Function at 0x100551aa
Capabilities:
Get graphical window text
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007ddab
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc78
push esi
movzx eax, byte [ebp + 0x20]
test eax, eax
je 0x10059490
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5c], eax
push 1
push 0
push 0x67
push 0x7923
push 0
call fcn.1005bee7
add esp, 0x14
and dword [ebp - 0x34], 0
mov dword [ebp - 0x84], 0xbe8e56f9
mov dword [ebp - 0x6c4], 0xfb02
mov dword [ebp - 0x48], 0
jmp 0x10055221
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10055237
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2bc], 0x6bdde0bc
jmp 0x1005521a
mov dword [ebp - 0x48], 0
jmp 0x10055247
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x1005525d
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xac0], 0x35a12a2e
jmp 0x10055240
push 0x7965
push 0x10ac
push 0
push 0xb0e
push 0x49ec
push 1
push 0x3e23
push 0x54e9
push 0xfe4
lea eax, [ebp - 0x84]
push eax
call fcn.1004f10e
add esp, 0x28
mov dword [ebp - 0x84], 0
jmp 0x100552ac
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xf
jle 0x10055406
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x6cc], 8
cmp dword [ebp - 0x78], 0
je 0x100553ee
mov eax, dword [ebp - 0x78]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x2bc]
test eax, eax
jne 0x10055302
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2bc], 0
jne 0x10055302
and dword [ebp - 0x670], 0
jmp 0x1005530c
mov dword [ebp - 0x670], 1
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x984], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xa80], eax
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x9c8], eax
cmp dword [ebp - 0x78], 1
jne 0x1005533c
mov dword [ebp - 0x45c], 1
jmp 0x10055343
and dword [ebp - 0x45c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2bc]
cmp eax, dword [ebp - 0x45c]
jg 0x10055364
mov dword [ebp - 0x26c], 1
jmp 0x1005536b
and dword [ebp - 0x26c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x26c]
mov dword [ebp + eax - 0xac0], ecx
cmp dword [ebp - 0x26c], 0xb24
jle 0x10055396
mov dword [ebp - 0x2e0], 1
jmp 0x1005539d
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0xb756fd8c
ja 0x100553bb
cmp dword [ebp - 0x84], 0
jne 0x100553bb
and dword [ebp - 0x544], 0
jmp 0x100553c5
mov dword [ebp - 0x544], 1
cmp dword [ebp - 0x544], 0xffffffff
je 0x100553d2
cmp dword [ebp - 0x78], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xac0], 0
je 0x100553ee
mov dword [ebp - 0x2d4], 1
jmp 0x100553f5
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x6cc], eax
jmp 0x1005529f
mov dword [ebp - 0x1c], 3
mov dword [ebp - 0x520], 1
mov dword [ebp - 0x1f0], 0
jmp 0x10055430
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x1005544c
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x83c], 1
jmp 0x10055423
cmp dword [ebp - 0x1c], 8
jle 0x1005545e
mov dword [ebp - 0x2ec], 1
jmp 0x10055465
and dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x2ec], 0
je 0x10055481
push 6
pop eax
test eax, eax
je 0x10055481
mov dword [ebp - 0x2e4], 1
jmp 0x10055488
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x1c], eax
jl 0x100554a2
mov dword [ebp - 0x4f8], 1
jmp 0x100554a9
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4f8]
cmp eax, 1
jl 0x100554c9
mov eax, 0xc2132456
test eax, eax
jne 0x100554c9
and dword [ebp - 0x2e8], 0
jmp 0x100554d3
mov dword [ebp - 0x2e8], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2e8], eax
jg 0x1005552e
cmp dword [ebp - 0x1c], 0
je 0x1005552e
mov byte [ebp - 0x60], 0
lea eax, [ebp - 0x60]
push eax
push 0x7cc5
push 0x1b19
push 0
push 0x5dcb
push 0x685d
call fcn.1005b1eb
add esp, 0x18
push 1
push 1
push 0x329b
push 0x6452
push 0x37a9
lea eax, [ebp - 0x1c]
push eax
call fcn.100524fe
add esp, 0x18
jmp 0x100557e3
mov dword [ebp - 0xc8], 0xfffffffa
mov dword [ebp - 0xa40], 0xcf59f89f
mov dword [ebp - 0x274], 0x43657218
mov dword [ebp - 0x82c], 0
mov dword [ebp - 0x9d0], 0xd28e487
mov dword [ebp - 0x824], 0xfffffff6
mov dword [ebp - 0x6d4], 0x5752783d
mov dword [ebp - 0x81c], 1
push 3
lea ecx, [ebp - 0x928]
call fcn.1001d86d
and dword [ebp - 4], 0
mov dword [ebp - 0x29c], 4
lea eax, [ebp - 0x928]
push eax
push 0
push 0x71b
lea eax, [ebp - 0xaa8]
push eax
call fcn.1005ada7
add esp, 0x10
push 1
push 1
lea eax, [ebp - 0x1c]
push eax
push 0x6ff1
call fcn.1004fcbb
add esp, 0x10
cmp dword [ebp - 0x1c], 0
jne 0x1005571f
cmp dword [ebp - 0xc8], 0
jne 0x100556de
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x83c]
cmp dword [ebp - 0x274], eax
jle 0x10055603
mov dword [ebp - 0x418], 1
jmp 0x1005560a
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x6d4]
cmp dword [ebp - 0x418], eax
jg 0x10055624
mov dword [ebp - 0x2f0], 1
jmp 0x1005562b
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
cmp eax, dword [ebp - 0x2f0]
jg 0x10055652
mov dword [ebp - 0x814], 1
jmp 0x10055659
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x9d8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x83c]
cmp dword [ebp - 0x274], eax
jg 0x10055686
mov dword [ebp - 0x4b0], 1
jmp 0x1005568d
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x81c]
cmp dword [ebp - 0x4b0], eax
je 0x100556a7
mov dword [ebp - 0x2f8], 1
jmp 0x100556ae
and dword [ebp - 0x2f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x83c]
cmp dword [ebp - 0x2f8], eax
jne 0x100556cc
cmp dword [ebp - 0x520], 0
jne 0x100556de
mov eax, 0xc8bb
test eax, eax
jne 0x100556de
and dword [ebp - 0x420], 0
jmp 0x100556e8
mov dword [ebp - 0x420], 1
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x420]
jne 0x10055706
mov dword [ebp - 0x300], 1
jmp 0x1005570d
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
sub eax, dword [ebp - 0x824]
add eax, dword [ebp - 0x520]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x83c]
mov dword [ebp - 0xa48], eax
push 1
lea ecx, [ebp - 0x928]
call fcn.1001d90b
cmp dword [eax], 0
jne 0x10055755
cmp dword [ebp - 0xc8], 0
jne 0x10055755
and dword [ebp - 0x308], 0
jmp 0x1005575f
mov dword [ebp - 0x308], 1
mov eax, dword [ebp - 0x82c]
cmp dword [ebp - 0x308], eax
jge 0x10055779
mov dword [ebp - 0x428], 1
jmp 0x10055780
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x428], eax
je 0x1005579a
mov dword [ebp - 0x310], 1
jmp 0x100557a1
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x310], eax
jge 0x100557bb
mov dword [ebp - 0x4b8], 1
jmp 0x100557c2
and dword [ebp - 0x4b8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp + eax - 0x83c], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x928]
call fcn.1001d8ef
push 0x54e9
push 1
push 0x1e9d
push 0
call fcn.100515de
add esp, 0x10
push 1
push 1
call fcn.1004fe2e
pop ecx
pop ecx
push 0x4725
push 0x6983
push 1
push 1
push 0x6fb4
call fcn.1004ffb6
add esp, 0x14
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x330], 0x4ea4
mov dword [ebp - 0x6e4], 0x1000d70c
cmp dword [ebp - 0x330], 0x5166
jle 0x10055956
and dword [ebp - 0x190], 0
jmp 0x10055865
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x748d
jge 0x10055956
and dword [ebp - 0xd0], 0
jmp 0x1005588b
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x80e
jge 0x10055951
and dword [ebp - 0x248], 0
jmp 0x100558b1
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x322
jge 0x1005594c
and dword [ebp - 0xd8], 0
jmp 0x100558d7
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x3ecf
jge 0x10055947
mov eax, dword [ebp - 0x190]
imul eax, dword [ebp - 0xd0]
and eax, dword [ebp - 0x248]
or eax, dword [ebp - 0xd8]
cdq
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 0x6dc], edx
push dword [ebp - 0x6dc]
push dword [ebp - 0x6e0]
lea ecx, [ebp - 0xb88]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x5a8], eax
mov ecx, dword [ebp - 0x5a8]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xb88]
call fcn.1001d534
jmp 0x100558ca
jmp 0x100558a4
jmp 0x1005587e
jmp 0x10055858
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x98], 0x76acb8f2
mov dword [ebp - 0x2a4], 0xbae8
mov dword [ebp - 0x8c4], 0x63d62a04
mov dword [ebp - 0x8c0], 0x63d62a04
mov dword [ebp - 0x8bc], 0x63d62a04
mov dword [ebp - 0x8b8], 0x63d62a04
lea ecx, [ebp - 0x291]
call fcn.1001d91a
push eax
lea eax, [ebp - 0x8b4]
push eax
lea eax, [ebp - 0x8c4]
push eax
lea ecx, [ebp - 0xb08]
call fcn.1001d91d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x550]
call fcn.1001d8c9
mov dword [ebp - 4], 1
mov dword [ebp - 0x5b8], 0xd0d8
mov dword [ebp - 0x5c8], 0xffffffff
mov dword [ebp - 0x7b0], 1
mov dword [ebp - 0x28], 0
jmp 0x10055a03
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1c
jl 0x10055d89
mov dword [ebp - 0x27c], 0xffffffff
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x438], 0x3610
mov dword [ebp - 0x5c0], 0x1000d748
cmp dword [ebp - 0x438], 0x37d1
jle 0x10055b1a
and dword [ebp - 0x1f8], 0
jmp 0x10055a5b
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x593e
jge 0x10055b1a
and dword [ebp - 0x198], 0
jmp 0x10055a81
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x3191
jge 0x10055b15
and dword [ebp - 0xe0], 0
jmp 0x10055aa7
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x79f1
jge 0x10055b10
mov eax, dword [ebp - 0x198]
add eax, dword [ebp - 0xe0]
xor eax, dword [ebp - 0x1f8]
cdq
mov dword [ebp - 0x6ec], eax
mov dword [ebp - 0x6e8], edx
push dword [ebp - 0x6e8]
push dword [ebp - 0x6ec]
lea ecx, [ebp - 0xc0c]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x6bc], eax
mov ecx, dword [ebp - 0x6bc]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xc0c]
call fcn.1001d534
jmp 0x10055a9a
jmp 0x10055a74
jmp 0x10055a4e
cmp dword [ebp - 0x28], 0
je 0x10055bcf
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x9e0], eax
mov dword [ebp - 0x98], 6
cmp dword [ebp - 0x98], 0
jne 0x10055b55
mov eax, 0x1720d700
test eax, eax
jne 0x10055b55
and dword [ebp - 0x318], 0
jmp 0x10055b5f
mov dword [ebp - 0x318], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x318], eax
jl 0x10055b76
mov dword [ebp - 0x5d4], 1
jmp 0x10055b7d
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp - 0x27c]
add eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x2a4]
jle 0x10055bb2
mov dword [ebp - 0x430], 1
jmp 0x10055bb9
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
neg eax
je 0x10055bcf
mov dword [ebp - 0x320], 1
jmp 0x10055bd6
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x320], 0x2a3
jle 0x10055bee
mov dword [ebp - 0x500], 1
