Function at 0x1001a7da
Capabilities:
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100579c1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x460
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1001a848
mov eax, dword [ebp + 8]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x29c], eax
push dword [ebp - 0x29c]
push 0x533d
push 0
push 0x45c9
push dword [ebp - 0x290]
push 0x6b52
push 0xb6
call fcn.10024c55
add esp, 0x1c
jmp 0x1001c60f
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x288], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x22c], 0xbbb
mov dword [ebp - 0x324], str.gsacpeqy_ewfu_txpm_exs_xymxnzytj_bachpvjt_bpp_omexni_lmifv_sptaiskgy_glaoiirt_ggiqrtr
cmp dword [ebp - 0x22c], 0xec7
jle 0x1001a943
and dword [ebp - 0xbc], 0
jmp 0x1001a89d
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x1092
jge 0x1001a943
and dword [ebp - 0x74], 0
jmp 0x1001a8ba
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x7123
jge 0x1001a93e
and dword [ebp - 0x88], 0
jmp 0x1001a8d9
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x3fe4
jge 0x1001a939
and dword [ebp - 0x7c], 0
jmp 0x1001a8f2
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x5237
jge 0x1001a937
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x88]
shl eax, cl
mov ecx, dword [ebp - 0x7c]
sar eax, cl
cdq
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], edx
push dword [ebp - 0x2ac]
push dword [ebp - 0x2b0]
mov ecx, 0x10071338
call fcn.100060aa
jmp 0x1001a8eb
jmp 0x1001a8cc
jmp 0x1001a8b3
jmp 0x1001a890
mov eax, dword [ebp - 0x28c]
movzx eax, byte [eax]
test eax, eax
je 0x1001c5ad
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x164], 0x6e39
mov dword [ebp - 0x300], str.btedvrxbc_fsd_pzl_lmydetkvx_zlx_ejqgfd
cmp dword [ebp - 0x164], 0x6f8c
jle 0x1001a9e8
and dword [ebp - 0x84], 0
jmp 0x1001a996
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x7620
jge 0x1001a9e8
and dword [ebp - 0x68], 0
jmp 0x1001a9af
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x118b
jge 0x1001a9e6
mov eax, dword [ebp - 0x84]
and eax, dword [ebp - 0x68]
cdq
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2b8], edx
push dword [ebp - 0x2b8]
push dword [ebp - 0x2bc]
mov ecx, 0x10071338
call fcn.100060aa
jmp 0x1001a9a8
jmp 0x1001a989
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x21c], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x164], 0x6c21
jge 0x1001aa14
mov edx, dword [ebp - 0x300]
mov ecx, 0x10071338
call fcn.1000aac1
jmp 0x1001aa30
or dword [ebp - 4], 0xffffffff
jmp 0x1001aa3a
mov dword [ebp - 0x23c], 1
mov dword [ebp - 0x308], 0x26d1
cmp dword [ebp - 0x308], 0x615
jge 0x1001ab30
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x284]
push eax
push str._lld__lld
call fcn.1003fcfb
add esp, 0xc
mov eax, dword [ebp - 0x284]
add eax, dword [ebp - 0x27c]
mov ecx, dword [ebp - 0x280]
adc ecx, dword [ebp - 0x278]
push ecx
push eax
call fcn.1001a6f5
pop ecx
pop ecx
mov esi, eax
mov edi, edx
push dword [ebp - 0x278]
push dword [ebp - 0x27c]
call fcn.1001a6f5
pop ecx
pop ecx
mov ebx, eax
mov eax, edx
push dword [ebp - 0x280]
push dword [ebp - 0x284]
mov dword [ebp - 0x310], eax
call fcn.1001a6f5
pop ecx
pop ecx
add eax, ebx
mov ebx, dword [ebp - 0x310]
adc edx, ebx
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], edx
mov dword [ebp - 0x2d4], esi
mov dword [ebp - 0x2d0], edi
mov eax, dword [ebp - 0x2c8]
cmp eax, dword [ebp - 0x2d4]
jne 0x1001ab1f
mov eax, dword [ebp - 0x2c4]
cmp eax, dword [ebp - 0x2d0]
jne 0x1001ab1f
push 0x10061b30
call fcn.10040496
pop ecx
mov dword [ebp - 0x318], eax
jmp 0x1001ab30
push 0x10061b34
call fcn.10040496
pop ecx
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x320], 0x4c8d3c89
push 0
push 0x4dd5
lea eax, [ebp - 0x23c]
push eax
push 0x3709
lea eax, [ebp - 0x320]
push eax
call fcn.100157a1
add esp, 0x14
push 0x2ee1
push 0x40cb
push 0x6149
push 0
lea eax, [ebp - 0x23c]
push eax
call fcn.1002552e
add esp, 0x14
push 1
lea eax, [ebp - 0x250]
push eax
push 0x1ab9
push 0
call fcn.10015589
add esp, 0x10
cmp dword [ebp - 0x250], 0
je 0x1001c50a
push dword [ebp - 0x328]
lea ecx, [ebp - 0x3a8]
call fcn.100061bf
mov dword [ebp - 4], 2
mov dword [ebp - 0x360], 0xfffffffc
mov dword [ebp - 0x35c], 0xfffffffc
mov dword [ebp - 0x358], 0xfffffffc
mov dword [ebp - 0x354], 0xfffffffc
lea ecx, [ebp - 0xdd]
call fcn.10006467
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x360]
push eax
lea ecx, [ebp - 0x430]
call fcn.1000646a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x10c]
call fcn.10006416
mov byte [ebp - 4], 3
mov dword [ebp - 0x1c], 0x6673e7ed
mov dword [ebp - 0x34c], 4
mov dword [ebp - 0x348], 4
mov dword [ebp - 0x344], 4
mov dword [ebp - 0x340], 4
lea ecx, [ebp - 0xd5]
call fcn.10006467
push eax
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x34c]
push eax
lea ecx, [ebp - 0x448]
call fcn.1000646a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x36c]
call fcn.10006416
mov byte [ebp - 4], 4
mov dword [ebp - 0x94], 0
jmp 0x1001ac9b
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x1001acb7
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x3e0], 0xfffffffc
jmp 0x1001ac8e
push 0
lea ecx, [ebp - 0x10c]
call fcn.10006458
mov esi, eax
push 3
lea ecx, [ebp - 0x10c]
call fcn.10006458
mov eax, dword [eax]
cmp eax, dword [esi]
jl 0x1001ace5
mov dword [ebp - 0x264], 1
jmp 0x1001acec
and dword [ebp - 0x264], 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.10006458
cmp dword [eax], 0
jne 0x1001ad19
push 1
lea ecx, [ebp - 0x10c]
call fcn.10006458
cmp dword [eax], 0
jne 0x1001ad19
and dword [ebp - 0x244], 0
jmp 0x1001ad23
mov dword [ebp - 0x244], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x244]
mov dword [ebp + eax - 0x3e0], ecx
push 3
lea ecx, [ebp - 0x10c]
call fcn.10006458
cmp dword [eax], 5
jbe 0x1001ad54
mov dword [ebp - 0x25c], 1
jmp 0x1001ad5b
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x1c], eax
push 3
lea ecx, [ebp - 0x36c]
call fcn.10006458
mov esi, eax
push 3
lea ecx, [ebp - 0x10c]
call fcn.10006458
mov eax, dword [eax]
mov dword [esi], eax
push 0
lea ecx, [ebp - 0x10c]
call fcn.10006458
mov ecx, dword [ebp - 0x264]
cmp ecx, dword [eax]
jle 0x1001af16
push 0
push 0x48a1
push 0x6b20
push 0x4ef8
push 0
push 0x4ba9
call fcn.1001a7da
add esp, 0x18
mov dword [ebp - 0x1c], 0xe
jmp 0x1001adcf
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffff7
jne 0x1001af14
mov dword [ebp - 0x304], 0x4d
mov dword [ebp - 0x26c], 0x4c2c
mov dword [ebp - 0x2fc], str.iqgzby_mytyqpt_wtk_jldik_kwcx_iqled_iziy_vzuynx
cmp dword [ebp - 0x26c], 0x4ca8
jle 0x1001ae82
and dword [ebp - 0x8c], 0
jmp 0x1001ae19
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x6fa8
jge 0x1001ae7a
and dword [ebp - 0x90], 0
jmp 0x1001ae3b
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x5b53
jge 0x1001ae78
mov eax, dword [ebp - 0x8c]
xor eax, dword [ebp - 0x90]
cdq
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], edx
push dword [ebp - 0x2dc]
push dword [ebp - 0x2e0]
mov ecx, 0x10071338
call fcn.100060aa
jmp 0x1001ae2e
jmp 0x1001ae0c
push 0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov dword [ebp - 0x298], 0x5c29478c
mov byte [ebp - 4], 5
cmp dword [ebp - 0x26c], 0x4883
jge 0x1001aeac
mov edx, dword [ebp - 0x2fc]
mov ecx, 0x10071338
call fcn.1000aac1
jmp 0x1001aec8
mov dword [ebp - 4], 4
jmp 0x1001aed8
mov dword [ebp - 0x294], 0xe5849968
lea eax, [ebp - 0x294]
push eax
push 0x4d00
push 0
lea eax, [ebp - 0x298]
push eax
push 1
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.10015444
add esp, 0x1c
jmp 0x1001adc8
jmp 0x1001af30
lea eax, [ebp - 0x1c]
push eax
push 1
push 1
push 0x792a
push 0x653f
call fcn.10015159
add esp, 0x14
mov dword [ebp - 0x1c], 3
jmp 0x1001af40
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 7
je 0x1001b0e8
mov dword [ebp - 0x274], 0x67a8
mov dword [ebp - 0x32c], str.whxdktnx_refx_xlms_npvm_rpwha_zxvbwpt_zpwvqx_znfolqyjl_mark
cmp dword [ebp - 0x274], 0x68c2
jle 0x1001b074
and dword [ebp - 0xac], 0
jmp 0x1001af84
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x5bb9
jge 0x1001b074
and dword [ebp - 0xb4], 0
jmp 0x1001afaa
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x5880
jge 0x1001b06f
and dword [ebp - 0x98], 0
jmp 0x1001afd0
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x6282
jge 0x1001b06a
and dword [ebp - 0xa0], 0
jmp 0x1001aff6
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x6a8
jge 0x1001b065
mov eax, dword [ebp - 0xb4]
and eax, dword [ebp - 0x98]
or eax, dword [ebp - 0xac]
or eax, dword [ebp - 0xa0]
cdq
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e8], edx
push dword [ebp - 0x2e8]
push dword [ebp - 0x2ec]
lea ecx, [ebp - 0x460]
call fcn.10001a99
pop ecx
pop ecx
mov dword [ebp - 0x2a0], eax
mov ecx, dword [ebp - 0x2a0]
call fcn.10005da8
push eax
call fcn.1004027d
pop ecx
lea ecx, [ebp - 0x460]
call fcn.10005d9e
jmp 0x1001afe9
jmp 0x1001afc3
jmp 0x1001af9d
jmp 0x1001af77
mov dword [ebp - 0x2a8], 1
mov byte [ebp - 4], 7
cmp dword [ebp - 0x274], 0x64bd
jge 0x1001b09a
push dword [ebp - 0x32c]
call fcn.1004027d
pop ecx
jmp 0x1001b0b6
mov dword [ebp - 4], 4
jmp 0x1001b0c6
push 0x3e3b
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 0
call fcn.100174d1
add esp, 0x10
jmp 0x1001af39
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x36c]
call fcn.1000643c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10c]
call fcn.1000643c
lea eax, [ebp - 0x3d0]
push eax
lea ecx, [ebp - 0x3a8]
call fcn.1000707e
push dword [eax]
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x3a8]
call fcn.10007092
push dword [eax]
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x3a8]
call fcn.1000707e
push dword [eax]
mov edx, 0x10014daa
lea ecx, [ebp - 0x400]
call fcn.10026c38
add esp, 0xc
mov eax, dword [ebp - 0x250]
mov eax, dword [eax + 0xc]
add eax, 0x14
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x234], 0xfffffffe
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x230], 0xedd1edb6
push 4
lea ecx, [ebp - 0x390]
call fcn.100063b9
mov byte [ebp - 4], 9
mov dword [ebp - 0x414], 0
mov dword [ebp - 0x2b4], 0xfa9dfeee
mov dword [ebp - 0x4c], 0
jmp 0x1001b1b7
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1001b1cd
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xc4], 0xffffffff
jmp 0x1001b1b0
push 0x5be4
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x390]
push eax
push 0x3834
push 0x331e
push 0
push 0x41e3
push 1
call fcn.10015681
add esp, 0x20
mov dword [ebp - 0x234], 3
cmp dword [ebp - 0x234], 0x68aa
jge 0x1001b21a
mov dword [ebp - 0x30c], 1
jmp 0x1001b221
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x41c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov dword [ebp - 0x418], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp + eax - 0xc4]
test ecx, ecx
jg 0x1001b25d
mov dword [ebp - 0x128], 1
jmp 0x1001b264
and dword [ebp - 0x128], 0
cmp dword [ebp - 0x128], 5
jl 0x1001b285
cmp dword [ebp - 0x58], 0
jne 0x1001b285
mov eax, 0x42573927
test eax, eax
jne 0x1001b285
and dword [ebp - 0x1d0], 0
jmp 0x1001b28f
mov dword [ebp - 0x1d0], 1
cmp dword [ebp - 0x1d0], 0x1078
jne 0x1001b2a7
mov dword [ebp - 0x130], 1
jmp 0x1001b2ae
and dword [ebp - 0x130], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp eax, dword [ebp - 0x130]
jne 0x1001b2cf
mov dword [ebp - 0x270], 1
jmp 0x1001b2d6
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
sub eax, dword [ebp - 0x58]
je 0x1001b2fd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc4], 0
je 0x1001b2fd
mov dword [ebp - 0x138], 1
jmp 0x1001b304
and dword [ebp - 0x138], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x138], eax
je 0x1001b325
mov dword [ebp - 0x1d8], 1
jmp 0x1001b32c
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0xe467b47e
jb 0x1001b344
mov dword [ebp - 0x140], 1
jmp 0x1001b34b
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x230]
cmp eax, dword [ebp - 0x58]
je 0x1001b36e
mov dword [ebp - 0x148], 1
jmp 0x1001b375
and dword [ebp - 0x148], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp eax, dword [ebp - 0x148]
je 0x1001b396
mov dword [ebp - 0x1e0], 1
jmp 0x1001b39d
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 0x47825498
jle 0x1001b3b5
mov dword [ebp - 0x150], 1
jmp 0x1001b3bc
and dword [ebp - 0x150], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x150], eax
je 0x1001b3dd
mov dword [ebp - 0x258], 1
jmp 0x1001b3e4
and dword [ebp - 0x258], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0xc4]
imul esi, dword [ebp - 0x258]
push 3
lea ecx, [ebp - 0x390]
call fcn.10006458
mov dword [eax], esi
push 0x4a28
lea eax, [ebp - 0x2b4]
push eax
push 1
push 0x269
push 1
push 0x733b
push 0x786
call fcn.10015444
add esp, 0x1c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x390]
call fcn.1000643c
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x158]
mov eax, dword [eax]
mov dword [ebp - 0xb8], eax
jmp 0x1001b462
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x158]
je 0x1001c4fb
mov dword [ebp - 0xc8], 0xfffc
mov dword [ebp - 0x20], 5
mov dword [ebp - 0xdc], 0x935ff574
mov dword [ebp - 0x188], 0x7e91c178
mov dword [ebp - 0xb0], 0
jmp 0x1001b4b2
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x1001b4ce
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x118], 0x64a6847d
jmp 0x1001b4a5
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x118], 0xffffffea
jmp 0x1001b4fc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x118], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x118], 9
jg 0x1001b573
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xa8], 0
jmp 0x1001b52c
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x1001b548
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x428], 0
jmp 0x1001b51f
mov dword [ebp - 0x50], 0
jmp 0x1001b558
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1001b56e
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x428], 0xa5043c4a
jmp 0x1001b551
jmp 0x1001b4e1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0x338], 0x31f145ba
jne 0x1001b5b7
mov dword [ebp - 0x268], 1
jmp 0x1001b5be
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jle 0x1001b5d2
mov dword [ebp - 0x1e8], 1
jmp 0x1001b5d9
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x20]
jle 0x1001b5f4
mov dword [ebp - 0x238], 1
jmp 0x1001b5fb
and dword [ebp - 0x238], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x118]
mov dword [ebp - 0x160], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x160]
mov dword [ebp + eax - 0x118], ecx
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x238]
jle 0x1001b63a
mov dword [ebp - 0x168], 1
jmp 0x1001b641
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 0xfffc
jbe 0x1001b659
mov dword [ebp - 0x1f0], 1
jmp 0x1001b660
and dword [ebp - 0x1f0], 0
imul eax, dword [ebp - 0x1f0], 0xd015
cmp eax, dword [ebp - 0xdc]
jle 0x1001b67e
mov dword [ebp - 0x170], 1
jmp 0x1001b685
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x170], eax
jge 0x1001b69f
mov dword [ebp - 0x178], 1
jmp 0x1001b6a6
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x268]
cmp eax, dword [ebp - 0x178]
jge 0x1001b6c0
mov dword [ebp - 0x1f8], 1
jmp 0x1001b6c7
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x1f8]
imul eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x20]
jle 0x1001b6e8
mov dword [ebp - 0x180], 1
jmp 0x1001b6ef
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x180], eax
jge 0x1001b706
mov dword [ebp - 0x2c0], 1
jmp 0x1001b70d
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3cc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x118], 0
je 0x1001b737
xor eax, eax
inc eax
je 0x1001b737
mov dword [ebp - 0x240], 1
jmp 0x1001b73e
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 5
jge 0x1001b75f
mov dword [ebp - 0x314], 1
jmp 0x1001b766
and dword [ebp - 0x314], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
mov dword [ebp - 0x20], eax
push 0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xd0]
push eax
push 0
call fcn.1001504a
add esp, 0x10
mov dword [ebp - 0x2cc], 0x16dd
cmp dword [ebp - 0x2cc], 0x1313
jge 0x1001b9cb
lea eax, [ebp - 0x48]
push eax
push str._ld_n
call fcn.1003fcfb
pop ecx
pop ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0xec]
call fcn.10025f0a
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xf4]
call fcn.10026165
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x6c], 1
jmp 0x1001b7eb
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x48]
jg 0x1001b817
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x334], eax
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0xf4]
call fcn.1002617a
jmp 0x1001b7e4
and dword [ebp - 0x44], 0
jmp 0x1001b824
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x48]
jge 0x1001b881
push dword [ebp - 0x44]
lea ecx, [ebp - 0xec]
call fcn.10006458
push eax
push 0x100608d8
call fcn.1003fcfb
pop ecx
pop ecx
push dword [ebp - 0x44]
lea ecx, [ebp - 0xec]
call fcn.10006458
push eax
lea ecx, [ebp - 0xf4]
call fcn.100261a8
test eax, eax
jbe 0x1001b87f
push dword [ebp - 0x44]
lea ecx, [ebp - 0xec]
call fcn.10006458
push eax
lea ecx, [ebp - 0xf4]
call fcn.10025fe8
jmp 0x1001b81d
lea ecx, [ebp - 0x2f8]
call fcn.10026165
mov byte [ebp - 4], 0xc
and dword [ebp - 0x30], 0
jmp 0x1001b89d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x48]
jge 0x1001b960
push dword [ebp - 0x30]
lea ecx, [ebp - 0xec]
call fcn.10006458
push eax
lea ecx, [ebp - 0x2f8]
call fcn.100261a8
test eax, eax
ja 0x1001b8ef
push dword [ebp - 0x30]
lea ecx, [ebp - 0xec]
call fcn.10006458
cmp dword [eax], 0
jle 0x1001b8ef
push dword [ebp - 0x30]
lea ecx, [ebp - 0xec]
call fcn.10006458
mov eax, dword [eax]
cmp eax, dword [ebp - 0x48]
jle 0x1001b93a
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0xf4]
call fcn.10026198
mov ecx, eax
call fcn.10026226
mov eax, dword [eax]
mov dword [ebp - 0x200], eax
push dword [ebp - 0x30]
lea ecx, [ebp - 0xec]
call fcn.10006458
mov ecx, dword [ebp - 0x200]
mov dword [eax], ecx
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0xf4]
call fcn.10025fe8
jmp 0x1001b95b
push dword [ebp - 0x30]
lea ecx, [ebp - 0xec]
call fcn.10006458
push eax
lea eax, [ebp - 0x440]
push eax
lea ecx, [ebp - 0x2f8]
call fcn.1002617a
jmp 0x1001b896
and dword [ebp - 0x70], 0
jmp 0x1001b96d
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x48]
jge 0x1001b993
push dword [ebp - 0x70]
lea ecx, [ebp - 0xec]
call fcn.10006458
push dword [eax]
push str._ld
call fcn.1004027d
pop ecx
pop ecx
jmp 0x1001b966
push 0x1005f939
call fcn.10040496
pop ecx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2f8]
call fcn.10025fc2
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xf4]
call fcn.10025fc2
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xec]
call fcn.1000643c
push 3
lea ecx, [ebp - 0x64]
call fcn.100063b9
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x190], 0x978f3c34
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x1a8], 0xfffffffd
mov dword [ebp - 0x31c], 0xec0d
mov dword [ebp - 0x1c0], 0xfffffff9
push 1
lea ecx, [ebp - 0x384]
call fcn.100063b9
mov byte [ebp - 4], 0xe
push 0x2ef
lea eax, [ebp - 0x64]
push eax
push 0x3d17
push 0x1ac7
lea eax, [ebp - 0x2d8]
push eax
push 0
call fcn.10017761
add esp, 0x18
lea eax, [ebp - 0x384]
push eax
push 0x4d1e
push 0x1aff
push 0x2d82
lea eax, [ebp - 0x2d8]
push eax
push 0
push 0x42b6
push 0
call fcn.10015681
add esp, 0x20
mov byte [ebp - 0x32], 0
push 0x5f3c
push 1
push 1
lea eax, [ebp - 0x32]
push eax
call fcn.100154fc
add esp, 0x10
push 0
lea ecx, [ebp - 0x64]
call fcn.10006458
cmp dword [eax], 0
je 0x1001babd
push 0
lea ecx, [ebp - 0x64]
call fcn.10006458
mov eax, dword [eax]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
je 0x1001babd
mov dword [ebp - 0x254], 1
jmp 0x1001bac4
and dword [ebp - 0x254], 0
push 0
lea ecx, [ebp - 0x64]
call fcn.10006458
cmp dword [eax], 0
jne 0x1001bc6a
push 0
lea ecx, [ebp - 0x64]
call fcn.10006458
mov eax, dword [eax]
add eax, 0xfffe
mov dword [ebp - 0x260], 1
jmp 0x1001bafb
push 0
lea ecx, [ebp - 0x64]
call fcn.10006458
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [eax]
jge 0x1001bb1b
mov dword [ebp - 0x198], 1
jmp 0x1001bb22
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0xdb2b
jge 0x1001bb3a
mov dword [ebp - 0x208], 1
jmp 0x1001bb41
and dword [ebp - 0x208], 0
push 1
lea ecx, [ebp - 0x64]
call fcn.10006458
mov ecx, dword [ebp - 0x208]
sub ecx, dword [eax]
mov dword [ebp - 0xd4], ecx
mov esi, dword [ebp - 0xd4]
push 2
lea ecx, [ebp - 0x64]
call fcn.10006458
add esi, dword [eax]
cmp esi, 0xab56
jge 0x1001bb7f
mov dword [ebp - 0x1a0], 1
jmp 0x1001bb86
and dword [ebp - 0x1a0], 0
push 2
lea ecx, [ebp - 0x64]
call fcn.10006458
mov ecx, dword [ebp - 0x1a0]
sub ecx, dword [eax]
je 0x1001bbaf
mov eax, 0xcaa5d732
test eax, eax
je 0x1001bbaf
mov dword [ebp - 0x248], 1
jmp 0x1001bbb6
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x1a8], eax
mov esi, dword [ebp - 0x1a8]
push 2
lea ecx, [ebp - 0x64]
call fcn.10006458
add esi, dword [eax]
push 2
lea ecx, [ebp - 0x64]
call fcn.10006458
cmp esi, dword [eax]
jge 0x1001bbee
mov dword [ebp - 0x210], 1
jmp 0x1001bbf5
and dword [ebp - 0x210], 0
push 0
lea ecx, [ebp - 0x64]
call fcn.10006458
mov ecx, dword [ebp - 0x210]
cmp ecx, dword [eax]
jge 0x1001bc15
mov dword [ebp - 0x1b0], 1
jmp 0x1001bc1c
and dword [ebp - 0x1b0], 0
push 2
lea ecx, [ebp - 0x64]
call fcn.10006458
mov ecx, dword [ebp - 0x1b0]
cmp ecx, dword [eax]
je 0x1001bc3c
mov dword [ebp - 0x24c], 1
jmp 0x1001bc43
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x31c], eax
push 2
lea ecx, [ebp - 0x64]
call fcn.10006458
cmp dword [eax], 0xc309ab83
jbe 0x1001bc6a
and dword [ebp - 0x1b8], 0
jmp 0x1001bc74
mov dword [ebp - 0x1b8], 1
cmp dword [ebp - 0x1b8], 0xfffe
jb 0x1001bc93
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x1001bc93
mov dword [ebp - 0x218], 1
jmp 0x1001bc9a
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x254], eax
jle 0x1001bcc6
cmp dword [ebp - 0xd4], 0
jne 0x1001bcc6
and dword [ebp - 0x1c8], 0
jmp 0x1001bcd0
mov dword [ebp - 0x1c8], 1
push 0
lea ecx, [ebp - 0x384]
call fcn.10006458
mov ecx, dword [ebp - 0x1c8]
mov dword [eax], ecx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x384]
call fcn.1000643c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x64]
call fcn.1000643c
mov eax, dword [ebp - 0xd0]
push dword [eax + 0x28]
lea ecx, [ebp - 0x3c0]
call fcn.100061fa
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14c], 0x9e22401d
mov dword [ebp - 0x2e4], 0x2a284868
mov dword [ebp - 0x78], 0
jmp 0x1001bd43
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1001bd59
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x100], 0xfffffffc
jmp 0x1001bd3c
mov dword [ebp - 0x14], 2
jmp 0x1001bd69
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1001bfe2
mov dword [ebp - 0x144], 0xfffffffa
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x2f0], 0xff57440e
mov dword [ebp - 0x24], 0
jmp 0x1001bda1
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1001bdb7
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x330], 0xfffffff7
jmp 0x1001bd9a
mov dword [ebp - 0x24], 0
jmp 0x1001bdc7
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1001bddd
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3ec], 4
jmp 0x1001bdc0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x100], 0
je 0x1001beed
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x100], 0
jne 0x1001be14
xor eax, eax
jne 0x1001be14
and dword [ebp - 0x120], 0
jmp 0x1001be1e
mov dword [ebp - 0x120], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x100]
cmp dword [ebp - 0x120], eax
jne 0x1001be3e
mov dword [ebp - 0x124], 1
jmp 0x1001be45
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x124], eax
jl 0x1001be5c
mov dword [ebp - 0x12c], 1
jmp 0x1001be63
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 1
jne 0x1001be78
mov dword [ebp - 0x134], 1
jmp 0x1001be7f
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x100]
cmp dword [ebp - 0x134], eax
jne 0x1001beaa
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x100], 0
je 0x1001beaa
mov dword [ebp - 0x13c], 1
jmp 0x1001beb1
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x14c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14c]
add ecx, dword [ebp + eax - 0x100]
cmp ecx, 1
je 0x1001beed
mov dword [ebp - 0x154], 1
jmp 0x1001bef4
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x2e4]
add eax, dword [ebp - 0x154]
cmp eax, 0xf860
jg 0x1001bf13
mov dword [ebp - 0x15c], 1
jmp 0x1001bf1a
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x15c], eax
je 0x1001bf31
mov dword [ebp - 0x11c], 1
jmp 0x1001bf38
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x100]
cmp dword [ebp - 0x11c], eax
jge 0x1001bf56
mov dword [ebp - 0x16c], 1
jmp 0x1001bf5d
and dword [ebp - 0x16c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x16c]
mov dword [ebp + eax - 0x330], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x100]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x100], 0xfa025ec5
jne 0x1001bf9c
mov dword [ebp - 0x174], 1
jmp 0x1001bfa3
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x17c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x17c]
mov dword [ebp + eax - 0x3ec], ecx
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x2f0], eax
jmp 0x1001bd62
push 1
push 0x3fc7
push 0x7988
push 1
call fcn.10015589
add esp, 0x10
lea eax, [ebp - 0x3f4]
push eax
lea ecx, [ebp - 0x3c0]
call fcn.1000707e
push dword [eax]
lea eax, [ebp - 0x40c]
push eax
lea ecx, [ebp - 0x3c0]
call fcn.10007092
push dword [eax]
lea eax, [ebp - 0x3fc]
push eax
lea ecx, [ebp - 0x3c0]
call fcn.1000707e
push dword [eax]
mov edx, 0x10014daa
lea ecx, [ebp - 0x3c8]
call fcn.10026c38
add esp, 0xc
mov dword [ebp - 0x3c], 3
mov dword [ebp - 0x18], 0x4dbb
mov dword [ebp - 0x80], 0xc70ab227
mov dword [ebp - 0x38], 0
push 4
lea ecx, [ebp - 0x228]
call fcn.100063b9
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x40], 0xfffffff9
mov dword [ebp - 0x1a4], 0x856cd833
mov dword [ebp - 0x1bc], 0xdd484073
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x2c], 0
jmp 0x1001c0a9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1001c0bf
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xcc], 6
jmp 0x1001c0a2
mov dword [ebp - 0x2c], 0
jmp 0x1001c0cf
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1001c0eb
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x228]
call fcn.10006458
mov dword [eax], 2
jmp 0x1001c0c8
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18c]
mov dword [ebp + eax - 0xcc], ecx
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x3c]
jne 0x1001c12b
mov dword [ebp - 0x194], 1
jmp 0x1001c132
and dword [ebp - 0x194], 0
push 1
lea ecx, [ebp - 0x228]
call fcn.10006458
mov ecx, dword [ebp - 0x194]
mov dword [eax], ecx
mov dword [ebp - 0x40], 0x7457
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x3c4], eax
mov esi, dword [ebp - 0x40]
push 1
lea ecx, [ebp - 0x228]
call fcn.10006458
cmp esi, dword [eax]
jl 0x1001c177
mov dword [ebp - 0x19c], 1
jmp 0x1001c17e
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jne 0x1001c1a2
cmp dword [ebp - 0x40], 0
jne 0x1001c1a2
and dword [ebp - 0x1ac], 0
jmp 0x1001c1ac
mov dword [ebp - 0x1ac], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1ac], eax
jne 0x1001c1c3
mov dword [ebp - 0x1b4], 1
jmp 0x1001c1ca
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x18]
jg 0x1001c1ed
mov dword [ebp - 0x1c4], 1
jmp 0x1001c1f4
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x1c4], eax
jne 0x1001c20b
mov dword [ebp - 0x1cc], 1
jmp 0x1001c212
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x1cc], eax
jg 0x1001c229
mov dword [ebp - 0x1d4], 1
jmp 0x1001c230
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x3c]
cmp eax, 0x7fc0
jle 0x1001c251
mov dword [ebp - 0x1dc], 1
jmp 0x1001c258
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
add eax, 0xae3d
cmp eax, dword [ebp - 0x3c]
jle 0x1001c274
mov dword [ebp - 0x1e4], 1
jmp 0x1001c27b
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x18], 0
jmp 0x1001c297
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x1001c3fc
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x38], 3
jmp 0x1001c2c2
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1001c3df
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xcc], 0xffffffff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x228]
call fcn.10006458
cmp dword [eax], 0xffffffff
jl 0x1001c354
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jne 0x1001c304
mov dword [ebp - 0x1ec], 1
jmp 0x1001c30b
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0xffff
jb 0x1001c323
mov dword [ebp - 0x1f4], 1
jmp 0x1001c32a
and dword [ebp - 0x1f4], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x228]
call fcn.10006458
push dword [ebp - 0x18]
lea ecx, [ebp - 0x228]
call fcn.10006458
cmp dword [eax], 0
jne 0x1001c354
and dword [ebp - 0x1fc], 0
jmp 0x1001c35e
mov dword [ebp - 0x1fc], 1
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x1fc], eax
jle 0x1001c377
push dword [ebp - 0x18]
lea ecx, [ebp - 0x228]
call fcn.10006458
mov eax, dword [ebp - 0x28]
sub eax, 6
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0xfffffff7
je 0x1001c39b
mov dword [ebp - 0x20c], 1
jmp 0x1001c3a2
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x28], 0
jmp 0x1001c3c4
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1001c3da
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xcc], 0
jmp 0x1001c3bd
jmp 0x1001c2bb
push 0x3076
push 1
push 1
push 0
push 0x1fcb
call fcn.10015afc
add esp, 0x14
jmp 0x1001c290
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x228]
call fcn.1000643c
lea edx, [ebp - 0x3c0]
lea ecx, [ebp - 0x3a8]
call fcn.10026ca1
movzx eax, al
test eax, eax
je 0x1001c4e7
push 2
lea ecx, [ebp - 0x378]
call fcn.100063b9
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x54], 0xdf1febae
mov dword [ebp - 0x3d8], 0xfffffff7
push 0
lea eax, [ebp - 0x3e4]
push eax
push 0x1f51
lea eax, [ebp - 0x378]
push eax
push 0x428e
push 0x75a6
call fcn.100255a1
add esp, 0x18
mov dword [ebp - 0x54], 0
jmp 0x1001c480
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1001c49d
lea eax, [ebp - 0x378]
push eax
push 0
lea eax, [ebp - 0x54]
push eax
call fcn.10017afd
add esp, 0xc
jmp 0x1001c479
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x378]
call fcn.1000643c
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x21c]
mov edx, dword [ebp - 0xd0]
mov eax, dword [edx + eax + 0x10]
mov dword [ecx], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3c0]
call fcn.10006244
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a8]
call fcn.10006244
jmp 0x1001c60f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3c0]
call fcn.10006244
jmp 0x1001b454
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a8]
call fcn.10006244
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x9c], 0
jmp 0x1001c52d
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 4
jge 0x1001c549
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x470], 0xc93b4e1
jmp 0x1001c520
mov dword [ebp - 0xa4], 0
jmp 0x1001c562
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jg 0x1001c5a0
push 0
push 0x5204
push 0x66ab
push 1
call fcn.100151ec
add esp, 0x10
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x1001c59e
push 0x59b2
push 1
push 1
call fcn.100150e1
add esp, 0xc
jmp 0x1001c555
mov eax, dword [ebp - 0x21c]
and dword [eax], 0
jmp 0x1001c60f
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x1001c5c6
push 0
push 0x26b9
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x22c], 0x865
jge 0x1001c5e9
mov edx, dword [ebp - 0x324]
mov ecx, 0x10071338
call fcn.1000aac1
jmp 0x1001c605
or dword [ebp - 4], 0xffffffff
jmp 0x1001c60f
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret