffbef
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], ebx
jmp 0x1001ac9c
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x1a0], 0xfffffff6
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x1001ac89
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001acf4
push edx
push 0xfd
push 0x1586
push 0x217b
push 0x22fb
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0xa2b
push 0x10fa
push 0x1d9c
push 0x949
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
push 3
pop edx
inc dword [esi + 4]
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xfffffffa
jge 0x1001ac5c
xor esi, esi
inc esi
lea ecx, [esp + 0xf4]
call fcn.100193b8
or dword [esp + 0x1bc], 0xffffffff
lea ecx, [esp + 0x10c]
call fcn.100193b8
mov dword [esp + 0x30], esi
lea ecx, [esp + 0x100]
mov dword [esp + 0x70], 0xffffffff
push 2
call fcn.10018b26
push 2
lea ecx, [esp + 0x7c]
mov dword [esp + 0x1c0], esi
call fcn.10018b26
xor edx, edx
mov dword [esp + 0xc], ebx
inc edx
jmp 0x1001ad6e
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x40], 0x62d5
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x1001ad5e
mov dword [esp + 0xc], ebx
jmp 0x1001ad8d
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x78]
mov dword [eax + ecx*4], 0x7cb3f4f4
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x1001ad7a
mov ecx, dword [esp + 0x78]
mov dword [ecx], ebx
mov eax, dword [ecx]
inc dword [ecx]
mov dword [esp + eax*4 + 0x40], edx
mov eax, dword [ecx]
cmp eax, edx
jl 0x1001ad9a
cmp dword [ecx + 4], eax
jne 0x1001adb3
mov ecx, edx
test eax, eax
jne 0x1001adb5
mov ecx, ebx
mov eax, dword [esp + 0x40]
xor edx, edx
mov esi, dword [esp + 0x78]
add eax, 0xa86b
cmp ecx, eax
setl dl
xor ecx, ecx
sub edx, dword [esi]
cmp edx, 0xfffffffc
setl cl
xor eax, eax
cmp ecx, 0xdfa8
lea ecx, [esp + 0x78]
setl al
mov dword [esi], eax
call fcn.100193b8
mov dword [esp + 0x10], ebx
jmp 0x1001ae05
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x100]
mov dword [eax + ecx*4], 4
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x1001adef
push 2
lea ecx, [esp + 0x88]
call fcn.10018b26
mov byte [esp + 0x1bc], 2
lea ecx, [esp + 0xb8]
xor esi, esi
mov dword [esp + 0x24], 0x2466
inc esi
mov dword [esp + 0x20], 3
mov dword [esp + 0x20], 0xfffffffa
push esi
call fcn.10018b26
push esi
lea ecx, [esp + 0xe0]
mov byte [esp + 0x1c0], 3
call fcn.10018b26
mov dword [esp + 0x28], 0xbd791f9e
mov dword [esp + 0xc], ebx
jmp 0x1001ae83
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x84]
mov dword [eax + ecx*4], 0x12df3d37
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x1001ae6d
xor edx, edx
mov dword [esp + 0xc], ebx
inc edx
jmp 0x1001ae9f
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x38], edx
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x1001ae93
mov dword [esp + 0xc], ebx
jmp 0x1001aebe
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xb8]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x1001aeab
mov dword [esp + 0xc], ebx
jmp 0x1001aedd
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xdc]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x1001aeca
mov esi, dword [esp + 0x84]
xor edx, edx
mov eax, dword [esi + 4]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x24]
cmp eax, ecx
setle dl
add edx, 0xdc38
je 0x1001af0c
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x84]
xor ecx, ecx
cmp dword [eax], 0x43197cb4
sete cl
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x20], 0xa12afd78
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0xb8]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
mov eax, dword [esp + 0xdc]
inc ecx
cmp ecx, 0xcc72b752
mov dword [eax], ecx
sbb eax, eax
neg eax
mov dword [esp + 0x28], eax
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001af71
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
lea ecx, [esp + 0xdc]
call fcn.100193b8
lea ecx, [esp + 0xb8]
call fcn.100193b8
xor eax, eax
lea ecx, [esp + 0x84]
inc eax
mov byte [esp + 0x1bc], al
call fcn.100193b8
mov dword [esp + 0x30], 0xfffffff1
jmp 0x1001b95d
mov dword [esp + 0x18], 0x17f75960
lea ecx, [esp + 0x118]
mov dword [esp + 0xc], 0x2eda8ed4
xor eax, eax
mov dword [esp + 0x28], 0xffffffff
inc eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x10], 0x8461e707
mov dword [esp + 0x3c], 0xa23a3407
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], 0xecce005a
mov dword [esp + 0x10], 0xf3bba684
mov dword [esp + 0x1c], ebx
push eax
call fcn.10018b26