jmp 0x10055bf5
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0xfffffffe
jl 0x10055c0a
mov dword [ebp - 0x5a4], 1
jmp 0x10055c11
and dword [ebp - 0x5a4], 0
push 3
lea ecx, [ebp - 0x550]
call fcn.1001d90b
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0xa58], eax
mov esi, dword [ebp - 0x2b4]
push 3
lea ecx, [ebp - 0x550]
call fcn.1001d90b
cmp esi, dword [eax]
jne 0x10055c4d
mov dword [ebp - 0x6d0], 1
jmp 0x10055c54
and dword [ebp - 0x6d0], 0
push 3
lea ecx, [ebp - 0x550]
call fcn.1001d90b
cmp dword [ebp - 0x28], 0xa191
jle 0x10055c76
mov dword [ebp - 0x328], 1
jmp 0x10055c7d
and dword [ebp - 0x328], 0
push 1
lea ecx, [ebp - 0x550]
call fcn.1001d90b
mov ecx, dword [ebp - 0x328]
cmp ecx, dword [eax]
jg 0x10055cbd
mov dword [ebp - 0x5b0], 1
lea eax, [ebp - 0x5b0]
push eax
push 1
lea eax, [ebp - 0x98]
push eax
push 1
call fcn.100501b9
add esp, 0x10
jmp 0x10055d6c
mov dword [ebp - 0x6d8], 0xfffffffc
mov dword [ebp - 0x840], 0x33db
push 1
lea ecx, [ebp - 0x904]
call fcn.1001d86d
mov byte [ebp - 4], 2
push 1
push 0x3265
lea eax, [ebp - 0x904]
push eax
push 1
lea eax, [ebp - 0x9f0]
push eax
push 0x102c
call fcn.1005046d
add esp, 0x18
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x904]
push eax
lea eax, [ebp - 0x550]
push eax
push 0x7923
push 0x1232
lea eax, [ebp - 0x5b8]
push eax
push 1
push 0xd08
lea eax, [ebp - 0x28]
push eax
push 0x506
lea eax, [ebp - 0x2b4]
push eax
push 1
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x6d8]
push eax
push 0
call fcn.1005d7ed
add esp, 0x3c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x904]
call fcn.1001d8ef
cmp dword [ebp - 0x438], 0x34a6
jge 0x10055d84
push dword [ebp - 0x5c0]
call fcn.10067b63
pop ecx
jmp 0x100559fc
push 1
push 0x4bd3
lea eax, [ebp - 0x7b0]
push eax
push 0x190d
lea eax, [ebp - 0x5c8]
push eax
lea eax, [ebp - 0x550]
push eax
push 0
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.1005ccaa
add esp, 0x28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x550]
call fcn.1001d8ef
cmp dword [ebp - 0x330], 0x4ce8
jge 0x10055ded
push dword [ebp - 0x6e4]
call fcn.10067b63
pop ecx
mov eax, dword [ebp - 0x25c]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10056060
mov dword [ebp - 0x4c0], 0x975
mov dword [ebp - 0x818], 0x1000d768
cmp dword [ebp - 0x4c0], 0xcdc
jle 0x10055ec5
and dword [ebp - 0xe8], 0
jmp 0x10055e3b
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x606d
jge 0x10055ec5
and dword [ebp - 0x1a0], 0
jmp 0x10055e5d
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x5da0
jge 0x10055ec0
mov eax, dword [ebp - 0xe8]
xor eax, dword [ebp - 0x1a0]
cdq
mov dword [ebp - 0x6f8], eax
mov dword [ebp - 0x6f4], edx
push dword [ebp - 0x6f4]
push dword [ebp - 0x6f8]
lea ecx, [ebp - 0xb58]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x5d0], eax
mov ecx, dword [ebp - 0x5d0]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xb58]
call fcn.1001d534
jmp 0x10055e50
jmp 0x10055e2e
cmp dword [ebp - 0x4c0], 0x6c7
jge 0x10055edd
push dword [ebp - 0x818]
call fcn.10067b63
pop ecx
mov dword [ebp - 0x8ec], 0xfffffff7
mov dword [ebp - 0x8e8], 0xfffffff7
mov dword [ebp - 0x8e4], 0xfffffff7
mov dword [ebp - 0x8e0], 0xfffffff7
lea ecx, [ebp - 0x2c5]
call fcn.1001d91a
push eax
lea eax, [ebp - 0x8dc]
push eax
lea eax, [ebp - 0x8ec]
push eax
lea ecx, [ebp - 0xb30]
call fcn.1001d91d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xadc]
call fcn.1001d8c9
mov dword [ebp - 4], 3
mov dword [ebp - 0xa64], 1
mov dword [ebp - 0x9f8], 0xdc660f7e
mov dword [ebp - 0x5d8], 1
mov dword [ebp - 0xa6c], 0
mov dword [ebp - 0xf0], 0
jmp 0x10055f82
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x10055f9e
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x558], 0xfffffffa
jmp 0x10055f75
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x558], 3
jmp 0x10055fcc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x558]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x558], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x558], 0
jl 0x10056046
mov dword [ebp - 0xa00], 0x31d83293
mov dword [ebp - 0xa88], 0xc1574781
mov dword [ebp - 0xa08], 0xd1ad67a4
mov dword [ebp - 0xa68], 0x90f02349
push 0x21cc
push 0x3b86
push 0x40ca
lea eax, [ebp - 0x5d8]
push eax
push 1
push 1
push 0x1a86
push 0x74b9
push 0x2f63
push 0x155c
push 1
push 0x12c3
call fcn.10050568
add esp, 0x30
jmp 0x10055fb1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xadc]
call fcn.1001d8ef
mov eax, dword [ebp - 0x5c]
and dword [eax], 0
jmp 0x1005a3f3
mov dword [ebp - 0x964], 0xffffffff
push 1
push 0
push 0x5c61
push 0x7744
push 1
call fcn.1005bee7
add esp, 0x14
push 0x4075
push 1
push 0x2257
push 1
push 0x1b86
push 0x4cb2
push 1
push 0x7303
call fcn.100527cd
add esp, 0x20
push 0x5801
lea eax, [ebp - 0x260]
push eax
push 1
push 0x2c9c
push 0x1a25
push 0
push 0x1566
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x25c]
push eax
call fcn.1005d36f
add esp, 0x24
mov eax, dword [ebp - 0x8c]
cmp dword [eax], 0x4550
je 0x10056639
mov dword [ebp - 0xa0], 9
mov dword [ebp - 0x338], 0x5ffd
mov dword [ebp - 0x5e0], 0x1000d7a8
cmp dword [ebp - 0x338], 0x6379
jle 0x100561f6
and dword [ebp - 0x228], 0
jmp 0x10056134
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x95e
jge 0x100561f6
and dword [ebp - 0xf8], 0
jmp 0x1005615a
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x388a
jge 0x100561f1
and dword [ebp - 0x1a8], 0
jmp 0x10056180
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x263b
jge 0x100561ec
mov eax, dword [ebp - 0x228]
imul eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x1a8]
shl eax, cl
cdq
mov dword [ebp - 0x704], eax
mov dword [ebp - 0x700], edx
push dword [ebp - 0x700]
push dword [ebp - 0x704]
lea ecx, [ebp - 0xc6c]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x6f0], eax
mov ecx, dword [ebp - 0x6f0]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xc6c]
call fcn.1001d534
jmp 0x10056173
jmp 0x1005614d
jmp 0x10056127
push 2
lea ecx, [ebp - 0x84c]
call fcn.1001d86d
mov dword [ebp - 4], 4
cmp dword [ebp - 0x338], 0x5f01
jge 0x10056222
push dword [ebp - 0x5e0]
call fcn.10067b63
pop ecx
mov dword [ebp - 0x2ac], 0xbdbdf7cd
mov dword [ebp - 0x348], 4
mov dword [ebp - 0x5f0], 0
push 0x66dc
push 0x145
push 1
push 0xce1
lea eax, [ebp - 0x84c]
push eax
push 0x314c
lea eax, [ebp - 0x96c]
push eax
push 0x77fc
push 1
push 0x559
call fcn.10052a98
add esp, 0x28
mov dword [ebp - 0xa0], 0
jmp 0x10056291
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xffffffe5
jg 0x1005661f
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x6fc], 0x534de6f8
mov dword [ebp - 0x2c4], 0x7528ace4
mov dword [ebp - 0x8d8], 0xef51ae9a
mov dword [ebp - 0x8d4], 0xef51ae9a
mov dword [ebp - 0x8d0], 0xef51ae9a
mov dword [ebp - 0x8cc], 0xef51ae9a
lea ecx, [ebp - 0x255]
call fcn.1001d91a
push eax
lea eax, [ebp - 0x8c8]
push eax
lea eax, [ebp - 0x8d8]
push eax
lea ecx, [ebp - 0xb40]
call fcn.1001d91d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x91c]
call fcn.1001d8c9
mov byte [ebp - 4], 5
mov dword [ebp - 0x284], 0xfffffffd
mov dword [ebp - 0x100], 0
jmp 0x1005633d
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x10056359
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0xb38], 0
jmp 0x10056330
mov dword [ebp - 0x7c], 1
jmp 0x10056369
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x100565f1
mov dword [ebp - 0x44], 0
jmp 0x10056383
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x10056399
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x95c], 0x34bdac84
jmp 0x1005637c
mov dword [ebp - 0x44], 0
jmp 0x100563a9
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x100563bf
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x710], 9
jmp 0x100563a2
push 0
push 0x47c7
push 0x24dd
push 0x7a56
push 0
call fcn.10050732
add esp, 0x14
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x7bc], 0
jne 0x10056408
mov dword [ebp - 0x28c], 1
jmp 0x1005640f
and dword [ebp - 0x28c], 0
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x84c]
call fcn.1001d90b
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x974], eax
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x84c]
call fcn.1001d90b
mov dword [ebp - 0x440], eax
push 0
lea ecx, [ebp - 0x84c]
call fcn.1001d90b
mov ecx, dword [ebp - 0x440]
mov eax, dword [eax]
mov dword [ecx], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x710]
mov ecx, dword [ebp - 0x440]
cmp dword [ecx], eax
je 0x10056477
mov dword [ebp - 0x340], 1
jmp 0x1005647e
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
neg eax
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x2c4], eax
jge 0x100564a6
mov dword [ebp - 0x540], 1
jmp 0x100564ad
and dword [ebp - 0x540], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x540]
sub ecx, dword [ebp + eax - 0x95c]
cmp dword [ebp - 0x348], ecx
jge 0x100564d4
mov dword [ebp - 0x5e8], 1
jmp 0x100564db
and dword [ebp - 0x5e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x95c]
mov dword [ebp - 0x97c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x710], 0xfff8
jne 0x10056511
xor eax, eax
je 0x10056511
mov dword [ebp - 0x448], 1
jmp 0x10056518
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x6fc]
cmp dword [ebp - 0x448], eax
jl 0x10056532
mov dword [ebp - 0x350], 1
jmp 0x10056539
and dword [ebp - 0x350], 0
mov dword [ebp - 0x2ac], 8
push 0
lea ecx, [ebp - 0x91c]
call fcn.1001d90b
mov ecx, dword [ebp - 0x28c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2ac]
add eax, dword [ebp - 0x28c]
sub eax, dword [ebp - 0x350]
cmp eax, dword [ebp - 0x5f0]
jl 0x1005657e
mov dword [ebp - 0x4c8], 1
jmp 0x10056585
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
sub eax, dword [ebp - 0xa0]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x710]
jle 0x100565ac
mov dword [ebp - 0x358], 1
jmp 0x100565b3
and dword [ebp - 0x358], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x95c]
cmp dword [ebp - 0x358], eax
jne 0x100565d3
mov dword [ebp - 0x450], 1
jmp 0x100565da
and dword [ebp - 0x450], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x450]
mov dword [ebp + eax - 0x95c], ecx
jmp 0x10056362
cmp dword [ebp - 0x2ac], 0
je 0x1005660b
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x91c]
call fcn.1001d8ef
jmp 0x1005661f
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x91c]
call fcn.1001d8ef
jmp 0x10056284
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x84c]
call fcn.1001d8ef
mov eax, dword [ebp - 0x5c]
and dword [eax], 0
jmp 0x1005a3f3
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x200], 0
jmp 0x1005665c
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 1
jge 0x10056678
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x960], 0
jmp 0x1005664f
mov dword [ebp - 0x108], 0
jmp 0x10056691
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jg 0x100566e3
mov dword [ebp - 0x868], 0xebb6748f
push 0x5a8a
push 0x38dd
push 0x29d0
push 1
push 1
call fcn.10052ca0
add esp, 0x14
push 0x2f22
push 0x7aa6
lea eax, [ebp - 0x868]
push eax
push 1
push 0x1868
push 1
call fcn.10050995
add esp, 0x18
jmp 0x10056684
mov dword [ebp - 0x360], 0x7481
mov dword [ebp - 0x5f8], 0x1000d808
cmp dword [ebp - 0x360], 0x7621
jle 0x100567e4
and dword [ebp - 0x1b0], 0
jmp 0x1005671d
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x7c37
jge 0x100567e4
and dword [ebp - 0x110], 0
jmp 0x10056743
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x6422
jge 0x100567df
and dword [ebp - 0x240], 0
jmp 0x10056769
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x77f
jge 0x100567da
and dword [ebp - 0x118], 0
jmp 0x1005678b
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x527a
jge 0x100567d8
mov eax, dword [ebp - 0x1b0]
or eax, dword [ebp - 0x110]
mov edx, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x118]
sar edx, cl
or eax, edx
cdq
mov dword [ebp - 0x71c], eax
mov dword [ebp - 0x718], edx
push dword [ebp - 0x718]
push dword [ebp - 0x71c]
mov ecx, 0x10082bb8
call fcn.1001d55e
jmp 0x1005677e
jmp 0x1005675c
jmp 0x10056736
jmp 0x10056710
push 1
lea eax, [ebp - 0x8c]
push eax
push 1
lea eax, [ebp - 0xc4]
push eax
push 0x1174
call fcn.10053c20
add esp, 0x14
cmp dword [ebp - 0x360], 0x719a
jge 0x1005681f
mov edx, dword [ebp - 0x5f8]
mov ecx, 0x10082bb8
call fcn.100202a3
cmp dword [ebp - 0xc4], 0
jne 0x10056cac
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x508], 0x143f
mov dword [ebp - 0x600], 0x1000d820
cmp dword [ebp - 0x508], 0x1720
jle 0x100568ff
and dword [ebp - 0x1b8], 0
jmp 0x1005686d
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x870
jge 0x100568f7
and dword [ebp - 0x120], 0
jmp 0x1005688f
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x5db6
jge 0x100568f2
mov eax, dword [ebp - 0x1b8]
add eax, dword [ebp - 0x120]
cdq
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], edx
push dword [ebp - 0x724]
push dword [ebp - 0x728]
lea ecx, [ebp - 0xbdc]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x708], eax
mov ecx, dword [ebp - 0x708]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xbdc]
call fcn.1001d534
jmp 0x10056882
jmp 0x10056860
push 0
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
cmp dword [ebp - 0x508], 0x137f
jge 0x10056917
push dword [ebp - 0x600]
call fcn.10067b63
pop ecx
mov dword [ebp - 0x208], 0
jmp 0x10056930
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 4
jge 0x1005694c
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0xad0], 0x82062403
jmp 0x10056923
mov dword [ebp - 0x40], 0
jmp 0x1005695c
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x10056a62
mov dword [ebp - 0x368], 0x5e7c
mov dword [ebp - 0x7c8], 0x1000d860
cmp dword [ebp - 0x368], 0x5f35
jle 0x10056a32
and dword [ebp - 0x130], 0
jmp 0x100569a0
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x66c6
jge 0x10056a32
and dword [ebp - 0x128], 0
jmp 0x100569c6
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x734f
jge 0x10056a2d
and dword [ebp - 0x1c0], 0
jmp 0x100569e8
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x195a
jge 0x10056a2b
mov eax, dword [ebp - 0x128]
add eax, dword [ebp - 0x1c0]
and eax, dword [ebp - 0x130]
cdq
mov dword [ebp - 0x734], eax
mov dword [ebp - 0x730], edx
push dword [ebp - 0x730]
push dword [ebp - 0x734]
mov ecx, 0x10082bb8
call fcn.1001d55e
jmp 0x100569db
jmp 0x100569b9
jmp 0x10056993
cmp dword [ebp - 0x368], 0x5e5c
jge 0x10056a4e
mov edx, dword [ebp - 0x7c8]
mov ecx, 0x10082bb8
call fcn.100202a3
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0xad0], 0
je 0x10056a5d
jmp 0x10056a62
jmp 0x10056955
mov dword [ebp - 0x40], 0xfffffff5
jmp 0x10056a72
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x14
jl 0x10056b36
push 3
lea ecx, [ebp - 0x578]
call fcn.1001d86d
mov dword [ebp - 4], 6
push 0x7d50
push 1
push 0x75fe
push 0x17bd
lea eax, [ebp - 0x98c]
push eax
push 1
push 0x27b3
lea eax, [ebp - 0x578]
push eax
call fcn.10050d38
add esp, 0x20
push 0
lea ecx, [ebp - 0x578]
call fcn.1001d90b
and dword [eax], 0
jmp 0x10056af4
push 0
lea ecx, [ebp - 0x578]
call fcn.1001d90b
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x458]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x458]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x578]
call fcn.1001d90b
cmp dword [eax], 4
jge 0x10056b22
push 0
lea ecx, [ebp - 0x578]
call fcn.1001d90b
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0xad0], 0xb5ca9869
jmp 0x10056ad0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x578]
call fcn.1001d8ef
jmp 0x10056a6b
mov dword [ebp - 0x2c], 1
mov byte [ebp - 0x6d], 0
push 1
lea eax, [ebp - 0x6d]
push eax
push 0x6198
push 0
call fcn.10052720
add esp, 0x10
mov dword [ebp - 0x2c], 0
jmp 0x10056b66
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffeb
jle 0x10056ca1
mov dword [ebp - 0x8b0], 0xedb5cabf
mov dword [ebp - 0x8ac], 0xedb5cabf
mov dword [ebp - 0x8a8], 0xedb5cabf
mov dword [ebp - 0x8a4], 0xedb5cabf
lea ecx, [ebp - 0x261]
call fcn.1001d91a
push eax
lea eax, [ebp - 0x8a0]
push eax
lea eax, [ebp - 0x8b0]
push eax
lea ecx, [ebp - 0xb10]
call fcn.1001d91d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa54]
call fcn.1001d8c9
mov dword [ebp - 4], 7
mov dword [ebp - 0x608], 0x9b6917ab
mov dword [ebp - 0x230], 0
jmp 0x10056bf7
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 4
jge 0x10056c13
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0xb28], 0x1546
jmp 0x10056bea
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x994], eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jg 0x10056c33
mov dword [ebp - 0x370], 1
jmp 0x10056c3a
and dword [ebp - 0x370], 0
mov esi, dword [ebp - 0x2c]
push 0
lea ecx, [ebp - 0xa54]
call fcn.1001d90b
add esi, dword [eax]
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x370]
dec eax
cmp esi, eax
jge 0x10056c67
mov dword [ebp - 0x4d0], 1
jmp 0x10056c6e
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
add eax, 0x21e1
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0xb28]
mov dword [ebp - 0x608], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa54]
call fcn.1001d8ef
jmp 0x10056b5f
mov eax, dword [ebp - 0x5c]
and dword [eax], 0
jmp 0x1005a3f3
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x378], 0x7ccc
mov dword [ebp - 0x610], 0x1000d8b0
cmp dword [ebp - 0x378], 0x7cf4
jle 0x10056db1
and dword [ebp - 0x140], 0
jmp 0x10056cf0
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x6624
jge 0x10056db1
and dword [ebp - 0x138], 0
jmp 0x10056d16
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x16db
jge 0x10056dac
and dword [ebp - 0x1c8], 0
jmp 0x10056d3c
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x3fd3
jge 0x10056da7
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x1c8]
shl eax, cl
and eax, dword [ebp - 0x140]
cdq
mov dword [ebp - 0x740], eax
mov dword [ebp - 0x73c], edx
push dword [ebp - 0x73c]
push dword [ebp - 0x740]
lea ecx, [ebp - 0xc3c]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x714], eax
mov ecx, dword [ebp - 0x714]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xc3c]
call fcn.1001d534
jmp 0x10056d2f
jmp 0x10056d09
jmp 0x10056ce3
mov dword [ebp - 0x148], 0xec01e6e2
cmp dword [ebp - 0x378], 0x79e9
jge 0x10056dd3
push dword [ebp - 0x610]
call fcn.10067b63
pop ecx
mov dword [ebp - 0x64], 5
push 0
push 0x4871
push 0x258f
push 0x51ee
push 0x13eb
push 0x43a3
push 0x7018
push 0x3fe6
push 0x7526
push 0x3ac0
push 0x72ed
push 0x67d2
push 0x70f4
push 0x15ea
call fcn.1005b373
add esp, 0x38
cmp dword [ebp - 0x1d0], 0
je 0x10057023
mov dword [ebp - 0x58], 0xfffffffa
mov dword [ebp - 0x618], 1
cmp dword [ebp - 0x58], 0
je 0x10056ece
cmp dword [ebp - 0x58], 0
je 0x10056e9e
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1d0], eax
je 0x10056e6a
mov dword [ebp - 0x460], 1
jmp 0x10056e71
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
je 0x10056e9e
cmp dword [ebp - 0x58], 0
je 0x10056e9e
cmp dword [ebp - 0x58], 0
je 0x10056e9e
mov dword [ebp - 0x380], 1
jmp 0x10056ea5
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x380]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x10056ebe
cmp dword [ebp - 0x58], 0
jne 0x10056ec2
xor eax, eax
je 0x10056ece
mov dword [ebp - 0x528], 1
jmp 0x10056ed5
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x528], eax
jge 0x10056f6e
mov dword [ebp - 0x820], 0xffffffff
mov dword [ebp - 0x210], 0
jmp 0x10056f0a
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jge 0x10056f26
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x388], 0xffffffff
jmp 0x10056efd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x388]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x388], eax
push 0x1655
lea eax, [ebp - 0x820]
push eax
push 0x527d
push 1
push 0
push 0x3e38
lea eax, [ebp - 0x148]
push eax
push 1
call fcn.1005fd20
add esp, 0x20
jmp 0x10056fea
mov dword [ebp - 0x720], 1
mov dword [ebp - 0x620], 0xaa296768
lea eax, [ebp - 0x618]
push eax
lea eax, [ebp - 0x720]
push eax
push 1
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x64]
push eax
push 0xf60
push 1
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x620]
push eax
call fcn.1004c206
add esp, 0x28
mov dword [ebp - 0x64], 6
jmp 0x10056fce
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffff1
jne 0x10056fea
mov byte [ebp - 0x67], 0
push 0
push 1
lea eax, [ebp - 0x67]
push eax
call fcn.10050ee8
add esp, 0xc
jmp 0x10056fc7
mov byte [ebp - 0x65], 0
push 0xc31
push 0xe99
push 1
push 0x22d
push 0x749
push 0x120f
lea eax, [ebp - 0x65]
push eax
push 1
push 0x32b8
push 0x6b8d
call fcn.10053cd5
add esp, 0x28
jmp 0x10057057
mov byte [ebp - 0x5d], 0
push 0xed5
lea eax, [ebp - 0x5d]
push eax
push 0
call fcn.1005a851
add esp, 0xc
mov byte [ebp - 0x66], 0
movzx eax, byte [ebp - 0x66]
test eax, eax
je 0x10057057
push 1
push 1
push 0x15e5
call fcn.10050ee8
add esp, 0xc
lea eax, [ebp - 0x99c]
push eax
push 0x433f
push 1
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xc4]
push eax
push 0x5764
push 0x4e9
push 0
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x25c]
push eax
call fcn.10053cd5
add esp, 0x28
push 0x33f9
push 0x5d36
push 0x5f8f
push 1
push 0x6ae3
push 0
push 1
push 0x546b
call fcn.1005bb18
add esp, 0x20
push 0x12e4
push 0x6fe1
push 0
push 0x59d3
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x260]
push eax
push 1
push 0x5469
push 1
push 0x13ac
call fcn.1004ec0e
add esp, 0x2c
mov dword [ebp - 0x468], 0x74b4
mov dword [ebp - 0x628], 0x1000d900
cmp dword [ebp - 0x468], 0x783e
jle 0x10057228
and dword [ebp - 0x1d8], 0
jmp 0x1005712c
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x3f79
jge 0x1005721e
and dword [ebp - 0x158], 0
jmp 0x10057152
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x7003
jge 0x10057219
and dword [ebp - 0x150], 0
jmp 0x10057178
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x5e39
jge 0x10057214
and dword [ebp - 0x250], 0
jmp 0x1005719e
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x2d48
jge 0x1005720f
mov ecx, dword [ebp - 0x150]
sub ecx, dword [ebp - 0x250]
mov eax, dword [ebp - 0x158]
sar eax, cl
or eax, dword [ebp - 0x1d8]
cdq
mov dword [ebp - 0x74c], eax
mov dword [ebp - 0x748], edx
push dword [ebp - 0x748]
push dword [ebp - 0x74c]
lea ecx, [ebp - 0xb70]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x7d4], eax
mov ecx, dword [ebp - 0x7d4]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xb70]
call fcn.1001d534
jmp 0x10057191
jmp 0x1005716b
jmp 0x10057145
jmp 0x1005711f
push 0
push 0
call dword [sym.imp.GDI32.dll_SetLayout]
cmp dword [ebp - 0x468], 0x74a0
jge 0x10057240
push dword [ebp - 0x628]
call fcn.10067b63
pop ecx
push 1
push 0x4bc3
push 1
push 0xa76
push 0x6c00
push 0x6caf
call fcn.10053ebc
add esp, 0x18
push 1
push 0x452e
push 1
push 0x65e8
push 0x72f4
push 0
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x8c]
push eax
push 0x6894
push 0x46a9
call fcn.1004e4cb
add esp, 0x2c
mov dword [ebp - 0x630], 0xbef7
push 1
lea ecx, [ebp - 0x934]
call fcn.1001d86d
mov dword [ebp - 4], 8
mov dword [ebp - 0x72c], 0x890c5440
push 1
push 0x62ab
push 1
push 0x6f6b
lea eax, [ebp - 0x9a4]
push eax
push 1
push 0x5114
push 0x39be
push 0x4e5f
push 0x6a5
lea eax, [ebp - 0x934]
push eax
call fcn.1004e4cb
add esp, 0x2c
lea eax, [ebp - 0x934]
push eax
push 1
push 0
push 0x5e57
push 0x643e
lea eax, [ebp - 0x72c]
push eax
push 0x736f
push 0x5487
lea eax, [ebp - 0x630]
push eax
call fcn.1004f839
add esp, 0x24
push 0
call fcn.1005c3c0
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x934]
call fcn.1001d8ef
cmp dword [ebp - 0x390], 0
je 0x1005743e
mov dword [ebp - 0x160], 0
jmp 0x10057370
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x1005738c
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x560], 0xfffffff8
jmp 0x10057363
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x560], 0
jmp 0x100573ba
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x560]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x560], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x560], 0xffffffed
jle 0x1005740b
mov dword [ebp - 0x218], 1
mov dword [ebp - 0x218], 4
jmp 0x100573ed
mov eax, dword [ebp - 0x218]
dec eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0xfffffff6
je 0x10057409
push 1
push 0x320
push 1
call fcn.1005403c
add esp, 0xc
jmp 0x100573e0
jmp 0x1005739f
push dword [ebp - 0x390]
push 0x5e0e
push 0x7b10
push 0x5dde
push 0x7bca
push 1
push 0
push dword [ebp - 0x34]
push 0xed1
push 0x3ac3
call fcn.1004a9ac
add esp, 0x28
push dword [ebp - 0x34]
call fcn.100494df
pop ecx
test eax, eax
jne 0x10057456
mov eax, dword [ebp - 0x5c]
and dword [eax], 0
jmp 0x1005a3f3
mov dword [ebp - 0xa8], 0xffffffff
mov dword [ebp - 0x268], 0x19a80bfb
mov dword [ebp - 0x3a0], 8
mov dword [ebp - 0x9ac], 0x164f943a
mov dword [ebp - 0x9bc], 0xa1c33c01
push 2
lea ecx, [ebp - 0x584]
call fcn.1001d86d
mov dword [ebp - 4], 9
push 1
lea ecx, [ebp - 0x94c]
call fcn.1001d86d
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x9c4], 0x8ac2
push 0x1f3d
lea eax, [ebp - 0x584]
push eax
push 0x2f79
lea eax, [ebp - 0x850]
push eax
push 1
push 1
push 0x193b
push 0x2c35
push 0x3614
push 0x54d2
call fcn.1004e69a
add esp, 0x28
lea eax, [ebp - 0x850]
push eax
push 0x7803
lea eax, [ebp - 0x94c]
push eax
push 1
push 0
push 0x421f
push 0x6e3e
push 0
call fcn.1005fd20
add esp, 0x20
mov dword [ebp - 0xa8], 0
jmp 0x10057533
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xf
jl 0x100578ea
mov dword [ebp - 0x738], 0x44696a48
mov dword [ebp - 0x4d8], 0x1511
mov dword [ebp - 0x638], 0x1000d914
cmp dword [ebp - 0x4d8], 0x1595
jle 0x100575e4
and dword [ebp - 0xb4], 0
jmp 0x10057580
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x558c
jge 0x100575e4
and dword [ebp - 0x168], 0
jmp 0x100575a2
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x33d5
jge 0x100575e2
mov eax, dword [ebp - 0xb4]
cdq
idiv dword [ebp - 0x168]
mov eax, edx
cdq
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x754], edx
push dword [ebp - 0x754]
push dword [ebp - 0x758]
mov ecx, 0x10082bb8
call fcn.1001d55e
jmp 0x10057595
jmp 0x10057573
mov dword [ebp - 0x470], 0x3beb
cmp dword [ebp - 0x4d8], 0x1223
jge 0x1005760a
mov edx, dword [ebp - 0x638]
mov ecx, 0x10082bb8
call fcn.100202a3
mov dword [ebp - 0x744], 8
mov dword [ebp - 0x9cc], 1
mov dword [ebp - 0x9d4], 0x2891ba80
mov dword [ebp - 0x9dc], 0x18ebdb88
mov dword [ebp - 0x750], 0xf27142b6
mov dword [ebp - 0x9e4], 0x7800ff68
mov dword [ebp - 0x668], 0xdfc1
mov dword [ebp - 0x7ec], 0x765e4bc
mov dword [ebp - 0x1e0], 0
jmp 0x10057673
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jge 0x1005768f
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x658], 0xa3888ad8
jmp 0x10057666
push 1
lea eax, [ebp - 0x738]
push eax
push 1
push 0x5570
lea eax, [ebp - 0x470]
push eax
call fcn.10054496
add esp, 0x14
mov dword [ebp - 0x398], 0x2ca1
mov dword [ebp - 0x7e0], 0x1000d92c
cmp dword [ebp - 0x398], 0x2de2
jle 0x10057773
and dword [ebp - 0x170], 0
jmp 0x100576e8
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x1010
jge 0x10057773
and dword [ebp - 0x238], 0
jmp 0x1005770a
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x1f94
jge 0x1005776e
mov eax, dword [ebp - 0x170]
imul eax, dword [ebp - 0x238]
cdq
mov dword [ebp - 0x764], eax
mov dword [ebp - 0x760], edx
push dword [ebp - 0x760]
push dword [ebp - 0x764]
lea ecx, [ebp - 0xba0]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x640], eax
mov ecx, dword [ebp - 0x640]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xba0]
call fcn.1001d534
jmp 0x100576fd
jmp 0x100576db
cmp dword [ebp - 0x398], 0x294f
jge 0x1005778b
push dword [ebp - 0x7e0]
call fcn.10067b63
pop ecx
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
je 0x100577c1
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0
je 0x100577c1
mov dword [ebp - 0x648], 1
jmp 0x100577c8
and dword [ebp - 0x648], 0
push 0
lea ecx, [ebp - 0x94c]
call fcn.1001d90b
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x650], eax
mov eax, dword [ebp - 0x270]
mov eax, dword [eax]
mov dword [ebp - 0x828], eax
mov eax, dword [ebp - 0x270]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x270]
mov dword [ecx], eax
mov eax, dword [ebp - 0x650]
cmp eax, dword [ebp - 0x828]
jl 0x10057820
mov dword [ebp - 0x510], 1
jmp 0x10057827
and dword [ebp - 0x510], 0
cmp dword [ebp - 0x510], 0xeb4e
jg 0x1005783f
mov dword [ebp - 0x3a8], 1
jmp 0x10057846
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x3a8]
je 0x1005786d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x658], 0
jne 0x1005786d
and dword [ebp - 0x478], 0
jmp 0x10057877
mov dword [ebp - 0x478], 1
mov eax, dword [ebp - 0x750]
cmp dword [ebp - 0x478], eax
jge 0x10057891
mov dword [ebp - 0x660], 1
jmp 0x10057898
and dword [ebp - 0x660], 0
push 0
lea ecx, [ebp - 0x584]
call fcn.1001d90b
push 1
lea ecx, [ebp - 0x584]
call fcn.1001d90b
push 1
lea ecx, [ebp - 0x584]
call fcn.1001d90b
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x9ec], eax
cmp dword [ebp - 0x668], 0
push 0
lea ecx, [ebp - 0x584]
call fcn.1001d90b
mov dword [eax], 1
jmp 0x10057526
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x94c]
call fcn.1001d8ef
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x584]
call fcn.1001d8ef
push dword [ebp - 0x34]
push 0x5f83
push 0x18bb
push 1
push 0
call fcn.10052ca0
add esp, 0x14
push 2
lea ecx, [ebp - 0x56c]
call fcn.1001d86d
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x480], 0xffffffff
push 0x2ea7
lea eax, [ebp - 0x9f4]
push eax
push 1
lea eax, [ebp - 0x56c]
push eax
push 0x2e88
push 0xbe5
push 0x181
push 1
push 0x8f
push 1
push 0x1a89
call fcn.1004ec0e
add esp, 0x2c
push 0
lea ecx, [ebp - 0x56c]
call fcn.1001d90b
cmp dword [eax], 0
je 0x10057abb
mov dword [ebp - 0x178], 0
jmp 0x100579a8
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x100579c1
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x30], 0xffffffff
jmp 0x1005799b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x30], 0
jmp 0x100579e6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x30], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 2
jge 0x10057a10
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x30]
lea ecx, [ebp - 0x56c]
call fcn.1001d90b
mov dword [eax], 0xf1bf
jmp 0x100579d1
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x9fc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 1
jle 0x10057a35
mov dword [ebp - 0x4e0], 1
jmp 0x10057a3c
and dword [ebp - 0x4e0], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
imul ecx, dword [ebp + ecx - 0x30], 0xfffe
cmp dword [ebp + eax - 0x30], ecx
je 0x10057a62
mov dword [ebp - 0x3b0], 1
jmp 0x10057a69
and dword [ebp - 0x3b0], 0
push 1
lea ecx, [ebp - 0x56c]
call fcn.1001d90b
mov ecx, dword [ebp - 0x3b0]
imul ecx, dword [eax]
mov eax, dword [ebp - 0x4e0]
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x30]
je 0x10057a9f
mov dword [ebp - 0x3b8], 1
jmp 0x10057aa6
and dword [ebp - 0x3b8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp + eax - 0x30], ecx
jmp 0x10057d43
mov dword [ebp - 0x3c8], 9
mov dword [ebp - 0x538], 0xd6158f8
mov dword [ebp - 0x90], 0x7695
mov dword [ebp - 0x3c0], 0x2762
mov dword [ebp - 0x598], 0x1000d940
cmp dword [ebp - 0x3c0], 0x2932
jle 0x10057bd3
and dword [ebp - 0x220], 0
jmp 0x10057b13
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x72fe
jge 0x10057bd3
and dword [ebp - 0x1e8], 0
jmp 0x10057b39
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x4f9
jge 0x10057bce
and dword [ebp - 0x180], 0
jmp 0x10057b5f
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x1e54
jge 0x10057bc9
mov eax, dword [ebp - 0x1e8]
imul eax, dword [ebp - 0x180]
or eax, dword [ebp - 0x220]
cdq
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], edx
push dword [ebp - 0x76c]
push dword [ebp - 0x770]
lea ecx, [ebp - 0xbc4]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x75c]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xbc4]
call fcn.1001d534
jmp 0x10057b52
jmp 0x10057b2c
jmp 0x10057b06
push 0x181e
lea eax, [ebp - 0x538]
push eax
push 1
lea eax, [ebp - 0x3c8]
push eax
lea eax, [ebp - 0x56c]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x480]
push eax
push 0
call fcn.1005201e
add esp, 0x20
cmp dword [ebp - 0x3c0], 0x2635
jge 0x10057c1f
push dword [ebp - 0x598]
call fcn.10067b63
pop ecx
mov dword [ebp - 0x488], 0x76a3
mov dword [ebp - 0x678], 0x1000d9a8
cmp dword [ebp - 0x488], 0x773d
jle 0x10057ce3
and dword [ebp - 0x188], 0
jmp 0x10057c59
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x3163
jge 0x10057ce3
and dword [ebp - 0xbc], 0
jmp 0x10057c7b
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x7eb8
jge 0x10057cde
mov eax, dword [ebp - 0x188]
and eax, dword [ebp - 0xbc]
cdq
mov dword [ebp - 0x77c], eax
mov dword [ebp - 0x778], edx
push dword [ebp - 0x778]
push dword [ebp - 0x77c]
lea ecx, [ebp - 0xbf4]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x864], eax
mov ecx, dword [ebp - 0x864]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xbf4]
call fcn.1001d534
jmp 0x10057c6e
jmp 0x10057c4c
mov dword [ebp - 0x90], 0
jmp 0x10057cfc
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffe2
je 0x10057d2b
lea eax, [ebp - 0x538]
push eax
push 0xff4
push 1
lea eax, [ebp - 0x3c8]
push eax
push 1
push 0x82c
call fcn.1004efba
add esp, 0x18
jmp 0x10057cef
cmp dword [ebp - 0x488], 0x7622
jge 0x10057d43
push dword [ebp - 0x678]
call fcn.10067b63
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x56c]
call fcn.1001d8ef
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x1005926d
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc4]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x324], ecx
jne 0x100585ec
mov dword [ebp - 0x10], 0xa4f833fc
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 0
mov dword [ebp - 0x58c], 0
mov dword [ebp - 0x588], 0
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x3c], 0
jmp 0x10057dc4
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10057dda
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xaf4], 0xfffffffe
jmp 0x10057dbd
mov dword [ebp - 0x3c], 0
jmp 0x10057dea
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x10057e00
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x278], 0xffff
jmp 0x10057de3
mov dword [ebp - 0x10], 0
jmp 0x10057e10
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x10057ea1
mov dword [ebp - 0xa04], 1
mov dword [ebp - 0xa0c], 1
mov dword [ebp - 0xa14], 1
mov dword [ebp - 0xa1c], 0x7597a61e
mov dword [ebp - 0xa24], 1
mov dword [ebp - 0xcc], 0
jmp 0x10057e65
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x10057e81
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0xb18], 4
jmp 0x10057e58
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x278]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x278], eax
jmp 0x10057e09
mov dword [ebp - 0x10], 0
jmp 0x10057eb1
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x10058044
mov dword [ebp - 0x4e8], 0x23e46920
mov dword [ebp - 0xd4], 0
jmp 0x10057ede
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x10057efa
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x3e0], 0x9757a83
jmp 0x10057ed1
push 0x528c
push 1
push 0x504c
push 1
call fcn.100515de
add esp, 0x10
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x594]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x594]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x3d0]
mov dword [ebp + eax*4 - 0x58c], ecx
mov eax, dword [ebp - 0x3d0]
sub eax, dword [ebp - 0x4e8]
sub eax, dword [ebp - 0x94]
jne 0x10057fba
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xa34], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xa3c], eax
xor eax, eax
test eax, eax
jne 0x10057f84
mov eax, 0xeacb
test eax, eax
jne 0x10057f84
and dword [ebp - 0x768], 0
jmp 0x10057f8e
mov dword [ebp - 0x768], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xa44], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x58c]
add eax, 0xfe1f
cmp eax, 0xb56b
jg 0x10057fba
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xaf4], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0xa7c], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x594]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x278]
cmp eax, dword [ebp - 0x94]
jne 0x10057ffd
mov dword [ebp - 0x3d8], 1
jmp 0x10058004
and dword [ebp - 0x3d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e0]
cmp dword [ebp - 0x3d8], eax
jge 0x10058025
mov dword [ebp - 0x490], 1
jmp 0x1005802c
and dword [ebp - 0x490], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x490]
mov dword [ebp + eax - 0x3e0], ecx
jmp 0x10057eaa
mov dword [ebp - 0x24], 0xdb3ae355
mov dword [ebp - 0xec], 1
mov dword [ebp - 0x89c], 0xfffffffe
mov dword [ebp - 0x898], 0xfffffffe
mov dword [ebp - 0x894], 0xfffffffe
mov dword [ebp - 0x890], 0xfffffffe
mov dword [ebp - 0x24], 0
jmp 0x1005808d
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xe
jl 0x100585e1
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x104], 0
push 1
lea ecx, [ebp - 0x85c]
call fcn.1001d86d
mov dword [ebp - 4], 0xc
push 0x6578
push 1
push 0x427d
push 1
lea eax, [ebp - 0xa84]
push eax
lea eax, [ebp - 0x85c]
push eax
push 0
push 0x2b4e
call fcn.100527cd
add esp, 0x20
mov dword [ebp - 0x304], 0xc57
mov dword [ebp - 0x698], 0x1000da08
cmp dword [ebp - 0x304], 0xdcd
jle 0x10058180
and dword [ebp - 0xdc], 0
jmp 0x1005811d
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x3c8b
jge 0x10058180
and dword [ebp - 0xe4], 0
jmp 0x1005813f
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x3792
jge 0x1005817e
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xe4]
shl eax, cl
cdq
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x784], edx
push dword [ebp - 0x784]
push dword [ebp - 0x788]
mov ecx, 0x10082bb8
call fcn.1001d55e
jmp 0x10058132
jmp 0x10058110
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jne 0x100581a4
mov eax, 0x513244d5
test eax, eax
jne 0x100581a4
and dword [ebp - 0x680], 0
jmp 0x100581ae
mov dword [ebp - 0x680], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xab0], eax
cmp dword [ebp - 0x20], 0
jb 0x100581c9
mov dword [ebp - 0x518], 1
jmp 0x100581d0
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x518], eax
je 0x100581e7
mov dword [ebp - 0x3e8], 1
jmp 0x100581ee
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x3e8], eax
jge 0x10058205
mov dword [ebp - 0x498], 1
jmp 0x1005820c
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x498], eax
je 0x10058223
mov dword [ebp - 0x3f0], 1
jmp 0x1005822a
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x3f0]
je 0x10058248
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x10058248
mov dword [ebp - 0x4f0], 1
jmp 0x1005824f
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x4f0]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xec], eax
jg 0x10058276
mov dword [ebp - 0x3f8], 1
jmp 0x1005827d
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x3f8]
jle 0x10058294
mov dword [ebp - 0x4a0], 1
jmp 0x1005829b
and dword [ebp - 0x4a0], 0
cmp dword [ebp - 0x4a0], 0x6986d6d
jg 0x10058306
mov dword [ebp - 0x7f8], 0x1213072
mov dword [ebp - 0x688], 0x4b15d3e9
lea eax, [ebp - 0x7f8]
push eax
push 0x415e
lea eax, [ebp - 0x688]
push eax
lea eax, [ebp - 0xec]
push eax
push 0x21c9
push 0x2ef8
push 0
push 1
push 0x4d52
call fcn.1005b95e
add esp, 0x24
push 0
push 0x7c4d
push 1
call fcn.1005ffb2
add esp, 0xc
jmp 0x1005858e
mov dword [ebp - 0x2f4], 0xa2e71cc
mov dword [ebp - 0x690], 0xfffffff6
push 1
push 0x6d02
lea eax, [ebp - 0x20]
push eax
push 0x1100
lea eax, [ebp - 0x85c]
push eax
push 0x2ea9
push 0x6992
lea eax, [ebp - 0xec]
push eax
push 0x4301
push 1
push 0x2691
call fcn.1005465c
add esp, 0x2c
mov dword [ebp - 0x2fc], 0x57c9
mov dword [ebp - 0x830], 0x1000da50
cmp dword [ebp - 0x2fc], 0x5aab
jle 0x10058426
and dword [ebp - 0xf4], 0
jmp 0x10058390
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x54c9
jge 0x1005841a
and dword [ebp - 0xfc], 0
jmp 0x100583b2
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x1c3e
jge 0x10058415
mov eax, dword [ebp - 0xf4]
and eax, dword [ebp - 0xfc]
cdq
mov dword [ebp - 0x794], eax
mov dword [ebp - 0x790], edx
push dword [ebp - 0x790]
push dword [ebp - 0x794]
lea ecx, [ebp - 0xc24]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x774], eax
mov ecx, dword [ebp - 0x774]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xc24]
call fcn.1001d534
jmp 0x100583a5
jmp 0x10058383
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov dword [ebp - 0x20], 0
jmp 0x10058436
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x12
jle 0x10058576
mov dword [ebp - 0x408], 0x91260e2e
imul eax, dword [ebp - 0x104], 0
cmp eax, dword [ebp - 0x24]
jl 0x10058462
mov dword [ebp - 0x400], 1
jmp 0x10058469
and dword [ebp - 0x400], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x89c]
cmp dword [ebp - 0x400], eax
je 0x10058499
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x89c], 0
je 0x10058499
mov dword [ebp - 0x530], 1
jmp 0x100584a0
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x408]
cmp dword [ebp - 0x530], eax
jle 0x100584ca
cmp dword [ebp - 0x690], 0
je 0x100584ca
push 4
pop eax
test eax, eax
je 0x100584ca
mov dword [ebp - 0x4a8], 1
jmp 0x100584d1
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x408]
cmp eax, dword [ebp - 0x4a8]
jle 0x100584f1
cmp dword [ebp - 0x24], 0
je 0x100584f1
mov dword [ebp - 0x410], 1
jmp 0x100584f8
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x410], eax
jle 0x1005850f
mov dword [ebp - 0x2dc], 1
jmp 0x10058516
and dword [ebp - 0x2dc], 0
imul eax, dword [ebp - 0x2f4], 0x5e21
cmp eax, dword [ebp - 0x2dc]
je 0x10058534
mov dword [ebp - 0x2d8], 1
jmp 0x1005853b
and dword [ebp - 0x2d8], 0
cmp dword [ebp - 0x2d8], 0xa4b44041
jne 0x10058553
mov dword [ebp - 0x2d0], 1
jmp 0x1005855a
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x2f4], 0
je 0x10058571
jmp 0x10058576
jmp 0x1005842f
cmp dword [ebp - 0x2fc], 0x562a
jge 0x1005858e
push dword [ebp - 0x830]
call fcn.10067b63
pop ecx
cmp dword [ebp - 0x304], 0xc10
jge 0x100585aa
mov edx, dword [ebp - 0x698]
mov ecx, 0x10082bb8
call fcn.100202a3
push 0
lea ecx, [ebp - 0x85c]
call fcn.1001d90b
cmp dword [eax], 0
je 0x100585cd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x85c]
call fcn.1001d8ef
jmp 0x100585e1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x85c]
call fcn.1001d8ef
jmp 0x10058086
mov eax, dword [ebp - 0x5c]
and dword [eax], 0
jmp 0x1005a3f3
mov dword [ebp - 0xaa4], 0x1124
mov dword [ebp - 0xa60], 0xfffffffa
mov dword [ebp - 0x78c], 0x3df603fa
mov dword [ebp - 0x6c8], 0
mov dword [ebp - 0x968], 0xf4672159
mov dword [ebp - 0x9b4], 7
mov dword [ebp - 0xa10], 0x9c9fb37b
mov dword [ebp - 0x970], 0xd1a4e665
mov dword [ebp - 0x124], 0xa4d3ec93
mov dword [ebp - 0x780], 1
mov dword [ebp - 0x804], 0xba5fc02
mov dword [ebp - 0x810], 0xf7ff
mov dword [ebp - 0x6b8], 0xfffffff8
mov dword [ebp - 0x798], 3
mov dword [ebp - 0x10c], 0
jmp 0x10058691
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x100586ad
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0xbac], 0x2c25fcc5
jmp 0x10058684
mov dword [ebp - 0x30c], 0x24cc
mov dword [ebp - 0x6a0], 0x1000da7c
cmp dword [ebp - 0x30c], 0x2550
jle 0x1005877b
and dword [ebp - 0xb8], 0
jmp 0x100586e7
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x7848
jge 0x1005877b
and dword [ebp - 0x114], 0
jmp 0x1005870d
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x64a9
jge 0x10058776
and dword [ebp - 0x11c], 0
jmp 0x1005872f
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x220c
jge 0x10058774
mov eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x11c]
shl eax, cl
and eax, dword [ebp - 0xb8]
cdq
mov dword [ebp - 0x7a0], eax
mov dword [ebp - 0x79c], edx
push dword [ebp - 0x79c]
push dword [ebp - 0x7a0]
mov ecx, 0x10082bb8
call fcn.1001d55e
jmp 0x10058722
jmp 0x10058700
jmp 0x100586da
push 1
push 1
lea eax, [ebp - 0x780]
push eax
push 0x4ab8
push 1
push 0x9ac
push 0x4792
call fcn.1004f24f
add esp, 0x1c
cmp dword [ebp - 0x30c], 0x211a
jge 0x100587bb
mov edx, dword [ebp - 0x6a0]
mov ecx, 0x10082bb8
call fcn.100202a3
mov dword [ebp - 0x124], 0
jmp 0x100587d4
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xfffffff8
jne 0x10058aa3
mov dword [ebp - 0xaac], 0xffffffff
mov dword [ebp - 0x978], 0xfffffff6
mov dword [ebp - 0xa18], 9
mov dword [ebp - 0x980], 0xd5d64f68
mov dword [ebp - 0xa70], 1
mov dword [ebp - 0x6c0], 0x74d4b4b2
mov dword [ebp - 0x860], 0xffffffff
mov dword [ebp - 0x988], 0xb1e5de2c
mov dword [ebp - 0x6b0], 0xdda4adcf
mov dword [ebp - 0x314], 0x4beb
mov dword [ebp - 0x6a8], 0x1000daa4
cmp dword [ebp - 0x314], 0x4f03
jle 0x100588d2
and dword [ebp - 0x12c], 0
jmp 0x10058871
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x12b7
jge 0x100588d2
and dword [ebp - 0x134], 0
jmp 0x10058893
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x5f7d
jge 0x100588d0
mov eax, dword [ebp - 0x12c]
add eax, dword [ebp - 0x134]
cdq
mov dword [ebp - 0x7ac], eax
mov dword [ebp - 0x7a8], edx
push dword [ebp - 0x7a8]
push dword [ebp - 0x7ac]
mov ecx, 0x10082bb8
call fcn.1001d55e
jmp 0x10058886
jmp 0x10058864
push 0x733a
push 0x74ae
push 1
push 0x51fe
push 1
lea eax, [ebp - 0x804]
push eax
push 0x54f1
call fcn.1004f3f7
add esp, 0x1c
cmp dword [ebp - 0x314], 0x4bda
jge 0x10058915
mov edx, dword [ebp - 0x6a8]
mov ecx, 0x10082bb8
call fcn.100202a3
push 0x113e
lea eax, [ebp - 0x78c]
push eax
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x860]
push eax
push 0x1f50
lea eax, [ebp - 0x6b8]
push eax
push 0x71c5
push 1
lea eax, [ebp - 0x798]
push eax
lea eax, [ebp - 0x6c0]
push eax
lea eax, [ebp - 0x810]
push eax
push 1
push 0x23fd
lea eax, [ebp - 0x6c8]
push eax
call fcn.100548e8
add esp, 0x38
mov dword [ebp - 0x31c], 0x7939
mov dword [ebp - 0x7a4], 0x1000dac8
cmp dword [ebp - 0x31c], 0x7c8d
jle 0x10058a82
and dword [ebp - 0x13c], 0
jmp 0x100589a7
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x38f0
jge 0x10058a6c
and dword [ebp - 0x144], 0
jmp 0x100589cd
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x13bb
jge 0x10058a67
and dword [ebp - 0x14c], 0
jmp 0x100589f3
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x18c5
jge 0x10058a62
and dword [ebp - 0x154], 0
jmp 0x10058a15
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x4a54
jge 0x10058a60
mov eax, dword [ebp - 0x13c]
imul eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x14c]
and eax, dword [ebp - 0x154]
cdq
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0x7b4], edx
push dword [ebp - 0x7b4]
push dword [ebp - 0x7b8]
mov ecx, 0x10082bb8
call fcn.1001d55e
jmp 0x10058a08
jmp 0x100589e6
jmp 0x100589c0
jmp 0x1005899a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ExtTextOutA]
cmp dword [ebp - 0x31c], 0x77cf
jge 0x10058a9e
mov edx, dword [ebp - 0x7a4]
mov ecx, 0x10082bb8
call fcn.100202a3
jmp 0x100587c7
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x324]
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 0
jne 0x10058e54
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x5bc], 0
mov dword [ebp - 0x15c], 0
jmp 0x10058aef
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jge 0x10058b0b
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x874], 0xba137262
jmp 0x10058ae2
mov dword [ebp - 0x14], 0xffffffe3
jmp 0x10058b1b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffffb
jge 0x10058e3b
mov dword [ebp - 0x80], 0xfffffff6
mov dword [ebp - 0x39c], 8
cmp dword [ebp - 0x14], 0
je 0x10058d4a
mov dword [ebp - 0x164], 0x23dcdf5e
mov dword [ebp - 0x280], 0x8ee8
mov dword [ebp - 0x36c], 0xa59c3cba
cmp dword [ebp - 0x164], 0
je 0x10058c40
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa20], eax
cmp dword [ebp - 0x280], 0
jne 0x10058b91
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x80], eax
jle 0x10058b91
and dword [ebp - 0x32c], 0
jmp 0x10058b9b
mov dword [ebp - 0x32c], 1
cmp dword [ebp - 0x32c], 0xc089ced6
jbe 0x10058bb3
mov dword [ebp - 0x334], 1
jmp 0x10058bba
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 0xffffffff
jb 0x10058bd5
cmp dword [ebp - 0x280], 0
jne 0x10058bd5
and dword [ebp - 0x33c], 0
jmp 0x10058bdf
mov dword [ebp - 0x33c], 1
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x33c], eax
jl 0x10058bf9
mov dword [ebp - 0x344], 1
jmp 0x10058c00
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
inc eax
cmp eax, dword [ebp - 0x164]
jge 0x10058c1b
mov dword [ebp - 0x34c], 1
jmp 0x10058c22
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x34c], eax
jge 0x10058c40
push 4
pop eax
test eax, eax
je 0x10058c40
mov dword [ebp - 0x5ac], 1
jmp 0x10058c47
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x990], eax
cmp dword [ebp - 0x80], 0
jle 0x10058c62
mov dword [ebp - 0x354], 1
jmp 0x10058c69
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x354], eax
jne 0x10058c80
mov dword [ebp - 0x288], 1
jmp 0x10058c87
and dword [ebp - 0x288], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x288]
mov dword [ebp + eax - 0x874], ecx
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x288], eax
jg 0x10058cb1
mov dword [ebp - 0x35c], 1
jmp 0x10058cb8
and dword [ebp - 0x35c], 0
imul eax, dword [ebp - 0x35c], 0x1cf6
cmp dword [ebp - 0x14], eax
jne 0x10058cd3
mov dword [ebp - 0x364], 1
jmp 0x10058cda
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0xa9c], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x998], eax
cmp dword [ebp - 0x80], 0x6ffa942f
je 0x10058d13
mov dword [ebp - 0x374], 1
jmp 0x10058d1a
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0x2a6dfe16
jg 0x10058d32
mov dword [ebp - 0x37c], 1
jmp 0x10058d39
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x39c], eax
jmp 0x10058e36
mov dword [ebp - 0x16c], 0x9bb5
cmp dword [ebp - 0x14], 0xc438
jle 0x10058d69
mov dword [ebp - 0x384], 1
jmp 0x10058d70
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x384], eax
je 0x10058d8a
mov dword [ebp - 0x394], 1
jmp 0x10058d91
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x38c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x38c]
mov dword [ebp + eax - 0x874], ecx
mov eax, dword [ebp - 0x38c]
imul eax, dword [ebp - 0x394]
cmp eax, dword [ebp - 0x16c]
je 0x10058dce
mov dword [ebp - 0x5b4], 1
jmp 0x10058dd5
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0xa28], eax
mov eax, dword [ebp - 0x16c]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x874]
add ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x39c]
sub eax, ecx
cmp eax, 0x40613544
jle 0x10058e11
mov dword [ebp - 0x3a4], 1
jmp 0x10058e18
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x5bc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x874], 0
je 0x10058e36
jmp 0x10058e3b
jmp 0x10058b14
push 0x919
push 0
call fcn.1005ab44
pop ecx
pop ecx
mov eax, dword [ebp - 0x5c]
and dword [eax], 0
jmp 0x1005a3f3
mov dword [ebp - 0x38], 0xac204e2d
mov dword [ebp - 0x298], 0xb56cef3
mov dword [ebp - 0x50], 0
jmp 0x10058e75
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x10058e8b
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x3bc], 0xfffffffb
jmp 0x10058e6e
mov dword [ebp - 0x3ac], 0x30e0
mov dword [ebp - 0x5c4], 0x1000db38
cmp dword [ebp - 0x3ac], 0x3169
jle 0x10058f96
and dword [ebp - 0x184], 0
jmp 0x10058ec5
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xc3b
jge 0x10058f8a
and dword [ebp - 0x174], 0
jmp 0x10058eeb
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x20f6
jge 0x10058f85
and dword [ebp - 0x17c], 0
jmp 0x10058f11
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x6326
jge 0x10058f80
and dword [ebp - 0x18c], 0
jmp 0x10058f33
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x7ede
jge 0x10058f7e
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x17c]
sar eax, cl
and eax, dword [ebp - 0x184]
xor eax, dword [ebp - 0x18c]
cdq
mov dword [ebp - 0x7c4], eax
mov dword [ebp - 0x7c0], edx
push dword [ebp - 0x7c0]
push dword [ebp - 0x7c4]
mov ecx, 0x10082bb8
call fcn.1001d55e
jmp 0x10058f26
jmp 0x10058f04
jmp 0x10058ede
jmp 0x10058eb8
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DeleteMenu]
mov dword [ebp - 0x50], 0
jmp 0x10058fa6
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x10058fbc
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xae8], 0xe834ab4
jmp 0x10058f9f
cmp dword [ebp - 0x3ac], 0x2dd8
jge 0x10058fd8
mov edx, dword [ebp - 0x5c4]
mov ecx, 0x10082bb8
call fcn.100202a3
mov dword [ebp - 0x38], 0x13
jmp 0x10058fe8
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffffa
jle 0x10059227
push 4
lea ecx, [ebp - 0x880]
call fcn.1001d86d
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x9c], 0
jmp 0x1005901f
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x1005903b
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x7d0], 0xfffffff8
jmp 0x10059012
push 1
lea eax, [ebp - 0x880]
push eax
push 0x436d
push 0x64a6
push 0x6e37
push 1
push 1
push 0x78c9
lea eax, [ebp - 0x9c]
push eax
call fcn.10051af9
add esp, 0x24
xor eax, eax
jne 0x1005918a
cmp dword [ebp - 0x38], 0x9986
jge 0x10059088
mov dword [ebp - 0x3b4], 1
jmp 0x1005908f
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x3b4]
jne 0x100590a6
mov dword [ebp - 0x290], 1
jmp 0x100590ad
and dword [ebp - 0x290], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x290]
mov dword [ebp + eax - 0x3bc], ecx
cmp dword [ebp - 0x290], 0
je 0x100590e5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3bc], 0
je 0x100590e5
mov dword [ebp - 0x3c4], 1
jmp 0x100590ec
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x3c4], eax
jg 0x10059103
mov dword [ebp - 0x3cc], 1
jmp 0x1005910a
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
dec eax
cmp eax, 0x7643
jge 0x10059124
mov dword [ebp - 0x3d4], 1
jmp 0x1005912b
and dword [ebp - 0x3d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7d0]
cmp dword [ebp - 0x3d4], eax
jle 0x1005914c
mov dword [ebp - 0x5cc], 1
jmp 0x10059153
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x9a0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7d0]
mov dword [ebp - 0xa78], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0
jne 0x1005918a
and dword [ebp - 0x3dc], 0
jmp 0x10059194
mov dword [ebp - 0x3dc], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x3dc], eax
jge 0x100591ab
mov dword [ebp - 0x3e4], 1
jmp 0x100591b2
and dword [ebp - 0x3e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7d0]
cmp dword [ebp - 0x3e4], eax
jl 0x100591d3
mov dword [ebp - 0x3ec], 1
jmp 0x100591da
and dword [ebp - 0x3ec], 0
push 3
lea ecx, [ebp - 0x880]
call fcn.1001d90b
mov ecx, dword [ebp - 0x3ec]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xae8], 0
je 0x10059213
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x880]
call fcn.1001d8ef
jmp 0x10058fe1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x880]
call fcn.1001d8ef
jmp 0x10058fe1
lea eax, [ebp - 0x298]
push eax
push 1
push 0x1e55
push 1
call fcn.10054be6
add esp, 0x10
push 0x1b4b
push 1
push 1
push 0x3c7b
lea eax, [ebp - 0x34]
push eax
push 0x5f4c
push 0x3b6d
push 0x39ff
push 0x4b8
call fcn.1004f839
add esp, 0x24
mov dword [ebp - 0x3f4], 0x446f
mov dword [ebp - 0x5e4], 0x1000db50
cmp dword [ebp - 0x3f4], 0x4820
jle 0x1005939a
and dword [ebp - 0x1ac], 0
jmp 0x100592a7
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xb43
jge 0x1005939a
and dword [ebp - 0x194], 0
jmp 0x100592cd
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x5eb3
jge 0x10059395
and dword [ebp - 0x19c], 0
jmp 0x100592f3
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x7379
jge 0x10059390
and dword [ebp - 0x1a4], 0
jmp 0x10059319
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x4318
jge 0x1005938b
mov ecx, dword [ebp - 0x194]
imul ecx, dword [ebp - 0x19c]
add ecx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x1ac]
shl eax, cl
cdq
mov dword [ebp - 0x7dc], eax
mov dword [ebp - 0x7d8], edx
push dword [ebp - 0x7d8]
push dword [ebp - 0x7dc]
lea ecx, [ebp - 0xc54]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x59c], eax
mov ecx, dword [ebp - 0x59c]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xc54]
call fcn.1001d534
jmp 0x1005930c
jmp 0x100592e6
jmp 0x100592c0
jmp 0x1005929a
mov dword [ebp - 0x5dc], 0xdba33992
mov dword [ebp - 0x1b4], 0
jmp 0x100593bd
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jge 0x100593d9
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x88c], 0xfffffffc
jmp 0x100593b0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x88c], 0
jmp 0x10059404
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x88c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x88c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x88c], 0xffffffe6
jg 0x1005942b
push 0x3b8
push 0x71e5
push 1
push 1
call fcn.1004f974
add esp, 0x10
jmp 0x100593eb
lea eax, [ebp - 0x5dc]
push eax
push 1
push 0x6d42
push 1
push 0x405
call fcn.10054c83
add esp, 0x14
cmp dword [ebp - 0x3f4], 0x4395
jge 0x10059460
push dword [ebp - 0x5e4]
call fcn.10067b63
pop ecx
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x10], 0
je 0x10059474
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3fc], eax
jmp 0x1005947b
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x3fc]
mov dword [eax], ecx
jmp 0x1005a3f3
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x664], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x614], eax
mov dword [ebp - 0x404], 0x24d8
mov dword [ebp - 0x5ec], 0x1000db88
cmp dword [ebp - 0x404], 0x250f
jle 0x100595aa
and dword [ebp - 0x1bc], 0
jmp 0x100594e5
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x56ee
jge 0x100595aa
and dword [ebp - 0x1c4], 0
jmp 0x1005950b
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x7af6
jge 0x100595a5
and dword [ebp - 0x1cc], 0
jmp 0x10059531
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x1424
jge 0x100595a0
and dword [ebp - 0x1d4], 0
jmp 0x10059553
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x26fa
jge 0x1005959e
mov eax, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0x1c4]
sar eax, cl
xor eax, dword [ebp - 0x1cc]
xor eax, dword [ebp - 0x1d4]
cdq
mov dword [ebp - 0x7e8], eax
mov dword [ebp - 0x7e4], edx
push dword [ebp - 0x7e4]
push dword [ebp - 0x7e8]
mov ecx, 0x10082bb8
call fcn.1001d55e
jmp 0x10059546
jmp 0x10059524
jmp 0x100594fe
jmp 0x100594d8
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x404], 0x2246
jge 0x100595cf
mov edx, dword [ebp - 0x5ec]
mov ecx, 0x10082bb8
call fcn.100202a3
mov dword [ebp - 0x40c], 0x1f9c
mov dword [ebp - 0x5fc], 0x1000dbd0
cmp dword [ebp - 0x40c], 0x21ed
jle 0x100596d0
and dword [ebp - 0x1dc], 0
jmp 0x10059609
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x67aa
jge 0x100596c8
and dword [ebp - 0x1e4], 0
jmp 0x1005962f
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x734d
jge 0x100596c3
and dword [ebp - 0x1ec], 0
jmp 0x10059655
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x52f
jge 0x100596be
mov eax, dword [ebp - 0x1dc]
sub eax, dword [ebp - 0x1e4]
sub eax, dword [ebp - 0x1ec]
cdq
mov dword [ebp - 0x7f4], eax
mov dword [ebp - 0x7f0], edx
push dword [ebp - 0x7f0]
push dword [ebp - 0x7f4]
lea ecx, [ebp - 0xc84]
call fcn.1001072e
pop ecx
pop ecx
mov dword [ebp - 0x5f4], eax
mov ecx, dword [ebp - 0x5f4]
call fcn.1001d53e
push eax
call fcn.10067b63
pop ecx
lea ecx, [ebp - 0xc84]
call fcn.1001d534
jmp 0x10059648
jmp 0x10059622
jmp 0x100595fc
push 0
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea eax, [ebp + 0x24]
mov dword [ebp - 0x604], eax
cmp dword [ebp - 0x40c], 0x1e66
jge 0x100596f1
push dword [ebp - 0x5fc]
call fcn.10067b63
pop ecx
mov dword [ebp - 0x9a8], 0x1008261c
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x66c], eax
mov eax, dword [ebp - 0x604]
movzx eax, byte [eax]
test eax, eax
je 0x10059c24
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x414], 0x62c
mov dword [ebp - 0x61c], 0x1000dc30
cmp dword [ebp - 0x414], 0x70a
jle 0x100597c6
and dword [ebp - 0x1f4], 0
jmp 0x10059763
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x8001
jge 0x100597c6
and dword [ebp - 0x1fc], 0
jmp 0x10059785
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x2e13
jge 0x100597c4
mov eax, dword [ebp - 0x1f4]
mov ecx, dword [ebp - 0x1fc]
sar eax, cl
cdq
mov dword [ebp - 0x800], eax
mov dword [ebp - 0x7fc], edx
push dword [ebp - 0x7fc]
push dword [ebp - 0x800]
mov ecx, 0x10082bb8
call fcn.1001d55e
jmp 0x10059778
jmp 0x10059756
push 4
push 0x2000
mov eax, dword [ebp - 0x2b0]
push dword [eax + 0x50]
mov eax, dword [ebp - 0x2b0]
push dword [eax + 0x34]
push 0xdbf
push 0xab7
call fcn.10040a57
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x2b8]
mov dword [ecx], eax
cmp dword [ebp - 0x414], 0x3bf
jge 0x10059816
mov edx, dword [ebp - 0x61c]
mov ecx, 0x10082bb8
call fcn.100202a3
mov eax, dword [ebp - 0x2b8]
cmp dword [eax], 0
jne 0x10059c1f
mov dword [ebp - 0x2a8], 0x950707df
mov dword [ebp - 0x6c], 0x58e17c10
mov dword [ebp - 0x204], 0x5c8100c4
mov dword [ebp - 0x43c], 0x90611bc3
mov dword [ebp - 0x624], 0xffffffff
mov dword [ebp - 0x65c], 0x2f3f6085
mov dword [ebp - 0x74], 0xfffffff6
mov dword [ebp - 0xa30], 0xffffffff
mov dword [ebp - 0x644], 0xae97
mov dword [ebp - 0x2a0], 0x62b2faa9
mov dword [ebp - 0x18], 0xf32f520a
mov dword [ebp - 0x62c], 0
mov dword [ebp - 0x63c], 0x8d7e
mov dword [ebp - 0x64c], 0xfff8
mov dword [ebp - 0x4c], 0
jmp 0x100598b8
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x100598ce
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xa98], 0xfffffff6
jmp 0x100598b1
mov dword [ebp - 0x4c], 0
jmp 0x100598de
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x100598f4
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x940], 0x355fff83
jmp 0x100598d7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa98]
mov dword [ebp - 0x9b0], eax
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x624]
cmp dword [ebp - 0x62c], eax
jle 0x10059928
mov dword [ebp - 0x41c], 1
jmp 0x1005992f
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x43c]
cmp dword [ebp - 0x41c], eax
je 0x10059949
mov dword [ebp - 0x424], 1
jmp 0x10059950
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x424], eax
jne 0x10059967
mov dword [ebp - 0x634], 1
jmp 0x1005996e
and dword [ebp - 0x634], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x940]
mov dword [ebp - 0xaa0], eax
mov eax, dword [ebp - 0x2a8]
sub eax, dword [ebp - 0x2a8]
cmp eax, 0xddb2097e
jne 0x100599a0
mov dword [ebp - 0x42c], 1
jmp 0x100599a7
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x42c]
add eax, dword [ebp - 0x63c]
mov dword [ebp - 0x434], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x434]
mov dword [ebp + eax - 0x940], ecx
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x434]
cmp eax, dword [ebp - 0x6c]
jge 0x100599e7
mov dword [ebp - 0x444], 1
jmp 0x100599ee
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x43c]
cmp dword [ebp - 0x444], eax
jle 0x10059a0e
cmp dword [ebp - 0x6c], 0
je 0x10059a0e
mov dword [ebp - 0x44c], 1
jmp 0x10059a15
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
mov eax, 0x46f2
sub eax, dword [ebp - 0x44c]
cmp dword [ebp - 0x2a0], eax
je 0x10059a41
mov dword [ebp - 0x454], 1
jmp 0x10059a48
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x644]
add eax, dword [ebp - 0x454]
cmp eax, dword [ebp - 0x74]
jle 0x10059a65
mov dword [ebp - 0x2cc], 1
jmp 0x10059a6c
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2a8]
imul eax, dword [ebp - 0x2cc]
cmp eax, 0xb11082e7
jb 0x10059a90
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x10059a90
and dword [ebp - 0x464], 0
jmp 0x10059a9a
mov dword [ebp - 0x464], 1
mov eax, dword [ebp - 0x64c]
add eax, dword [ebp - 0x464]
cmp eax, 6
je 0x10059ab7
mov dword [ebp - 0x654], 1
jmp 0x10059abe
and dword [ebp - 0x654], 0
cmp dword [ebp - 0x65c], 7
jl 0x10059ad3
mov dword [ebp - 0x46c], 1
jmp 0x10059ada
and dword [ebp - 0x46c], 0
cmp dword [ebp - 0x46c], 0
je 0x10059bde
mov dword [ebp - 0x204], 0x16
jmp 0x10059b00
mov eax, dword [ebp - 0x204]
dec eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
je 0x10059bdc
mov dword [ebp - 0x20c], 0
jmp 0x10059b26
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jge 0x10059b42
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xb00], 0xe4446ca3
jmp 0x10059b19
mov dword [ebp - 0x18], 0
jmp 0x10059b52
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x10059bad
mov dword [ebp - 0x74], 2
jmp 0x10059b68
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x10059bab
mov dword [ebp - 0x6c], 3
jmp 0x10059b7e
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x10059ba9
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x940], 0
je 0x10059b93
jmp 0x10059ba9
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0xa94]
mov dword [ebp + ecx*4 - 0xa98], eax
jmp 0x10059b77
jmp 0x10059b61
jmp 0x10059b4b
mov dword [ebp - 0x18], 0xfffffff6
jmp 0x10059bbd
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 7
jg 0x10059bd7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb00], 0
je 0x10059bd5
jmp 0x10059bd7
jmp 0x10059bb6
jmp 0x10059af3
jmp 0x10059bf2
push 0
push 0x4ee1
push 0x73fd
call fcn.100501a1
add esp, 0xc
push 4
push 0x2000
mov eax, dword [ebp - 0x2b0]
push dword [eax + 0x50]
push 0
push 0xdbf
push 0xab7
call fcn.10040a57
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x2b8]
mov dword [ecx], eax
jmp 0x1005a3f3
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x21c], 0xffffffff
mov dword [ebp - 0x214], 0
jmp 0x10059c6b
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x10059c87
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x9b8], 0
jmp 0x10059c5e
mov dword [ebp - 0x21c], 0
jmp 0x10059ca0
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0
jg 0x10059d0f
mov dword [ebp - 0x224], 0xebb6748f
mov byte [ebp - 0x5f], 0
push 0x30b9
push 1
lea eax, [ebp - 0x5f]
push eax
push 0
call fcn.10046d3c
add esp, 0x10
mov dword [ebp - 0x224], 0
jmp 0x10059ce5
mov eax, dword [ebp - 0x224]
dec eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
jl 0x10059d0d
push 1
push 1
push 0
push 0x5fc0
push 0x3e95
push 0x7e1b
call fcn.10045227
add esp, 0x18
jmp 0x10059cd8
jmp 0x10059c93
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0xc0]
push eax
push 0
call fcn.1004f95c
add esp, 0xc
mov eax, dword [ebp - 0xc0]
cmp dword [eax], 0
jne 0x1005a3f3
mov eax, dword [ebp - 0x2c0]
mov eax, dword [eax + 0x24]
and eax, 0x40
je 0x10059fa4
mov dword [ebp - 0x474], 0x3a09
mov dword [ebp - 0x67c], 0x1000dc40
cmp dword [ebp - 0x474], 0x3a15
jle 0x10059e21
push 0
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
and dword [ebp - 0x23c], 0
jmp 0x10059d8a
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x1d4c
jge 0x10059e21
and dword [ebp - 0x22c], 0
jmp 0x10059db0
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x61f9
jge 0x10059e1c
and dword [ebp - 0x234], 0
jmp 0x10059dd2
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x5268
jge 0x10059e1a
mov eax, dword [ebp - 0x22c]
cdq
idiv dword [ebp - 0x234]
mov eax, dword [ebp - 0x23c]
mov ecx, edx
sar eax, cl
cdq
mov dword [ebp - 0x80c], eax
mov dword [ebp - 0x808], edx
push dword [ebp - 0x808]
push dword [ebp - 0x80c]
mov ecx, 0x10082bb8
call fcn.1001d55e
jmp 0x10059dc5
jmp 0x10059da3
jmp 0x10059d7d
mov dword [ebp - 0x48c], 0
cmp dword [ebp - 0x474], 0x3797
jge 0x10059e47
mov edx, dword [ebp - 0x67c]
mov ecx, 0x10082bb8
call fcn.100202a3
push 1
lea ecx, [ebp - 0x8f8]
call fcn.1001d86d
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xa38], 0x5c0c8fbf
mov dword [ebp - 0x684], 0
mov dword [ebp - 0xa4], 0
jmp 0x10059e88
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x10059ea4
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x910], 0
jmp 0x10059e7b
push 0x4ed
push 1
lea eax, [ebp - 0x8f8]
push eax
push 0
lea eax, [ebp - 0xa4]
push eax
push 0x2c9e
push 0
call fcn.1004bdff
add esp, 0x1c
mov eax, dword [ebp - 0x48c]
inc eax
jne 0x10059eee
push 0
lea ecx, [ebp - 0x8f8]
call fcn.1001d90b
cmp dword [eax], 0
jne 0x10059eee
and dword [ebp - 0x484], 0
jmp 0x10059ef8
mov dword [ebp - 0x484], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x910]
inc eax
mov dword [ebp - 0x47c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x47c]
mov dword [ebp + eax - 0x910], ecx
mov eax, dword [ebp - 0x47c]
cmp eax, dword [ebp - 0x484]
je 0x10059f46
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x910], 0
jne 0x10059f46
and dword [ebp - 0x494], 0
jmp 0x10059f50
mov dword [ebp - 0x494], 1
mov eax, dword [ebp - 0x48c]
cmp eax, dword [ebp - 0x494]
jg 0x10059f6a
mov dword [ebp - 0x49c], 1
jmp 0x10059f71
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x684], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8f8]
call fcn.1001d8ef
mov eax, dword [ebp - 0x53c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [eax + 0x20]
mov dword [ecx], eax
jmp 0x1005a3f3
mov eax, dword [ebp - 0x2c0]
mov eax, dword [eax + 0x24]
and eax, 0x80
je 0x1005a3f3
mov dword [ebp - 0x254], 0xffffffff
mov dword [ebp - 0x6b4], 0x770aacc7
mov dword [ebp - 0x244], 0
jmp 0x10059fe5
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 2
jge 0x1005a001
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0xb0], 0xfffffffa
jmp 0x10059fd8
mov byte [ebp - 0x5e], 0
push 0
push 1
lea eax, [ebp - 0x5e]
push eax
push 0
push 0xc78
call fcn.1004a2d8
add esp, 0x14
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb0], 0xc
jmp 0x1005a04a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb0], 0x15
jge 0x1005a3d6
mov dword [ebp - 0x54], 9
mov dword [ebp - 0x4e4], 0xfffd
mov dword [ebp - 0x69c], 0xfffffffa
mov dword [ebp - 0x6a4], 0xffffffff
mov dword [ebp - 0x24c], 0
jmp 0x1005a09c
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 1
jge 0x1005a0b8
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x694], 0xfffffffc
jmp 0x1005a08f
mov dword [ebp - 0x54], 0
jmp 0x1005a0c8
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
je 0x1005a3d1
mov dword [ebp - 0x88], 0xffffffff
mov dword [ebp - 0x68c], 0x5fcb4448
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
mov ecx, dword [ebp - 0x88]
lea eax, [eax + ecx - 6]
test eax, eax
jne 0x1005a110
cmp dword [ebp - 0x54], 0
jne 0x1005a110
and dword [ebp - 0x4a4], 0
jmp 0x1005a11a
mov dword [ebp - 0x4a4], 1
mov eax, dword [ebp - 0x68c]
add eax, dword [ebp - 0x4a4]
cmp dword [ebp - 0x88], eax
jl 0x1005a13a
mov dword [ebp - 0x4ac], 1
jmp 0x1005a141
and dword [ebp - 0x4ac], 0
cmp dword [ebp - 0x4ac], 0xffffffff
je 0x1005a15f
mov eax, 0xf13bcf59
test eax, eax
je 0x1005a15f
mov dword [ebp - 0x4b4], 1
jmp 0x1005a166
and dword [ebp - 0x4b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp - 0x4b4], eax
jge 0x1005a187
mov dword [ebp - 0x4bc], 1
jmp 0x1005a18e
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 0xaba9
jne 0x1005a1a6
mov dword [ebp - 0x4c4], 1
jmp 0x1005a1ad
and dword [ebp - 0x4c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp - 0x4c4], eax
jg 0x1005a1ce
mov dword [ebp - 0x4cc], 1
jmp 0x1005a1d5
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x4cc]
jge 0x1005a1ef
mov dword [ebp - 0x4d4], 1
jmp 0x1005a1f6
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 0x67e784b5
je 0x1005a20e
mov dword [ebp - 0x4dc], 1
jmp 0x1005a215
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x4e4], eax
jg 0x1005a238
mov dword [ebp - 0x4ec], 1
jmp 0x1005a23f
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
sub eax, 0x1f433c8a
je 0x1005a268
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb0], 0
je 0x1005a268
mov dword [ebp - 0x4f4], 1
jmp 0x1005a26f
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x4f4], eax
jl 0x1005a286
mov dword [ebp - 0x4fc], 1
jmp 0x1005a28d
and dword [ebp - 0x4fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp - 0x4fc], eax
jl 0x1005a2ae
mov dword [ebp - 0x504], 1
jmp 0x1005a2b5
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x504]
jl 0x1005a2cf
mov dword [ebp - 0x50c], 1
jmp 0x1005a2d6
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x514], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x514]
mov dword [ebp + eax - 0x694], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp - 0x514], eax
jne 0x1005a322
mov dword [ebp - 0x51c], 1
jmp 0x1005a329
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x254], eax
jle 0x1005a34c
mov dword [ebp - 0x524], 1
jmp 0x1005a353
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x6a4]
cmp dword [ebp - 0x524], eax
jl 0x1005a36d
mov dword [ebp - 0x52c], 1
jmp 0x1005a374
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 0x1d67
jle 0x1005a38c
mov dword [ebp - 0x6ac], 1
jmp 0x1005a393
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x254], eax
jl 0x1005a3b9
mov dword [ebp - 0x534], 1
jmp 0x1005a3c0
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x6b4], eax
jmp 0x1005a0c1
jmp 0x1005a02f
push 0x1712
lea eax, [ebp - 0xc0]
push eax
push 0
lea eax, [ebp - 0x53c]
push eax
call fcn.1004e62c
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret