Function at 0x1005a1df
Capabilities:
Connect pipe
Create thread
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xae0
push esi
push edi
mov dword [ebp - 0xd8], 0xfffa
mov dword [ebp - 0x6d4], 0x2971c1e
mov dword [ebp - 0x1cc], 0
jmp 0x1005a217
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x1005a233
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0xa38], 0x8114
jmp 0x1005a20a
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x6d4], eax
mov dword [ebp - 0xd8], 0
jmp 0x1005a258
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jge 0x1005a274
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0xa38], 0x39ed
jmp 0x1005a24b
mov dword [ebp - 0xf0], 0xfffa
mov dword [ebp - 0x2c], 0x14a02569
mov dword [ebp - 0x2a4], 0xfffffffc
mov dword [ebp - 0x220], 0xffffffff
mov dword [ebp - 0xec], 0x211521fa
mov dword [ebp - 0x5e0], 5
mov dword [ebp - 0xc], 0
jmp 0x1005a2bd
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x1005a2d3
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x12c], 0xfffc
jmp 0x1005a2b6
mov dword [ebp - 0xc], 0
jmp 0x1005a2e3
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x1005a2f9
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x68c], 0
jmp 0x1005a2dc
mov dword [ebp - 0xc], 0
jmp 0x1005a309
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x1005a31f
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xc4], 0x93e75cb5
jmp 0x1005a302
mov dword [ebp - 0x2c], 0
jmp 0x1005a32f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1005a345
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x12c], 0xa136
jmp 0x1005a328
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jle 0x1005a359
mov dword [ebp - 0x670], 1
jmp 0x1005a360
and dword [ebp - 0x670], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x68c]
cmp dword [ebp + eax - 0x68c], ecx
jl 0x1005a388
mov dword [ebp - 0x32c], 1
jmp 0x1005a38f
and dword [ebp - 0x32c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x32c]
mov dword [ebp + eax - 0xc4], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x220]
cmp dword [ebp + eax - 0x68c], ecx
je 0x1005a3c3
mov dword [ebp - 0x650], 1
jmp 0x1005a3ca
and dword [ebp - 0x650], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68c]
cmp dword [ebp - 0x650], eax
jl 0x1005a3eb
mov dword [ebp - 0x658], 1
jmp 0x1005a3f2
and dword [ebp - 0x658], 0
cmp dword [ebp - 0x658], 5
jge 0x1005a407
mov dword [ebp - 0x660], 1
jmp 0x1005a40e
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x220]
sub eax, dword [ebp - 0x660]
cmp eax, 1
ja 0x1005a42b
mov dword [ebp - 0x668], 1
jmp 0x1005a432
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x2a4]
sub eax, dword [ebp - 0x668]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x68c]
cmp dword [ebp - 0x670], eax
jl 0x1005a6f6
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x19c], 0xffff
mov dword [ebp - 0x5a0], 1
mov dword [ebp - 0x1d4], 0
jmp 0x1005a48e
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 1
jge 0x1005a4aa
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x7a8], 0x34832001
jmp 0x1005a481
mov dword [ebp - 0x2c], 0xfffffffb
jmp 0x1005a4ba
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 7
jl 0x1005a6f1
mov dword [ebp - 0x27c], 0x2585fafe
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x7a0], 1
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x120], eax
jl 0x1005a508
mov dword [ebp - 0x28c], 1
jmp 0x1005a50f
and dword [ebp - 0x28c], 0
imul eax, dword [ebp - 0x19c], 0
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x1e4], eax
jne 0x1005a536
mov dword [ebp - 0x678], 1
jmp 0x1005a53d
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x678]
sub eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x27c]
jl 0x1005a55d
mov dword [ebp - 0x680], 1
jmp 0x1005a564
and dword [ebp - 0x680], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
add eax, dword [ebp - 0x680]
cmp dword [ebp - 0x120], eax
jge 0x1005a58b
mov dword [ebp - 0x5bc], 1
jmp 0x1005a592
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x5bc], eax
jle 0x1005a5ac
mov dword [ebp - 0x790], 1
jmp 0x1005a5b3
and dword [ebp - 0x790], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12c]
mov dword [ebp - 0x9a0], eax
cmp dword [ebp - 0x1e4], 4
ja 0x1005a5db
mov dword [ebp - 0x798], 1
jmp 0x1005a5e2
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x8f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x7a0]
cmp dword [ebp - 0x220], eax
jl 0x1005a61b
mov dword [ebp - 0x590], 1
jmp 0x1005a622
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
sub eax, dword [ebp - 0x19c]
je 0x1005a643
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x1005a643
mov dword [ebp - 0x598], 1
jmp 0x1005a64a
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x598]
jle 0x1005a664
mov dword [ebp - 0x284], 1
jmp 0x1005a66b
and dword [ebp - 0x284], 0
cmp dword [ebp - 0x284], 0x494d
jle 0x1005a689
cmp dword [ebp - 0x5a0], 0
jne 0x1005a689
and dword [ebp - 0x5a8], 0
jmp 0x1005a693
mov dword [ebp - 0x5a8], 1
mov eax, dword [ebp - 0x28c]
cmp eax, dword [ebp - 0x5a8]
jg 0x1005a6b6
mov eax, 0xfffc
test eax, eax
je 0x1005a6b6
mov dword [ebp - 0x294], 1
jmp 0x1005a6bd
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 3
je 0x1005a6d2
mov dword [ebp - 0x5b0], 1
jmp 0x1005a6d9
and dword [ebp - 0x5b0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5b0]
mov dword [ebp + eax - 0x7a8], ecx
jmp 0x1005a4b3
jmp 0x1005a9f9
mov dword [ebp - 0x244], 0xffffffff
mov dword [ebp - 0x23c], 0xffffffff
mov dword [ebp - 0xec], 0x10
jmp 0x1005a723
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x17
jge 0x1005a9f9
mov dword [ebp - 0x5d0], 0xffffffff
mov dword [ebp - 0x1ec], 0x196c9a5c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x12c], 0
jne 0x1005a8c3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12c]
mov dword [ebp - 0x23c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x23c], eax
jge 0x1005a78c
mov dword [ebp - 0x29c], 1
jmp 0x1005a793
and dword [ebp - 0x29c], 0
cmp dword [ebp - 0x29c], 0xd73c
jne 0x1005a7ab
mov dword [ebp - 0x5b8], 1
jmp 0x1005a7b2
and dword [ebp - 0x5b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x5b8], eax
jle 0x1005a7d3
mov dword [ebp - 0x5c0], 1
jmp 0x1005a7da
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x5c0], eax
je 0x1005a7f4
mov dword [ebp - 0x2ac], 1
jmp 0x1005a7fb
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 0xde77bf6b
ja 0x1005a813
mov dword [ebp - 0x5c8], 1
jmp 0x1005a81a
and dword [ebp - 0x5c8], 0
cmp dword [ebp - 0x5c8], 1
je 0x1005a82f
mov dword [ebp - 0x2b4], 1
jmp 0x1005a836
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x5d0], eax
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x5d0], eax
jle 0x1005a85c
mov dword [ebp - 0x2bc], 1
jmp 0x1005a863
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x2bc], eax
jne 0x1005a87d
mov dword [ebp - 0x5d8], 1
jmp 0x1005a884
and dword [ebp - 0x5d8], 0
imul eax, dword [ebp - 0x5d8], 0xfffb
test eax, eax
je 0x1005a8ae
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc4], 0
je 0x1005a8ae
mov dword [ebp - 0x2c4], 1
jmp 0x1005a8b5
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x2c4]
sub eax, dword [ebp - 0x5e0]
je 0x1005a8d8
mov eax, 0x1ce9
test eax, eax
je 0x1005a8d8
mov dword [ebp - 0x2cc], 1
jmp 0x1005a8df
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x5e0]
cmp dword [ebp - 0x2cc], eax
je 0x1005a8f9
mov dword [ebp - 0x228], 1
jmp 0x1005a900
and dword [ebp - 0x228], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x228]
mov dword [ebp + eax - 0xc4], ecx
mov eax, dword [ebp - 0x228]
add eax, 0x3d58cdd2
cmp dword [ebp - 0x244], eax
jge 0x1005a932
mov dword [ebp - 0x5e8], 1
jmp 0x1005a939
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x5e8]
add eax, 0x6ec7
je 0x1005a95b
cmp dword [ebp - 0x23c], 0
je 0x1005a95b
mov dword [ebp - 0x2d4], 1
jmp 0x1005a962
and dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 0x4b4fbf64
jne 0x1005a980
cmp dword [ebp - 0x1ec], 0
jne 0x1005a980
and dword [ebp - 0x5f0], 0
jmp 0x1005a98a
mov dword [ebp - 0x5f0], 1
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x5f0], eax
jl 0x1005a9a4
mov dword [ebp - 0x2dc], 1
jmp 0x1005a9ab
and dword [ebp - 0x2dc], 0
cmp dword [ebp - 0x2dc], 0xffff
jbe 0x1005a9c3
mov dword [ebp - 0x5f8], 1
jmp 0x1005a9ca
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x5f8], eax
jne 0x1005a9e4
mov dword [ebp - 0x2e4], 1
jmp 0x1005a9eb
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x2c], eax
jmp 0x1005a716
mov dword [ebp - 0x7d0], 0x2971c1e
mov dword [ebp - 0xd0], 0xffffffff
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0x4c], 0
jmp 0x1005aa27
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1005aa3d
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x7b0], 0x5755261f
jmp 0x1005aa20
mov dword [ebp - 0x4c], 0
jmp 0x1005aa4d
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1005aa63
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x304], 0x5dd68647
jmp 0x1005aa46
mov dword [ebp - 0xd0], 0x15
jmp 0x1005aa7c
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xfffffff6
jle 0x1005ad57
mov dword [ebp - 0x5c], 0x1d8f8f57
mov dword [ebp - 0x7c8], 0xffffffff
mov dword [ebp - 0x1a4], 0
jmp 0x1005aab3
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jge 0x1005aacf
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x6b0], 0
jmp 0x1005aaa6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7b0], 1
jle 0x1005aaf1
cmp dword [ebp - 0xd0], 0
jne 0x1005aaf1
and dword [ebp - 0x600], 0
jmp 0x1005aafb
mov dword [ebp - 0x600], 1
cmp dword [ebp - 0x600], 0xc77dcda7
jne 0x1005ab1c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6b0]
mov dword [ebp - 0x5c], eax
jmp 0x1005ad37
mov dword [ebp - 0x610], 0
mov dword [ebp - 0x2fc], 0x734895c4
mov dword [ebp - 0x134], 0
jmp 0x1005ab49
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 4
jge 0x1005ab65
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x894], 0xfff6
jmp 0x1005ab3c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x894]
mov dword [ebp - 0x904], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6b0]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x30b137d3
je 0x1005aba3
mov dword [ebp - 0x2ec], 1
jmp 0x1005abaa
and dword [ebp - 0x2ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x894]
cmp dword [ebp - 0x2ec], eax
jl 0x1005abcb
mov dword [ebp - 0x608], 1
jmp 0x1005abd2
and dword [ebp - 0x608], 0
cmp dword [ebp - 0x608], 0
jbe 0x1005abe7
mov dword [ebp - 0x2f4], 1
jmp 0x1005abee
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x914], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6b0]
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 4
jne 0x1005ac43
mov dword [ebp - 0x7b8], 1
jmp 0x1005ac4a
and dword [ebp - 0x7b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x894]
mov dword [ebp - 0x924], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x6b0]
sub ecx, 0x1690883
cmp dword [ebp + eax - 0x894], ecx
jl 0x1005ac8a
mov dword [ebp - 0x7c0], 1
jmp 0x1005ac91
and dword [ebp - 0x7c0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6b0]
mov dword [ebp - 0x92c], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xe4], 3
jmp 0x1005acc5
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x18
jle 0x1005ad37
mov dword [ebp - 0x5c], 2
jmp 0x1005acde
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1005ad1b
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ebp + ecx*4 - 0x6b0]
cmp dword [ebp + eax*4 - 0x6b0], ecx
je 0x1005ad06
mov dword [ebp - 0x618], 1
jmp 0x1005ad0d
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x7c8], eax
jmp 0x1005acd7
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1005ad35
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
jmp 0x1005acb8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x304]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x304], eax
jmp 0x1005aa6f
mov dword [ebp - 0x1ac], 0
jmp 0x1005ad70
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jge 0x1005ad8c
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0xa68], 0x8114
jmp 0x1005ad63
mov dword [ebp - 0x874], 5
mov dword [ebp - 0x870], 5
mov dword [ebp - 0x86c], 5
mov dword [ebp - 0x868], 5
mov dword [ebp - 0x934], 0xed23b618
mov dword [ebp - 0x93c], 0
mov dword [ebp - 0x984], 0x6ff23b1a
mov dword [ebp - 0x98c], 0xfffffffe
mov dword [ebp - 0x994], 1
mov dword [ebp - 0x99c], 0x165352f7
mov dword [ebp - 0x9a4], 0
mov dword [ebp - 0x9ac], 1
mov dword [ebp - 0x9b4], 0xbd0a7084
mov dword [ebp - 0x9bc], 0xffffffff
mov dword [ebp - 0x620], 0xfffffff6
mov dword [ebp - 0xa04], 0x8f6c
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x874], 0x3342eb9
mov eax, dword [ebp - 0x620]
dec eax
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 0x628], 0x3dfad5be
mov dword [ebp - 0x7f4], 0x51dd2e91
mov dword [ebp - 0x638], 0x2d38ca8c
mov dword [ebp - 0x334], 0xdfd99643
mov dword [ebp - 0x4e8], 0x14a3a6d7
mov dword [ebp - 4], 0
jmp 0x1005ae98
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x1005aeae
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x9cc], 1
jmp 0x1005ae91
mov dword [ebp - 4], 0
jmp 0x1005aebe
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 4
jge 0x1005aed4
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x6d0], 0xfffffffd
jmp 0x1005aeb7
mov dword [ebp - 4], 0
jmp 0x1005aee4
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x1005aefa
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x84], 0xcf1c
jmp 0x1005aedd
mov dword [ebp - 4], 0
jmp 0x1005af0a
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x1005af20
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x948], 0xfffffff8
jmp 0x1005af03
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x6d0], 2
jmp 0x1005af4e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6d0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x6d0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6d0], 0
jl 0x1005af79
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6d0]
cmp dword [ebp + eax*4 - 0x9cc], 0
je 0x1005af77
jmp 0x1005af79
jmp 0x1005af33
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x84], 0
je 0x1005afba
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x84], 0
je 0x1005afba
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6d0], 0
je 0x1005afba
xor eax, eax
inc eax
je 0x1005afba
mov dword [ebp - 0x30c], 1
jmp 0x1005afc1
and dword [ebp - 0x30c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
neg eax
cmp eax, dword [ebp - 0x30c]
jne 0x1005afe4
mov dword [ebp - 0x314], 1
jmp 0x1005afeb
and dword [ebp - 0x314], 0
mov dword [ebp - 0x628], 0xf0a9
mov eax, dword [ebp - 0x628]
cmp eax, dword [ebp - 0x314]
jge 0x1005b00f
mov dword [ebp - 0x630], 1
jmp 0x1005b016
and dword [ebp - 0x630], 0
cmp dword [ebp - 0x630], 0xfffffffb
jg 0x1005b02b
mov dword [ebp - 0x224], 1
jmp 0x1005b032
and dword [ebp - 0x224], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x224]
mov dword [ebp + eax - 0x948], ecx
cmp dword [ebp - 0x224], 0
je 0x1005b063
mov eax, 0x66193fe6
test eax, eax
je 0x1005b063
mov dword [ebp - 0x7ec], 1
jmp 0x1005b06a
and dword [ebp - 0x7ec], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7f4]
cmp dword [ebp + eax - 0x6d0], ecx
jg 0x1005b08b
mov dword [ebp - 0x31c], 1
jmp 0x1005b092
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x638], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0x638], eax
jl 0x1005b0bf
mov dword [ebp - 0x324], 1
jmp 0x1005b0c6
and dword [ebp - 0x324], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0x324], eax
jg 0x1005b0e7
mov dword [ebp - 0x640], 1
jmp 0x1005b0ee
and dword [ebp - 0x640], 0
cmp dword [ebp - 0x640], 0x4fa72d50
jne 0x1005b106
mov dword [ebp - 0x648], 1
jmp 0x1005b10d
and dword [ebp - 0x648], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9cc]
cmp eax, dword [ebp - 0x648]
je 0x1005b12e
mov dword [ebp - 0x330], 1
jmp 0x1005b135
and dword [ebp - 0x330], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
add eax, dword [ebp - 0x330]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x4e8], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6d0]
sub eax, dword [ebp - 0x4e8]
cmp eax, 1
jbe 0x1005b17e
mov dword [ebp - 0x33c], 1
jmp 0x1005b185
and dword [ebp - 0x33c], 0
cmp dword [ebp - 0x33c], 0
jge 0x1005b19a
mov dword [ebp - 0x4ec], 1
jmp 0x1005b1a1
and dword [ebp - 0x4ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0x4ec], eax
jge 0x1005b1c2
mov dword [ebp - 0x344], 1
jmp 0x1005b1c9
and dword [ebp - 0x344], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x344]
mov dword [ebp + eax - 0x6d0], ecx
mov dword [ebp - 0xf0], 0
jmp 0x1005b1f5
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x1005b211
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0xa68], 0x39ed
jmp 0x1005b1e8
mov dword [ebp - 0x1fc], 1
mov dword [ebp - 0x240], 0xd52a2848
mov dword [ebp - 0x354], 0xdf860956
mov dword [ebp - 0x804], 4
mov dword [ebp - 0x54], 0
jmp 0x1005b249
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1005b25f
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x1e0], 1
jmp 0x1005b242
mov dword [ebp - 0x54], 0
jmp 0x1005b26f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1005b285
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x7fc], 0xc0d133f2
jmp 0x1005b268
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1e0]
cmp dword [ebp + eax - 0x1e0], ecx
je 0x1005b2ad
mov dword [ebp - 0x35c], 1
jmp 0x1005b2b4
and dword [ebp - 0x35c], 0
mov dword [ebp - 0x1fc], 5
mov eax, dword [ebp - 0x1fc]
dec eax
jne 0x1005b2f0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e0], 0
jne 0x1005b2f0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e0], 0
jne 0x1005b2f0
and dword [ebp - 0x65c], 0
jmp 0x1005b2fa
mov dword [ebp - 0x65c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e0]
sub eax, dword [ebp - 0x65c]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x1e0]
cmp eax, 8
ja 0x1005b32b
mov dword [ebp - 0x34c], 1
jmp 0x1005b332
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
add eax, 4
jne 0x1005b34f
mov eax, 0x8112def9
test eax, eax
jne 0x1005b34f
and dword [ebp - 0x1f4], 0
jmp 0x1005b359
mov dword [ebp - 0x1f4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp + eax - 0x7fc], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f4]
sub ecx, dword [ebp + eax - 0x1e0]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x1e0]
jl 0x1005b39a
mov dword [ebp - 0x4f4], 1
jmp 0x1005b3a1
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 2
jle 0x1005b3ce
mov dword [ebp - 0x5c4], 1
jmp 0x1005b3d5
and dword [ebp - 0x5c4], 0
cmp dword [ebp - 0x5c4], 0xffffffff
jl 0x1005b3ea
mov dword [ebp - 0x80c], 1
jmp 0x1005b3f1
and dword [ebp - 0x80c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e0]
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0x35c], eax
jl 0x1005b41e
mov dword [ebp - 0x4fc], 1
jmp 0x1005b425
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0xdfe9
jge 0x1005b43d
mov dword [ebp - 0x364], 1
jmp 0x1005b444
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
shl eax, 3
mov dword [ebp - 0x804], eax
mov dword [ebp - 0x1fc], 0x491d0b6b
mov dword [ebp - 0x3c], 0x90ac204e
mov dword [ebp - 0x7c], 0xe229edca
mov dword [ebp - 0x114], 0xd5fba252
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x10], 0
jmp 0x1005b48f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1005b4a5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf8], 0xdec9
jmp 0x1005b488
mov dword [ebp - 0x10], 0
jmp 0x1005b4b5
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1005b4cb
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa44], 0xfffffffd
jmp 0x1005b4ae
mov dword [ebp - 0x10], 0
jmp 0x1005b4db
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1005b4f1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x81c], 0x46e9
jmp 0x1005b4d4
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x1005b609
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xa14], eax
cmp dword [ebp - 0x7c], 0xc657
jge 0x1005b51a
mov dword [ebp - 0x62c], 1
jmp 0x1005b521
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x62c], eax
jne 0x1005b538
mov dword [ebp - 0x36c], 1
jmp 0x1005b53f
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x36c], eax
jle 0x1005b556
mov dword [ebp - 0x504], 1
jmp 0x1005b55d
and dword [ebp - 0x504], 0
cmp dword [ebp - 0x504], 0x3d3b
jl 0x1005b575
mov dword [ebp - 0x374], 1
jmp 0x1005b57c
and dword [ebp - 0x374], 0
imul eax, dword [ebp - 0x374], 0xe7ad
cmp eax, dword [ebp - 0x7c]
je 0x1005b597
mov dword [ebp - 0x5cc], 1
jmp 0x1005b59e
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x5cc], eax
je 0x1005b5b5
mov dword [ebp - 0x37c], 1
jmp 0x1005b5bc
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x37c], eax
jge 0x1005b5d3
mov dword [ebp - 0x788], 1
jmp 0x1005b5da
and dword [ebp - 0x788], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
mov dword [ebp - 0xa1c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf8], 0
je 0x1005b609
mov dword [ebp - 0x50c], 1
jmp 0x1005b610
and dword [ebp - 0x50c], 0
cmp dword [ebp - 0x50c], 3
jb 0x1005b625
mov dword [ebp - 0x384], 1
jmp 0x1005b62c
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
sub eax, 0x5d9f20c7
cmp eax, 0xc1d99ea5
jbe 0x1005b656
mov dword [ebp - 0x684], 1
jmp 0x1005b65d
and dword [ebp - 0x684], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x684]
sub ecx, dword [ebp + eax - 0xf8]
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp + eax - 0xf8]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0xf8]
jge 0x1005b699
mov dword [ebp - 0x38c], 1
jmp 0x1005b6a0
and dword [ebp - 0x38c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x38c], eax
jge 0x1005b6c1
mov dword [ebp - 0x514], 1
jmp 0x1005b6c8
and dword [ebp - 0x514], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x514], eax
jg 0x1005b6e9
mov dword [ebp - 0x394], 1
jmp 0x1005b6f0
and dword [ebp - 0x394], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x394], eax
jl 0x1005b711
mov dword [ebp - 0x5d4], 1
jmp 0x1005b718
and dword [ebp - 0x5d4], 0
cmp dword [ebp - 0x5d4], 0xf30385d0
je 0x1005b8fd
mov dword [ebp - 0x7e4], 0x5cf455db
mov dword [ebp - 0xa24], 0xc2657a77
mov dword [ebp - 0x6f8], 0x7b249e3c
mov dword [ebp - 0x6f4], 0x90538e0e
mov dword [ebp - 0xa2c], 0xaa9b2235
mov dword [ebp - 0x13c], 0
jmp 0x1005b773
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jge 0x1005b78f
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0xa98], 0xc359
jmp 0x1005b766
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x9d8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa98], 0xd707
jle 0x1005b7b9
mov dword [ebp - 0x39c], 1
jmp 0x1005b7c0
and dword [ebp - 0x39c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x81c]
inc eax
mov dword [ebp - 0x22c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x22c]
mov dword [ebp + eax - 0x81c], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x22c]
mov dword [ebp + eax - 0xa44], ecx
mov eax, dword [ebp - 0x39c]
cmp eax, dword [ebp - 0x22c]
jl 0x1005b861
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xa08], eax
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x8b0], eax
xor eax, eax
je 0x1005b839
cmp dword [ebp - 0x114], 0
je 0x1005b839
mov dword [ebp - 0x51c], 1
jmp 0x1005b840
and dword [ebp - 0x51c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp eax, dword [ebp - 0x51c]
jl 0x1005b861
mov dword [ebp - 0x3a4], 1
jmp 0x1005b868
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 0xffffffff
ja 0x1005b87d
mov dword [ebp - 0x78c], 1
jmp 0x1005b884
and dword [ebp - 0x78c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
mov dword [ebp - 0x990], eax
mov dword [ebp - 0xb4], 0xbbb3
cmp dword [ebp - 0xb4], 0x2bd6
jge 0x1005b8c2
cmp dword [ebp - 0xb4], 0
je 0x1005b8c2
mov dword [ebp - 0x634], 1
jmp 0x1005b8c9
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x634]
neg eax
cmp eax, dword [ebp - 0x6f4]
jne 0x1005b8e5
mov dword [ebp - 0x3ac], 1
jmp 0x1005b8ec
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x7e4], eax
jmp 0x1005bab1
mov dword [ebp - 0x3c4], 1
mov dword [ebp - 0xb4], 0xffffffe8
jmp 0x1005b920
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xfffffff3
jge 0x1005bab1
mov dword [ebp - 0x664], 8
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x794], 0xffffffff
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x3c4], 0
je 0x1005b970
xor eax, eax
je 0x1005b970
mov dword [ebp - 0x524], 1
jmp 0x1005b977
and dword [ebp - 0x524], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b4]
imul ecx, dword [ebp - 0x524]
cmp dword [ebp + eax - 0x81c], ecx
jle 0x1005b99f
mov dword [ebp - 0x6fc], 1
jmp 0x1005b9a6
and dword [ebp - 0x6fc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf8], 0xffff
jne 0x1005b9c5
mov dword [ebp - 0x3b4], 1
jmp 0x1005b9cc
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x3b4], eax
jg 0x1005b9e3
mov dword [ebp - 0x5dc], 1
jmp 0x1005b9ea
and dword [ebp - 0x5dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp eax, dword [ebp - 0x5dc]
jg 0x1005ba0b
mov dword [ebp - 0x3bc], 1
jmp 0x1005ba12
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0x3bc], 0xfffffff7
jae 0x1005ba27
mov dword [ebp - 0x52c], 1
jmp 0x1005ba2e
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x52c], eax
jg 0x1005ba4a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x81c], 0
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x8b8], eax
mov eax, dword [ebp - 0x1b4]
add eax, 0x19d465f
je 0x1005ba78
mov eax, 0x3bb8
test eax, eax
je 0x1005ba78
mov dword [ebp - 0x3cc], 1
jmp 0x1005ba7f
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x664]
cmp dword [ebp - 0x3cc], eax
jl 0x1005ba99
mov dword [ebp - 0x534], 1
jmp 0x1005baa0
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x794], eax
jmp 0x1005b913
mov dword [ebp - 0x70], 0xfffffff9
mov dword [ebp - 0xbc], 0xbca0becc
mov dword [ebp - 0x104], 0xfe0a8eac
mov dword [ebp - 0x70c], 0x4c90d297
mov dword [ebp - 0x9f8], 0xfffffff8
mov dword [ebp - 0x1bc], 0xffffffff
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0x8c0], 0x790e8648
mov dword [ebp - 0x998], 0xffffffff
mov dword [ebp - 0x8c8], 0
mov dword [ebp - 0x7a4], 0x2038e85a
mov dword [ebp - 0xa20], 9
mov dword [ebp - 0x8d0], 0xffffffff
mov dword [ebp - 0x7e0], 0x9fe5
mov dword [ebp - 0x8a8], 0xffffffff
mov dword [ebp - 0x8d8], 0x74e80031
mov dword [ebp - 0x11c], 0xfffffff6
mov dword [ebp - 0x230], 0x68451f1e
mov dword [ebp - 0x204], 0xffffffff
mov dword [ebp - 0x704], 0x3132d683
mov dword [ebp - 0x71c], 9
mov dword [ebp - 0x144], 0
jmp 0x1005bb99
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 3
jge 0x1005bbb5
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0xa5c], 0x3588c556
jmp 0x1005bb8c
mov dword [ebp - 0x104], 0
jmp 0x1005bbce
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xd
jg 0x1005bbf1
mov byte [ebp - 0xca], 0
movzx eax, byte [ebp - 0xca]
test eax, eax
je 0x1005bbef
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
jmp 0x1005bbc1
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xa00], eax
mov dword [ebp - 0x204], 0x3ca4d9a5
cmp dword [ebp - 0x204], 0
jne 0x1005bc22
cmp dword [ebp - 0x204], 0
jne 0x1005bc22
and dword [ebp - 0x3d4], 0
jmp 0x1005bc2c
mov dword [ebp - 0x3d4], 1
mov eax, dword [ebp - 0x704]
cmp dword [ebp - 0x3d4], eax
jle 0x1005bc46
mov dword [ebp - 0x3e4], 1
jmp 0x1005bc4d
and dword [ebp - 0x3e4], 0
xor eax, eax
inc eax
je 0x1005bc67
cmp dword [ebp - 0x7e0], 0
je 0x1005bc67
mov dword [ebp - 0x5e4], 1
jmp 0x1005bc6e
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x5e4]
sub eax, dword [ebp - 0x11c]
mov dword [ebp - 0x3dc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp + eax - 0xa5c], ecx
cmp dword [ebp - 0x3dc], 0xfff9
jne 0x1005bcab
mov dword [ebp - 0x53c], 1
jmp 0x1005bcb2
and dword [ebp - 0x53c], 0
cmp dword [ebp - 0x53c], 0
jne 0x1005bcc7
mov dword [ebp - 0x63c], 1
jmp 0x1005bcce
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x230]
add eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 0x63c]
sub eax, dword [ebp - 0x70c]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x79c]
cmp eax, dword [ebp - 0x714]
je 0x1005bd19
mov dword [ebp - 0x800], 1
jmp 0x1005bd20
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x8e0], eax
cmp dword [ebp - 0x7a4], 0
je 0x1005bd58
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1005bd53
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
jmp 0x1005bdde
mov dword [ebp - 0x11c], 2
jmp 0x1005bd71
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xffffffef
jge 0x1005bdde
mov dword [ebp - 0x1bc], 0x11
jmp 0x1005bd93
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x14
jg 0x1005bddc
mov dword [ebp - 0x1c4], 0
jmp 0x1005bdb5
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x13
jle 0x1005bdda
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x1005bdd8
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
jmp 0x1005bda8
jmp 0x1005bd86
jmp 0x1005bd64
mov dword [ebp - 0x7e8], 0
mov dword [ebp - 0x3c], 0
jmp 0x1005bdf8
cmp dword [ebp - 0x3c], 0xffffffef
je 0x1005c58c
mov dword [ebp - 0x1c], 0xfebaeef2
mov dword [ebp - 0x44], 0
jmp 0x1005be19
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x1005be2f
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x6c0], 0x5711
jmp 0x1005be12
mov dword [ebp - 0x44], 0
jmp 0x1005be3f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1005be55
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xa74], 0x85ba5616
jmp 0x1005be38
mov dword [ebp - 0x1c], 3
jmp 0x1005be65
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1005c06f
mov dword [ebp - 0x198], 0
jmp 0x1005be88
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x1005bea4
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x83c], 0
jmp 0x1005be7b
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x6c0], 0x9e923e64
jae 0x1005bec0
mov dword [ebp - 0x404], 1
jmp 0x1005bec7
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x6c0], 0
je 0x1005bff5
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x83c], 0xfffffffd
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x6c0]
mov ecx, dword [ebp - 0x1c]
add eax, dword [ebp + ecx*4 - 0x6c0]
cmp eax, dword [ebp - 0x1c]
je 0x1005bf0e
mov dword [ebp - 0x3ec], 1
jmp 0x1005bf15
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
sub eax, 5
je 0x1005bf35
mov eax, 0x208a
test eax, eax
je 0x1005bf35
mov dword [ebp - 0x544], 1
jmp 0x1005bf3c
and dword [ebp - 0x544], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6c0]
cmp dword [ebp - 0x544], eax
jg 0x1005bf5d
mov dword [ebp - 0x3f4], 1
jmp 0x1005bf64
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x6c0]
cmp dword [ebp - 0x3f4], eax
jge 0x1005bf92
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x83c], 0
je 0x1005bf92
mov dword [ebp - 0x5ec], 1
jmp 0x1005bf99
and dword [ebp - 0x5ec], 0
cmp dword [ebp - 0x5ec], 0xb689
jge 0x1005bfb1
mov dword [ebp - 0x3fc], 1
jmp 0x1005bfb8
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x3fc]
sub ecx, dword [ebp + eax*4 - 0x6c0]
je 0x1005bfce
cmp dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x6c0]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x6c0]
test eax, eax
je 0x1005bff5
mov dword [ebp - 0x54c], 1
jmp 0x1005bffc
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0x887
je 0x1005c014
mov dword [ebp - 0x67c], 1
jmp 0x1005c01b
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x404]
cmp eax, dword [ebp - 0x67c]
jg 0x1005c035
mov dword [ebp - 0x40c], 1
jmp 0x1005c03c
and dword [ebp - 0x40c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x40c]
mov dword [ebp + eax - 0xa74], ecx
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x1005c06a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
jmp 0x1005be5e
mov dword [ebp - 0x1d8], 0xf3d37a5b
mov dword [ebp - 0x48], 0
jmp 0x1005c089
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1005c09f
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x260], 0xe0648261
jmp 0x1005c082
mov dword [ebp - 0x48], 0
jmp 0x1005c0af
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x1005c0c5
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x884], 0x6df37d45
jmp 0x1005c0a8
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x260], 0
jmp 0x1005c0f3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x260], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x260], 0xffffffe3
jge 0x1005c17a
mov dword [ebp - 0x118], 1
mov dword [ebp - 0x118], 3
jmp 0x1005c126
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x1005c169
mov dword [ebp - 0x158], 0x7e4fc22
mov dword [ebp - 0x158], 3
jmp 0x1005c152
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jl 0x1005c167
mov dword [ebp - 0x1d8], 0xffffffff
jmp 0x1005c145
jmp 0x1005c119
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x1d8], eax
jmp 0x1005c0d8
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1d8]
cmp dword [ebp + eax - 0x884], ecx
jle 0x1005c19b
mov dword [ebp - 0x554], 1
jmp 0x1005c1a2
and dword [ebp - 0x554], 0
cmp dword [ebp - 0x554], 0x55145ccb
jg 0x1005c1ba
mov dword [ebp - 0x41c], 1
jmp 0x1005c1c1
and dword [ebp - 0x41c], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x884]
cmp dword [ebp + eax - 0x884], ecx
jle 0x1005c1e9
mov dword [ebp - 0x414], 1
jmp 0x1005c1f0
and dword [ebp - 0x414], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x260]
add eax, dword [ebp - 0x414]
cmp eax, dword [ebp - 0x1d8]
jne 0x1005c217
mov dword [ebp - 0x5f4], 1
jmp 0x1005c21e
and dword [ebp - 0x5f4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x884]
cmp dword [ebp - 0x5f4], eax
jl 0x1005c23e
mov dword [ebp - 0x55c], 1
jmp 0x1005c245
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x41c]
cmp eax, dword [ebp - 0x55c]
je 0x1005c25f
mov dword [ebp - 0x424], 1
jmp 0x1005c266
and dword [ebp - 0x424], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x424]
mov dword [ebp + eax - 0x260], ecx
mov dword [ebp - 0x56c], 0
mov dword [ebp - 0x72c], 0
mov dword [ebp - 0x160], 0
jmp 0x1005c2a6
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x1005c2c2
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x250], 0
jmp 0x1005c299
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1005c2ee
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x70], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x250], 1
jne 0x1005c310
mov dword [ebp - 0x644], 1
jmp 0x1005c317
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x644], eax
jl 0x1005c334
cmp dword [ebp - 0x3c], 0
je 0x1005c334
mov dword [ebp - 0x724], 1
jmp 0x1005c33b
and dword [ebp - 0x724], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x250], 4
jl 0x1005c357
mov dword [ebp - 0x42c], 1
jmp 0x1005c35e
and dword [ebp - 0x42c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x42c]
sub ecx, dword [ebp + eax - 0x250]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x250]
jg 0x1005c38c
mov dword [ebp - 0x564], 1
jmp 0x1005c393
and dword [ebp - 0x564], 0
cmp dword [ebp - 0x564], 0xbe4438b
jne 0x1005c42f
mov dword [ebp - 0x1a0], 0
jmp 0x1005c3bc
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x1005c3d8
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x954], 0x2206
jmp 0x1005c3af
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x1005c402
push 0
push 0xcb4
push 0
push 0
push 0x1964
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x70], 0
jmp 0x1005c412
cmp dword [ebp - 0x70], 0xfffffff0
je 0x1005c42a
mov dword [ebp - 0x168], 0
jmp 0x1005c448
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 1
jge 0x1005c464
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x434], 0x6de6b933
jmp 0x1005c43b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x434], 0
jne 0x1005c4f8
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x8e8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x434]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x250]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0xbc]
imul eax, eax, 0xab72
test eax, eax
je 0x1005c4d8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x250], 0
je 0x1005c4d8
and dword [ebp - 0x5fc], 0
xor eax, eax
sub eax, dword [ebp - 0x5fc]
add eax, dword [ebp - 0xbc]
jne 0x1005c4f8
mov dword [ebp - 0x43c], 1
mov eax, dword [ebp - 0x56c]
cmp eax, dword [ebp - 0x43c]
jl 0x1005c51c
mov dword [ebp - 0x444], 1
jmp 0x1005c523
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x56c]
cmp dword [ebp - 0x444], eax
jl 0x1005c53d
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x214], 0xd8143836
mov dword [ebp - 0x6c], 0x9b4af7bd
mov dword [ebp - 0x73c], 0x5199242
mov dword [ebp - 0x1c0], 0
jmp 0x1005c5c7
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 4
jge 0x1005c5e3
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0xae0], 0xffffffff
jmp 0x1005c5ba
mov dword [ebp - 0x20], 0
jmp 0x1005c5f3
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x19
je 0x1005c9a6
mov dword [ebp - 0x20c], 2
mov dword [ebp - 0x234], 0x54dbbe5
mov dword [ebp - 0x78], 0xffff
mov dword [ebp - 0x20c], 0x81d2
cmp dword [ebp - 0x20c], 0xd94b
je 0x1005c63a
mov dword [ebp - 0x454], 1
jmp 0x1005c641
and dword [ebp - 0x454], 0
cmp dword [ebp - 0x234], 0
jne 0x1005c6ab
cmp dword [ebp - 0x234], 0xb541
jle 0x1005c662
mov dword [ebp - 0x44c], 1
jmp 0x1005c669
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x214], eax
jne 0x1005c68c
mov dword [ebp - 0x7ac], 1
jmp 0x1005c693
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x9d4], eax
cmp dword [ebp - 0x78], 4
jbe 0x1005c6ab
and dword [ebp - 0x574], 0
jmp 0x1005c6b5
mov dword [ebp - 0x574], 1
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x574]
imul eax, dword [ebp - 0x20]
cmp eax, 1
je 0x1005c6d3
mov dword [ebp - 0x604], 1
jmp 0x1005c6da
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x454]
cmp eax, dword [ebp - 0x604]
jne 0x1005c6f4
mov dword [ebp - 0x45c], 1
jmp 0x1005c6fb
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x45c], eax
jne 0x1005c712
mov dword [ebp - 0x57c], 1
jmp 0x1005c719
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x57c], eax
jge 0x1005c730
mov dword [ebp - 0x464], 1
jmp 0x1005c737
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x78]
je 0x1005c761
cmp dword [ebp - 0x20c], 0
je 0x1005c75c
jmp 0x1005c9a6
jmp 0x1005c987
mov dword [ebp - 0x48c], 0x9f3c5a4a
mov dword [ebp - 0x744], 1
mov dword [ebp - 0x170], 0
jmp 0x1005c78e
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 4
jge 0x1005c7aa
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x6ec], 0x6709e149
jmp 0x1005c781
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6ec]
cmp dword [ebp - 0x20], eax
jle 0x1005c7c8
mov dword [ebp - 0x64c], 1
jmp 0x1005c7cf
and dword [ebp - 0x64c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6ec]
cmp eax, dword [ebp - 0x64c]
jge 0x1005c7f0
mov dword [ebp - 0x46c], 1
jmp 0x1005c7f7
and dword [ebp - 0x46c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6ec], 0
jne 0x1005c820
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6ec], 0
jne 0x1005c820
and dword [ebp - 0x734], 0
jmp 0x1005c82a
mov dword [ebp - 0x734], 1
cmp dword [ebp - 0x46c], 0xffffffff
je 0x1005c83f
mov dword [ebp - 0x584], 1
jmp 0x1005c846
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x78], 6
ja 0x1005c864
mov dword [ebp - 0x808], 1
jmp 0x1005c86b
and dword [ebp - 0x808], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6ec]
mov dword [ebp - 0x8f0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6ec]
inc eax
inc eax
cmp eax, dword [ebp - 0x73c]
je 0x1005c8a0
mov dword [ebp - 0x7b4], 1
jmp 0x1005c8a7
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x9b0], eax
cmp dword [ebp - 0x744], 0
je 0x1005c8c5
mov dword [ebp - 0x474], 1
jmp 0x1005c8cc
and dword [ebp - 0x474], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6ec]
cmp eax, dword [ebp - 0x474]
jne 0x1005c8ed
mov dword [ebp - 0x60c], 1
jmp 0x1005c8f4
and dword [ebp - 0x60c], 0
cmp dword [ebp - 0x60c], 0xf559cde8
jb 0x1005c90c
mov dword [ebp - 0x47c], 1
jmp 0x1005c913
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x47c], eax
je 0x1005c92d
mov dword [ebp - 0x58c], 1
jmp 0x1005c934
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x1005c958
cmp dword [ebp - 0x214], 0
je 0x1005c958
mov dword [ebp - 0x484], 1
jmp 0x1005c95f
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 4
jle 0x1005c974
mov dword [ebp - 0x690], 1
jmp 0x1005c97b
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x48c], eax
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1005c9a1
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1005c5ec
mov dword [ebp - 0x6c], 0
jmp 0x1005c9b6
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffff9
je 0x1005ca5c
mov dword [ebp - 0x8f8], 0xa8e4
mov dword [ebp - 0x9dc], 0x7b1d0057
mov dword [ebp - 0x594], 1
mov dword [ebp - 0x1a8], 0
jmp 0x1005c9f7
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jge 0x1005ca13
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0xaac], 1
jmp 0x1005c9ea
mov dword [ebp - 0x20], 3
jmp 0x1005ca23
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1005ca4a
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x1005ca48
push 0
push 0x25d9
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
jmp 0x1005ca1c
mov eax, dword [ebp - 0x594]
dec eax
mov dword [ebp - 0x594], eax
jmp 0x1005c9af
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x110], 8
mov dword [ebp - 0x178], 0
jmp 0x1005ca86
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 3
jge 0x1005caa2
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x834], 0xe1757117
jmp 0x1005ca79
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x834], 0xffffffff
jmp 0x1005cad0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x834]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x834], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x834], 0xfffffff9
jne 0x1005cbdd
mov dword [ebp - 0x1d0], 0x5f1dbecc
mov dword [ebp - 0x7f0], 0x3e64f147
mov dword [ebp - 0x1d0], 0
jmp 0x1005cb11
mov eax, dword [ebp - 0x1d0]
dec eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0xffffffec
jg 0x1005cbd8
mov dword [ebp - 0x88], 0x96c7979b
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x110], 0xa
jmp 0x1005cb4d
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x19
jne 0x1005cbd3
mov dword [ebp - 0x180], 0
jmp 0x1005cb6f
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x1005cb8b
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x74c], 0
jmp 0x1005cb62
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x88], 0
jmp 0x1005cbb1
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jg 0x1005cbce
mov eax, dword [ebp - 0x88]
cmp dword [ebp + eax*4 - 0x74c], 0
je 0x1005cbcc
jmp 0x1005cbce
jmp 0x1005cba4
jmp 0x1005cb40
jmp 0x1005cb04
jmp 0x1005cab5
mov dword [ebp - 8], 0xba7b
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x108], 0x35a7ab5b
mov dword [ebp - 0x18], 0
jmp 0x1005cc08
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1005cc1b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x30], 0xffffffff
jmp 0x1005cc01
mov dword [ebp - 0x18], 0
jmp 0x1005cc2b
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1005cc41
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x100], 8
jmp 0x1005cc24
mov dword [ebp - 0x18], 0
jmp 0x1005cc51
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1005cc67
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa8c], 0
jmp 0x1005cc4a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
jne 0x1005cd3a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 8], eax
jle 0x1005cc93
mov dword [ebp - 0x494], 1
jmp 0x1005cc9a
and dword [ebp - 0x494], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp eax, dword [ebp - 0x494]
je 0x1005ccc5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
je 0x1005ccc5
mov dword [ebp - 0x614], 1
jmp 0x1005cccc
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x614]
add eax, 0x1c58
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x30]
jg 0x1005ccef
mov dword [ebp - 0x49c], 1
jmp 0x1005ccf6
and dword [ebp - 0x49c], 0
cmp dword [ebp - 0x49c], 5
je 0x1005cd15
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
jne 0x1005cd15
and dword [ebp - 0x59c], 0
jmp 0x1005cd1f
mov dword [ebp - 0x59c], 1
mov eax, dword [ebp - 0x59c]
add eax, 0x28d9ba5f
cmp eax, 0xc516
je 0x1005cd3a
and dword [ebp - 0x4a4], 0
jmp 0x1005cd44
mov dword [ebp - 0x4a4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x4a4], eax
jne 0x1005cd68
cmp dword [ebp - 8], 0
je 0x1005cd68
mov dword [ebp - 0x654], 1
jmp 0x1005cd6f
and dword [ebp - 0x654], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x654], eax
jle 0x1005cd8d
mov dword [ebp - 0x4ac], 1
jmp 0x1005cd94
and dword [ebp - 0x4ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov ecx, dword [ebp - 0x328]
add ecx, dword [ebp - 0x4ac]
imul eax, ecx
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x100], eax
mov dword [ebp - 8], 1
jmp 0x1005cdca
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x1005d070
mov dword [ebp - 0x4c4], 0xffffffff
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa8c], 0xfffffffd
jl 0x1005cdfa
mov dword [ebp - 0x4b4], 1
jmp 0x1005ce01
and dword [ebp - 0x4b4], 0
xor eax, eax
jne 0x1005ce1b
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x100], 0
jne 0x1005ce1b
and dword [ebp - 0x5a4], 0
jmp 0x1005ce25
mov dword [ebp - 0x5a4], 1
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x100]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x5a4]
jne 0x1005ce59
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x100], 0
jne 0x1005ce59
and dword [ebp - 0x61c], 0
jmp 0x1005ce63
mov dword [ebp - 0x61c], 1
mov eax, dword [ebp - 0x4b4]
cmp eax, dword [ebp - 0x61c]
jle 0x1005ce7d
mov dword [ebp - 0x4bc], 1
jmp 0x1005ce84
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x100]
cmp eax, dword [ebp - 0x4bc]
je 0x1005cea2
mov dword [ebp - 0x5ac], 1
jmp 0x1005cea9
and dword [ebp - 0x5ac], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5ac]
mov dword [ebp + eax - 0x100], ecx
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x100], 0xc1e183a0
mov eax, 0xc1e183a0
test eax, eax
je 0x1005d02e
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x4c4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x4c4], eax
jl 0x1005cf01
mov dword [ebp - 0x674], 1
jmp 0x1005cf08
and dword [ebp - 0x674], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x100]
cmp dword [ebp - 0x674], eax
jge 0x1005cf29
mov dword [ebp - 0x4cc], 1
jmp 0x1005cf30
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x100]
imul eax, dword [ebp - 0x4cc]
test eax, eax
je 0x1005cf58
push 5
pop eax
test eax, eax
je 0x1005cf58
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x100]
cmp dword [ebp - 0x5b4], eax
jne 0x1005cf7d
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x338], eax
jle 0x1005d058
mov eax, 0x99d0
test eax, eax
je 0x1005d058
mov dword [ebp - 0x340], 1
jmp 0x1005d05f
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x108], eax
jmp 0x1005cdc3
mov dword [ebp - 0xe8], 0xfffa
mov dword [ebp - 0x80], 0x5b9b55bb
mov dword [ebp - 0x7bc], 0xb50f6b3
mov dword [ebp - 0x80], 0xe
jmp 0x1005d09b
cmp dword [ebp - 0x80], 0xffffffe8
jl 0x1005d1ed
mov dword [ebp - 0x900], 0x16652d0d
mov dword [ebp - 0x50], 0
jmp 0x1005d0bf
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1005d0d5
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x854], 0xfffffff9
jmp 0x1005d0b8
mov dword [ebp - 0x50], 0
jmp 0x1005d0e5
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1005d0fb
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x848], 0xf7cd95da
jmp 0x1005d0de
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x9b8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x854]
mov dword [ebp - 0x908], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x854], 0
jne 0x1005d139
mov eax, 0x3a23fe5e
test eax, eax
jne 0x1005d139
and dword [ebp - 0x350], 0
jmp 0x1005d143
mov dword [ebp - 0x350], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x848]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x848], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x9e4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x848]
shl eax, 3
cmp eax, dword [ebp - 0x80]
jle 0x1005d186
mov dword [ebp - 0x348], 1
jmp 0x1005d18d
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x348], eax
jl 0x1005d1a4
mov dword [ebp - 0x358], 1
jmp 0x1005d1ab
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x350]
cmp eax, dword [ebp - 0x358]
je 0x1005d1d5
mov dword [ebp - 0x768], 0x2971c1e
mov dword [ebp - 0x24], 0x14a02569
mov dword [ebp - 0x408], 0xfffffffc
mov dword [ebp - 0x21c], 0xffffffff
mov dword [ebp - 0xdc], 0x211521fa
mov dword [ebp - 0x450], 5
mov dword [ebp - 0x14], 0
jmp 0x1005d236
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1005d24c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x190], 0xfffc
jmp 0x1005d22f
mov dword [ebp - 0x14], 0
jmp 0x1005d25c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1005d272
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x698], 0
jmp 0x1005d255
mov dword [ebp - 0x14], 0
jmp 0x1005d282
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1005d298
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8c], 0x93e75cb5
jmp 0x1005d27b
mov dword [ebp - 0x24], 0
jmp 0x1005d2a8
cmp dword [ebp - 0x24], 1
jge 0x1005d2be