mov byte [esp + 0x1bc], 4
xor edx, edx
mov dword [esp + 0x68], 0xf9aa
inc edx
mov dword [esp + 0x1c], 0x2ad
mov dword [esp + 0x10], ebx
jmp 0x1001b037
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x118]
mov dword [eax + ecx*4], 0x3d2cf3e
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x1001b021
mov ecx, dword [esp + 0x18]
xor edx, edx
add ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
cmp ecx, eax
mov eax, dword [esp + 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [esp + 0xc], ecx
xor ecx, ecx
mov eax, dword [esp + 0xc]
inc ecx
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], ebx
je 0x1001b0fe
cmp dword [esp + 0x20], ebx
jne 0x1001b0fe
push 3
lea ecx, [esp + 0xd4]
call fcn.10018b26
mov dword [esp + 0x10], ebx
jmp 0x1001b0bc
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xd0]
mov dword [eax + ecx*4], 0xeda7
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x1001b0a6
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x10], ebx
jg 0x1001b0ed
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x24], 8
mov eax, dword [esp + 0x24]
mov dword [ecx + 4], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ebx
jle 0x1001b0d4
lea ecx, [esp + 0xd0]
call fcn.100193b8
jmp 0x1001b182
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x28], 0xd423cb8e
mov dword [esp + 0x20], 9
mov dword [esp + 0x10], ebx
jmp 0x1001b12b
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x17c], 0x3c9e4a04
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x1001b118
mov eax, dword [esp + 0x68]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0xc]
dec dword [esp + 0x20]
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
sub ecx, eax
mov eax, dword [esp + 0x24]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, 0x9e47
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x5d580090
setle al
sub eax, dword [esp + 0x24]
mov dword [esp + 0x10], eax
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001b1a8
push ebx
push 0x265b
push 0x1cfa
push 0xaa6
push 0x1769
call dword [sym.imp.GDI32.dll_CreateBitmap]
xor eax, eax
lea ecx, [esp + 0x118]
inc eax
mov byte [esp + 0x1bc], al
call fcn.100193b8
push dword [esp + 0x44]
movdqa xmm0, xmmword [0x10009250]
lea eax, [esp + 0x168]
push eax
mov dword [esp + 0x7c], 0x6a76
lea eax, [esp + 0x15c]
push eax
mov dword [esp + 0x18], 5
lea ecx, [esp + 0x5c]
mov dword [esp + 0x2c], 0xfffffffa
mov dword [esp + 0x24], 0xba70a1ee
push ebx
movdqu xmmword [esp + 0x164], xmm0
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
call fcn.1001a1b3
mov dword [esp + 0xc], ebx
jmp 0x1001b232
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x140], 0xcd16652d
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x1001b21f
mov dword [esp + 0xc], ebx
jmp 0x1001b252
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x164], 0x663439fc
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x1001b23f
mov dword [esp + 0xc], 0xfffffff1
cmp dword [esp + 0xc], 3
je 0x1001b3a8
mov esi, dword [esp + 0x50]
mov dword [esp + 0x10], 0xac84
mov dword [esp + 0x24], 0x34c266d8
mov dword [esp + 0x10], ebx
jmp 0x1001b296
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x48], 0xafddf34f
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x1001b286
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], ebx
jne 0x1001b2ec
mov dword [esp + 0x24], 0x30498d20
cmp dword [esp + 0xc], ebx
je 0x1001b2c6
cmp dword [esp + 0x10], ebx
je 0x1001b2c6
xor ecx, ecx
inc ecx
mov eax, ecx
jmp 0x1001b2cb
xor ecx, ecx
mov eax, ebx
inc ecx
inc eax
jne 0x1001b2d6
mov eax, ebx
cmp dword [esp + 0x20], ebx
je 0x1001b2d8
mov eax, ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp dword [esp + 0x20], ebx
jne 0x1001b2fa
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x4c]
mov eax, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x144], 4
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x4c]
mov eax, dword [esp + 0x24]
neg eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [esp + 0x164], eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0xc]
cmp ecx, eax
setge dl
mov dword [esi + 4], edx
mov dword [esp + 0x18], 0xffffffeb
jmp 0x1001b392
mov dword [esp + 0x1c], 0x32dc718
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x10], 3
jge 0x1001b37e
xor ecx, ecx
inc ecx
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x170], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x1001b368
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x178], eax
