Function at 0x1000f22e
Capabilities:
Check for unmoving mouse cursor
Read clipboard data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100245b6
mov eax, dword fs:[0]
push eax
sub esp, 0x824
mov eax, dword [0x1002d178]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x244], 0xffffffff
mov dword [ebp - 0x6dc], 0xffffffff
mov dword [ebp - 0x5f8], 0x82104667
mov dword [ebp - 0x244], 2
jmp 0x1000f298
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 6
je 0x1000f347
mov dword [ebp - 0x24c], 0xeede0b40
mov dword [ebp - 0x684], 0xa7b5cf1c
mov dword [ebp - 0x24c], 0xfffffffa
jmp 0x1000f2d2
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x17
jl 0x1000f342
push 3
lea ecx, [ebp - 0x740]
call fcn.10005bc8
and dword [ebp - 4], 0
mov dword [ebp - 0x254], 0
jmp 0x1000f305
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 3
jge 0x1000f327
push dword [ebp - 0x254]
lea ecx, [ebp - 0x740]
call fcn.10005c66
mov dword [eax], 9
jmp 0x1000f2f8
mov dword [ebp - 0x5f8], 0xab55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x740]
call fcn.10005c4a
jmp 0x1000f2c5
jmp 0x1000f28b
mov dword [ebp - 0xc0], 0x63be4b40
mov dword [ebp - 0xbc], 0x63be4b3e
mov dword [ebp - 0xb8], 0x63be4b47
mov dword [ebp - 0xb4], 0x63be4b33
mov dword [ebp - 0xb0], 0x63be4b4f
mov dword [ebp - 0xac], 0x63be4b3a
mov dword [ebp - 0xa8], 0x63be4b4c
mov dword [ebp - 0xa4], 0x63be4b45
mov dword [ebp - 0xa0], 0x63be4b3f
mov dword [ebp - 0x9c], 0x63be4b43
mov dword [ebp - 0x98], 0x63be4b54
mov dword [ebp - 0x94], 0x63be4b53
mov dword [ebp - 0x90], 0x63be4b50
mov dword [ebp - 0x8c], 0x63be4b46
mov dword [ebp - 0x88], 0x63be4b32
mov dword [ebp - 0x84], 0x63be4b44
mov dword [ebp - 0x80], 0x63be4b55
mov dword [ebp - 0x7c], 0x63be4b4d
mov dword [ebp - 0x78], 0x63be4b3d
mov dword [ebp - 0x74], 0x63be4b06
mov dword [ebp - 0x70], 0x63be4b4e
mov dword [ebp - 0x6c], 0x63be4b4a
mov dword [ebp - 0x68], 0x63be4b30
mov dword [ebp - 0x64], 0x63be4b52
mov dword [ebp - 0x60], 0x63be4b48
mov dword [ebp - 0x5c], 0x63be4b06
mov dword [ebp - 0x58], 0x63be4b06
mov dword [ebp - 0x1d4], 0xb58e
push 2
lea ecx, [ebp - 0x644]
call fcn.10005bc8
mov dword [ebp - 4], 1
mov dword [ebp - 0x25c], 0
jmp 0x1000f46b
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 2
jge 0x1000f48d
push dword [ebp - 0x25c]
lea ecx, [ebp - 0x644]
call fcn.10005c66
mov dword [eax], 0x9e57ad95
jmp 0x1000f45e
mov edi, dword [ebp - 0x1d4]
push 0
lea ecx, [ebp - 0x644]
call fcn.10005c66
mov dword [eax], edi
mov dword [ebp - 0x1d4], 0
jmp 0x1000f4bb
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 1
jg 0x1000f50c
mov dword [ebp - 0x264], 0xea122098
mov dword [ebp - 0x264], 0
jmp 0x1000f4e7
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 1
jg 0x1000f50a
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x644]
call fcn.10005c66
cmp dword [eax], 0
je 0x1000f508
jmp 0x1000f50a
jmp 0x1000f4da
jmp 0x1000f4ae
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x644]
call fcn.10005c4a
movzx eax, byte [0x1003256c]
test eax, eax
je 0x1000f52b
jmp 0x10012b4e
mov dword [ebp - 0x274], 0xffffffff
mov dword [ebp - 0x6a0], 0xadb2bc40
mov dword [ebp - 0x6a8], 0x658edfe0
mov dword [ebp - 0x6b0], 0
mov dword [ebp - 0x6b8], 0x59ec1348
mov dword [ebp - 0x6c0], 0xfffffff6
mov dword [ebp - 0x6c8], 0xffffffff
mov dword [ebp - 0x26c], 0
jmp 0x1000f58a
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jge 0x1000f5a6
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x124], 0xfffffffa
jmp 0x1000f57d
mov dword [ebp - 0x274], 0x1a
jmp 0x1000f5bf
mov eax, dword [ebp - 0x274]
dec eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0xffffffe3
je 0x1000f732
mov dword [ebp - 0x284], 0xffffffff
mov dword [ebp - 0x6d0], 0x1da622a1
mov dword [ebp - 0x6d8], 0xfffffffc
mov dword [ebp - 0x6e0], 0xd91509cf
mov dword [ebp - 0x6e8], 0xcb1a
mov dword [ebp - 0x6f0], 0x8461e707
mov dword [ebp - 0x6f8], 0x16488a97
push 1
lea ecx, [ebp - 0x750]
call fcn.10005bc8
mov dword [ebp - 4], 2
mov dword [ebp - 0x300], 0xc2a41b87
mov dword [ebp - 0x27c], 0
jmp 0x1000f649
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 1
jge 0x1000f66b
push dword [ebp - 0x27c]
lea ecx, [ebp - 0x750]
call fcn.10005c66
mov dword [eax], 1
jmp 0x1000f63c
mov byte [ebp - 0x1a8], 0
movzx eax, byte [ebp - 0x1a8]
test eax, eax
je 0x1000f685
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 0x284], 0xffffffe3
jmp 0x1000f69e
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x12
jle 0x1000f71e
mov dword [ebp - 0x5e0], 0
mov dword [ebp - 0x700], 0xcb8ce3e6
mov dword [ebp - 0x708], 0x9e672ca3
mov dword [ebp - 0x710], 8
mov dword [ebp - 0x718], 1
mov dword [ebp - 0x720], 0xe008fb0b
mov dword [ebp - 0x728], 2
mov dword [ebp - 0x730], 0xfffffffd
mov dword [ebp - 0x7c8], 0x815f8425
cmp dword [ebp - 0x5e0], 0
je 0x1000f70c
jmp 0x1000f71e
mov edi, dword [ebp - 0x300]
dec edi
mov dword [ebp - 0x300], edi
jmp 0x1000f691
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x750]
call fcn.10005c4a
jmp 0x1000f5b2
mov byte [ebp - 0x1a7], 0
movzx eax, byte [ebp - 0x1a7]
test eax, eax
je 0x1000f74c
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov byte [0x1003256c], 1
mov dword [ebp - 0x7d0], 0
mov dword [ebp - 0x7d8], 0x97632667
mov dword [ebp - 0x7e0], 0xacd79536
push 2
lea ecx, [ebp - 0x760]
call fcn.10005bc8
mov dword [ebp - 4], 3
mov dword [ebp - 0x7e8], 0xab6e
mov dword [ebp - 0xe0], 0xfffffff9
mov dword [ebp - 0xdc], 0xfffffff9
mov dword [ebp - 0xd8], 0xfffffff9
mov dword [ebp - 0xd4], 0xfffffff9
mov dword [ebp - 0x49c], 0x3cc9
mov dword [ebp - 0x28c], 0
jmp 0x1000f7da
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 2
jge 0x1000f7fc
push dword [ebp - 0x28c]
lea ecx, [ebp - 0x760]
call fcn.10005c66
mov dword [eax], 0xfffffffe
jmp 0x1000f7cd
mov eax, dword [ebp - 0x49c]
inc eax
mov dword [ebp - 0x49c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x760]
call fcn.10005c4a
push 0x12
call fcn.1000ba27
pop edi
mov ecx, eax
call fcn.10015865
push eax
call fcn.1000da4e
pop ecx
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x168], 0xf1dbeccc
mov dword [ebp - 0x560], 0xffff
mov dword [ebp - 0x2a8], 0xfffffff6
mov dword [ebp - 0x520], 0x7a9d2e81
mov dword [ebp - 0x2d4], 0x93208af0
mov dword [ebp - 0x530], 1
mov dword [ebp - 0x540], 8
mov dword [ebp - 0x548], 0xffffffff
mov dword [ebp - 0x5e4], 0x5749
cmp dword [ebp - 0x168], 0x495231fb
je 0x1000f8a6
mov dword [ebp - 0x4a4], 1
jmp 0x1000f8ad
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 0xffffffff
jb 0x1000f8c8
cmp dword [ebp - 0x168], 0
jne 0x1000f8c8
and dword [ebp - 0x4ac], 0
jmp 0x1000f8d2
mov dword [ebp - 0x4ac], 1
mov esi, dword [ebp - 0x4ac]
mov dword [ebp - 0x2a8], esi
mov edi, dword [ebp - 0x168]
cmp dword [ebp - 0x2a8], edi
jge 0x1000f8f8
mov dword [ebp - 0x510], 1
jmp 0x1000f8ff
and dword [ebp - 0x510], 0
mov edi, dword [ebp - 0x168]
cmp dword [ebp - 0x510], edi
jg 0x1000f922
cmp dword [ebp - 0x168], 0
je 0x1000f922
mov dword [ebp - 0x518], 1
jmp 0x1000f929
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x520], eax
mov edi, dword [ebp - 0x2d4]
cmp dword [ebp - 0x520], edi
je 0x1000f94f
mov dword [ebp - 0x528], 1
jmp 0x1000f956
and dword [ebp - 0x528], 0
mov esi, dword [ebp - 0x528]
mov dword [ebp - 0x530], esi
mov esi, dword [ebp - 0x2d4]
cmp dword [ebp - 0x530], esi
jl 0x1000f97c
mov dword [ebp - 0x538], 1
jmp 0x1000f983
and dword [ebp - 0x538], 0
mov edi, dword [ebp - 0x538]
mov dword [ebp - 0x540], edi
mov esi, dword [ebp - 0x540]
add esi, dword [ebp - 0x2d4]
mov dword [ebp - 0x548], esi
je 0x1000f9b8
mov esi, 0x7af9
test esi, esi
je 0x1000f9b8
mov dword [ebp - 0x550], 1
jmp 0x1000f9bf
and dword [ebp - 0x550], 0
mov esi, dword [ebp - 0x168]
cmp dword [ebp - 0x550], esi
je 0x1000f9d9
mov dword [ebp - 0x558], 1
jmp 0x1000f9e0
and dword [ebp - 0x558], 0
mov edi, dword [ebp - 0x168]
cmp edi, dword [ebp - 0x558]
jne 0x1000f9fa
mov dword [ebp - 0x568], 1
jmp 0x1000fa01
and dword [ebp - 0x568], 0
mov dword [ebp - 0x560], 0xb7928fbc
mov edi, dword [ebp - 0x168]
add edi, dword [ebp - 0x560]
cmp edi, dword [ebp - 0x568]
jg 0x1000fa2b
mov dword [ebp - 0x54c], 1
jmp 0x1000fa32
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0
jle 0x1000fa47
mov dword [ebp - 0x430], 1
jmp 0x1000fa4e
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x430], eax
je 0x1000fa68
mov dword [ebp - 0x494], 1
jmp 0x1000fa6f
and dword [ebp - 0x494], 0
mov edi, dword [ebp - 0x168]
cmp edi, dword [ebp - 0x494]
jl 0x1000fa89
mov dword [ebp - 0x624], 1
jmp 0x1000fa90
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x2bc], 0
je 0x1000fbc5
mov dword [ebp - 0x7f8], 0
mov dword [ebp - 0x800], 0x97632667
mov dword [ebp - 0x808], 0xacd79536
push 2
lea ecx, [ebp - 0x770]
call fcn.10005bc8
mov dword [ebp - 4], 4
mov dword [ebp - 0x810], 0xab6e
mov dword [ebp - 0x100], 0xfffffff9
mov dword [ebp - 0xfc], 0xfffffff9
mov dword [ebp - 0xf8], 0xfffffff9
mov dword [ebp - 0xf4], 0xfffffff9
mov dword [ebp - 0x308], 0x3cc9
mov dword [ebp - 0x294], 0
jmp 0x1000fb3c
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x1000fb5e
push dword [ebp - 0x294]
lea ecx, [ebp - 0x770]
call fcn.10005c66
mov dword [eax], 0xfffffffe
jmp 0x1000fb2f
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x770]
call fcn.10005c4a
push 0x13
call fcn.1000b85d
pop edi
mov ecx, eax
call fcn.10015865
push eax
push dword [ebp - 0x2bc]
call fcn.1000cbd3
pop ecx
pop edi
mov ecx, dword [ebp - 0x2cc]
mov dword [ecx], eax
push 0x1d
call fcn.1000b85d
pop ecx
mov ecx, eax
call fcn.10015865
push eax
push dword [ebp - 0x2bc]
call fcn.1000cbd3
pop ecx
pop esi
mov ecx, dword [ebp - 0x2cc]
mov dword [ecx + 4], eax
mov dword [ebp - 0x1f8], 0x4a8c6a53
mov byte [ebp - 0x1a9], 0
movzx eax, byte [ebp - 0x1a9]
test eax, eax
je 0x1000fbe9
push 0
call dword [sym.imp.USER32.dll_GetClipboardData]
mov dword [ebp - 0x1f8], 0
jmp 0x1000fc02
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0xffffffe2
jge 0x1000fc40
mov dword [ebp - 0x5e8], 0x288a137b
cmp dword [ebp - 0x5e8], 0
je 0x1000fc20
jmp 0x1000fc40
mov byte [ebp - 0x1ab], 0
movzx eax, byte [ebp - 0x1ab]
test eax, eax
je 0x1000fc3e
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_Polyline]
jmp 0x1000fbf5
push 1
lea ecx, [ebp - 0x4bc]
call fcn.10005bc8
mov dword [ebp - 4], 5
mov dword [ebp - 0x200], 0xffffffff
mov dword [ebp - 0x614], 0x9eb818f
mov dword [ebp - 0x29c], 0
jmp 0x1000fc81
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 1
jge 0x1000fca3
push dword [ebp - 0x29c]
lea ecx, [ebp - 0x4bc]
call fcn.10005c66
mov dword [eax], 0x3ae35568
jmp 0x1000fc74
push 0
lea ecx, [ebp - 0x4bc]
call fcn.10005c66
and dword [eax], 0
jmp 0x1000fcd9
push 0
lea ecx, [ebp - 0x4bc]
call fcn.10005c66
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x4e0]
mov eax, dword [eax]
dec eax
mov esi, dword [ebp - 0x4e0]
mov dword [esi], eax
push 0
lea ecx, [ebp - 0x4bc]
call fcn.10005c66
cmp dword [eax], 0xffffffe2
jg 0x1000fef0
push 2
lea ecx, [ebp - 0x574]
call fcn.10005bc8
mov byte [ebp - 4], 6
mov dword [ebp - 0x1bc], 0x98311173
mov dword [ebp - 0x440], 0x1a53fde7
mov dword [ebp - 0x2a4], 0
jmp 0x1000fd2d
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 2
jge 0x1000fd4f
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x574]
call fcn.10005c66
mov dword [eax], 0xfffffff7
jmp 0x1000fd20
mov dword [ebp - 0x1bc], 0
jmp 0x1000fd68
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jge 0x1000fd8a
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0x574]
call fcn.10005c66
mov dword [eax], 0xb659d568
jmp 0x1000fd5b
push 0
lea ecx, [ebp - 0x4bc]
call fcn.10005c66
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
mov esi, dword [ebp - 0x1bc]
push 0
lea ecx, [ebp - 0x574]
call fcn.10005c66
cmp esi, dword [eax]
jg 0x1000fdc2
mov dword [ebp - 0x318], 1
jmp 0x1000fdc9
and dword [ebp - 0x318], 0
mov eax, 0x615e82aa
test eax, eax
je 0x1000fe57
push 0
lea ecx, [ebp - 0x4bc]
call fcn.10005c66
imul eax, dword [eax], 0xac01
cmp eax, 0x9ae4f78d
ja 0x1000fdfc
mov dword [ebp - 0x310], 1
jmp 0x1000fe03
and dword [ebp - 0x310], 0
mov edi, dword [ebp - 0x310]
sub edi, 3
push 0
lea ecx, [ebp - 0x4bc]
call fcn.10005c66
cmp edi, dword [eax]
jg 0x1000fe29
mov dword [ebp - 0x438], 1
jmp 0x1000fe30
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
sub eax, dword [ebp - 0x200]
cmp eax, dword [ebp - 0x200]
je 0x1000fe57
push 7
pop eax
test eax, eax
je 0x1000fe57
mov dword [ebp - 0x5f0], 1
jmp 0x1000fe5e
and dword [ebp - 0x5f0], 0
push 0
lea ecx, [ebp - 0x574]
call fcn.10005c66
mov esi, dword [ebp - 0x200]
push 1
lea ecx, [ebp - 0x574]
call fcn.10005c66
mov edi, dword [ebp - 0x200]
imul edi, dword [eax]
cmp esi, edi
jne 0x1000fe97
mov dword [ebp - 0x4f8], 1
jmp 0x1000fe9e
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x318]
sub eax, dword [ebp - 0x4f8]
cmp eax, 0xa83a
jge 0x1000febd
mov dword [ebp - 0x320], 1
jmp 0x1000fec4
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x614], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x574]
call fcn.10005c4a
jmp 0x1000fcb5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4bc]
call fcn.10005c4a
and dword [ebp - 0x2e4], 0
push 4
lea ecx, [ebp - 0x5a4]
call fcn.10005bc8
mov dword [ebp - 4], 7
mov dword [ebp - 0x18c], 0
jmp 0x1000ff33
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 4
jge 0x1000ff55
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x5a4]
call fcn.10005c66
mov dword [eax], 4
jmp 0x1000ff26
mov dword [ebp - 0x18c], 0
jmp 0x1000ff6e
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 1
jge 0x1000ff8a
mov edi, dword [ebp - 0x18c]
mov dword [ebp + edi*4 - 0x178], 0xe1e87df2
jmp 0x1000ff61
push 4
pop esi
imul esi, esi, 0
mov dword [ebp + esi - 0x178], 3
jmp 0x1000ffb8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x178]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x178], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x178], 0
jl 0x1001019d
mov dword [ebp - 0x1c8], 0x801fc3ee
mov dword [ebp - 0x1e4], 1
mov byte [ebp - 0x1b1], 0
movzx eax, byte [ebp - 0x1b1]
test eax, eax
je 0x1000fffa
push 0
call dword [sym.imp.USER32.dll_GetCursorPos]
mov dword [ebp - 0x1c8], 3
jmp 0x10010013
mov ecx, dword [ebp - 0x1c8]
dec ecx
mov dword [ebp - 0x1c8], ecx
cmp dword [ebp - 0x1c8], 0
jl 0x10010198
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x818], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x178]
mov dword [ebp - 0x804], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x178]
lea ecx, [ebp - 0x5a4]
call fcn.10005c66
mov esi, eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x178]
lea ecx, [ebp - 0x5a4]
call fcn.10005c66
mov edi, eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x178]
lea ecx, [ebp - 0x5a4]
call fcn.10005c66
mov ecx, dword [edi]
sub ecx, dword [eax]
add ecx, dword [esi]
cmp ecx, dword [ebp - 0x1c8]
jne 0x100100a5
mov dword [ebp - 0x328], 1
jmp 0x100100ac
and dword [ebp - 0x328], 0
cmp dword [ebp - 0x328], 1
jge 0x100100c1
mov dword [ebp - 0x4f0], 1
jmp 0x100100c8
and dword [ebp - 0x4f0], 0
push 4
pop edi
imul edi, edi, 0
mov ecx, dword [ebp - 0x4f0]
sub ecx, dword [ebp + edi - 0x178]
jne 0x100100e6
cmp dword [ebp - 0x1e4], 0
je 0x1001010d
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x178]
lea ecx, [ebp - 0x5a4]
call fcn.10005c66
cmp dword [eax], 0
je 0x10010108
jmp 0x10010198
jmp 0x10010193
mov byte [ebp - 0x1b3], 0
movzx eax, byte [ebp - 0x1b3]
test eax, eax
je 0x10010127
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 0x1e4], 0
jmp 0x10010140
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 3
jg 0x10010193
mov dword [ebp - 0x23c], 0xfffffff8
mov dword [ebp - 0x23c], 3
jmp 0x1001016c
mov eax, dword [ebp - 0x23c]
dec eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
jl 0x10010191
mov byte [ebp - 0x1b5], 0
movzx eax, byte [ebp - 0x1b5]
test eax, eax
je 0x1001018f
push 0
call dword [sym.imp.GDI32.dll_RealizePalette]
jmp 0x1001015f
jmp 0x10010133
jmp 0x10010006
jmp 0x1000ff9d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5a4]
call fcn.10005c4a
mov dword [ebp - 0x5f4], 0x1b
and dword [ebp - 0x198], 0
jmp 0x100101cc
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0x5f4]
jge 0x10012b4e
mov dword [ebp - 0x258], 0
push 2
lea ecx, [ebp - 0x4cc]
call fcn.10005bc8
mov dword [ebp - 4], 8
mov dword [ebp - 0x15c], 0xfffffffb
mov dword [ebp - 0x2c4], 0xffffffff
mov dword [ebp - 0x5fc], 0x7106cf36
mov dword [ebp - 0x290], 0
jmp 0x10010233
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 2
jge 0x10010255
push dword [ebp - 0x290]
lea ecx, [ebp - 0x4cc]
call fcn.10005c66
mov dword [eax], 0xb14f4e79
jmp 0x10010226
push 0
lea ecx, [ebp - 0x4cc]
call fcn.10005c66
cmp dword [eax], 0
jg 0x10010273
mov dword [ebp - 0x330], 1
jmp 0x1001027a
and dword [ebp - 0x330], 0
push 0
lea ecx, [ebp - 0x4cc]
call fcn.10005c66
mov edi, dword [ebp - 0x330]
add edi, dword [eax]
mov dword [ebp - 0x448], edi
push 1
lea ecx, [ebp - 0x4cc]
call fcn.10005c66
mov ecx, dword [ebp - 0x448]
mov dword [eax], ecx
mov edi, dword [ebp - 0x448]
sub edi, dword [ebp - 0x15c]
cmp edi, dword [ebp - 0x15c]
jg 0x100102ca
mov dword [ebp - 0x338], 1
jmp 0x100102d1
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x338]
neg eax
cmp eax, dword [ebp - 0x15c]
jge 0x100102ed
mov dword [ebp - 0x500], 1
jmp 0x100102f4
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x500], eax
jle 0x1001030e
mov dword [ebp - 0x340], 1
jmp 0x10010315
and dword [ebp - 0x340], 0
mov esi, dword [ebp - 0x15c]
cmp dword [ebp - 0x340], esi
je 0x1001032f
mov dword [ebp - 0x450], 1
jmp 0x10010336
and dword [ebp - 0x450], 0
mov dword [ebp - 0x258], 1
mov eax, dword [ebp - 0x258]
imul eax, dword [ebp - 0x450]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x15c], 0x18
jmp 0x1001036c
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xffffffff
jg 0x10010584
mov dword [ebp - 0x348], 0xfffffffd
mov dword [ebp - 0x350], 0x2d4ad446
mov dword [ebp - 0x208], 0
jmp 0x100103a6
mov esi, dword [ebp - 0x208]
inc esi
mov dword [ebp - 0x208], esi
cmp dword [ebp - 0x208], 3
jge 0x100103bf
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x34], 0xffffffff
jmp 0x10010399
mov byte [ebp - 0x1bd], 0
movzx eax, byte [ebp - 0x1bd]
test eax, eax
je 0x100103df
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetTimer]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
push 4
pop esi
shl esi, 0
imul esi, dword [ebp + esi - 0x34], 0x6fd0
sub eax, esi
mov dword [ebp - 0x348], eax
mov esi, dword [ebp - 0x348]
push 0
lea ecx, [ebp - 0x4cc]
call fcn.10005c66
mov dword [eax], esi
push 4
pop eax
shl eax, 0
mov edi, dword [ebp + eax - 0x34]
push 0
lea ecx, [ebp - 0x4cc]
call fcn.10005c66
cmp edi, dword [eax]
jl 0x1001043b
mov dword [ebp - 0x634], 1
jmp 0x10010442
and dword [ebp - 0x634], 0
push 1
lea ecx, [ebp - 0x4cc]
call fcn.10005c66
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [eax]
sub eax, dword [ebp + ecx - 0x34]
cmp eax, dword [ebp - 0x15c]
jg 0x1001046f
mov dword [ebp - 0x508], 1
jmp 0x10010476
and dword [ebp - 0x508], 0
mov edi, dword [ebp - 0x508]
mov dword [ebp - 0x350], edi
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0
jne 0x100104a9
cmp dword [ebp - 0x15c], 0
jne 0x100104a9
and dword [ebp - 0x458], 0
jmp 0x100104b3
mov dword [ebp - 0x458], 1
cmp dword [ebp - 0x458], 0xeac84c92
jbe 0x100104c8
cmp dword [ebp - 0x15c], 0
je 0x100104dd
cmp dword [ebp - 0x2c4], 0
je 0x100104dd
mov dword [ebp - 0x358], 1
jmp 0x100104e4
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x358], eax
je 0x10010504
mov eax, 0x785b
test eax, eax
jne 0x10010504
and dword [ebp - 0x4fc], 0
jmp 0x1001050e
mov dword [ebp - 0x4fc], 1
mov esi, dword [ebp - 0x258]
cmp dword [ebp - 0x4fc], esi
jne 0x10010528
mov dword [ebp - 0x360], 1
jmp 0x1001052f
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x360], 0xa798
jg 0x10010547
mov dword [ebp - 0x460], 1
jmp 0x1001054e
and dword [ebp - 0x460], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp eax, dword [ebp - 0x460]
jl 0x1001056c
mov dword [ebp - 0x368], 1
jmp 0x10010573
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x5fc], eax
jmp 0x1001035f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4cc]
call fcn.10005c4a
mov eax, dword [ebp - 0x198]
mov eax, dword [ebp + eax*4 - 0xc0]
xor eax, 0x63be4b06
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x170], 3
mov dword [ebp - 0x17c], 0xfffffff8
mov dword [ebp - 0x1cc], 0x3e8ce6fc
mov dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x72c], eax
xor eax, eax
inc eax
jne 0x1001070f
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x17c], 0
jle 0x10010609
mov dword [ebp - 0x534], 1
jmp 0x10010610
and dword [ebp - 0x534], 0
mov edi, dword [ebp - 0x170]
mov dword [ebp - 0x170], edi
mov ecx, dword [ebp - 0x534]
sub ecx, dword [ebp - 0x17c]
cmp dword [ebp - 0x170], ecx
jne 0x10010642
mov eax, 0x67356a0b
test eax, eax
jne 0x10010642
and dword [ebp - 0x61c], 0
jmp 0x1001064c
mov dword [ebp - 0x61c], 1
mov edi, dword [ebp - 0x1cc]
mov dword [ebp - 0x68c], edi
push 2
pop ecx
test ecx, ecx
jne 0x10010671
mov eax, 0xfc2f92e6
test eax, eax
jne 0x10010671
and dword [ebp - 0x370], 0
jmp 0x1001067b
mov dword [ebp - 0x370], 1
mov ecx, dword [ebp - 0x17c]
cmp dword [ebp - 0x370], ecx
je 0x1001069b
cmp dword [ebp - 0x158], 0
jne 0x1001069b
and dword [ebp - 0x468], 0
jmp 0x100106a5
mov dword [ebp - 0x468], 1
mov eax, dword [ebp - 0x468]
sub eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x158]
jl 0x100106c5
mov dword [ebp - 0x378], 1
jmp 0x100106cc
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x378]
add eax, 0x279
jne 0x100106e7
xor eax, eax
inc eax
jne 0x100106e7
and dword [ebp - 0x5ac], 0
jmp 0x100106f1
mov dword [ebp - 0x5ac], 1
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x688], eax
mov eax, 0xc0a9
test eax, eax
jne 0x1001070f
and dword [ebp - 0x5b4], 0
jmp 0x10010719
mov dword [ebp - 0x5b4], 1
mov eax, dword [ebp - 0x1cc]
neg eax
je 0x10010738
cmp dword [ebp - 0x170], 0
je 0x10010738
mov dword [ebp - 0x504], 1
jmp 0x1001073f
and dword [ebp - 0x504], 0
cmp dword [ebp - 0x504], 0
jb 0x10010956
mov dword [ebp - 0x380], 0xffffffff
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x210], 0xc38db075
mov dword [ebp - 0x53c], 0xd7aff79c
mov dword [ebp - 0x380], 0xffffffff
mov esi, dword [ebp - 0x170]
mov dword [ebp - 0x690], esi
mov ecx, dword [ebp - 0x380]
mov dword [ebp - 0x698], ecx
cmp dword [ebp - 0x170], 0
jne 0x100107b2
mov dword [ebp - 0x2dc], 0xf60700c0
cmp dword [ebp - 0x2dc], 0
je 0x100107c7
cmp dword [ebp - 0x2dc], 0
je 0x100107c7
mov dword [ebp - 0x470], 1
jmp 0x100107ce
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x470], eax
jne 0x100107e8
mov dword [ebp - 0x388], 1
jmp 0x100107ef
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
add eax, 0x79ef0edf
cmp eax, dword [ebp - 0x210]
jl 0x1001080e
mov dword [ebp - 0x55c], 1
jmp 0x10010815
and dword [ebp - 0x55c], 0
mov edi, dword [ebp - 0x55c]
mov dword [ebp - 0x158], edi
cmp dword [ebp - 0x158], 0xe00c2553
ja 0x10010839
mov dword [ebp - 0x390], 1
jmp 0x10010840
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 9
jne 0x10010855
mov dword [ebp - 0x5bc], 1
jmp 0x1001085c
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x694], eax
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x17c], eax
jg 0x10010882
mov dword [ebp - 0x478], 1
jmp 0x10010889
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
jne 0x100108ac
xor ecx, ecx
inc ecx
jne 0x100108ac
and dword [ebp - 0x398], 0
jmp 0x100108b6
mov dword [ebp - 0x398], 1
mov eax, dword [ebp - 0x53c]
cmp dword [ebp - 0x398], eax
jg 0x100108d0
mov dword [ebp - 0x50c], 1
jmp 0x100108d7
and dword [ebp - 0x50c], 0
mov ecx, dword [ebp - 0x170]
cmp dword [ebp - 0x50c], ecx
jl 0x100108f1
mov dword [ebp - 0x3a0], 1
jmp 0x100108f8
and dword [ebp - 0x3a0], 0
imul edi, dword [ebp - 0x3a0], 0x69e
cmp edi, dword [ebp - 0x170]
jge 0x1001091d
push 4
pop edi
test edi, edi
je 0x1001091d
mov dword [ebp - 0x480], 1
jmp 0x10010924
and dword [ebp - 0x480], 0
mov edi, dword [ebp - 0x17c]
cmp dword [ebp - 0x480], edi
jg 0x1001093e
mov dword [ebp - 0x3a8], 1
jmp 0x10010945
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x53c], eax
jmp 0x10010a88
push 2
lea ecx, [ebp - 0x650]
call fcn.10005bc8
mov dword [ebp - 4], 9
mov dword [ebp - 0x5d4], 0xde7e8591
mov dword [ebp - 0x280], 0
jmp 0x1001098d
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jge 0x100109af
push dword [ebp - 0x280]
lea ecx, [ebp - 0x650]
call fcn.10005c66
mov dword [eax], 0x1bda
jmp 0x10010980
mov byte [ebp - 0x1a6], 0
movzx eax, byte [ebp - 0x1a6]
test eax, eax
je 0x100109c9
push 0
call dword [sym.imp.USER32.dll_MessageBoxIndirectA]
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x734], eax
mov edi, dword [ebp - 0x17c]
push 0
lea ecx, [ebp - 0x650]
call fcn.10005c66
sub edi, dword [eax]
cmp edi, 0x1d5e
jl 0x100109fe
mov dword [ebp - 0x3b0], 1
jmp 0x10010a05
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x69c], eax
mov edi, dword [ebp - 0x1cc]
mov dword [ebp - 0x7cc], edi
mov eax, dword [ebp - 0x158]
add eax, 3
cmp dword [ebp - 0x3b0], eax
jge 0x10010a3a
mov dword [ebp - 0x488], 1
jmp 0x10010a41
and dword [ebp - 0x488], 0
mov edi, dword [ebp - 0x1cc]
imul edi, dword [ebp - 0x488]
mov dword [ebp - 0x158], edi
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x6a4], eax
push 1
lea ecx, [ebp - 0x650]
call fcn.10005c66
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x170], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x650]
call fcn.10005c4a
mov dword [ebp - 0x158], 0
jmp 0x10010aa1
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xfffffff2
jge 0x10010ad7
mov dword [ebp - 0x5a8], 0xf528
mov dword [ebp - 0x600], 0xae7be98b
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x158], 0
je 0x10010ad5
jmp 0x10010a94
jmp 0x10010a94
cmp dword [ebp - 0x1d8], 0
jne 0x10010ae5
jmp 0x10012b4e
mov eax, dword [ebp - 0x1d8]
sub eax, 0x34
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x744], 0
mov dword [ebp - 0x6ac], 0x97632667
mov dword [ebp - 0x7f4], 0xacd79536
push 2
lea ecx, [ebp - 0x780]
call fcn.10005bc8
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x6b4], 0xab6e
mov dword [ebp - 0xf0], 0xfffffff9
mov dword [ebp - 0xec], 0xfffffff9
mov dword [ebp - 0xe8], 0xfffffff9
mov dword [ebp - 0xe4], 0xfffffff9
mov dword [ebp - 0x3b8], 0x3cc9
mov dword [ebp - 0x218], 0
jmp 0x10010b7b
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 2
jge 0x10010b9d
push dword [ebp - 0x218]
lea ecx, [ebp - 0x780]
call fcn.10005c66
mov dword [eax], 0xfffffffe
jmp 0x10010b6e
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x780]
call fcn.10005c4a
push dword [ebp - 0x608]
call fcn.1000ba27
pop edi
mov ecx, eax
call fcn.10015865
mov dword [ebp - 0x3d8], eax
and dword [ebp - 0x268], 0
mov dword [ebp - 0x260], 0x4a8c6a53
mov byte [ebp - 0x199], 0
movzx eax, byte [ebp - 0x199]
test eax, eax
je 0x10010bfd
push 0
call dword [sym.imp.USER32.dll_GetClipboardData]
mov dword [ebp - 0x260], 0
jmp 0x10010c16
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xffffffe2
jge 0x10010c54
mov dword [ebp - 0x610], 0x288a137b
cmp dword [ebp - 0x610], 0
je 0x10010c34
jmp 0x10010c54
mov byte [ebp - 0x19c], 0
movzx eax, byte [ebp - 0x19c]
test eax, eax
je 0x10010c52
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_Polyline]
jmp 0x10010c09
push dword [ebp - 0x3d8]
call fcn.1000da4e
pop ecx
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
jne 0x10010f46
push 1
lea ecx, [ebp - 0x4dc]
call fcn.10005bc8
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x228], 0xffffffff
mov dword [ebp - 0x620], 0x9eb818f
mov dword [ebp - 0x220], 0
jmp 0x10010cb4
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x10010cd6
push dword [ebp - 0x220]
lea ecx, [ebp - 0x4dc]
call fcn.10005c66
mov dword [eax], 0x3ae35568
jmp 0x10010ca7
push 0
lea ecx, [ebp - 0x4dc]
call fcn.10005c66
and dword [eax], 0
jmp 0x10010d0c
push 0
lea ecx, [ebp - 0x4dc]
call fcn.10005c66
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x514]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x514]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x4dc]
call fcn.10005c66
cmp dword [eax], 0xffffffe2
jg 0x10010f23
push 2
lea ecx, [ebp - 0x598]
call fcn.10005bc8
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1a4], 0x98311173
mov dword [ebp - 0x498], 0x1a53fde7
mov dword [ebp - 0x2a0], 0
jmp 0x10010d60
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 2
jge 0x10010d82
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0x598]
call fcn.10005c66
mov dword [eax], 0xfffffff7
jmp 0x10010d53
mov dword [ebp - 0x1a4], 0
jmp 0x10010d9b
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x10010dbd
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x598]
call fcn.10005c66
mov dword [eax], 0xb659d568
jmp 0x10010d8e
push 0
lea ecx, [ebp - 0x4dc]
call fcn.10005c66
mov eax, dword [eax]
mov dword [ebp - 0x1a4], eax
mov esi, dword [ebp - 0x1a4]
push 0
lea ecx, [ebp - 0x598]
call fcn.10005c66
cmp esi, dword [eax]
jg 0x10010df5
mov dword [ebp - 0x3c8], 1
jmp 0x10010dfc
and dword [ebp - 0x3c8], 0
mov eax, 0x615e82aa
test eax, eax
je 0x10010e8a
push 0
lea ecx, [ebp - 0x4dc]
call fcn.10005c66
imul eax, dword [eax], 0xac01
cmp eax, 0x9ae4f78d
ja 0x10010e2f
mov dword [ebp - 0x3c0], 1
jmp 0x10010e36
and dword [ebp - 0x3c0], 0
mov esi, dword [ebp - 0x3c0]
sub esi, 3
push 0
lea ecx, [ebp - 0x4dc]
call fcn.10005c66
cmp esi, dword [eax]
jg 0x10010e5c
mov dword [ebp - 0x490], 1
jmp 0x10010e63
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
sub eax, dword [ebp - 0x228]
cmp eax, dword [ebp - 0x228]
je 0x10010e8a
push 7
pop eax
test eax, eax
je 0x10010e8a
mov dword [ebp - 0x618], 1
jmp 0x10010e91
and dword [ebp - 0x618], 0
push 0
lea ecx, [ebp - 0x598]
call fcn.10005c66
mov esi, dword [ebp - 0x228]
push 1
lea ecx, [ebp - 0x598]
call fcn.10005c66
mov ecx, dword [ebp - 0x228]
imul ecx, dword [eax]
cmp esi, ecx
jne 0x10010eca
mov dword [ebp - 0x554], 1
jmp 0x10010ed1
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x3c8]
sub eax, dword [ebp - 0x554]
cmp eax, 0xa83a
jge 0x10010ef0
mov dword [ebp - 0x3d0], 1
jmp 0x10010ef7
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x620], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x598]
call fcn.10005c4a
jmp 0x10010ce8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4dc]
call fcn.10005c4a
push dword [ebp - 0x3d8]
mov eax, dword [ebp - 0x2cc]
call dword [eax]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x160], 0xfffffffc
mov dword [ebp - 0x1b0], 0
push 1
lea ecx, [ebp - 0x1f4]
call fcn.10005bc8
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x3f0], 1
mov dword [ebp - 0x51c], 0xfffffffd
push 1
lea ecx, [ebp - 0x580]
call fcn.10005bc8
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x16c], 0xaee50770
mov dword [ebp - 0x3e8], 0x59ff446c
mov dword [ebp - 0x190], 0xffffffff
mov dword [ebp - 0x180], 0
jmp 0x10010fd6
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x10010ff8
push dword [ebp - 0x180]
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
mov dword [eax], 0x2e65251c
jmp 0x10010fc9
mov dword [ebp - 0x180], 0
jmp 0x10011011
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x10011030
push dword [ebp - 0x180]
lea ecx, [ebp - 0x580]
call fcn.10005c66
and dword [eax], 0
jmp 0x10011004
cmp dword [ebp - 0x1b0], 0
jne 0x1001109b
mov ecx, 0xb76d
test ecx, ecx
jne 0x1001109b
mov dword [ebp - 0x51c], 1
mov eax, dword [ebp - 0x51c]
imul eax, dword [ebp - 0x160]
mov dword [ebp - 0x3e0], eax
push 0
lea ecx, [ebp - 0x580]
call fcn.10005c66
mov esi, dword [ebp - 0x3e0]
mov dword [eax], esi
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x16c], eax
push 0
lea ecx, [ebp - 0x580]
call fcn.10005c66
cmp dword [eax], 0
jne 0x1001109b
and dword [ebp - 0x4a0], 0
jmp 0x100110a5
mov dword [ebp - 0x4a0], 1
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x3e8], eax
mov esi, dword [ebp - 0x160]
cmp dword [ebp - 0x3e8], esi
jge 0x100110cb
mov dword [ebp - 0x544], 1
jmp 0x100110d2
and dword [ebp - 0x544], 0
mov ecx, dword [ebp - 0x544]
mov dword [ebp - 0x190], ecx
cmp dword [ebp - 0x3f0], 0
jne 0x100110f3
mov dword [ebp - 0x628], 1
jmp 0x100110fa
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x754], eax
push 0
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
mov esi, dword [ebp - 0x160]
push 0
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
imul esi, dword [eax]
sub esi, dword [ebp - 0x160]
je 0x10011150
mov byte [ebp - 0x19e], 0
movzx eax, byte [ebp - 0x19e]
test eax, eax
je 0x1001114b
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x10011613
mov dword [ebp - 0x52c], 0xebc5f7c0
mov dword [ebp - 0x16c], 0
jmp 0x10011173
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
jg 0x100113c6
mov dword [ebp - 0x1dc], 0x7919
mov dword [ebp - 0x14c], 0xf4bb
mov dword [ebp - 0x148], 0xf4bb
mov dword [ebp - 0x144], 0xf4bb
mov dword [ebp - 0x140], 0xf4bb
lea ecx, [ebp - 0x2d5]
call fcn.10005c75
push eax
lea esi, [ebp - 0x13c]
push esi
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x820]
call fcn.10005c78
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x790]
call fcn.10005c24
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x54], 0x7d7132c2
mov dword [ebp - 0x50], 0x7d7132c2
mov dword [ebp - 0x4c], 0x7d7132c2
mov dword [ebp - 0x48], 0x7d7132c2
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
mov ecx, dword [ebp - 0x3f0]
cmp dword [eax], ecx
jne 0x1001123f
mov dword [ebp - 0x4a8], 1
jmp 0x10011246
and dword [ebp - 0x4a8], 0
mov esi, dword [ebp - 0x1dc]
mov dword [ebp - 0x6bc], esi
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x7d4], eax
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
cmp dword [eax], 0xfce88636
jb 0x10011283
mov dword [ebp - 0x3f8], 1
jmp 0x1001128a
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x4a8]
cmp eax, dword [ebp - 0x3f8]
jne 0x100112a4
mov dword [ebp - 0x630], 1
jmp 0x100112ab
and dword [ebp - 0x630], 0
push 0
lea ecx, [ebp - 0x580]
call fcn.10005c66
mov ecx, dword [ebp - 0x1dc]
cmp dword [eax], ecx
jg 0x100112e0
push 3
lea ecx, [ebp - 0x790]
call fcn.10005c66
cmp dword [eax], 0
je 0x100112e0
mov dword [ebp - 0x524], 1
jmp 0x100112e7
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x524], eax
jge 0x10011301
mov dword [ebp - 0x638], 1
jmp 0x10011308
and dword [ebp - 0x638], 0
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
cmp dword [eax], 0
jne 0x10011336
cmp dword [ebp - 0x1dc], 0
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x54], 0x9ff40b36
ja 0x10011352
mov dword [ebp - 0x400], 1
jmp 0x10011359
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x400], eax
jne 0x10011373
mov dword [ebp - 0x4b0], 1
jmp 0x1001137a
and dword [ebp - 0x4b0], 0
cmp dword [ebp - 0x4b0], 0xbb785aa1
jbe 0x10011392
mov dword [ebp - 0x408], 1
jmp 0x10011399
and dword [ebp - 0x408], 0
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x580]
call fcn.10005c66
mov edi, dword [ebp - 0x408]
mov dword [eax], edi
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x790]
call fcn.10005c4a
jmp 0x10011166
mov dword [ebp - 0x160], 0
jmp 0x100113df
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jg 0x10011613
mov dword [ebp - 0x230], 0
jmp 0x10011405
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 4
jge 0x10011421
mov edi, dword [ebp - 0x230]
mov dword [ebp + edi*4 - 0xd0], 0x846cf466
jmp 0x100113f8
mov dword [ebp - 0x190], 0
jmp 0x1001143a
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jg 0x10011600
mov dword [ebp - 0x564], 0xc574c3fc
mov dword [ebp - 0x5dc], 6
mov dword [ebp - 0x288], 0
jmp 0x10011474
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 3
jge 0x10011490
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0x118], 1
jmp 0x10011467
mov dword [ebp - 0x1b0], 0
jmp 0x100114a9
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0
jg 0x100115fb
push dword [ebp - 0x160]
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
push dword [ebp - 0x160]
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
cmp dword [ebp - 0x160], 0
je 0x10011507
cmp dword [ebp - 0x52c], 0
je 0x10011507
mov dword [ebp - 0x5ec], 1
jmp 0x1001150e
and dword [ebp - 0x5ec], 0
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xd0]
mov dword [ebp - 0x6c4], ecx
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xd0]
mov dword [ebp - 0x564], ecx
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x6cc], eax
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
cmp dword [eax], 0xc01a
jl 0x10011582
mov dword [ebp - 0x410], 1
jmp 0x10011589
and dword [ebp - 0x410], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
cmp dword [ebp - 0x410], eax
jle 0x100115aa
mov dword [ebp - 0x4c0], 1
jmp 0x100115b1
and dword [ebp - 0x4c0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xd0]
imul eax, dword [ebp - 0x4c0]
cmp eax, 1
jge 0x100115d6
mov dword [ebp - 0x418], 1
jmp 0x100115dd
and dword [ebp - 0x418], 0
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0x1f4]
call fcn.10005c66
mov ecx, dword [ebp - 0x418]
mov dword [eax], ecx
jmp 0x1001149c
jmp 0x1001142d
cmp dword [ebp - 0x52c], 0
je 0x1001160e
jmp 0x100113d2
jmp 0x100113d2
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x580]
call fcn.10005c4a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f4]
call fcn.10005c4a
mov ecx, dword [ebp - 0x198]
inc ecx
mov dword [ebp - 0x198], ecx
mov eax, dword [ebp - 0x198]
cmp dword [ebp + eax*4 - 0xc0], 0x63be4b06
je 0x10012b49
push 4
lea ecx, [ebp - 0x7b0]
call fcn.10005bc8
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x238], 0xfffffffd
mov dword [ebp - 0x814], 0x4543beb7
mov dword [ebp - 0x6d4], 1
mov dword [ebp - 0x774], 0x4f094650
mov dword [ebp - 0x674], 0xfffffff8
push 2
lea ecx, [ebp - 0x7a0]
call fcn.10005bc8
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x184], 0
jmp 0x100116c5
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 4
jge 0x100116e7
push dword [ebp - 0x184]
lea ecx, [ebp - 0x7b0]
call fcn.10005c66
mov dword [eax], 7
jmp 0x100116b8
mov dword [ebp - 0x184], 0
jmp 0x10011700
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x10011722
push dword [ebp - 0x184]
lea ecx, [ebp - 0x7a0]
call fcn.10005c66
mov dword [eax], 0x6887e08
jmp 0x100116f3
mov dword [ebp - 0x238], 0
jmp 0x1001173b
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jg 0x100117d5
mov dword [ebp - 0x7dc], 1
mov dword [ebp - 0x6e4], 0xfffffff7
mov dword [ebp - 0x784], 0xc619a80b
mov dword [ebp - 0x6ec], 0xf6f97812
mov dword [ebp - 0x7fc], 0xfffffffc
mov dword [ebp - 0x6f4], 0xfffffffd
mov dword [ebp - 0x420], 0x3cc1
mov dword [ebp - 0x270], 0
jmp 0x100117a7
mov ecx, dword [ebp - 0x270]
inc ecx
mov dword [ebp - 0x270], ecx
cmp dword [ebp - 0x270], 2
jge 0x100117c3
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0x828], 0x6444
jmp 0x1001179a
mov eax, dword [ebp - 0x420]
dec eax
mov dword [ebp - 0x420], eax
jmp 0x1001172e
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x7a0]
call fcn.10005c4a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7b0]
call fcn.10005c4a
cmp dword [ebp - 0x2c8], 0
je 0x100127c5
mov eax, dword [ebp - 0x198]
mov eax, dword [ebp + eax*4 - 0xc0]
xor eax, 0x63be4b06
mov dword [ebp - 0x1d8], eax
and dword [ebp - 0x2d0], 0
push 2
lea ecx, [ebp - 0x5cc]
call fcn.10005bc8
mov dword [ebp - 4], 0x12
push 4
lea ecx, [ebp - 0x670]
call fcn.10005bc8
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x150], 0
jmp 0x1001185d
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jge 0x1001187f
push dword [ebp - 0x150]
lea ecx, [ebp - 0x5cc]
call fcn.10005c66
mov dword [eax], 0xfffffffb
jmp 0x10011850
mov dword [ebp - 0x150], 0
jmp 0x10011898
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jge 0x100118b4
mov edi, dword [ebp - 0x150]
mov dword [ebp + edi*4 - 0x10c], 0xfffc
jmp 0x1001188b
mov dword [ebp - 0x150], 0
jmp 0x100118cd
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 4
jge 0x100118ec
push dword [ebp - 0x150]
lea ecx, [ebp - 0x670]
call fcn.10005c66
or dword [eax], 0xffffffff
jmp 0x100118c0
push 1
lea ecx, [ebp - 0x5cc]
call fcn.10005c66
and dword [eax], 0
jmp 0x10011922
push 1
lea ecx, [ebp - 0x5cc]
call fcn.10005c66
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x4d0]
mov eax, dword [eax]
inc eax
mov esi, dword [ebp - 0x4d0]
mov dword [esi], eax
push 1
lea ecx, [ebp - 0x5cc]
call fcn.10005c66
cmp dword [eax], 0x1d
jle 0x100119d2
mov dword [ebp - 0x1e8], 0xffffffff
mov dword [ebp - 0x1e8], 2
jmp 0x1001195b
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jl 0x100119cd
mov dword [ebp - 0x240], 0x7f2fb5a5
mov dword [ebp - 0x794], 0x2f1f
mov dword [ebp - 0x6fc], 0x86fa66fa
mov dword [ebp - 0x240], 2
jmp 0x1001199b
mov eax, dword [ebp - 0x240]
dec eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jl 0x100119b9
push 0
lea ecx, [ebp - 0x670]
call fcn.10005c66
mov dword [eax], 0x7c4e7cd
jmp 0x1001198e
mov edi, dword [ebp - 0x1e8]
cmp dword [ebp + edi*4 - 0x10c], 0
je 0x100119cb
jmp 0x1001194e
jmp 0x1001194e
jmp 0x100118fe
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x670]
call fcn.10005c4a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5cc]
call fcn.10005c4a
mov eax, dword [ebp - 0x1d8]
and eax, 0x80000000
cmp eax, 0x80000000
jne 0x100120c4
push 1
lea ecx, [ebp - 0x2f8]
call fcn.10005bc8
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x1d0], 0xffffffff
mov dword [ebp - 0x298], 0
jmp 0x10011a3d
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 1
jge 0x10011a5f
push dword [ebp - 0x298]
lea ecx, [ebp - 0x2f8]
call fcn.10005c66
mov dword [eax], 0x8819570a
jmp 0x10011a30
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10005c66
cmp dword [eax], 0xb101
jg 0x10011a80
mov dword [ebp - 0x428], 1
jmp 0x10011a87
and dword [ebp - 0x428], 0
xor esi, esi
inc esi
sub esi, dword [ebp - 0x428]
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10005c66
cmp esi, dword [eax]
jle 0x10011aad
mov dword [ebp - 0x4f4], 1
jmp 0x10011ab4
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x1d0], eax
mov esi, dword [ebp - 0x1d0]
neg esi
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10005c66
cmp esi, dword [eax]
jge 0x10011ae5
mov dword [ebp - 0x2fc], 1
jmp 0x10011aec
and dword [ebp - 0x2fc], 0
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10005c66
mov ecx, dword [ebp - 0x2fc]
cmp ecx, dword [eax]
jge 0x10011b0f
mov dword [ebp - 0x304], 1
jmp 0x10011b16
and dword [ebp - 0x304], 0
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10005c66
mov ecx, dword [ebp - 0x304]
cmp ecx, dword [eax]
jle 0x10011b39
mov dword [ebp - 0x30c], 1
jmp 0x10011b40
and dword [ebp - 0x30c], 0
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10005c66
mov ecx, dword [ebp - 0x30c]
sub ecx, dword [eax]
cmp ecx, 0x2ba75a59
jne 0x10011c38
mov dword [ebp - 0x1d0], 0
jmp 0x10011b7a
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
jg 0x10011c33
mov dword [ebp - 0x5b0], 0xb44adca1
mov dword [ebp - 0x248], 0
jmp 0x10011baa
mov edi, dword [ebp - 0x248]
inc edi
mov dword [ebp - 0x248], edi
cmp dword [ebp - 0x248], 4
jge 0x10011bc3
mov esi, dword [ebp - 0x248]
mov dword [ebp + esi*4 - 0x44], 0
jmp 0x10011b9d
mov byte [ebp - 0x1b2], 0
movzx eax, byte [ebp - 0x1b2]
test eax, eax
je 0x10011bdd
push 0
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x44], 0
jmp 0x10011c02
push 4
pop esi
imul esi, esi, 0
mov esi, dword [ebp + esi - 0x44]
inc esi
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x44], esi
push 4
pop edi
imul edi, edi, 0
cmp dword [ebp + edi - 0x44], 0
jg 0x10011c2e
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x44]
lea ecx, [ebp - 0x2f8]
call fcn.10005c66
mov eax, dword [eax]
mov dword [ebp - 0x5b0], eax
jmp 0x10011bed
jmp 0x10011b6d
jmp 0x10011cd9
mov dword [ebp - 0x7e4], 0xdcefbde2
mov dword [ebp - 0x704], 0xfe2cf45
push 3
lea ecx, [ebp - 0x7c0]
call fcn.10005bc8
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x314], 0xefe0cd1b
mov dword [ebp - 0x278], 0
jmp 0x10011c80
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jge 0x10011c9f
push dword [ebp - 0x278]
lea ecx, [ebp - 0x7c0]
call fcn.10005c66
and dword [eax], 0
jmp 0x10011c73
mov edi, dword [ebp - 0x314]
inc edi
mov dword [ebp - 0x314], edi
mov byte [ebp - 0x1aa], 0
movzx eax, byte [ebp - 0x1aa]
test eax, eax
je 0x10011cca
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7c0]
call fcn.10005c4a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f8]
call fcn.10005c4a
mov dword [ebp - 0x204], 0
push 2
lea ecx, [ebp - 0x4ec]
call fcn.10005bc8
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x154], 0xfffffffb
mov dword [ebp - 0x2ac], 0xffffffff
mov dword [ebp - 0x604], 0x7106cf36
mov dword [ebp - 0x250], 0
jmp 0x10011d3d
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jge 0x10011d5f
push dword [ebp - 0x250]
lea ecx, [ebp - 0x4ec]
call fcn.10005c66
mov dword [eax], 0xb14f4e79
jmp 0x10011d30
push 0
lea ecx, [ebp - 0x4ec]
call fcn.10005c66
cmp dword [eax], 0
jg 0x10011d7d
mov dword [ebp - 0x31c], 1
jmp 0x10011d84
and dword [ebp - 0x31c], 0
push 0
lea ecx, [ebp - 0x4ec]
call fcn.10005c66
mov edi, dword [ebp - 0x31c]
add edi, dword [eax]
mov dword [ebp - 0x324], edi
push 1
lea ecx, [ebp - 0x4ec]
call fcn.10005c66
mov ecx, dword [ebp - 0x324]
mov dword [eax], ecx
mov edi, dword [ebp - 0x324]
sub edi, dword [ebp - 0x154]
cmp edi, dword [ebp - 0x154]
jg 0x10011dd4
mov dword [ebp - 0x32c], 1
jmp 0x10011ddb
and dword [ebp - 0x32c], 0
mov esi, dword [ebp - 0x32c]
neg esi
cmp esi, dword [ebp - 0x154]
jge 0x10011df7
mov dword [ebp - 0x334], 1
jmp 0x10011dfe
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x334], eax
jle 0x10011e18
mov dword [ebp - 0x33c], 1
jmp 0x10011e1f
and dword [ebp - 0x33c], 0
mov esi, dword [ebp - 0x154]
cmp dword [ebp - 0x33c], esi
je 0x10011e39
mov dword [ebp - 0x344], 1
jmp 0x10011e40
and dword [ebp - 0x344], 0
mov dword [ebp - 0x204], 1
mov eax, dword [ebp - 0x204]
imul eax, dword [ebp - 0x344]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x154], 0x18
jmp 0x10011e76
cmp dword [ebp - 0x154], 0xffffffff
jg 0x1001208e
mov dword [ebp - 0x34c], 0xfffffffd
mov dword [ebp - 0x35c], 0x2d4ad446
mov dword [ebp - 0x1fc], 0
jmp 0x10011eb0
mov edi, dword [ebp - 0x1fc]
inc edi
mov dword [ebp - 0x1fc], edi
cmp dword [ebp - 0x1fc], 3
jge 0x10011ec9
mov edi, dword [ebp - 0x1fc]
mov dword [ebp + edi*4 - 0x28], 0xffffffff
jmp 0x10011ea3
mov byte [ebp - 0x1b4], 0
movzx eax, byte [ebp - 0x1b4]
test eax, eax
je 0x10011ee9
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetTimer]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x28]
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x28], 0x6fd0
sub eax, ecx
mov dword [ebp - 0x34c], eax
mov esi, dword [ebp - 0x34c]
push 0
lea ecx, [ebp - 0x4ec]
call fcn.10005c66
mov dword [eax], esi
push 4
pop eax
shl eax, 0
mov edi, dword [ebp + eax - 0x28]
push 0
lea ecx, [ebp - 0x4ec]
call fcn.10005c66
cmp edi, dword [eax]
jl 0x10011f45
mov dword [ebp - 0x5d8], 1
jmp 0x10011f4c
and dword [ebp - 0x5d8], 0
push 1
lea ecx, [ebp - 0x4ec]
call fcn.10005c66
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [eax]
sub eax, dword [ebp + ecx - 0x28]
cmp eax, dword [ebp - 0x154]
jg 0x10011f79
mov dword [ebp - 0x354], 1
jmp 0x10011f80
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0
jne 0x10011fb3
cmp dword [ebp - 0x154], 0
jne 0x10011fb3
and dword [ebp - 0x364], 0
jmp 0x10011fbd
mov dword [ebp - 0x364], 1
cmp dword [ebp - 0x364], 0xeac84c92
jbe 0x10011fd2
cmp dword [ebp - 0x154], 0
je 0x10011fe7
cmp dword [ebp - 0x2ac], 0
je 0x10011fe7
mov dword [ebp - 0x36c], 1
jmp 0x10011fee
and dword [ebp - 0x36c], 0
mov edi, dword [ebp - 0x204]
cmp dword [ebp - 0x36c], edi
je 0x1001200e
mov esi, 0x785b
test esi, esi
jne 0x1001200e
and dword [ebp - 0x374], 0
jmp 0x10012018
mov dword [ebp - 0x374], 1
mov edi, dword [ebp - 0x204]
cmp dword [ebp - 0x374], edi
jne 0x10012032
mov dword [ebp - 0x37c], 1
jmp 0x10012039
and dword [ebp - 0x37c], 0
cmp dword [ebp - 0x37c], 0xa798
jg 0x10012051
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4ec]
call fcn.10005c4a
mov eax, dword [ebp - 0x1d8]
and eax, 0xffff
movzx eax, ax
push eax
push dword [ebp - 0x2c8]
call fcn.1000cbd3
pop ecx
pop ecx
mov dword [ebp - 0x2d0], eax
jmp 0x100126f6
mov dword [ebp - 0x2b0], 5
mov dword [ebp - 0x7a4], 0xf29acd40
mov dword [ebp - 0x70c], 0
mov dword [ebp - 0x2c0], 5
mov dword [ebp - 0x3cc], 0x6b17b722
mov dword [ebp - 0x5b8], 0xb37d
mov dword [ebp - 0x80c], 0x966c4779
mov dword [ebp - 0x3f4], 0x3637
mov dword [ebp - 0x2b8], 0x4e55
mov dword [ebp - 0x138], 0x1e183a09
mov dword [ebp - 0x134], 0x1e183a09
mov dword [ebp - 0x130], 0x1e183a09
mov dword [ebp - 0x12c], 0x1e183a09
lea ecx, [ebp - 0x2b1]
call fcn.10005c75
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x830]
call fcn.10005c78
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x664]
call fcn.10005c24
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x3fc], 1
mov dword [ebp - 0x20c], 0
jmp 0x100121a5
mov edi, dword [ebp - 0x20c]
inc edi
mov dword [ebp - 0x20c], edi
cmp dword [ebp - 0x20c], 2
jge 0x100121c1
mov esi, dword [ebp - 0x20c]
mov dword [ebp + esi*4 - 0x658], 0xffffffff
jmp 0x10012198
mov byte [ebp - 0x19a], 0
movzx eax, byte [ebp - 0x19a]
test eax, eax
je 0x100121db
push 0
call dword [sym.imp.USER32.dll_GetQueueStatus]
cmp dword [ebp - 0x2b0], 0x9565e08c
ja 0x1001237f
cmp dword [ebp - 0x3cc], 0
je 0x10012207
push 5
pop eax
test eax, eax
je 0x10012207
mov dword [ebp - 0x394], 1
jmp 0x1001220e
and dword [ebp - 0x394], 0
mov esi, dword [ebp - 0x2c0]
dec esi
cmp esi, dword [ebp - 0x2b0]
jle 0x10012229
mov dword [ebp - 0x39c], 1
jmp 0x10012230
and dword [ebp - 0x39c], 0
mov ecx, dword [ebp - 0x394]
cmp ecx, dword [ebp - 0x39c]
jne 0x1001224a
mov dword [ebp - 0x3a4], 1
jmp 0x10012251
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x3a4], eax
je 0x1001226b
mov dword [ebp - 0x3ac], 1
jmp 0x10012272
and dword [ebp - 0x3ac], 0
push 3
lea ecx, [ebp - 0x664]
call fcn.10005c66
mov edi, dword [ebp - 0x3ac]
cmp edi, dword [eax]
jle 0x10012295
mov dword [ebp - 0x3b4], 1
jmp 0x1001229c
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x3b4], eax
jle 0x100122bc
cmp dword [ebp - 0x3f4], 0
jne 0x100122bc
and dword [ebp - 0x3bc], 0
jmp 0x100122c6
mov dword [ebp - 0x3bc], 1
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
mov edi, dword [ebp - 0x2b8]
cmp edi, dword [ebp - 0x3bc]
jl 0x100122ed
mov dword [ebp - 0x3c4], 1
jmp 0x100122f4
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 1
jbe 0x10012309
mov dword [ebp - 0x3d4], 1
jmp 0x10012310
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3cc]
imul eax, dword [ebp - 0x3d4]
cmp eax, 0x9a97
jg 0x10012330
mov dword [ebp - 0x3dc], 1
jmp 0x10012337
and dword [ebp - 0x3dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x658]
cmp dword [ebp - 0x3dc], eax
jne 0x10012358
mov dword [ebp - 0x3e4], 1
jmp 0x1001235f
and dword [ebp - 0x3e4], 0
push 1
lea ecx, [ebp - 0x664]
call fcn.10005c66
mov esi, dword [ebp - 0x3e4]
sub esi, dword [eax]
jne 0x1001237f
and dword [ebp - 0x3ec], 0
jmp 0x10012389
mov dword [ebp - 0x3ec], 1
mov ecx, dword [ebp - 0x5b8]
cmp dword [ebp - 0x3ec], ecx
je 0x100123a3
mov dword [ebp - 0x62c], 1
jmp 0x100123aa
and dword [ebp - 0x62c], 0
mov edi, dword [ebp - 0x3f4]
mov dword [ebp - 0x714], edi
push 4
pop eax
shl eax, 0
mov edi, dword [ebp - 0x3fc]
cmp dword [ebp + eax - 0x658], edi
jg 0x100123d7
mov dword [ebp - 0x404], 1
jmp 0x100123de
and dword [ebp - 0x404], 0
mov ecx, dword [ebp - 0x3fc]
cmp dword [ebp - 0x404], ecx
jne 0x100123f8
mov dword [ebp - 0x40c], 1
jmp 0x100123ff
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x2c0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x664]
call fcn.10005c4a
mov eax, dword [ebp - 0x1d8]
sub eax, 0x34
mov dword [ebp - 0x5c0], eax
push 4
lea ecx, [ebp - 0x58c]
call fcn.10005bc8
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x188], 0
jmp 0x10012456
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 4
jge 0x10012478
push dword [ebp - 0x188]
lea ecx, [ebp - 0x58c]
call fcn.10005c66
mov dword [eax], 4
jmp 0x10012449
mov dword [ebp - 0x188], 0
jmp 0x10012491
mov edi, dword [ebp - 0x188]
inc edi
mov dword [ebp - 0x188], edi
cmp dword [ebp - 0x188], 1
jge 0x100124ad
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x174], 0xe1e87df2
jmp 0x10012484
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x174], 3
jmp 0x100124db
push 4
pop edi
imul edi, edi, 0
mov edi, dword [ebp + edi - 0x174]
dec edi
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x174], edi
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x174], 0
jl 0x100126c0
mov dword [ebp - 0x1c4], 0x801fc3ee
mov dword [ebp - 0x1e0], 1
mov byte [ebp - 0x19b], 0
movzx eax, byte [ebp - 0x19b]
test eax, eax
je 0x1001251d
push 0
call dword [sym.imp.USER32.dll_GetCursorPos]
mov dword [ebp - 0x1c4], 3
jmp 0x10012536
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
jl 0x100126bb
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x7b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
mov dword [ebp - 0x71c], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x174]
lea ecx, [ebp - 0x58c]
call fcn.10005c66
mov esi, eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x174]
lea ecx, [ebp - 0x58c]
call fcn.10005c66
mov edi, eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x174]
lea ecx, [ebp - 0x58c]
call fcn.10005c66
mov ecx, dword [edi]
sub ecx, dword [eax]
add ecx, dword [esi]
cmp ecx, dword [ebp - 0x1c4]
jne 0x100125c8
mov dword [ebp - 0x414], 1
jmp 0x100125cf
and dword [ebp - 0x414], 0
cmp dword [ebp - 0x414], 1
jge 0x100125e4
mov dword [ebp - 0x41c], 1
jmp 0x100125eb
and dword [ebp - 0x41c], 0
push 4
pop esi
imul esi, esi, 0
mov ecx, dword [ebp - 0x41c]
sub ecx, dword [ebp + esi - 0x174]
jne 0x10012609
cmp dword [ebp - 0x1e0], 0
je 0x10012630
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x174]
lea ecx, [ebp - 0x58c]
call fcn.10005c66
cmp dword [eax], 0
je 0x1001262b
jmp 0x100126bb
jmp 0x100126b6
mov byte [ebp - 0x19d], 0
movzx eax, byte [ebp - 0x19d]
test eax, eax
je 0x1001264a
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 0x1e0], 0
jmp 0x10012663
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jg 0x100126b6
mov dword [ebp - 0x214], 0xfffffff8
mov dword [ebp - 0x214], 3
jmp 0x1001268f
mov edi, dword [ebp - 0x214]
dec edi
mov dword [ebp - 0x214], edi
cmp dword [ebp - 0x214], 0
jl 0x100126b4
mov byte [ebp - 0x19f], 0
movzx eax, byte [ebp - 0x19f]
test eax, eax
je 0x100126b2
push 0
call dword [sym.imp.GDI32.dll_RealizePalette]
jmp 0x10012682
jmp 0x10012656
jmp 0x10012529
jmp 0x100124c0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58c]
call fcn.10005c4a
push dword [ebp - 0x5c0]
call fcn.1000b85d
pop ecx
mov ecx, eax
call fcn.10015865
push eax
push dword [ebp - 0x2c8]
call fcn.1000cbd3
pop edi
pop ecx
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x224], 0xe0a8eac8
mov dword [ebp - 0x7ec], 0
mov dword [ebp - 0x724], 1
mov dword [ebp - 0x7c4], 0x4210e164
mov dword [ebp - 0x678], 2
mov dword [ebp - 0x424], 0x6a37
mov dword [ebp - 0x21c], 0
jmp 0x1001274b
mov edi, dword [ebp - 0x21c]
inc edi
mov dword [ebp - 0x21c], edi
cmp dword [ebp - 0x21c], 1
jge 0x10012767
mov edi, dword [ebp - 0x21c]
mov dword [ebp + edi*4 - 0x67c], 5
jmp 0x1001273e
mov dword [ebp - 0x224], 0xffffffe3
jmp 0x10012780
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x15
jge 0x100127a5
mov byte [ebp - 0x1a5], 0
movzx eax, byte [ebp - 0x1a5]
test eax, eax
je 0x100127a3
push 0
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
jmp 0x10012773
mov edi, dword [ebp - 0x424]
dec edi
mov dword [ebp - 0x424], edi
mov edi, dword [ebp - 0x2e4]
mov eax, dword [ebp - 0x2d0]
mov dword [edi*4 + 0x100324c0], eax
mov dword [ebp - 0x194], 0x571177e8
mov dword [ebp - 0x22c], 0
jmp 0x100127e8
mov edi, dword [ebp - 0x22c]
inc edi
mov dword [ebp - 0x22c], edi
cmp dword [ebp - 0x22c], 3
jge 0x10012801
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x1c], 0x1dbeccce
jmp 0x100127db
mov dword [ebp - 0x194], 0xffffffeb
jmp 0x1001281a
mov ecx, dword [ebp - 0x194]
dec ecx
mov dword [ebp - 0x194], ecx
cmp dword [ebp - 0x194], 0xffffffe5
jl 0x10012b37
mov dword [ebp - 0x164], 2
mov dword [ebp - 0x2e0], 0x51bb35b6
mov dword [ebp - 0x164], 2
jmp 0x10012854
mov ecx, dword [ebp - 0x164]
dec ecx
mov dword [ebp - 0x164], ecx
cmp dword [ebp - 0x164], 0
jl 0x10012b32
mov dword [ebp - 0x5d0], 0xf5b872a
mov dword [ebp - 0x234], 0
jmp 0x10012884
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 1
jge 0x100128a0
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x2ec], 0x2b000250
jmp 0x10012877
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0x1c], 0x497f
jge 0x100128bc
mov dword [ebp - 0x42c], 1
jmp 0x100128c3
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x194]
imul eax, dword [ebp - 0x42c]
test eax, eax
jne 0x100128ed
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x2ec], 0
jne 0x100128ed
and dword [ebp - 0x434], 0
jmp 0x100128f7
mov dword [ebp - 0x434], 1
mov eax, dword [ebp - 0x164]
add eax, dword [ebp - 0x434]
push 4
pop esi
imul esi, esi, 0
cmp eax, dword [ebp + esi - 0x1c]
jg 0x1001291b
mov dword [ebp - 0x43c], 1
jmp 0x10012922
and dword [ebp - 0x43c], 0
mov ecx, dword [ebp - 0x164]
mov ecx, dword [ebp + ecx*4 - 0x1c]
mov dword [ebp - 0x2e0], ecx
mov eax, dword [ebp - 0x2e0]
add eax, dword [ebp - 0x43c]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x1c]
cmp eax, dword [ebp - 0x164]
je 0x1001295d
mov dword [ebp - 0x60c], 1
jmp 0x10012964
and dword [ebp - 0x60c], 0
cmp dword [ebp - 0x2e0], 9
jg 0x10012979
mov dword [ebp - 0x444], 1
jmp 0x10012980
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x164]
mov eax, dword [ebp + eax*4 - 0x1c]
sub eax, dword [ebp - 0x444]
push 4
pop edi
imul edi, edi, 0
cmp eax, dword [ebp + edi - 0x2ec]
jle 0x100129ab
mov dword [ebp - 0x44c], 1
jmp 0x100129b2
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
sub eax, dword [ebp - 0x164]
mov edi, dword [ebp - 0x164]
cmp eax, dword [ebp + edi*4 - 0x1c]
je 0x100129d6
mov dword [ebp - 0x454], 1
jmp 0x100129dd
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
add eax, 0xffff
cmp eax, dword [ebp - 0x194]
je 0x100129fc
mov dword [ebp - 0x45c], 1
jmp 0x10012a03
and dword [ebp - 0x45c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x45c], eax
jl 0x10012a21
mov dword [ebp - 0x464], 1
jmp 0x10012a28
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0
jg 0x10012a47
push 4
pop edi
imul edi, edi, 0
cmp dword [ebp + edi - 0x1c], 0
jne 0x10012a47
and dword [ebp - 0x46c], 0
jmp 0x10012a51
mov dword [ebp - 0x46c], 1
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x46c], eax
jge 0x10012a6b
mov dword [ebp - 0x474], 1
jmp 0x10012a72
and dword [ebp - 0x474], 0
mov esi, dword [ebp - 0x164]
mov esi, dword [ebp + esi*4 - 0x1c]
cmp dword [ebp - 0x474], esi
jl 0x10012a90
mov dword [ebp - 0x47c], 1
jmp 0x10012a97
and dword [ebp - 0x47c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0x47c], eax
jge 0x10012ac1
mov eax, 0x1448
test eax, eax
je 0x10012ac1
mov dword [ebp - 0x2e8], 1
jmp 0x10012ac8
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x164]
mov esi, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x1c], esi
cmp dword [ebp - 0x2e8], 0
jne 0x10012af3
cmp dword [ebp - 0x194], 0
jne 0x10012af3
and dword [ebp - 0x484], 0
jmp 0x10012afd
mov dword [ebp - 0x484], 1
imul ecx, dword [ebp - 0x484], 0xffff
cmp ecx, 2
jl 0x10012b18
mov dword [ebp - 0x48c], 1
jmp 0x10012b1f
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
neg eax
mov dword [ebp - 0x5d0], eax
jmp 0x10012847
jmp 0x1001280d
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
jmp 0x10011631
jmp 0x100101bf
mov edi, dword [ebp - 0xc]
mov dword fs:[0], edi
pop edi
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100171e4
mov esp, ebp
pop ebp
ret