Function at 0x10009ba9
Capabilities:
Read clipboard data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002430d
mov eax, dword fs:[0]
push eax
add esp, 0xfffffc0c
mov eax, dword [0x1002d178]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x400]
push eax
call fcn.10007ba6
pop ecx
mov esi, eax
lea edi, [ebp - 0x3e4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x3e4]
lea edi, [ebp - 0x334]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x10c], 0x4a8c6a53
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10009c21
push 0
call dword [sym.imp.USER32.dll_GetClipboardData]
mov dword [ebp - 0x10c], 0
jmp 0x10009c3a
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xffffffe2
jge 0x10009c78
mov dword [ebp - 0x2f4], 0x288a137b
cmp dword [ebp - 0x2f4], 0
je 0x10009c58
jmp 0x10009c78
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x10009c76
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_Polyline]
jmp 0x10009c2d
push 1
lea ecx, [ebp - 0x258]
call fcn.10005bc8
and dword [ebp - 4], 0
mov dword [ebp - 0xe4], 0xffffffff
mov dword [ebp - 0x2bc], 0x9eb818f
mov dword [ebp - 0x114], 0
jmp 0x10009cb6
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 1
jge 0x10009cd8
lea ecx, [ebp - 0x258]
push dword [ebp - 0x114]
call fcn.10005c66
mov dword [eax], 0x3ae35568
jmp 0x10009ca9
push 0
lea ecx, [ebp - 0x258]
call fcn.10005c66
and dword [eax], 0
jmp 0x10009d0e
lea ecx, [ebp - 0x258]
push 0
call fcn.10005c66
mov dword [ebp - 0x148], eax
mov ecx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x148]
mov eax, dword [eax]
dec eax
mov dword [ecx], eax
lea ecx, [ebp - 0x258]
push 0
call fcn.10005c66
cmp dword [eax], 0xffffffe2
jg 0x10009f25
push 2
lea ecx, [ebp - 0x2a0]
call fcn.10005bc8
mov byte [ebp - 4], 1
mov dword [ebp - 0xac], 0x98311173
mov dword [ebp - 0x294], 0x1a53fde7
mov dword [ebp - 0xf8], 0
jmp 0x10009d62
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x10009d84
push dword [ebp - 0xf8]
lea ecx, [ebp - 0x2a0]
call fcn.10005c66
mov dword [eax], 0xfffffff7
jmp 0x10009d55
mov dword [ebp - 0xac], 0
jmp 0x10009d9d
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x10009dbf
lea ecx, [ebp - 0x2a0]
push dword [ebp - 0xac]
call fcn.10005c66
mov dword [eax], 0xb659d568
jmp 0x10009d90
lea ecx, [ebp - 0x258]
push 0
call fcn.10005c66
lea ecx, [ebp - 0x2a0]
mov eax, dword [eax]
mov dword [ebp - 0xac], eax
mov esi, dword [ebp - 0xac]
push 0
call fcn.10005c66
cmp esi, dword [eax]
jg 0x10009df7
mov dword [ebp - 0x248], 1
jmp 0x10009dfe
and dword [ebp - 0x248], 0
mov eax, 0x615e82aa
or eax, eax
je 0x10009e8c
push 0
lea ecx, [ebp - 0x258]
call fcn.10005c66
imul eax, dword [eax], 0xac01
cmp eax, 0x9ae4f78d
ja 0x10009e31
mov dword [ebp - 0x238], 1
jmp 0x10009e38
and dword [ebp - 0x238], 0
mov esi, dword [ebp - 0x238]
lea ecx, [ebp - 0x258]
add esi, 0xfffffffd
push 0
call fcn.10005c66
cmp esi, dword [eax]
jg 0x10009e5e
mov dword [ebp - 0x240], 1
jmp 0x10009e65
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
sub eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xe4]
je 0x10009e8c
push 7
pop eax
test eax, eax
je 0x10009e8c
mov dword [ebp - 0x2e8], 1
jmp 0x10009e93
and dword [ebp - 0x2e8], 0
lea ecx, [ebp - 0x2a0]
push 0
call fcn.10005c66
mov esi, dword [ebp - 0xe4]
lea ecx, [ebp - 0x2a0]
push 1
call fcn.10005c66
mov ecx, dword [ebp - 0xe4]
imul ecx, dword [eax]
cmp esi, ecx
jne 0x10009ecc
mov dword [ebp - 0x284], 1
jmp 0x10009ed3
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x248]
sub eax, dword [ebp - 0x284]
cmp eax, 0xa83a
jge 0x10009ef2
mov dword [ebp - 0x28c], 1
jmp 0x10009ef9
and dword [ebp - 0x28c], 0
lea ecx, [ebp - 0x2a0]
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 0
call fcn.10005c4a
jmp 0x10009cea
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x258]
call fcn.10005c4a
lea ecx, [ebp - 0x2ac]
and dword [ebp - 0x120], 0
push 4
call fcn.10005bc8
mov dword [ebp - 4], 2
mov dword [ebp - 0x90], 0
jmp 0x10009f68
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x10009f8a
push dword [ebp - 0x90]
lea ecx, [ebp - 0x2ac]
call fcn.10005c66
mov dword [eax], 4
jmp 0x10009f5b
mov dword [ebp - 0x90], 0
jmp 0x10009fa3
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x10009fbc
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x7c], 0xe1e87df2
jmp 0x10009f96
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7c], 3
jmp 0x10009fe1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
push 4
dec eax
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0
jl 0x1000a1b1
mov dword [ebp - 0xb8], 0x801fc3ee
mov dword [ebp - 0xc4], 1
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
or eax, eax
je 0x1000a020
push 0
call dword [sym.imp.USER32.dll_GetCursorPos]
mov dword [ebp - 0xb8], 3
jmp 0x1000a039
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jl 0x1000a1ac
lea ecx, [ebp - 0x2ac]
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x3c4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
mov dword [ebp - 0x37c], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x7c]
call fcn.10005c66
mov esi, eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x7c]
lea ecx, [ebp - 0x2ac]
call fcn.10005c66
lea ecx, [ebp - 0x2ac]
mov edi, eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x7c]
call fcn.10005c66
mov ecx, dword [edi]
sub ecx, dword [eax]
add ecx, dword [esi]
cmp ecx, dword [ebp - 0xb8]
jne 0x1000a0bf
mov dword [ebp - 0x290], 1
jmp 0x1000a0c6
and dword [ebp - 0x290], 0
cmp dword [ebp - 0x290], 1
jge 0x1000a0db
mov dword [ebp - 0x144], 1
jmp 0x1000a0e2
and dword [ebp - 0x144], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x144]
sub ecx, dword [ebp + eax - 0x7c]
jne 0x1000a0fd
cmp dword [ebp - 0xc4], 0
je 0x1000a121
push 4
lea ecx, [ebp - 0x2ac]
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x7c]
call fcn.10005c66
cmp dword [eax], 0
je 0x1000a11c
jmp 0x1000a1ac
jmp 0x1000a1a7
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x1000a13b
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 0xc4], 0
jmp 0x1000a154
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jg 0x1000a1a7
mov dword [ebp - 0xf4], 0xfffffff8
mov dword [ebp - 0xf4], 3
jmp 0x1000a180
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jl 0x1000a1a5
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x1000a1a3
push 0
call dword [sym.imp.GDI32.dll_RealizePalette]
jmp 0x1000a173
jmp 0x1000a147
jmp 0x1000a02c
jmp 0x10009fcc
lea ecx, [ebp - 0x2ac]
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
lea ecx, [ebp - 0x268]
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0xec], 0
push 2
call fcn.10005bc8
mov dword [ebp - 4], 3
mov dword [ebp - 0x64], 0xfffffffb
mov dword [ebp - 0x12c], 0xffffffff
mov dword [ebp - 0x2c4], 0x7106cf36
mov dword [ebp - 0xfc], 0
jmp 0x1000a21e
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x1000a240
lea ecx, [ebp - 0x268]
push dword [ebp - 0xfc]
call fcn.10005c66
mov dword [eax], 0xb14f4e79
jmp 0x1000a211
lea ecx, [ebp - 0x268]
push 0
call fcn.10005c66
cmp dword [eax], 0
jg 0x1000a25e
mov dword [ebp - 0x230], 1
jmp 0x1000a265
and dword [ebp - 0x230], 0
push 0
lea ecx, [ebp - 0x268]
call fcn.10005c66
mov ecx, dword [ebp - 0x230]
add ecx, dword [eax]
mov dword [ebp - 0x1ec], ecx
push 1
lea ecx, [ebp - 0x268]
call fcn.10005c66
mov ecx, dword [ebp - 0x1ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1ec]
sub eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x64]
jg 0x1000a2af
mov dword [ebp - 0x14c], 1
jmp 0x1000a2b6
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
neg eax
cmp eax, dword [ebp - 0x64]
jge 0x1000a2cf
mov dword [ebp - 0x278], 1
jmp 0x1000a2d6
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x278], eax
jle 0x1000a2ed
mov dword [ebp - 0x154], 1
jmp 0x1000a2f4
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x154], eax
je 0x1000a30b
mov dword [ebp - 0x1f4], 1
jmp 0x1000a312
and dword [ebp - 0x1f4], 0
mov dword [ebp - 0xec], 1
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x64], 0x18
jmp 0x1000a33c
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xffffffff
jg 0x1000a548
mov dword [ebp - 0x15c], 0xfffffffd
mov dword [ebp - 0x164], 0x2d4ad446
mov dword [ebp - 0x104], 0
jmp 0x1000a373
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x1000a38c
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x1c], 0xffffffff
jmp 0x1000a366
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1000a3ac
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetTimer]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1c]
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x1c], 0x6fd0
sub eax, ecx
lea ecx, [ebp - 0x268]
mov dword [ebp - 0x15c], eax
mov esi, dword [ebp - 0x15c]
push 0
call fcn.10005c66
mov dword [eax], esi
push 4
pop eax
shl eax, 0
lea ecx, [ebp - 0x268]
mov esi, dword [ebp + eax - 0x1c]
push 0
call fcn.10005c66
cmp esi, dword [eax]
jl 0x1000a408
mov dword [ebp - 0x2c0], 1
jmp 0x1000a40f
and dword [ebp - 0x2c0], 0
push 1
lea ecx, [ebp - 0x268]
call fcn.10005c66
push 4
mov eax, dword [eax]
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x1c]
cmp eax, dword [ebp - 0x64]
jg 0x1000a439
mov dword [ebp - 0x244], 1
jmp 0x1000a440
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jne 0x1000a470
cmp dword [ebp - 0x64], 0
jne 0x1000a470
and dword [ebp - 0x1fc], 0
jmp 0x1000a47a
mov dword [ebp - 0x1fc], 1
cmp dword [ebp - 0x1fc], 0xeac84c92
jbe 0x1000a48c
cmp dword [ebp - 0x64], 0
je 0x1000a4a1
cmp dword [ebp - 0x12c], 0
je 0x1000a4a1
mov dword [ebp - 0x16c], 1
jmp 0x1000a4a8
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x16c], eax
je 0x1000a4c8
mov eax, 0x785b
or eax, eax
jne 0x1000a4c8
and dword [ebp - 0x288], 0
jmp 0x1000a4d2
mov dword [ebp - 0x288], 1
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x288], eax
jne 0x1000a4ec
mov dword [ebp - 0x174], 1
jmp 0x1000a4f3
and dword [ebp - 0x174], 0
cmp dword [ebp - 0x174], 0xa798
jg 0x1000a50b
mov dword [ebp - 0x204], 1
jmp 0x1000a512
and dword [ebp - 0x204], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp eax, dword [ebp - 0x204]
jl 0x1000a530
mov dword [ebp - 0x17c], 1
jmp 0x1000a537
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x2c4], eax
jmp 0x1000a335
lea ecx, [ebp - 0x268]
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x24c]
mov eax, dword [ecx + eax*4]
shr eax, 0xa
and eax, 0xffffff
add eax, 0xfffffed4
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp - 0x24c]
mov eax, dword [ebp + 8]
mov eax, dword [ecx + eax*4]
and eax, 0x3ff
shl eax, 2
mov word [ebp - 0xc0], ax
mov dword [ebp - 0x80], 3
mov dword [ebp - 0x74], 0xfffffff8
mov dword [ebp - 0xb4], 0x3e8ce6fc
mov dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x33c], eax
xor eax, eax
inc eax
jne 0x1000a6c8
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x74], 0
jle 0x1000a5dd
mov dword [ebp - 0x184], 1
jmp 0x1000a5e4
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x184]
sub eax, dword [ebp - 0x74]
cmp dword [ebp - 0x80], eax
jne 0x1000a60a
mov eax, 0x67356a0b
or eax, eax
jne 0x1000a60a
and dword [ebp - 0x2cc], 0
jmp 0x1000a614
mov dword [ebp - 0x2cc], 1
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x348], eax
push 2
pop eax
test eax, eax
jne 0x1000a639
mov eax, 0xfc2f92e6
test eax, eax
jne 0x1000a639
and dword [ebp - 0x20c], 0
jmp 0x1000a643
mov dword [ebp - 0x20c], 1
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x20c], eax
je 0x1000a65d
cmp dword [ebp - 0x60], 0
jne 0x1000a65d
and dword [ebp - 0x18c], 0
jmp 0x1000a667
mov dword [ebp - 0x18c], 1
mov eax, dword [ebp - 0x18c]
sub eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x60]
jl 0x1000a681
mov dword [ebp - 0x280], 1
jmp 0x1000a688
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
add eax, 0x279
jne 0x1000a6a3
xor eax, eax
inc eax
jne 0x1000a6a3
and dword [ebp - 0x2d4], 0
jmp 0x1000a6ad
mov dword [ebp - 0x2d4], 1
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x350], eax
mov eax, 0xc0a9
or eax, eax
jne 0x1000a6c8
and dword [ebp - 0x2dc], 0
jmp 0x1000a6d2
mov dword [ebp - 0x2dc], 1
mov eax, dword [ebp - 0xb4]
neg eax
je 0x1000a6ee
cmp dword [ebp - 0x80], 0
je 0x1000a6ee
mov dword [ebp - 0x194], 1
jmp 0x1000a6f5
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 0
jb 0x1000a8f1
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x118], 0
mov dword [ebp - 0xe0], 0xc38db075
mov dword [ebp - 0x1c4], 0xd7aff79c
mov dword [ebp - 0x214], 0xffffffff
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x80], 0
jne 0x1000a762
mov dword [ebp - 0x118], 0xf60700c0
cmp dword [ebp - 0x118], 0
je 0x1000a777
cmp dword [ebp - 0x118], 0
je 0x1000a777
mov dword [ebp - 0x19c], 1
jmp 0x1000a77e
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x19c], eax
jne 0x1000a795
mov dword [ebp - 0x25c], 1
jmp 0x1000a79c
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
sub eax, 0x8610f121
cmp eax, dword [ebp - 0xe0]
jl 0x1000a7bb
mov dword [ebp - 0x1a4], 1
jmp 0x1000a7c2
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xe00c2553
ja 0x1000a7e0
mov dword [ebp - 0x21c], 1
jmp 0x1000a7e7
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 9
jne 0x1000a7fc
mov dword [ebp - 0x2e4], 1
jmp 0x1000a803
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x74], eax
jg 0x1000a826
mov dword [ebp - 0x1ac], 1
jmp 0x1000a82d
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jne 0x1000a850
xor eax, eax
inc eax
jne 0x1000a850
and dword [ebp - 0x270], 0
jmp 0x1000a85a
mov dword [ebp - 0x270], 1
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x270], eax
jg 0x1000a874
mov dword [ebp - 0x1b4], 1
jmp 0x1000a87b
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x1b4], eax
jl 0x1000a892
mov dword [ebp - 0x224], 1
jmp 0x1000a899
and dword [ebp - 0x224], 0
imul eax, dword [ebp - 0x224], 0x69e
cmp eax, dword [ebp - 0x80]
jge 0x1000a8bb
push 4
pop eax
test eax, eax
je 0x1000a8bb
mov dword [ebp - 0x1bc], 1
jmp 0x1000a8c2
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1bc], eax
jg 0x1000a8d9
mov dword [ebp - 0x26c], 1
jmp 0x1000a8e0
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x1c4], eax
jmp 0x1000aa11
lea ecx, [ebp - 0x31c]
push 2
call fcn.10005bc8
mov dword [ebp - 4], 4
mov dword [ebp - 0x2ec], 0xde7e8591
mov dword [ebp - 0x108], 0
jmp 0x1000a928
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x1000a94a
lea ecx, [ebp - 0x31c]
push dword [ebp - 0x108]
call fcn.10005c66
mov dword [eax], 0x1bda
jmp 0x1000a91b
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x1000a964
push 0
call dword [sym.imp.USER32.dll_MessageBoxIndirectA]
lea ecx, [ebp - 0x31c]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x370], eax
mov esi, dword [ebp - 0x74]
push 0
call fcn.10005c66
sub esi, dword [eax]
cmp esi, 0x1d5e
jl 0x1000a993
mov dword [ebp - 0x22c], 1
jmp 0x1000a99a
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x60]
sub eax, 0xfffffffd
cmp dword [ebp - 0x22c], eax
jge 0x1000a9cc
mov dword [ebp - 0x1cc], 1
jmp 0x1000a9d3
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0xb4]
lea ecx, [ebp - 0x31c]
imul eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x38c], eax
push 1
call fcn.10005c66
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x80], eax
lea ecx, [ebp - 0x31c]
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
mov dword [ebp - 0x60], 0
jmp 0x1000aa21
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xfffffff2
jge 0x1000aa51
mov dword [ebp - 0x308], 0xf528
mov dword [ebp - 0x310], 0xae7be98b
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x60], 0
je 0x1000aa4f
jmp 0x1000aa1a
jmp 0x1000aa1a
movsx eax, word [ebp - 0xc0]
push eax
call fcn.100171db
pop ecx
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x6c], 0xfffffffc
mov dword [ebp - 0xa4], 0
push 1
call fcn.10005bc8
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 4], 5
mov dword [ebp - 0x1e4], 1
mov dword [ebp - 0x274], 0xfffffffd
push 1
call fcn.10005bc8
mov byte [ebp - 4], 6
mov dword [ebp - 0x70], 0xaee50770
mov dword [ebp - 0x1dc], 0x59ff446c
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x8c], 0
jmp 0x1000aaef
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1000ab11
lea ecx, [ebp - 0xd0]
push dword [ebp - 0x8c]
call fcn.10005c66
mov dword [eax], 0x2e65251c
jmp 0x1000aae2
mov dword [ebp - 0x8c], 0
jmp 0x1000ab2a
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1000ab49
lea ecx, [ebp - 0x2b8]
push dword [ebp - 0x8c]
call fcn.10005c66
and dword [eax], 0
jmp 0x1000ab1d
cmp dword [ebp - 0xa4], 0
jne 0x1000abae
mov eax, 0xb76d
or eax, eax
jne 0x1000abae
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 0x274], 1
mov eax, dword [ebp - 0x274]
imul eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1d4], eax
push 0
call fcn.10005c66
mov ecx, dword [ebp - 0x1d4]
mov dword [eax], ecx
lea ecx, [ebp - 0x2b8]
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x70], eax
push 0
call fcn.10005c66
cmp dword [eax], 0
jne 0x1000abae
and dword [ebp - 0x234], 0
jmp 0x1000abb8
mov dword [ebp - 0x234], 1
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1dc], eax
jge 0x1000abdb
mov dword [ebp - 0x27c], 1
jmp 0x1000abe2
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x1e4], 0
jne 0x1000ac03
mov dword [ebp - 0x2f0], 1
jmp 0x1000ac0a
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x3d0], eax
push 0
call fcn.10005c66
mov esi, dword [ebp - 0x6c]
lea ecx, [ebp - 0xd0]
push 0
call fcn.10005c66
imul esi, dword [eax]
sub esi, dword [ebp - 0x6c]
je 0x1000ac57
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
or eax, eax
je 0x1000ac52
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x1000b0c3
mov dword [ebp - 0x188], 0xebc5f7c0
mov dword [ebp - 0x70], 0
jmp 0x1000ac71
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jg 0x1000ae9d
lea ecx, [ebp - 0x119]
mov dword [ebp - 0xbc], 0x7919
mov dword [ebp - 0x5c], 0xf4bb
mov dword [ebp - 0x58], 0xf4bb
mov dword [ebp - 0x54], 0xf4bb
mov dword [ebp - 0x50], 0xf4bb
call fcn.10005c75
lea ecx, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.10005c78
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x39c]
call fcn.10005c24
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 7
mov dword [ebp - 0x2c], 0x7d7132c2
mov dword [ebp - 0x28], 0x7d7132c2
mov dword [ebp - 0x24], 0x7d7132c2
mov dword [ebp - 0x20], 0x7d7132c2
push dword [ebp - 0x70]
call fcn.10005c66
push dword [ebp - 0x70]
lea ecx, [ebp - 0xd0]
call fcn.10005c66
mov ecx, dword [ebp - 0x1e4]
cmp dword [eax], ecx
jne 0x1000ad22
mov dword [ebp - 0x23c], 1
jmp 0x1000ad29
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0xbc]
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x3d4], eax
push dword [ebp - 0x70]
call fcn.10005c66
cmp dword [eax], 0xfce88636
jb 0x1000ad63
mov dword [ebp - 0x140], 1
jmp 0x1000ad6a
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x23c]
cmp eax, dword [ebp - 0x140]
jne 0x1000ad84
mov dword [ebp - 0x30c], 1
jmp 0x1000ad8b
and dword [ebp - 0x30c], 0
lea ecx, [ebp - 0x2b8]
push 0
call fcn.10005c66
mov ecx, dword [ebp - 0xbc]
cmp dword [eax], ecx
jg 0x1000adc0
lea ecx, [ebp - 0x39c]
push 3
call fcn.10005c66
cmp dword [eax], 0
je 0x1000adc0
mov dword [ebp - 0x13c], 1
jmp 0x1000adc7
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x13c], eax
jge 0x1000ade1
mov dword [ebp - 0x2c8], 1
jmp 0x1000ade8
and dword [ebp - 0x2c8], 0
lea ecx, [ebp - 0xd0]
push dword [ebp - 0x70]
call fcn.10005c66
push dword [ebp - 0x70]
lea ecx, [ebp - 0xd0]
call fcn.10005c66
cmp dword [eax], 0
jne 0x1000ae10
cmp dword [ebp - 0xbc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0x9ff40b36
ja 0x1000ae2c
mov dword [ebp - 0x150], 1
jmp 0x1000ae33
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x150], eax
jne 0x1000ae4d
mov dword [ebp - 0x158], 1
jmp 0x1000ae54
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0xbb785aa1
jbe 0x1000ae6c
mov dword [ebp - 0x160], 1
jmp 0x1000ae73
and dword [ebp - 0x160], 0
lea ecx, [ebp - 0x2b8]
push dword [ebp - 0x70]
call fcn.10005c66
mov ecx, dword [ebp - 0x160]
mov dword [eax], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x39c]
call fcn.10005c4a
jmp 0x1000ac6a
mov dword [ebp - 0x6c], 0
jmp 0x1000aead
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jg 0x1000b0c3
mov dword [ebp - 0xe8], 0
jmp 0x1000aed0
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 4
jge 0x1000aee9
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x3c], 0x846cf466
jmp 0x1000aec3
mov dword [ebp - 0x98], 0
jmp 0x1000af02
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jg 0x1000b0b0
mov dword [ebp - 0x168], 0xc574c3fc
mov dword [ebp - 0x2d0], 6
mov dword [ebp - 0x100], 0
jmp 0x1000af3c
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jge 0x1000af55
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x48], 1
jmp 0x1000af2f
mov dword [ebp - 0xa4], 0
jmp 0x1000af6e
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jg 0x1000b0ab
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xd0]
call fcn.10005c66
push dword [ebp - 0xa4]
lea ecx, [ebp - 0xd0]
call fcn.10005c66
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xd0]
call fcn.10005c66
cmp dword [ebp - 0x6c], 0
je 0x1000afc3
cmp dword [ebp - 0x188], 0
je 0x1000afc3
mov dword [ebp - 0x2f8], 1
jmp 0x1000afca
and dword [ebp - 0x2f8], 0
push dword [ebp - 0x98]
lea ecx, [ebp - 0xd0]
call fcn.10005c66
push 4
pop eax
imul eax, eax, 0
lea ecx, [ebp - 0xd0]
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0x388], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x344], eax
push dword [ebp - 0x98]
call fcn.10005c66
cmp dword [eax], 0xc01a
jl 0x1000b038
mov dword [ebp - 0x170], 1
jmp 0x1000b03f
and dword [ebp - 0x170], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x170], eax
jle 0x1000b05d
mov dword [ebp - 0x178], 1
jmp 0x1000b064
and dword [ebp - 0x178], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3c]
imul eax, dword [ebp - 0x178]
cmp eax, 1
jge 0x1000b086
mov dword [ebp - 0x180], 1
jmp 0x1000b08d
and dword [ebp - 0x180], 0
push dword [ebp - 0xa4]
lea ecx, [ebp - 0xd0]
call fcn.10005c66
mov ecx, dword [ebp - 0x180]
mov dword [eax], ecx
jmp 0x1000af61
jmp 0x1000aef5
cmp dword [ebp - 0x188], 0
je 0x1000b0be
jmp 0x1000aea6
jmp 0x1000aea6
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2b8]
call fcn.10005c4a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd0]
call fcn.10005c4a
xor eax, eax
mov word [ebp - 0x68], ax
jmp 0x1000b0f5
mov ax, word [ebp - 0x68]
sub ax, 0xffff
mov word [ebp - 0x68], ax
movsx ecx, word [ebp - 0xc0]
movsx eax, word [ebp - 0x68]
cmp eax, ecx
jge 0x1000b2ea
push 4
lea ecx, [ebp - 0x3bc]
call fcn.10005bc8
mov dword [ebp - 4], 8
mov dword [ebp - 0xf0], 0xfffffffd
mov dword [ebp - 0x3c0], 0x4543beb7
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x390], 0x4f094650
mov dword [ebp - 0x354], 0xfffffff8
push 2
lea ecx, [ebp - 0x3ac]
call fcn.10005bc8
mov byte [ebp - 4], 9
mov dword [ebp - 0x94], 0
jmp 0x1000b178
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 4
jge 0x1000b19a
push dword [ebp - 0x94]
lea ecx, [ebp - 0x3bc]
call fcn.10005c66
mov dword [eax], 7
jmp 0x1000b16b
mov dword [ebp - 0x94], 0
jmp 0x1000b1b3
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x1000b1d5
push dword [ebp - 0x94]
lea ecx, [ebp - 0x3ac]
call fcn.10005c66
mov dword [eax], 0x6887e08
jmp 0x1000b1a6
mov dword [ebp - 0xf0], 0
jmp 0x1000b1ee
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jg 0x1000b288
mov dword [ebp - 0x338], 1
mov dword [ebp - 0x35c], 0xfffffff7
mov dword [ebp - 0x3a0], 0xc619a80b
mov dword [ebp - 0x364], 0xf6f97812
mov dword [ebp - 0x3c8], 0xfffffffc
mov dword [ebp - 0x36c], 0xfffffffd
mov dword [ebp - 0x190], 0x3cc1
mov dword [ebp - 0x110], 0
jmp 0x1000b25a
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x1000b276
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x3ec], 0x6444
jmp 0x1000b24d
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
jmp 0x1000b1e1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x3ac]
call fcn.10005c4a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3bc]
call fcn.10005c4a
mov ecx, dword [ebp - 0x334]
movsx eax, word [ebp - 0x68]
add eax, dword [ebp - 0x198]
movzx ecx, byte [ecx + eax]
movsx eax, word [ebp - 0x68]
add eax, dword [ebp - 0x198]
xor edx, edx
div dword [0x10030ff0]
mov eax, dword [ebp - 0x330]
movzx eax, byte [eax + edx]
xor ecx, eax
mov edx, dword [ebp - 0x120]
movsx eax, word [ebp - 0x68]
mov byte [edx + eax], cl
jmp 0x1000b0e9
mov dword [ebp - 0x124], 0xfffffffe
mov dword [ebp - 0xd8], 0
jmp 0x1000b30d
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jge 0x1000b329
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x88], 0x39beb064
jmp 0x1000b300
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x88], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x3b0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x374], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x1000b38c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x1000b38c
mov dword [ebp - 0x1a0], 1
jmp 0x1000b393
and dword [ebp - 0x1a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x1a0], eax
je 0x1000b3c1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x88], 0
jne 0x1000b3c1
and dword [ebp - 0x300], 0
jmp 0x1000b3cb
mov dword [ebp - 0x300], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x88], 0x9e07
je 0x1000b3ea
mov dword [ebp - 0x1a8], 1
jmp 0x1000b3f1
and dword [ebp - 0x1a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
imul eax, dword [ebp - 0x1a8]
test eax, eax
jne 0x1000b415
mov dword [ebp - 0x1b0], 1
jmp 0x1000b41c
and dword [ebp - 0x1b0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x1b0], eax
jge 0x1000b43d
mov dword [ebp - 0x1b8], 1
jmp 0x1000b444
and dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1b8], 0x1289
jl 0x1000b45c
mov dword [ebp - 0x1c0], 1
jmp 0x1000b463
and dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 0xffff
je 0x1000b47b
mov dword [ebp - 0x1c8], 1
jmp 0x1000b482
and dword [ebp - 0x1c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
add eax, dword [ebp - 0x1c8]
je 0x1000b4a3
mov dword [ebp - 0x1d0], 1
jmp 0x1000b4aa
and dword [ebp - 0x1d0], 0
cmp dword [ebp - 0x1d0], 0xfffffff9
jle 0x1000b4bf
mov dword [ebp - 0x1d8], 1
jmp 0x1000b4c6
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0xffffffff
jne 0x1000b59d
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1e8], 0xfffffffa
lea ecx, [ebp - 0x328]
push 4
call fcn.10005bc8
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x2d8], 0xfffffffc
mov dword [ebp - 0xdc], 0
jmp 0x1000b51e
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 4
jge 0x1000b53d
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x328]
call fcn.10005c66
and dword [eax], 0
jmp 0x1000b511
lea ecx, [ebp - 0x328]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1f0], eax
push 2
call fcn.10005c66
mov ecx, dword [ebp - 0x1f0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1f0]
lea ecx, [ebp - 0x328]
mov dword [ebp - 0x2d8], eax
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
jmp 0x1000b83c
lea ecx, [ebp - 0x138]
push 2
call fcn.10005bc8
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0xd4], 0
jmp 0x1000b5d4
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x1000b5f6
lea ecx, [ebp - 0x138]
push dword [ebp - 0xd4]
call fcn.10005c66
mov dword [eax], 2
jmp 0x1000b5c7
lea ecx, [ebp - 0x138]
push 0
call fcn.10005c66
mov dword [eax], 1
jmp 0x1000b62f
push 0
lea ecx, [ebp - 0x138]
call fcn.10005c66
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f8]
mov eax, dword [eax]
dec eax
mov dword [ecx], eax
lea ecx, [ebp - 0x138]
push 0
call fcn.10005c66
cmp dword [eax], 0
jl 0x1000b82d
mov dword [ebp - 0x78], 0xf23d37f4
mov dword [ebp - 0x220], 0x63260039
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1000b674
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetPropA]
mov dword [ebp - 0x78], 1
jmp 0x1000b684
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x1000b828
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x88], ecx
cmp dword [ebp - 0x78], 0
jne 0x1000b7d8
push 0
lea ecx, [ebp - 0x138]
call fcn.10005c66
cmp dword [eax], 0x9515ed76
jne 0x1000b6c6
mov dword [ebp - 0x210], 1
jmp 0x1000b6cd
and dword [ebp - 0x210], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x124], eax
jle 0x1000b6fb
mov eax, dword [ebp - 0x78]
cmp dword [ebp + eax*4 - 0x88], 0
je 0x1000b6fb
mov dword [ebp - 0x200], 1
jmp 0x1000b702
and dword [ebp - 0x200], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x200], eax
jne 0x1000b723
mov dword [ebp - 0x208], 1
jmp 0x1000b72a
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x88]
cmp dword [ebp - 0x208], eax
jl 0x1000b757
push 0
lea ecx, [ebp - 0x138]
call fcn.10005c66
cmp dword [eax], 0
jne 0x1000b757
and dword [ebp - 0x218], 0
jmp 0x1000b761
mov dword [ebp - 0x218], 1
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x218]
jne 0x1000b77b
mov dword [ebp - 0x128], 1
jmp 0x1000b782
and dword [ebp - 0x128], 0
lea ecx, [ebp - 0x138]
push 0
call fcn.10005c66
mov ecx, dword [ebp - 0x128]
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x88], ecx
lea ecx, [ebp - 0x138]
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x220], eax
mov esi, dword [ebp - 0x220]
push 0
call fcn.10005c66
lea ecx, [ebp - 0x138]
push 0
call fcn.10005c66
cmp dword [eax], 0
jne 0x1000b7d8
and dword [ebp - 0x2fc], 0
jmp 0x1000b7e2
mov dword [ebp - 0x2fc], 1
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp + eax*4 - 0x88], 0
je 0x1000b810
cmp dword [ebp - 0x124], 0
je 0x1000b810
mov dword [ebp - 0x228], 1
jmp 0x1000b817
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x2e0], eax
jmp 0x1000b67d
jmp 0x1000b60b
lea ecx, [ebp - 0x138]
or dword [ebp - 4], 0xffffffff
call fcn.10005c4a
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
pop edi
pop esi
xor ecx, ebp
call fcn.100171e4
mov esp, ebp
pop ebp
ret