cmp dword [esi + 4], ebx
jne 0x1001b399
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x29
jle 0x1001b352
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jne 0x1001b270
lea ecx, [esp + 0x50]
call fcn.100193b8
push 4
lea ecx, [esp + 0xec]
call fcn.10018b26
xor eax, eax
mov byte [esp + 0x1bc], 5
inc eax
mov dword [esp + 0xc], 0xb02
mov dword [esp + 0x18], 0xe6aa1654
lea ecx, [esp + 0x5c]
push eax
call fcn.10018b26
xor edx, edx
mov dword [esp + 0x10], ebx
inc edx
jmp 0x1001b400
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x5c]
mov dword [eax + ecx*4], 0x19f23e52
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x1001b3ed
cmp dword [esp + 0xc], ebx
je 0x1001b414
mov eax, dword [esp + 0xc]
mov eax, edx
jmp 0x1001b416
mov eax, ebx
or edx, 0xffffffff
xor ecx, ecx
sub edx, eax
mov eax, dword [esp + 0x18]
cmp edx, eax
mov eax, dword [esp + 0xc]
setg cl
xor edx, edx
imul ecx, ecx, 6
sub ecx, 0x9ac5
cmp ecx, eax
mov eax, dword [esp + 0x5c]
setne dl
xor ecx, ecx
cmp edx, dword [eax]
setl cl
mov dword [eax], ecx
test ecx, ecx
je 0x1001b452
xor eax, eax
lea ecx, [eax + 1]
jmp 0x1001b454
mov ecx, ebx
mov eax, dword [esp + 0xc]
imul eax, ecx
add eax, dword [esp + 0xc]
je 0x1001b492
mov dword [esp + 0x24], 4
mov eax, dword [esp + 0x24]
imul eax, dword [esp + 0x24]
mov dword [esp + 0x18], eax
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001b525
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
jmp 0x1001b525
mov dword [esp + 0x24], 0x215169ff
mov dword [esp + 0x20], 0x95674643
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x18], ebx
jl 0x1001b525
mov dword [esp + 0x28], 0xc309ab83
mov dword [esp + 0xc], ebx
jmp 0x1001b4c2
dec dword [esp + 0x24]
inc dword [esp + 0xc]
cmp dword [esp + 0xc], ebx
jle 0x1001b4ba
mov eax, dword [esp + 0x5c]
cmp dword [eax], ebx
je 0x1001b4d4
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x5c]
push 0
mov eax, dword [eax]
sub eax, ecx
pop eax
sets al
xor ecx, ecx
test eax, eax
setle cl
cmp ecx, dword [esp + 0x18]
jg 0x1001b4f9
dec dword [esp + 0x20]
jmp 0x1001b51f
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001b51f
push 0x1e2a
push 0x1d3b
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
dec dword [esp + 0x18]
jns 0x1001b4ac
lea ecx, [esp + 0x5c]
call fcn.100193b8
mov dword [esp + 0x18], 0xb26bdde0
mov dword [esp + 0x1c], 5
mov dword [esp + 0x18], 0xffffffee
jmp 0x1001b5bd
mov dword [esp + 0xc], 0x2cfb6318
mov dword [esp + 0x20], ebx
mov dword [esp + 0xc], 0xffffffff
jmp 0x1001b57e
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001b572
call edi
push eax
call dword [sym.imp.USER32.dll_IsIconic]
mov dword [esp + 0x20], 0x5de05dae
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 0xa
jge 0x1001b55e
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x1c], eax
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0xb
je 0x1001b548
push 0x4a87
lea eax, [esp + 0xec]
push eax
lea eax, [esp + 0x138]
push ebx
push eax
call fcn.100267fd
add esp, 0x10
lea ecx, [esp + 0x134]
push 3
call fcn.10018b26
push 4
lea ecx, [esp + 0x94]
mov byte [esp + 0x1c0], 6
call fcn.10018b26
xor eax, eax
inc eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0xc], ebx
jmp 0x1001b629
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x134]
mov dword [eax + ecx*4], 0x77862fd4
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x1001b613
mov dword [esp + 0xc], ebx
jmp 0x1001b64c
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x90]
mov dword [eax + ecx*4], 0xf57a7c2
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x1001b636
mov eax, dword [esp + 0x90]
mov dword [eax], ebx
mov dword [esp + 0x20], 0xfffffff8
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001b67b
push ebx
push 0x1541
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
mov dword [esp + 0x20], 2
cmp dword [esp + 0x20], ebx
jl 0x1001b693
mov dword [esp + 0x1c], ebx
dec dword [esp + 0x20]
jns 0x1001b689
mov eax, dword [esp + 0x90]
inc dword [eax]
cmp dword [eax], 2
jle 0x1001b65c
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001b6b3
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea ecx, [esp + 0x90]
call fcn.100193b8
lea ecx, [esp + 0x134]
mov byte [esp + 0x1bc], 5
call fcn.100193b8
lea eax, [esp + 0x100]
push eax
lea eax, [esp + 0x34]
push eax
push ebx
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0xfc]
push eax
call fcn.1001f4c9
add esp, 0x18
lea ecx, [esp + 0xac]
push 2
call fcn.10018b26
mov dword [esp + 0x20], 0x2f88d967
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x24], 0xfffffff6
mov dword [esp + 0x1c], 0x4adc
mov dword [esp + 0x10], ebx
jmp 0x1001b753
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xac]
mov dword [eax + ecx*4], 0x417be18
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x1001b73d
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], eax
cmp dword [esp + 0x24], ebx
jne 0x1001b76c
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x28], ebx
je 0x1001b77f
cmp dword [esp + 0x20], ebx
je 0x1001b77f
xor eax, eax
lea esi, [eax + 1]
jmp 0x1001b781
mov esi, ebx
mov eax, dword [esp + 0x20]
xor ecx, ecx
mov edx, dword [esp + 0xac]
cmp esi, eax
setge cl
xor eax, eax
cmp ecx, dword [edx + 4]
setle al
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
xor eax, eax
cmp dword [edx + 4], 0xfffffff7
setge al
xor ecx, ecx
cmp eax, 0x2236432a
setl cl
xor eax, eax
cmp ecx, 9
lea ecx, [esp + 0xac]
setge al
mov dword [esp + 0x1c], eax
call fcn.100193b8
push 3
lea ecx, [esp + 0x14c]
call fcn.10018b26
mov dword [esp + 0x10], 0xaeef20fe
mov dword [esp + 0x10], ebx
jmp 0x1001b804
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x148]
mov dword [eax + ecx*4], 0x7571177e
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x1001b7ee
mov dword [esp + 0x10], ebx
jmp 0x1001b831
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001b82d
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jle 0x1001b811
lea ecx, [esp + 0x148]
call fcn.100193b8
mov byte [esp + 0x2f], bl
mov dword [esp + 0xc], 0x24ec2e0c
mov dword [esp + 0x1c], 0x6aac8953
mov dword [esp + 0xc], ebx
cmp dword [esp + 0xc], 3
je 0x1001b90c
xor edx, edx
inc edx
mov dword [esp + 0x18], 0xb4c23afc
mov dword [esp + 0x10], 0xfffffff9
mov dword [esp + 0x1c], edx
mov dword [esp + 0x3c], 8
cmp dword [esp + 0xc], ebx
jne 0x1001b8bc
cmp dword [esp + 0x18], ebx
jne 0x1001b8a6
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
mov eax, ebx
cmp dword [esp + 0x18], edx
jg 0x1001b8a8
mov eax, edx
mov dword [esp + 0x10], eax
mov ecx, ebx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x3c], ebx
je 0x1001b8be
mov ecx, edx
mov eax, dword [esp + 0x18]
neg eax
cmp eax, ecx
jl 0x1001b8f5
mov dword [esp + 0x18], ebx
jmp 0x1001b8ed
mov dword [esp + 0x10], 0xffffffed
jmp 0x1001b8e2
cmp dword [esp + 0x18], ebx
jne 0x1001b8e9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
je 0x1001b8d8
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edx
jg 0x1001b8ce
jmp 0x1001b8fd
mov dword [esp + 0x1c], 0x14055248
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jne 0x1001b86a
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001b92b
push 0x12cb
push ebx
push ebx
push ebx
push 0x14cc
push ebx
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
lea eax, [esp + 0x2f]
push eax
push 0x2a28
push 0x164e
push ebx
call fcn.1001c7e1
xor eax, eax
lea ecx, [esp + 0xf8]
add esp, 0x10
inc eax
mov byte [esp + 0x1bc], al
call fcn.100193b8
inc dword [esp + 0x30]
cmp dword [esp + 0x30], 0xfffffff7
jle 0x1001afac
or dword [esp + 0x1bc], 0xffffffff
lea ecx, [esp + 0x100]
call fcn.100193b8
mov dword [esp + 0x18], 0x62d5e48d
mov eax, 0x2e3ca369
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0x28], 0x380ee91b
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x1c], 0xc38d679b
mov dword [esp + 0x18], 0x10
jmp 0x1001ba7a
mov dword [esp + 0x24], 0xeb16e2c9
mov dword [esp + 0x24], 0x1940c9ba
mov dword [esp + 0x10], ebx
jmp 0x1001b9f3
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0xc4], 0xb2aee5a9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x1001b9e0
mov eax, dword [esp + 0x18]
xor edx, edx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xa0], ecx
mov eax, dword [esp + 0x28]
cmp ecx, eax
mov eax, dword [esp + 0xc8]
setg dl
xor ecx, ecx
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, 8
setg al
xor edx, edx
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
cmp eax, ecx
setl dl
sub edx, dword [esp + 0x28]
neg edx
sbb edx, edx
inc edx
mov dword [esp + 0x24], edx
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0xc4]
xor eax, eax
inc eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x15
jl 0x1001b9ca
mov eax, dword [esp + 0x6c]
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, dword [esp + 0x44]
mov esi, edx
mov edi, eax
call fcn.1001a9a2
mov ecx, dword [esp + 0x1b4]
add eax, esi
add eax, edi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret