Function at 0x100548e5
Capabilities:
Allocate thread local storage
Connect pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c0
push esi
push edi
mov dword [ebp - 0x10], 0xb26bdde0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x190], 0
jmp 0x10054917
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 3
jge 0x10054933
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x75c], 1
jmp 0x1005490a
mov dword [ebp - 0x10], 0xffffffea
jmp 0x10054943
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10054b1e
mov dword [ebp - 0xd0], 0xfffffffb
mov dword [ebp - 0x4e0], 0xfffffff6
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x10], 0
je 0x10054a12
cmp dword [ebp - 0x10], 0xfffffff8
je 0x10054989
mov dword [ebp - 0x4ec], 1
jmp 0x10054990
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x4ec]
test eax, eax
jne 0x100549a7
mov eax, 0x329e
test eax, eax
je 0x100549bd
cmp dword [ebp - 0x10], 0
je 0x100549bd
xor eax, eax
je 0x100549bd
mov dword [ebp - 0x4d0], 1
jmp 0x100549c4
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x4d0], eax
je 0x100549de
mov dword [ebp - 0x4d8], 1
jmp 0x100549e5
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 0
je 0x10054a12
cmp dword [ebp - 0x5c], 0
je 0x10054a12
mov dword [ebp - 0x4e8], 1
jmp 0x10054a19
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x4e8], eax
jle 0x10054a33
mov dword [ebp - 0x4f0], 1
jmp 0x10054a3a
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x4f0]
jg 0x10054a51
mov dword [ebp - 0x3e0], 1
jmp 0x10054a58
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x504], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x504]
mov dword [ebp + eax - 0x75c], ecx
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0x3e0]
jge 0x10054a90
mov dword [ebp - 0x508], 1
jmp 0x10054a97
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x64c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x650], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x5c], 0
jmp 0x10054ac5
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x18
jge 0x10054b19
mov dword [ebp - 0xf8], 0xfffffff8
cmp dword [ebp - 0xf8], 0
je 0x10054ae0
jmp 0x10054b19
mov dword [ebp - 0xf8], 0
jmp 0x10054af9
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xffffffe5
jl 0x10054b17
mov dword [ebp - 0x554], 0xcce35a12
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x554], eax
jmp 0x10054aec
jmp 0x10054abe
jmp 0x1005493c
mov dword [ebp - 0x500], 0
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0x4f4], 0
mov dword [ebp - 0x658], 0x8f1fe3d2
mov dword [ebp - 0x34], 0
jmp 0x10054b60
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10054b73
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x68], 1
jmp 0x10054b59
mov dword [ebp - 0x34], 0
jmp 0x10054b83
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x10054b99
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x750], 0xfffffff7
jmp 0x10054b7c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x68], 0
jmp 0x10054bbe
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x68], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 3
jg 0x10054f70
mov dword [ebp - 0xc], 0x2e31d832
mov dword [ebp - 0x58c], 5
mov dword [ebp - 0x660], 0
mov dword [ebp - 0x668], 1
mov dword [ebp - 0x670], 1
mov dword [ebp - 0x690], 0
mov dword [ebp - 0x698], 0x5aa9c4ad
mov dword [ebp - 0x6a0], 0x49acb085
mov dword [ebp - 0x5b4], 0xbaa6f4ed
mov dword [ebp - 0x6a8], 0xffffffff
mov dword [ebp - 0x59c], 0x50e16ffa
mov dword [ebp - 0x6b0], 0x37672a6d
mov dword [ebp - 0x250], 0x5008d6d
mov dword [ebp - 0x6b8], 7
mov dword [ebp - 0x6c0], 1
mov dword [ebp - 0x194], 0x5297f1ff
mov dword [ebp - 0xc], 3
jmp 0x10054c7c
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x10054f6b
mov dword [ebp - 0x1d0], 0xdd664087
mov dword [ebp - 0x594], 0xfffffff6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x500]
mov dword [ebp - 0x70c], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x500], 0x65f4e26c
jle 0x10054cd6
mov dword [ebp - 0x218], 1
jmp 0x10054cdd
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x500]
imul eax, dword [ebp - 0x218]
test eax, eax
jne 0x10054cfd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
cmp dword [ebp - 0xc], 0
jne 0x10054d11
xor eax, eax
inc eax
jne 0x10054d11
and dword [ebp - 0x3e8], 0
jmp 0x10054d1b
mov dword [ebp - 0x3e8], 1
cmp dword [ebp - 0x3e8], 0xb2fc
je 0x10054d33
mov dword [ebp - 0x220], 1
jmp 0x10054d3a
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x500]
cmp dword [ebp - 0x1d0], eax
jle 0x10054d64
mov dword [ebp - 0x3f0], 1
jmp 0x10054d6b
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x500]
cmp eax, dword [ebp - 0x3f0]
jne 0x10054d89
mov dword [ebp - 0x228], 1
jmp 0x10054d90
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x58c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x500], 0
je 0x10054f53
cmp dword [ebp - 0xc], 0
je 0x10054ec1
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x500], 0xffffffff
jae 0x10054dd3
mov dword [ebp - 0x3f8], 1
jmp 0x10054dda
and dword [ebp - 0x3f8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x750]
cmp dword [ebp - 0x3f8], eax
je 0x10054dfb
mov dword [ebp - 0x230], 1
jmp 0x10054e02
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x500]
add eax, dword [ebp - 0x230]
cmp eax, 0x979
jg 0x10054e25
mov dword [ebp - 0x400], 1
jmp 0x10054e2c
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x594]
cmp dword [ebp - 0x400], eax
jl 0x10054e4f
cmp dword [ebp - 0x59c], 0
je 0x10054e4f
mov dword [ebp - 0x238], 1
jmp 0x10054e56
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x5a4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x238]
sub ecx, dword [ebp + eax - 0x750]
mov dword [ebp - 0x5ac], ecx
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5ac]
je 0x10054ea2
mov dword [ebp - 0x408], 1
jmp 0x10054ea9
and dword [ebp - 0x408], 0
cmp dword [ebp - 0x408], 0x50324061
je 0x10054ec1
mov dword [ebp - 0x240], 1
jmp 0x10054ec8
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
sub eax, dword [ebp - 0x5b4]
cmp eax, 0xa01eed76
jne 0x10054ee7
mov dword [ebp - 0x410], 1
jmp 0x10054eee
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x410], 0xb13f
jge 0x10054f06
mov dword [ebp - 0x248], 1
jmp 0x10054f0d
and dword [ebp - 0x248], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x248], eax
jg 0x10054f2b
mov dword [ebp - 0x418], 1
jmp 0x10054f32
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
je 0x10054f53
mov dword [ebp - 0x420], 1
jmp 0x10054f5a
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x1d0], eax
jmp 0x10054c75
jmp 0x10054ba9
mov dword [ebp - 0x108], 0xfe0a8eac
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x54c], 6
mov dword [ebp - 0x628], 1
mov dword [ebp - 0x624], 1
mov dword [ebp - 0x620], 1
mov dword [ebp - 0x61c], 1
mov dword [ebp - 0xf4], 0xffffffe8
jmp 0x10054fcf
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x12
jge 0x100550b6
mov dword [ebp - 0x17c], 0
jmp 0x10054ff5
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x10055011
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x67c], 0xd2086bd0
jmp 0x10054fe8
cmp dword [ebp - 0xf4], 0
je 0x10055036
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x67c], 0
je 0x10055036
mov dword [ebp - 0x258], 1
jmp 0x1005503d
and dword [ebp - 0x258], 0
cmp dword [ebp - 0xf4], 0x3d9b9503
jle 0x10055055
mov dword [ebp - 0x428], 1
jmp 0x1005505c
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x258]
cmp eax, dword [ebp - 0x428]
jne 0x1005507c
mov eax, 0x362d
test eax, eax
jne 0x1005507c
and dword [ebp - 0x260], 0
jmp 0x10055086
mov dword [ebp - 0x260], 1
cmp dword [ebp - 0x260], 0xffff
ja 0x1005509e
mov dword [ebp - 0x430], 1
jmp 0x100550a5
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x54c], eax
jmp 0x10054fc2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x628]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x628], eax
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x460], 0x2fafd11d
mov dword [ebp - 0x14], 1
mov dword [ebp - 0xe4], 0xd4595a2e
mov dword [ebp - 0xc8], 0x8d232121
mov dword [ebp - 0x1c4], 0xcf8fb6f8
mov dword [ebp - 8], 6
mov dword [ebp - 0x510], 0
mov dword [ebp - 0x1a0], 0x55d5df5b
mov dword [ebp - 0x44], 0
jmp 0x10055132
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10055145
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1c], 0xfffffffa
jmp 0x1005512b
mov dword [ebp - 0x44], 0
jmp 0x10055155
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1005516b
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x6d8], 0x284818a8
jmp 0x1005514e
cmp dword [ebp - 0x24], 0x462c
jne 0x10055180
mov dword [ebp - 0x268], 1
jmp 0x10055187
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x100551a8
mov eax, 0x6a3f
test eax, eax
je 0x100551a8
mov dword [ebp - 0x438], 1
jmp 0x100551af
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x268]
imul eax, dword [ebp - 0x438]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xe4], eax
jle 0x100551e0
push 9
pop eax
test eax, eax
je 0x100551e0
mov dword [ebp - 0x1cc], 1
jmp 0x100551e7
and dword [ebp - 0x1cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp + eax - 0x1c], ecx
cmp dword [ebp - 0x1cc], 0
je 0x10055211
xor eax, eax
inc eax
je 0x10055211
mov dword [ebp - 0x270], 1
jmp 0x10055218
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x270], eax
jle 0x1005522f
mov dword [ebp - 0x440], 1
jmp 0x10055236
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xdfa9
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jne 0x10055260
mov dword [ebp - 0x278], 1
jmp 0x10055267
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x278], eax
jne 0x10055281
mov dword [ebp - 0x448], 1
jmp 0x10055288
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 1
ja 0x1005529d
mov dword [ebp - 0x280], 1
jmp 0x100552a4
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
sub eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x450], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x450]
mov dword [ebp + eax - 0x6d8], ecx
cmp dword [ebp - 0x450], 0
jne 0x100552eb
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6d8], 0
jne 0x100552eb
and dword [ebp - 0x288], 0
jmp 0x100552f5
mov dword [ebp - 0x288], 1
cmp dword [ebp - 0x288], 0xffffffff
jg 0x1005530a
mov dword [ebp - 0x458], 1
jmp 0x10055311
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x458], eax
jle 0x10055323
cmp dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x24], eax
jle 0x10055340
mov dword [ebp - 0x290], 1
jmp 0x10055347
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x290]
add eax, 0x835a
cmp dword [ebp - 0x460], eax
jne 0x1005536f
mov dword [ebp - 0x298], 1
jmp 0x10055376
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x298], eax
jge 0x10055393
cmp dword [ebp - 0xe4], 0
jne 0x10055393
and dword [ebp - 0x468], 0
jmp 0x1005539d
mov dword [ebp - 0x468], 1
cmp dword [ebp - 0x468], 0xe525
je 0x100553b5
mov dword [ebp - 0x2a0], 1
jmp 0x100553bc
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x2a0], eax
jg 0x100553d3
mov dword [ebp - 0x470], 1
jmp 0x100553da
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x470]
sub eax, dword [ebp - 0x510]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0xc8], 0
jmp 0x10055405
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffff
jge 0x10055708
mov dword [ebp - 0x2c0], 3
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x618], 0x4540e516
mov dword [ebp - 0x614], 0x4540e516
mov dword [ebp - 0x610], 0x4540e516
mov dword [ebp - 0x60c], 0x4540e516
mov dword [ebp - 0x52c], 0xffffffff
mov dword [ebp - 8], 0
jmp 0x10055468
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x10055703
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x14], 0
jmp 0x1005548c
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x100554a2
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp + ecx*4 - 0x1c], eax
jmp 0x10055485
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x1c], 0
je 0x10055647
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0x71c], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0x114], 0x6375426b
jl 0x100554e1
mov dword [ebp - 0x2a8], 1
jmp 0x100554e8
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x2a8], eax
jl 0x10055503
mov dword [ebp - 0x478], 1
jmp 0x1005550a
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x478], eax
jne 0x10055525
mov dword [ebp - 0x53c], 1
jmp 0x1005552c
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x1c], 0
jge 0x10055567
mov dword [ebp - 0x2b0], 1
jmp 0x1005556e
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 3
jge 0x10055583
mov dword [ebp - 0x480], 1
jmp 0x1005558a
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x1a0]
add eax, dword [ebp - 0x480]
mov dword [ebp - 0x14], eax
je 0x100555b0
cmp dword [ebp - 0x1a0], 0
je 0x100555b0
mov dword [ebp - 0x2b8], 1
jmp 0x100555b7
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x2b8], eax
jl 0x100555d1
mov dword [ebp - 0x488], 1
jmp 0x100555d8
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0x2c0], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0x488]
imul eax, eax, 0
imul eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2c0], eax
jle 0x10055609
mov dword [ebp - 0x490], 1
jmp 0x10055610
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
neg eax
jne 0x10055626
mov dword [ebp - 0x2c8], 1
jmp 0x1005562d
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2d8]
add eax, dword [ebp - 0x2c8]
je 0x10055647
mov dword [ebp - 0x498], 1
jmp 0x1005564e
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x498], eax
jl 0x10055669
mov dword [ebp - 0x2d0], 1
jmp 0x10055670
and dword [ebp - 0x2d0], 0
imul eax, dword [ebp - 0x2d0], 3
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x618]
jge 0x10055691
mov dword [ebp - 0x4a0], 1
jmp 0x10055698
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
neg eax
je 0x100556b7
cmp dword [ebp - 0xe4], 0
je 0x100556b7
mov dword [ebp - 0x1a8], 1
jmp 0x100556be
and dword [ebp - 0x1a8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax - 0x618], ecx
mov eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x1a8], eax
jne 0x100556eb
mov dword [ebp - 0x4a8], 1
jmp 0x100556f2
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x52c], eax
jmp 0x10055461
jmp 0x100553f8
mov dword [ebp - 0x3c8], 1
mov dword [ebp - 0x734], 0
mov dword [ebp - 0x740], 0xffffffff
mov dword [ebp - 0x50c], 3
mov dword [ebp - 0x73c], 0x3e469209
mov dword [ebp - 0x704], 1
mov dword [ebp - 0xec], 0x48bbca63
mov dword [ebp - 0xec], 0
jmp 0x10055767
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xe
je 0x10055ab5
mov dword [ebp - 0x20], 0xeb9ae77a
mov dword [ebp - 0x130], 0
jmp 0x10055794
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x100557b0
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x208], 1
jmp 0x10055787
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xec], eax
jne 0x100557c7
mov dword [ebp - 0x2e0], 1
jmp 0x100557ce
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x2e0]
jne 0x100557fd
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x100557f8
push 0x1582
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x10055a96
mov dword [ebp - 0x178], 0
jmp 0x10055816
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 3
jge 0x10055832
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x78c], 0x8cbd
jmp 0x10055809
mov eax, dword [ebp - 0xec]
inc eax
je 0x10055a70
mov dword [ebp - 0x2e8], 0xffff
mov dword [ebp - 0x1c8], 0xffffffff
mov dword [ebp - 0x644], 0x5f4d0c6
mov dword [ebp - 0x640], 0x5f4d0c6
mov dword [ebp - 0x63c], 0x5f4d0c6
mov dword [ebp - 0x638], 0x5f4d0c6
mov dword [ebp - 0x20], 2
jmp 0x1005588b
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10055a6e
mov dword [ebp - 0x4b0], 4
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x208]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x208]
cmp eax, dword [ebp - 0x4b0]
jge 0x100558cd
mov dword [ebp - 0x4c0], 1
jmp 0x100558d4
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x208]
mov dword [ebp - 0x654], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x6e8], eax
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x2e8], eax
je 0x1005590a
mov dword [ebp - 0x4b8], 1
jmp 0x10055911
and dword [ebp - 0x4b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x208]
cmp dword [ebp - 0x4b8], eax
jl 0x10055932
mov dword [ebp - 0x2f0], 1
jmp 0x10055939
and dword [ebp - 0x2f0], 0
cmp dword [ebp - 0x2f0], 1
jge 0x1005594e
mov dword [ebp - 0x4c8], 1
jmp 0x10055955
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c0]
sub eax, 0x6fbed76c
cmp eax, dword [ebp - 0x4c8]
jl 0x10055974
mov dword [ebp - 0x2fc], 1
jmp 0x1005597b
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x208]
cmp dword [ebp - 0x2fc], eax
jle 0x10055999
mov dword [ebp - 0x3fc], 1
jmp 0x100559a0
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x78c]
jle 0x100559c3
mov dword [ebp - 0x304], 1
jmp 0x100559ca
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 1
jge 0x100559df
mov dword [ebp - 0x47c], 1
jmp 0x100559e6
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
sub eax, dword [ebp - 0x1c8]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x208]
cmp eax, 0x1606dc06
jle 0x10055a18
or eax, 0xffffffff
je 0x10055a18
mov dword [ebp - 0x30c], 1
jmp 0x10055a1f
and dword [ebp - 0x30c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x208]
mov ecx, dword [ebp - 0x30c]
lea eax, [ecx + eax + 1]
test eax, eax
je 0x10055a4f
cmp dword [ebp - 0x1c8], 0
je 0x10055a4f
mov dword [ebp - 0x404], 1
jmp 0x10055a56
and dword [ebp - 0x404], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x404]
mov dword [ebp + eax - 0x644], ecx
jmp 0x10055884
jmp 0x10055a96
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x10055a96
push 0xfb4
push 0
push 0x8ca
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x208]
mov dword [ebp + ecx - 0x208], eax
jmp 0x1005575a
mov dword [ebp - 0x5c8], 0xfffffffd
mov dword [ebp - 0x5c4], 0xfffffffd
mov dword [ebp - 0x5c0], 0xfffffffd
mov dword [ebp - 0x5bc], 0xfffffffd
mov dword [ebp - 0x138], 0
jmp 0x10055af6
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jge 0x10055b12
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x65c], 0xa8ea
jmp 0x10055ae9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5c8], 0
jmp 0x10055b40
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x5c8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5c8], 0
jl 0x10055b6a
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x10055b68
call dword [sym.imp.USER32.dll_GetMessageTime]
jmp 0x10055b25
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x10055b82
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
mov dword [ebp - 0x48], 0
jmp 0x10055b92
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x10055ba8
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x578], 0xfffd
jmp 0x10055b8b
mov dword [ebp - 0x48], 0
jmp 0x10055bb8
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10055bce
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x718], 0xfffffff7
jmp 0x10055bb1
mov dword [ebp - 0x108], 0
jmp 0x10055be7
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xfffffff5
jl 0x10057e91
mov dword [ebp - 0x180], 0xfffffff7
mov dword [ebp - 0x180], 0
jmp 0x10055c17
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0xfffffff7
jl 0x10055cb3
mov dword [ebp - 0x188], 0
jmp 0x10055c3d
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x10055c59
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x144], 0
jmp 0x10055c30
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x144], 4
jmp 0x10055c87
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x144]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x144], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x144], 0x11
jl 0x10055cae
mov dword [ebp - 0x5b8], 0xfffffff7
cmp dword [ebp - 0x5b8], 0
je 0x10055cac
jmp 0x10055cae
jmp 0x10055c6c
jmp 0x10055c0a
mov dword [ebp - 0xb8], 0xfffffffc
mov dword [ebp - 0x664], 0xf1e283d1
mov dword [ebp - 0x324], 0xe1c5a3d7
mov dword [ebp - 0x38], 0
jmp 0x10055ce1
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x10055cf4
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x70], 3
jmp 0x10055cda
mov dword [ebp - 0x38], 0
jmp 0x10055d04
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x10055d1a
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x608], 0xf1c946b4
jmp 0x10055cfd
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x70], 0
jmp 0x10055d3f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x70], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x70], 0xffffffec
je 0x10055ecb
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x530], 0xffffffff
mov dword [ebp - 0x78], 0
jmp 0x10055d71
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xffffffe4
jge 0x10055ec6
mov dword [ebp - 0x16c], 0
jmp 0x10055d94
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x10055db0
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x32c], 0xbd652568
jmp 0x10055d87
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x70], 0xab19
jg 0x10055dcc
mov dword [ebp - 0x4bc], 1
jmp 0x10055dd3
and dword [ebp - 0x4bc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x32c], 0
jne 0x10055df2
cmp dword [ebp - 0x78], 0
jb 0x10055df2
and dword [ebp - 0x314], 0
jmp 0x10055dfc
mov dword [ebp - 0x314], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
cmp dword [ebp - 0x314], eax
je 0x10055e1a
mov dword [ebp - 0x31c], 1
jmp 0x10055e21
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x4bc]
add eax, dword [ebp - 0x31c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x70]
jge 0x10055e45
mov dword [ebp - 0x40c], 1
jmp 0x10055e4c
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x6f0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x608]
mov dword [ebp - 0x66c], eax
push 0xfffffffffffffff9
pop eax
cmp eax, 1
jbe 0x10055e8b
mov dword [ebp - 0x484], 1
jmp 0x10055e92
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x484]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x608]
je 0x10055eae
cmp dword [ebp - 0x78], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x32c]
mov dword [ebp - 0x530], eax
jmp 0x10055d6a
jmp 0x10055d2a
mov dword [ebp - 0x730], 0
mov dword [ebp - 0x100], 0xb26bdde0
mov dword [ebp - 0x4c4], 0x9cadcda6
mov dword [ebp - 0x40], 0
jmp 0x10055ef9
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10055f0f
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x560], 0xfffffff7
jmp 0x10055ef2
mov dword [ebp - 0x40], 0
jmp 0x10055f1f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10055f35
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x798], 0xccfdef05
jmp 0x10055f18
mov dword [ebp - 0x100], 0xfffffffe
jmp 0x10055f4e
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x17
jge 0x100562f9
mov dword [ebp - 0x80], 0xfb023ed1
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x10055f88
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov dword [ebp - 0x80], 1
jmp 0x10055f98
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x100562f4
mov dword [ebp - 0xf0], 0x585b7f37
mov dword [ebp - 0x1c0], 0xffffffff
mov dword [ebp - 0x424], 5
mov dword [ebp - 0xf0], 0
jmp 0x10055fd9
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jg 0x100562ef
mov dword [ebp - 0x3c], 0
jmp 0x10055ff6
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1005600c
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x1f0], 0x46cdead9
jmp 0x10055fef
mov dword [ebp - 0x3c], 0
jmp 0x1005601c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x10056032
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x57c], 0
jmp 0x10056015
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1f0], 0
jmp 0x10056060
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1f0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1f0], 1
jg 0x10056202
mov dword [ebp - 0x14c], 0
jmp 0x1005608d
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x100560a9
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x34c], 0xfffffff7
jmp 0x10056080
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x648], eax
mov eax, 0x611fb8eb
test eax, eax
je 0x100560de
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f0]
cmp dword [ebp + eax*4 - 0x560], 0
je 0x100560de
mov dword [ebp - 0x414], 1
jmp 0x100560e5
and dword [ebp - 0x414], 0
cmp dword [ebp - 0x414], 2
ja 0x100560fa
mov dword [ebp - 0x334], 1
jmp 0x10056101
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0x334]
cmp eax, 0xfffffffe
jne 0x10056133
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f0]
cmp dword [ebp + eax*4 - 0x560], 0
jne 0x10056133
and dword [ebp - 0x4dc], 0
jmp 0x1005613d
mov dword [ebp - 0x4dc], 1
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x4dc], eax
jge 0x10056154
mov dword [ebp - 0x33c], 1
jmp 0x1005615b
and dword [ebp - 0x33c], 0
cmp dword [ebp - 0x33c], 0xe24307a3
jb 0x10056173
mov dword [ebp - 0x41c], 1
jmp 0x1005617a
and dword [ebp - 0x41c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f0]
mov eax, dword [ebp + eax*4 - 0x560]
cmp eax, dword [ebp - 0x41c]
je 0x100561a2
mov dword [ebp - 0x344], 1
jmp 0x100561a9
and dword [ebp - 0x344], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f0]
cmp dword [ebp - 0x344], eax
jl 0x100561ca
mov dword [ebp - 0x48c], 1
jmp 0x100561d1
and dword [ebp - 0x48c], 0
imul eax, dword [ebp - 0x48c], 0x5a12
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x34c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34c], 0
je 0x100561fd
jmp 0x10056045
jmp 0x10056045
mov dword [ebp - 0x1c0], 0xffffffff
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0
jne 0x10056267
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x680], eax
push 4
pop eax
neg eax
mov dword [ebp - 0x1b0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp + eax - 0x1f0], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp + eax - 0x57c], ecx
mov eax, dword [ebp - 0x1c0]
sub eax, 5
je 0x1005627e
mov dword [ebp - 0x354], 1
jmp 0x10056285
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x4c4], eax
cmp dword [ebp - 0x4c4], 0x4f34
jg 0x100562a9
mov dword [ebp - 0x35c], 1
jmp 0x100562b0
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x35c]
jl 0x100562ca
mov dword [ebp - 0x538], 1
jmp 0x100562d1
and dword [ebp - 0x538], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x1f0]
mov dword [ebp + ecx - 0x798], eax
jmp 0x10055fcc
jmp 0x10055f91
jmp 0x10055f41
mov dword [ebp - 0x720], 0xc237
mov dword [ebp - 0x90], 0xacdff905
mov dword [ebp - 0xe8], 0x684a5798
mov dword [ebp - 0xd8], 0xffffffff
mov dword [ebp - 0x550], 0xfffffff8
mov dword [ebp - 0x18c], 0
jmp 0x10056344
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 3
jge 0x10056360
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x124], 0x1c76d7be
jmp 0x10056337
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x124]
cmp dword [ebp + eax - 0x124], ecx
jne 0x10056388
mov dword [ebp - 0x364], 1
jmp 0x1005638f
and dword [ebp - 0x364], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x124]
test eax, eax
jne 0x100563b6
mov eax, 0xe1b1
test eax, eax
je 0x100563cb
mov eax, 0xffff
test eax, eax
je 0x100563cb
mov dword [ebp - 0x42c], 1
jmp 0x100563d2
and dword [ebp - 0x42c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
cmp eax, dword [ebp - 0x42c]
jge 0x100563f3
mov dword [ebp - 0x494], 1
jmp 0x100563fa
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x364]
cmp eax, dword [ebp - 0x494]
jg 0x10056414
mov dword [ebp - 0x36c], 1
jmp 0x1005641b
and dword [ebp - 0x36c], 0
imul eax, dword [ebp - 0x36c], 0x4081
sub eax, 0xe03
je 0x100568a3
mov dword [ebp - 4], 0x67101392
mov dword [ebp - 0x1bc], 0xffffffff
mov dword [ebp - 0x154], 0
jmp 0x1005645a
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 4
jge 0x10056476
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x600], 0x47fce3ba
jmp 0x1005644d
mov dword [ebp - 4], 2
jmp 0x10056486
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x10056706
mov dword [ebp - 0x88], 0xa421e0be
mov dword [ebp - 0x128], 0
jmp 0x100564b3
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jge 0x100564cf
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x1b8], 0x97618de0
jmp 0x100564a6
mov dword [ebp - 0x88], 2
jmp 0x100564e8
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x10056701
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x124]
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x124]
mov dword [ebp - 0x700], eax
cmp dword [ebp - 4], 0
jne 0x100565ea
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x124], 0
jne 0x1005653b
mov dword [ebp - 0x434], 1
jmp 0x10056542
and dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 0x452a
jne 0x1005655a
mov dword [ebp - 0x374], 1
jmp 0x10056561
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x374], eax
je 0x10056578
mov dword [ebp - 0x20c], 1
jmp 0x1005657f
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x124]
cmp dword [ebp - 0x20c], eax
jl 0x1005659d
mov dword [ebp - 0x37c], 1
jmp 0x100565a4
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x5b48
jle 0x100565c8
mov dword [ebp - 0x43c], 1
jmp 0x100565cf
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x124]
add eax, dword [ebp - 0x43c]
jne 0x100565ea
and dword [ebp - 0x384], 0
jmp 0x100565f4
mov dword [ebp - 0x384], 1
cmp dword [ebp - 0x384], 1
jle 0x10056609
mov dword [ebp - 0x49c], 1
jmp 0x10056610
and dword [ebp - 0x49c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x49c]
mov dword [ebp + eax - 0x1b8], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x88]
cmp dword [ebp + eax - 0x1b8], ecx
jl 0x10056644
mov dword [ebp - 0x5a0], 1
jmp 0x1005664b
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x694], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x88]
cmp dword [ebp + eax*4 - 0x124], ecx
jle 0x10056672
mov dword [ebp - 0x540], 1
jmp 0x10056679
and dword [ebp - 0x540], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x38c]
mov dword [ebp + eax*4 - 0x124], ecx
cmp dword [ebp - 0x38c], 0
jne 0x100566c5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b8], 0
jne 0x100566c5
push 5
pop eax
test eax, eax
jne 0x100566c5
and dword [ebp - 0x444], 0
jmp 0x100566cf
mov dword [ebp - 0x444], 1
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x444], eax
jg 0x100566e9
mov dword [ebp - 0x394], 1
jmp 0x100566f0
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x90], eax
jmp 0x100564db
jmp 0x1005647f
mov eax, dword [ebp - 4]
mov dword [ebp - 0x738], eax
mov eax, 0x87c
test eax, eax
je 0x10056754
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xe8]
cmp dword [ebp + eax - 0x600], ecx
je 0x10056738
mov dword [ebp - 0x4cc], 1
jmp 0x1005673f
and dword [ebp - 0x4cc], 0
cmp dword [ebp - 0x4cc], 0
je 0x10056754
mov dword [ebp - 0x39c], 1
jmp 0x1005675b
and dword [ebp - 0x39c], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x600], 1
jle 0x10056776
mov dword [ebp - 0x588], 1
jmp 0x1005677d
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x1bc]
imul eax, dword [ebp - 4]
cmp eax, dword [ebp - 0xd8]
jne 0x1005679b
mov dword [ebp - 0x44c], 1
jmp 0x100567a2
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x39c]
cmp eax, dword [ebp - 0x44c]
jle 0x100567bc
mov dword [ebp - 0x3a4], 1
jmp 0x100567c3
and dword [ebp - 0x3a4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x600]
add eax, dword [ebp - 0x3a4]
cmp eax, dword [ebp - 0xd8]
jle 0x100567ea
mov dword [ebp - 0x4a4], 1
jmp 0x100567f1
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 0x52c2
jl 0x10056809
mov dword [ebp - 0x3ac], 1
jmp 0x10056810
and dword [ebp - 0x3ac], 0
cmp dword [ebp - 0x3ac], 0xffff
jb 0x10056828
mov dword [ebp - 0x454], 1
jmp 0x1005682f
and dword [ebp - 0x454], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x600]
cmp dword [ebp - 0x454], eax
jl 0x10056850
mov dword [ebp - 0x3b4], 1
jmp 0x10056857
and dword [ebp - 0x3b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
add eax, dword [ebp - 0x3b4]
push 4
pop ecx
imul ecx, ecx, 3
sub eax, dword [ebp + ecx - 0x600]
cmp eax, dword [ebp - 0xe8]
jne 0x1005688b
mov dword [ebp - 0x4e4], 1
jmp 0x10056892
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x90], eax
jmp 0x10056a7f
mov dword [ebp - 0xd8], 0
jmp 0x100568bc
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jg 0x10056a7f
mov dword [ebp - 0x3bc], 0xd11c
mov dword [ebp - 0xe8], 2
jmp 0x100568ec
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x10056a7a
mov dword [ebp - 0x5b0], 0xfffffff6
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x1005692e
push 0xb96
push 0x33a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CreateCaret]
mov dword [ebp - 0x90], 0
jmp 0x10056947
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jg 0x10056a75
mov dword [ebp - 0x58], 0x850227cd
mov dword [ebp - 0x58], 2
jmp 0x1005696b
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x10056a70
mov dword [ebp - 0x3d4], 0x5525c537
mov eax, dword [ebp - 0x90]
cmp dword [ebp + eax*4 - 0x124], 1
jb 0x1005699b
mov dword [ebp - 0x548], 1
jmp 0x100569a2
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x58], 0
je 0x100569ee
mov eax, dword [ebp - 0x58]
sub eax, 9
sub eax, dword [ebp - 0x3bc]
cmp eax, dword [ebp - 0x3bc]
jge 0x100569d1
mov dword [ebp - 0x45c], 1
jmp 0x100569d8
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
neg eax
je 0x100569ee
mov dword [ebp - 0x3c4], 1
jmp 0x100569f5
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x5b0]
cmp dword [ebp - 0x3c4], eax
je 0x10056a0f
mov dword [ebp - 0x4ac], 1
jmp 0x10056a16
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x4ac], eax
jle 0x10056a2d
mov dword [ebp - 0x3cc], 1
jmp 0x10056a34
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x3cc], 0x30b1
jge 0x10056a4c
mov dword [ebp - 0x464], 1
jmp 0x10056a53
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x550], eax
jmp 0x10056964
jmp 0x1005693a
jmp 0x100568df
jmp 0x100568af
mov dword [ebp - 0x174], 0
jmp 0x10056a98
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 1
jge 0x10056ab4
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x2b4], 0x514faf14
jmp 0x10056a8b
mov dword [ebp - 0xb8], 0
jmp 0x10056acd
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jg 0x10057e8c
mov dword [ebp - 0x110], 0xb26bdde0
mov dword [ebp - 0x300], 0x9cadcda6
mov dword [ebp - 0x4c], 0
jmp 0x10056afe
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x10056b14
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x56c], 0xfffffff7
jmp 0x10056af7
mov dword [ebp - 0x4c], 0
jmp 0x10056b24
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x10056b3a
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x774], 0xccfdef05
jmp 0x10056b1d
mov dword [ebp - 0x110], 0xfffffffe
jmp 0x10056b53
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x17
jge 0x10056f10
mov dword [ebp - 0x98], 0xfb023ed1
mov byte [ebp - 0x5e], 0
movzx eax, byte [ebp - 0x5e]
test eax, eax
je 0x10056b8a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov dword [ebp - 0x98], 1
jmp 0x10056ba3
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x10056f0b
mov dword [ebp - 0xe0], 0x585b7f37
mov dword [ebp - 0x19c], 0xffffffff
mov dword [ebp - 0x2f4], 5
mov dword [ebp - 0xe0], 0
jmp 0x10056be7
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jg 0x10056f06
mov dword [ebp - 0x54], 0
jmp 0x10056c04
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x10056c1a
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x1e4], 0x46cdead9
jmp 0x10056bfd
mov dword [ebp - 0x54], 0
jmp 0x10056c2a
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10056c40
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x590], 0
jmp 0x10056c23
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1e4], 0
jmp 0x10056c6e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1e4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1e4], 1
jg 0x10056e16
mov dword [ebp - 0x15c], 0
jmp 0x10056c9b
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 1
jge 0x10056cb7
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x3f4], 0xfffffff7
jmp 0x10056c8e
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x708], eax
mov eax, 0x611fb8eb
test eax, eax
je 0x10056cef
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e4]
cmp dword [ebp + eax*4 - 0x56c], 0
je 0x10056cef
mov dword [ebp - 0x4d4], 1
jmp 0x10056cf6
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 2
ja 0x10056d0b
mov dword [ebp - 0x3dc], 1
jmp 0x10056d12
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x3dc]
cmp eax, 0xfffffffe
jne 0x10056d44
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e4]
cmp dword [ebp + eax*4 - 0x56c], 0
jne 0x10056d44
and dword [ebp - 0x46c], 0
jmp 0x10056d4e
mov dword [ebp - 0x46c], 1
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x46c], eax
jge 0x10056d68
mov dword [ebp - 0x3e4], 1
jmp 0x10056d6f
and dword [ebp - 0x3e4], 0
cmp dword [ebp - 0x3e4], 0xe24307a3
jb 0x10056d87
mov dword [ebp - 0x4b4], 1
jmp 0x10056d8e
and dword [ebp - 0x4b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e4]
mov eax, dword [ebp + eax*4 - 0x56c]
cmp eax, dword [ebp - 0x4b4]
je 0x10056db6
mov dword [ebp - 0x3ec], 1
jmp 0x10056dbd
and dword [ebp - 0x3ec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e4]
cmp dword [ebp - 0x3ec], eax
jl 0x10056dde
mov dword [ebp - 0x474], 1
jmp 0x10056de5
and dword [ebp - 0x474], 0
imul eax, dword [ebp - 0x474], 0x5a12
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3f4], 0
je 0x10056e11
jmp 0x10056c53
jmp 0x10056c53
mov dword [ebp - 0x19c], 0xffffffff
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
jne 0x10056e7e
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x6a4], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x728], eax
push 4
pop eax
neg eax
mov dword [ebp - 0x198], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x198]
mov dword [ebp + eax - 0x1e4], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x198]
mov dword [ebp + eax - 0x590], ecx
mov eax, dword [ebp - 0x19c]
sub eax, 5
je 0x10056e95
mov dword [ebp - 0x2f8], 1
jmp 0x10056e9c
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0x4f34
jg 0x10056ec0
mov dword [ebp - 0x308], 1
jmp 0x10056ec7
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0x308]
jl 0x10056ee1
mov dword [ebp - 0x558], 1
jmp 0x10056ee8
and dword [ebp - 0x558], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x1e4]
mov dword [ebp + ecx - 0x774], eax
jmp 0x10056bda
jmp 0x10056b96
jmp 0x10056b46
mov dword [ebp - 0x5d8], 0x64896e6a
mov dword [ebp - 0x5d4], 0x64896e6a
mov dword [ebp - 0x5d0], 0x64896e6a
mov dword [ebp - 0x5cc], 0x64896e6a
mov dword [ebp - 0x6ac], 2
mov dword [ebp - 0x3b8], 0x757a8360
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x184], 0
jmp 0x10056f6c
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jge 0x10056f88
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x5f0], 6
jmp 0x10056f5f
mov dword [ebp - 0x28], 0x10
jmp 0x10056f98
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1c
jle 0x10057173
mov dword [ebp - 0xa8], 0x39924432
mov dword [ebp - 0x330], 0xf29c8dda
mov dword [ebp - 0xa8], 2
jmp 0x10056fcf
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x1005716e
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x5a8], 0xbb2f
mov dword [ebp - 0x340], 1
mov dword [ebp - 0xa0], 2
jmp 0x10057013
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x10057169
mov dword [ebp - 0x564], 0xe4f9dbc9
mov eax, dword [ebp - 0xa8]
cmp dword [ebp + eax*4 - 0x5f0], 0
je 0x1005703f
jmp 0x10057169
cmp dword [ebp - 0xa0], 0
jne 0x10057143
cmp dword [ebp - 0x28], 0
jne 0x1005711b
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xa0], eax
jne 0x1005706d
mov dword [ebp - 0x310], 1
jmp 0x10057074
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x310], eax
jne 0x1005708e
mov dword [ebp - 0x318], 1
jmp 0x10057095
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x5a8]
cmp dword [ebp - 0x318], eax
jl 0x100570bf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5f0], 0
je 0x100570bf
mov dword [ebp - 0x320], 1
jmp 0x100570c6
and dword [ebp - 0x320], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5f0]
cmp dword [ebp - 0x320], eax
jg 0x100570e7
mov dword [ebp - 0x328], 1
jmp 0x100570ee
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
mov ecx, dword [ebp - 0xa8]
imul eax, dword [ebp + ecx*4 - 0x5f0]
test eax, eax
jne 0x1005711b
and dword [ebp - 0x338], 0
jmp 0x10057125
mov dword [ebp - 0x338], 1
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0
jne 0x10057143
and dword [ebp - 0x348], 0
jmp 0x1005714d
mov dword [ebp - 0x348], 1
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x348]
sub ecx, 8
sub eax, ecx
mov dword [ebp - 0x564], eax
jmp 0x10057006
jmp 0x10056fc2
jmp 0x10056f91
mov dword [ebp - 0x28], 0
jmp 0x10057183
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffe5
jle 0x100571c1
mov dword [ebp - 0x598], 0x1434a938
mov dword [ebp - 0x350], 1
mov dword [ebp - 0x570], 0xfffffffb
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x570], eax
jmp 0x1005717c
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x13c], 0xfffffffe
mov dword [ebp - 0x3a0], 4
mov dword [ebp - 0x18], 0x18
jmp 0x100571ec
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe2
jne 0x10057214
mov byte [ebp - 0x5f], 0
movzx eax, byte [ebp - 0x5f]
test eax, eax
je 0x10057212
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
jmp 0x100571e5
mov dword [ebp - 0x18], 0x13
jmp 0x10057224
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff4
jge 0x10057497
mov dword [ebp - 0xd4], 0xfffffffc
mov dword [ebp - 0xb0], 0xffffffff
mov dword [ebp - 0xd4], 0xffffffef
jmp 0x1005725b
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xc
je 0x1005738d
mov dword [ebp - 0xcc], 0xfffffffc
mov dword [ebp - 0x164], 0
jmp 0x1005728b
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 4
jge 0x100572a7
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x7a8], 0xffffffff
jmp 0x1005727e
cmp dword [ebp - 0x18], 0
jne 0x100572b9
mov dword [ebp - 0x360], 1
jmp 0x100572c0
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xcc], eax
jne 0x100572d7
mov dword [ebp - 0x358], 1
jmp 0x100572de
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0xcc]
imul eax, dword [ebp - 0x358]
cmp dword [ebp - 0x360], eax
jle 0x100572ff
mov dword [ebp - 0x368], 1
jmp 0x10057306
and dword [ebp - 0x368], 0
mov dword [ebp - 0xb0], 0x1af7
imul eax, dword [ebp - 0xb0], 0x7975
cmp dword [ebp - 0x368], eax
jl 0x1005732e
mov dword [ebp - 0x370], 1
jmp 0x10057335
and dword [ebp - 0x370], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x370]
mov dword [ebp + eax - 0x7a8], ecx
mov dword [ebp - 0xcc], 5
jmp 0x10057361
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xfffffffb
jg 0x10057388
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10057386
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
jmp 0x10057354
jmp 0x1005724e
mov dword [ebp - 0x13c], 1
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0xb0], eax
jne 0x100573bd
mov dword [ebp - 0x378], 1
jmp 0x100573c4
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x378], eax
je 0x100573db
mov dword [ebp - 0x380], 1
jmp 0x100573e2
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 1
jb 0x100573f7
mov dword [ebp - 0x388], 1
jmp 0x100573fe
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 0xffffffff
jae 0x10057413
mov dword [ebp - 0x390], 1
jmp 0x1005741a
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0x390]
jne 0x1005743a
cmp dword [ebp - 0xb0], 0
jne 0x1005743a
and dword [ebp - 0x398], 0
jmp 0x10057444
mov dword [ebp - 0x398], 1
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x42b4cf22
jne 0x10057471
cmp dword [ebp - 0x3a0], 0
je 0x10057471
mov dword [ebp - 0x3a8], 1
jmp 0x10057478
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x3a0]
add ecx, dword [ebp - 0x3a8]
add eax, ecx
mov dword [ebp - 0xd4], eax
jmp 0x1005721d
mov dword [ebp - 0x140], 0
jmp 0x100574b0
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 2
jge 0x100574cc
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x584], 0x505b
jmp 0x100574a3
mov dword [ebp - 0x50], 0xa4f833fc
mov dword [ebp - 0x710], 0xffffffff
mov dword [ebp - 0x6b4], 0xfffffff7
mov dword [ebp - 0x6e0], 0x6cc9ca31
mov dword [ebp - 0x148], 0
jmp 0x1005750a
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 3
jge 0x10057526
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x780], 1
jmp 0x100574fd
mov dword [ebp - 0x50], 0
jmp 0x10057536
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jg 0x1005754d
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x780], 0
je 0x1005754b
jmp 0x1005754d
jmp 0x1005752f
mov dword [ebp - 0x50], 0xffffffe5
jmp 0x1005755d
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x1c
je 0x10057653
mov dword [ebp - 0x528], 0x8708ef6b
mov dword [ebp - 0x524], 0x8708ef6b
mov dword [ebp - 0x520], 0x8708ef6b
mov dword [ebp - 0x51c], 0x8708ef6b
mov dword [ebp - 0x6bc], 0x6f65e790
mov dword [ebp - 0x6e4], 0xe6a3735b
mov dword [ebp - 0x6c4], 0x8047d203
mov dword [ebp - 0x150], 0
jmp 0x100575c6
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jge 0x100575e2
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x7b4], 0x76e5b14f
jmp 0x100575b9
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x528], 0xffffffeb
jmp 0x1005760d
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x528]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x528], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x528], 0xfffffff6
jge 0x1005764e
mov dword [ebp - 0x3b0], 4
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x1005763f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov eax, dword [ebp - 0x3b0]
dec eax
mov dword [ebp - 0x3b0], eax
jmp 0x100575f4
jmp 0x10057556
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x108]
mov dword [ebp + eax - 0x5d8], ecx
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x584]
mov dword [ebp - 0x6ec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5d8]
mov ecx, 0x6bc9
inc ecx
add eax, ecx
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x584]
je 0x100576b6
mov dword [ebp - 0x3c0], 1
jmp 0x100576bd
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
add eax, 4
mov dword [ebp - 0x3c8], eax
je 0x100576ea
mov eax, dword [ebp - 0xb8]
cmp dword [ebp + eax*4 - 0x578], 0
je 0x100576ea
mov dword [ebp - 0x3d0], 1
jmp 0x100576f1
and dword [ebp - 0x3d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5d8]
cmp dword [ebp - 0x3d0], eax
jg 0x10057712
mov dword [ebp - 0x3d8], 1
jmp 0x10057719
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 0
je 0x10057737
mov eax, 0x258d
test eax, eax
je 0x10057737
mov dword [ebp - 0x210], 1
jmp 0x1005773e
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0x3e24
jle 0x10057756
mov dword [ebp - 0x214], 1
jmp 0x1005775d
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x214], eax
jl 0x10057777
mov dword [ebp - 0x21c], 1
jmp 0x1005777e
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 3
jbe 0x10057793
mov dword [ebp - 0x224], 1
jmp 0x1005779a
and dword [ebp - 0x224], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x224]
sub ecx, 0x2b6367af
cmp dword [ebp + eax - 0x578], ecx
jg 0x100577c1
mov dword [ebp - 0x22c], 1
jmp 0x100577c8
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0xfffffff6
jne 0x100577dd
mov dword [ebp - 0x234], 1
jmp 0x100577e4
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp + eax*4 - 0x578]
cmp eax, dword [ebp - 0x234]
jl 0x10057805
mov dword [ebp - 0x23c], 1
jmp 0x1005780c
and dword [ebp - 0x23c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x584]
cmp dword [ebp - 0x23c], eax
jg 0x1005782d
mov dword [ebp - 0x244], 1
jmp 0x10057834
and dword [ebp - 0x244], 0
cmp dword [ebp - 0x244], 0xb8ee
jg 0x1005784c
mov dword [ebp - 0x24c], 1
jmp 0x10057853
and dword [ebp - 0x24c], 0
cmp dword [ebp - 0x24c], 0
jg 0x10057868
mov dword [ebp - 0x1a4], 1
jmp 0x1005786f
and dword [ebp - 0x1a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp + eax - 0x2b4], ecx
cmp dword [ebp - 0x1a4], 0
je 0x10057e6b
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x104], 0xffff
mov dword [ebp - 0x158], 0
jmp 0x100578bc
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jge 0x100578d8
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0xc0], 0
jmp 0x100578af
mov dword [ebp - 0x118], 0
jmp 0x100578f1
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jg 0x10057bdf
mov dword [ebp - 0x160], 0xba339924
mov dword [ebp - 0x160], 0
jmp 0x10057921
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jl 0x10057bda
mov dword [ebp - 0xdc], 0xab274bf9
mov dword [ebp - 0xdc], 0
jmp 0x10057951
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jg 0x10057bd5
mov dword [ebp - 0xbc], 0xfffffffb
mov dword [ebp - 0xbc], 0
jmp 0x10057981
cmp dword [ebp - 0xbc], 0
jl 0x10057b94
mov dword [ebp - 0x168], 0
jmp 0x100579a7
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jge 0x100579c3
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x1fc], 0x315362d
jmp 0x1005799a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1fc], 0
jmp 0x100579f1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1fc], 0
jl 0x10057b76
mov dword [ebp - 0xfc], 0x3f17e2f9
mov dword [ebp - 0xfc], 0
jmp 0x10057a28
cmp dword [ebp - 0xfc], 0
jg 0x10057b71
mov byte [ebp - 0x60], 0
movzx eax, byte [ebp - 0x60]
test eax, eax
je 0x10057b8f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
jmp 0x10057974
mov dword [ebp - 0x104], 0
jmp 0x10057bad
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jg 0x10057bd0
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x10057bce
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
jmp 0x10057ba0
jmp 0x10057944
jmp 0x10057914
jmp 0x100578e4
mov byte [ebp - 0x62], 0
movzx eax, byte [ebp - 0x62]
test eax, eax
je 0x10057bf8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x1ac], 0xe00f6802
mov dword [ebp - 0x534], 0xfffffffe
mov dword [ebp - 0x170], 0
jmp 0x10057c2c
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x10057c48
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x1d8], 3
jmp 0x10057c1f
mov dword [ebp - 0x30], 1
jmp 0x10057c58
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x10057d38
mov dword [ebp - 0x514], 0x50a4ba31
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x1d8]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x1d8], 2
je 0x10057c95
mov dword [ebp - 0x274], 1
jmp 0x10057c9c
and dword [ebp - 0x274], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d8]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x30]
sub eax, dword [ebp + ecx*4 - 0x1d8]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x274]
sub edx, dword [ebp + ecx*4 - 0x1d8]
lea eax, [eax + edx - 1]
cmp eax, 1
jle 0x10057ce4
mov dword [ebp - 0x27c], 1
jmp 0x10057ceb
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x1d8]
imul eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x30]
cmp eax, dword [ebp + ecx*4 - 0x1d8]
jne 0x10057d20
mov dword [ebp - 0x284], 1
jmp 0x10057d27
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x534], eax
jmp 0x10057c51
mov dword [ebp - 0x12c], 0
jmp 0x10057d51
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x10057d6d
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x688], 0xf3632e6b
jmp 0x10057d44
mov dword [ebp - 0x2ac], 0x8c45cdbe
mov dword [ebp - 0x1b4], 0xb63e8e1b
mov dword [ebp - 0x2a4], 0x33f23e93
cmp dword [ebp - 0x1b4], 0xfff8
jne 0x10057da3
mov dword [ebp - 0x28c], 1
jmp 0x10057daa
and dword [ebp - 0x28c], 0
push 0xfffffffffffffff6
pop eax
sub eax, dword [ebp - 0x28c]
cmp eax, 0x77278fa8
jge 0x10057dc6
mov dword [ebp - 0x294], 1
jmp 0x10057dcd
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x1b4]
add eax, dword [ebp - 0x294]
imul eax, eax, 0xfffffffc
cmp eax, dword [ebp - 0x1b4]
jle 0x10057df0
mov dword [ebp - 0x29c], 1
jmp 0x10057df7
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
sub eax, 0xb548
imul eax, dword [ebp - 0x2ac]
cmp dword [ebp - 0x2ac], eax
jle 0x10057e33
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x10057e31
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x10057e58
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2b4], 0
je 0x10057e7d
jmp 0x10057e8c
mov dword [ebp - 0x50c], 0xa4aa3e85
jmp 0x10056ac0
jmp 0x10055bda
mov byte [ebp - 0x69], 0
lea eax, [ebp - 0x69]
push eax
call fcn.10050693
pop ecx
push 1
lea eax, [ebp - 0x7c0]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.1004ff25
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x768]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x768]
lea edi, [ebp - 0x5e4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x544], 0x424b969b
mov dword [ebp - 0x134], 0
jmp 0x10057ef8
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 3
jge 0x10057f14
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x634], 0xfffffffe
jmp 0x10057eeb
mov dword [ebp - 0x2c], 2
jmp 0x10057f24
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x10057f71
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x10c], 2
jmp 0x10057f4d
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0x10057f6f
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x634]
mov dword [ebp + ecx*4 - 0x634], eax
jmp 0x10057f40
jmp 0x10057f1d
mov dword [ebp - 0x2c], 0
jmp 0x10057f81
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 5
jl 0x100580a3
mov dword [ebp - 0xc4], 0xf38d927f
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x6fc], eax
mov eax, 0xdffb
cmp eax, 0xffff
ja 0x10057fb6
mov dword [ebp - 0x2bc], 1
jmp 0x10057fbd
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x2bc], eax
jg 0x10057fd7
mov dword [ebp - 0x2c4], 1
jmp 0x10057fde
and dword [ebp - 0x2c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x634]
sub eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x2c4]
jge 0x10058005
mov dword [ebp - 0x2cc], 1
jmp 0x1005800c
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x2cc], eax
jl 0x10058026
mov dword [ebp - 0x2d4], 1
jmp 0x1005802d
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x2d4], eax
jle 0x10058047
mov dword [ebp - 0x2dc], 1
jmp 0x1005804e
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x2dc], eax
jle 0x10058068
mov dword [ebp - 0x2e4], 1
jmp 0x1005806f
and dword [ebp - 0x2e4], 0
cmp dword [ebp - 0x2e4], 0
jbe 0x10058084
mov dword [ebp - 0x2ec], 1
jmp 0x1005808b
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0xc4]
imul eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x544], eax
jmp 0x10057f7a
cmp dword [ebp - 0x5e4], 0
je 0x100580c0
push 3
push dword [ebp - 0x5dc]
push dword [ebp - 0x5e0]
call dword [ebp - 0x5e4]
pop edi
pop esi
mov esp, ebp
pop ebp
ret