Function at 0x10015958
Capabilities:
Get disk size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006c54e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x548
push esi
push edi
and dword [ebp - 0xe8], 0
mov dword [ebp - 0x24], 0xeef20fe6
mov dword [ebp - 0x2b0], 0x4495231f
mov dword [ebp - 0xd8], 0
jmp 0x100159a9
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 4
jge 0x100159c5
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x530], 0xfffffffc
jmp 0x1001599c
cmp dword [ebp - 0x24], 1
jge 0x100159d7
mov dword [ebp - 0x358], 1
jmp 0x100159de
and dword [ebp - 0x358], 0
cmp dword [ebp - 0x24], 1
jle 0x100159f0
mov dword [ebp - 0x25c], 1
jmp 0x100159f7
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x25c], eax
jne 0x10015a0e
mov dword [ebp - 0x360], 1
jmp 0x10015a15
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x358]
cmp eax, dword [ebp - 0x360]
jg 0x10015a2f
mov dword [ebp - 0x33c], 1
jmp 0x10015a36
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x33c]
jne 0x10015a4d
mov dword [ebp - 0x2a8], 1
jmp 0x10015a54
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0
je 0x10015b74
mov dword [ebp - 0x374], 0x8373b2c
mov dword [ebp - 0xb4], 0
jmp 0x10015a84
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x10015aa0
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x124], 1
jmp 0x10015a77
mov dword [ebp - 0x24], 0
jmp 0x10015ab0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x10015b5c
mov dword [ebp - 0xf0], 0
jmp 0x10015ad3
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x10015aec
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x78], 0
jmp 0x10015ac6
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x124]
mov dword [ebp + ecx*4 - 0x124], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x78], 0
jmp 0x10015b25
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x78], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x78], 0xfffffffe
jl 0x10015b57
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
mov dword [ebp - 0x4b0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
mov dword [ebp - 0x374], eax
jmp 0x10015b10
jmp 0x10015aa9
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x10015b72
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
jmp 0x10015bf2
mov dword [ebp - 0x40c], 0xffffffff
mov dword [ebp - 0x414], 0xb1d6a56c
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x10015b9c
push 1
call fcn.10015525
pop ecx
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x168], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x168]
mov dword [ebp + eax - 0x530], ecx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x6859
jne 0x10015bdf
mov dword [ebp - 0x170], 1
jmp 0x10015be6
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x414], eax
mov eax, dword [0x10ca7f04]
and eax, 1
jne 0x10015c26
mov eax, dword [0x10ca7f04]
or eax, 1
mov dword [0x10ca7f04], eax
and dword [ebp - 4], 0
mov ecx, 0x10ca7f70
call fcn.10018446
push 0x1006d16e
call fcn.10055d26
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x41c], 0x27d373ee
mov dword [ebp - 0x464], 0x752e4a6b
mov dword [ebp - 0x1c], 0
jmp 0x10015c4a
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10015c60
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4c0], 0xff0ea75c
jmp 0x10015c43
mov dword [ebp - 0x1c], 0
jmp 0x10015c70
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10015c86
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x370], 0xfffffff7
jmp 0x10015c69
mov dword [ebp - 0x1c], 0
jmp 0x10015c96
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10015cac
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3e0], 0x999d94b4
jmp 0x10015c8f
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x370], 2
jmp 0x10015cd7
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x370]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x370], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x370], 0
jl 0x10015e8b
mov dword [ebp - 0x94], 0x7d65121a
mov dword [ebp - 0xd4], 0xfffffffc
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x370]
mov eax, dword [ebp + eax*4 - 0x4c0]
mov dword [ebp - 0x448], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x370]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0x41c], 0
jne 0x10015d90
cmp dword [ebp - 0x94], 0
jne 0x10015d62
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e0], 0
jne 0x10015d62
and dword [ebp - 0x2b8], 0
jmp 0x10015d6c
mov dword [ebp - 0x2b8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e0]
imul eax, dword [ebp - 0x2b8]
cmp eax, 0xfffb
je 0x10015d90
and dword [ebp - 0x178], 0
jmp 0x10015d9a
mov dword [ebp - 0x178], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x370]
cmp dword [ebp - 0x178], eax
je 0x10015dba
mov dword [ebp - 0x2c0], 1
jmp 0x10015dc1
and dword [ebp - 0x2c0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x370]
mov eax, dword [ebp + eax*4 - 0x4c0]
mov ecx, dword [ebp - 0x2c0]
lea eax, [ecx + eax - 5]
cmp eax, dword [ebp - 0xd4]
jle 0x10015df2
mov dword [ebp - 0x180], 1
jmp 0x10015df9
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x180], eax
je 0x10015e13
mov dword [ebp - 0x2c8], 1
jmp 0x10015e1a
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
je 0x10015e62
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x10015e60
push 0x811
push 0x252e
push 0x3415
push 0
push 0xbf1
call fcn.10017ec2
add esp, 0x14
jmp 0x10015e73
mov byte [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
call fcn.1001585b
pop ecx
pop ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
mov dword [ebp + eax - 0x3e0], ecx
jmp 0x10015cbe
mov ecx, dword [ebp + 0xc]
call fcn.100104bb
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x10c], 3
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0xf4], 0xffffffff
mov dword [ebp - 0x28], 0
jmp 0x10015ecb
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10015ee1
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xa8], 0xe713a473
jmp 0x10015ec4
mov dword [ebp - 0x28], 0
jmp 0x10015ef1
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10015f07
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x430], 0xcaa7054f
jmp 0x10015eea
mov dword [ebp - 0x38], 0x10
jmp 0x10015f17
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffe8
jg 0x100166a8
mov dword [ebp - 0x10], 0xa9831117
mov dword [ebp - 0x4c], 0x79ae4f78
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x3d0], 0x6c3a
mov dword [ebp - 0x12c], 0x400d43e6
mov dword [ebp - 0x10], 0
jmp 0x10015f67
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x100166a3
mov dword [ebp - 0xe4], 0xfffa
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0x80], 0xfffffffc
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp + ecx*4 - 0xa8]
cmp dword [ebp + eax*4 - 0xa8], ecx
jg 0x10015fae
mov dword [ebp - 0x188], 1
jmp 0x10015fb5
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0xe3e7
jge 0x10015fcd
mov dword [ebp - 0x2d0], 1
jmp 0x10015fd4
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa8]
cmp dword [ebp - 0x2d0], eax
jle 0x10015ff2
mov dword [ebp - 0x190], 1
jmp 0x10015ff9
and dword [ebp - 0x190], 0
cmp dword [ebp - 0x190], 0xc2076acb
jne 0x10016011
mov dword [ebp - 0x410], 1
jmp 0x10016018
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa8]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa8]
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa8]
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0xa8], ecx
jge 0x1001606f
mov dword [ebp - 0x2d8], 1
jmp 0x10016076
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x4c], eax
jge 0x10016096
mov dword [ebp - 0x198], 1
jmp 0x1001609d
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x198]
test eax, eax
je 0x1001655d
mov dword [ebp - 0x140], 0xcd4f
mov dword [ebp - 0xfc], 0x92f9e84e
mov dword [ebp - 0x380], 1
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0xbc], eax
jle 0x100160f0
mov dword [ebp - 0x2e0], 1
jmp 0x100160f7
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x2e0], eax
jg 0x10016111
mov dword [ebp - 0x138], 1
jmp 0x10016118
and dword [ebp - 0x138], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x138]
mov dword [ebp + eax - 0x430], ecx
cmp dword [ebp - 0x138], 0x4648
jl 0x10016143
mov dword [ebp - 0x1a0], 1
jmp 0x1001614a
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x1a0]
jge 0x10016164
mov dword [ebp - 0x2e8], 1
jmp 0x1001616b
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x2e8], eax
jge 0x10016185
mov dword [ebp - 0x1a8], 1
jmp 0x1001618c
and dword [ebp - 0x1a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa8]
cmp dword [ebp - 0x1a8], eax
je 0x100161ad
mov dword [ebp - 0x3d4], 1
jmp 0x100161b4
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa8]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x4d0], eax
mov eax, 0xd447
cmp eax, 0xfffffff7
je 0x100161f2
mov dword [ebp - 0x2f0], 1
jmp 0x100161f9
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x2f0], eax
jg 0x10016210
mov dword [ebp - 0x1b0], 1
jmp 0x10016217
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
sub eax, 0x60131b3b
cmp eax, dword [ebp - 0x8c]
jl 0x10016236
mov dword [ebp - 0x2f8], 1
jmp 0x1001623d
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x10016273
cmp dword [ebp - 0xfc], 0
je 0x10016273
mov dword [ebp - 0x1b8], 1
jmp 0x1001627a
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp + ecx*4 - 0xa8]
sub ecx, dword [ebp - 0x1b8]
cmp dword [ebp + eax*4 - 0xa8], ecx
jl 0x100162a2
mov dword [ebp - 0x300], 1
jmp 0x100162a9
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
sub eax, dword [ebp - 0x38]
cmp eax, 0xc3978d11
jne 0x100162c5
mov dword [ebp - 0x1c0], 1
jmp 0x100162cc
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x3c], 0
jmp 0x100162e8
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x10016558
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x10016304
jmp 0x10016558
cmp dword [ebp - 0xf4], 0
je 0x1001641d
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xa8], 0
je 0x100163ff
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa8]
imul eax, dword [ebp - 0x104]
test eax, eax
je 0x10016343
mov dword [ebp - 0x308], 1
jmp 0x1001634a
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x308], eax
jl 0x10016364
mov dword [ebp - 0x1c8], 1
jmp 0x1001636b
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa8]
cmp dword [ebp - 0x1c8], eax
jl 0x10016389
mov dword [ebp - 0x310], 1
jmp 0x10016390
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x310], eax
je 0x100163aa
mov dword [ebp - 0x1d0], 1
jmp 0x100163b1
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x380]
jne 0x100163db
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xa8], 0
jne 0x100163db
and dword [ebp - 0x318], 0
jmp 0x100163e5
mov dword [ebp - 0x318], 1
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x318], eax
jl 0x100163ff
mov dword [ebp - 0x1d8], 1
jmp 0x10016406
and dword [ebp - 0x1d8], 0
imul eax, dword [ebp - 0x1d8], 0
test eax, eax
je 0x1001641d
mov dword [ebp - 0x320], 1
jmp 0x10016424
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x320]
jg 0x1001643e
mov dword [ebp - 0x1e0], 1
jmp 0x10016445
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1e0]
sub eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x8c]
je 0x10016465
mov dword [ebp - 0x328], 1
jmp 0x1001646c
and dword [ebp - 0x328], 0
cmp dword [ebp - 0x328], 0xff04
jle 0x10016484
mov dword [ebp - 0x388], 1
jmp 0x1001648b
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa8]
mov dword [ebp - 0x44c], eax
mov eax, 0xf2dcfcb6
test eax, eax
je 0x100164b7
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x100164b7
mov dword [ebp - 0x1e8], 1
jmp 0x100164be
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 0xffffffff
ja 0x100164d3
mov dword [ebp - 0x330], 1
jmp 0x100164da
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x330], eax
jne 0x100164f4
mov dword [ebp - 0x1f0], 1
jmp 0x100164fb
and dword [ebp - 0x1f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f0]
sub ecx, dword [ebp + eax - 0x430]
cmp ecx, dword [ebp - 0x104]
jle 0x10016522
mov dword [ebp - 0x338], 1
jmp 0x10016529
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x338]
jge 0x10016543
mov dword [ebp - 0x1f8], 1
jmp 0x1001654a
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x80], eax
jmp 0x100162e1
jmp 0x1001669e
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa8]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0xa8], ecx
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x340]
cmp eax, 0xd940
jle 0x1001659a
mov dword [ebp - 0x348], 1
jmp 0x100165a1
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0xe4], eax
jle 0x100165d3
cmp dword [ebp - 0x8c], 0
je 0x100165d3
mov dword [ebp - 0x200], 1
jmp 0x100165da
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x348], eax
jg 0x10016609
cmp dword [ebp - 0x12c], 0
je 0x10016609
mov dword [ebp - 0x350], 1
jmp 0x10016610
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
sub eax, 0x69f1341b
je 0x10016638
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x430], 0
je 0x10016638
mov dword [ebp - 0x20c], 1
jmp 0x1001663f
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x80]
cmp eax, 0xae4374f1
jb 0x10016671
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x1001666f
push 0x2a96
push 1
call fcn.1001555a
pop ecx
pop ecx
jmp 0x1001669e
mov dword [ebp - 0x404], 0xbeba
push 1
push 0x69f4
lea eax, [ebp - 0x404]
push eax
call fcn.10015594
add esp, 0xc
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa8]
mov dword [ebp - 0x4c], eax
jmp 0x10015f60
jmp 0x10015f10
cmp dword [ebp - 0xd0], 6
jae 0x10016a20
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x390], eax
lea eax, [ebp - 0x454]
push eax
mov ecx, 0x10ca7f70
call fcn.100182b6
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x460]
push eax
mov ecx, 0x10ca7f70
call fcn.100182c4
mov ecx, eax
call fcn.100182d9
movzx eax, al
test eax, eax
je 0x10016a20
mov dword [ebp - 0x58], 9
mov dword [ebp - 0x20], 0x92f644ac
mov dword [ebp - 0x354], 0xdbc5
mov dword [ebp - 0xc4], 4
mov dword [ebp - 0x84], 0xa70051ef
mov dword [ebp - 0x3a8], 0x785aa1ed
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x10016751
cmp dword [ebp - 0x20], 0
jne 0x10016751
and dword [ebp - 0x2bc], 0
jmp 0x1001675b
mov dword [ebp - 0x2bc], 1
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x2bc], eax
jle 0x10016772
mov dword [ebp - 0x214], 1
jmp 0x10016779
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x354]
imul eax, dword [ebp - 0x214]
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jge 0x100167a3
xor eax, eax
inc eax
jne 0x100167a3
and dword [ebp - 0x3d8], 0
jmp 0x100167ad
mov dword [ebp - 0x3d8], 1
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x45c], eax
xor eax, eax
cmp eax, 0xffffffff
jne 0x100167c9
mov dword [ebp - 0x314], 1
jmp 0x100167d0
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
je 0x1001699a
mov dword [ebp - 0x68], 0xb807220
mov dword [ebp - 0x3a0], 0
mov dword [ebp - 0x20], 0xfffffff8
jmp 0x1001680a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffffe
jl 0x1001697c
mov dword [ebp - 0x60], 0x928f
mov dword [ebp - 0x3e4], 0xb827be62
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x60]
cmp dword [ebp - 0x68], 0
je 0x10016846
mov eax, 0x2129
test eax, eax
je 0x10016846
mov dword [ebp - 0x398], 1
jmp 0x1001684d
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0xc4], 0
ja 0x1001686b
mov dword [ebp - 0x21c], 1
jmp 0x10016872
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x21c], eax
jge 0x1001688c
mov dword [ebp - 0x2c4], 1
jmp 0x10016893
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x20]
inc eax
cmp eax, dword [ebp - 0x84]
jge 0x100168ba
mov dword [ebp - 0x224], 1
jmp 0x100168c1
and dword [ebp - 0x224], 0
imul eax, dword [ebp - 0x224], 0
sub eax, dword [ebp - 0x354]
cmp eax, dword [ebp - 0x68]
jle 0x100168df
mov dword [ebp - 0x22c], 1
jmp 0x100168e6
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x22c]
cmp eax, dword [ebp - 0x58]
je 0x10016907
cmp dword [ebp - 0x60], 0
je 0x10016907
mov dword [ebp - 0x2cc], 1
jmp 0x1001690e
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x2cc], eax
jl 0x10016925
mov dword [ebp - 0x408], 1
jmp 0x1001692c
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x68]
push eax
push 1
lea eax, [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x3a8]
push eax
call fcn.100155d6
add esp, 0x18
jmp 0x10016803
mov byte [ebp - 0x46], 0
push 0x1b2d
push 1
push 0x47f3
lea eax, [ebp - 0x46]
push eax
call fcn.10015693
add esp, 0x10
jmp 0x100169e6
mov dword [ebp - 0x440], 0x5c4
mov dword [ebp - 0x43c], 0x5c4
mov dword [ebp - 0x438], 0x5c4
mov dword [ebp - 0x434], 0x5c4
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x440], 0xb6e743fd
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp - 0x50]
test eax, eax
je 0x100169e6
push 1
call fcn.100156ea
pop ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x418], eax
lea eax, [ebp - 0x418]
push eax
mov ecx, 0x10ca7f70
call fcn.1001849a
push eax
mov ecx, dword [ebp + 8]
call fcn.10017fb4
mov eax, dword [ebp - 0xe8]
or eax, 1
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp + 8]
jmp 0x10017eb2
lea ecx, [ebp - 0x4e8]
call fcn.10017fdc
mov dword [ebp - 4], 1
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x34], 0
jmp 0x10016a50
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10016c37
mov dword [ebp - 0x3b0], 0x58d3
mov dword [ebp - 0xdc], 0
jmp 0x10016a7d
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x10016a99
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x424], 0x8c3ad3b3
jmp 0x10016a70
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3b0]
mov dword [ebp + eax - 0x424], ecx
cmp dword [ebp - 0x34], 0
je 0x10016ac5
push 3
pop eax
test eax, eax
je 0x10016ac5
mov dword [ebp - 0x234], 1
jmp 0x10016acc
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x234], eax
jl 0x10016ae3
mov dword [ebp - 0x31c], 1
jmp 0x10016aea
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x31c]
jl 0x10016b01
mov dword [ebp - 0x23c], 1
jmp 0x10016b08
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x5c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x424]
cmp eax, dword [ebp - 0x5c]
jg 0x10016b2f
mov dword [ebp - 0x2d4], 1
jmp 0x10016b36
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x2d4]
test eax, eax
je 0x10016b77
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x10016b58
push 1
call fcn.10015722
pop ecx
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x10016b72
push 1
push 0x22d6
call fcn.1001574b
pop ecx
pop ecx
jmp 0x10016c12
mov dword [ebp - 0xcc], 0
jmp 0x10016b90
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x10016bac
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x3f0], 0
jmp 0x10016b83
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3f0], 0
je 0x10016bbe
jmp 0x10016c37
mov dword [ebp - 0x5c], 0xffffffe5
jmp 0x10016bce
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x15
jle 0x10016c12
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x10016bf0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x10016c10
push 0x371e
push 1
push 0x7983
call fcn.1001577d
add esp, 0xc
jmp 0x10016bc7
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x10016c32
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x10016a49
mov eax, dword [ebp - 0xd0]
xor edx, edx
push 2
pop ecx
div ecx
test edx, edx
jne 0x10017650
mov dword [ebp - 0xb0], 0xe0648261
mov dword [ebp - 0x47c], 0xaafe30f5
mov dword [ebp - 0x4a4], 0xfffffff7
mov dword [ebp - 0x484], 0xc59cdc34
mov dword [ebp - 0x244], 4
mov dword [ebp - 0xec], 0
jmp 0x10016c97
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jge 0x10016cb3
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x520], 0
jmp 0x10016c8a
mov dword [ebp - 0xb0], 0
jmp 0x10016ccc
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0xf
jle 0x10016d68
mov dword [ebp - 0x474], 0x5b0e446d
mov dword [ebp - 0x470], 0x5b0e446d
mov dword [ebp - 0x46c], 0x5b0e446d
mov dword [ebp - 0x468], 0x5b0e446d
mov dword [ebp - 0xb8], 0xd4f2887c
mov dword [ebp - 0xb8], 0
jmp 0x10016d24
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jg 0x10016d63
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x10016d47
push 1
push 0x6e3a
call fcn.100157ec
pop ecx
pop ecx
mov byte [ebp - 0x52], 0
movzx eax, byte [ebp - 0x52]
test eax, eax
je 0x10016d61
push 1
push 0x6a0
call fcn.1001585b
pop ecx
pop ecx
jmp 0x10016d17
jmp 0x10016cbf
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x53c]
push eax
call fcn.10008db5
pop ecx
mov esi, eax
lea edi, [ebp - 0x4f4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x4f4]
lea edi, [ebp - 0x518]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x64], 0x8dac
mov dword [ebp - 0x7c], 0xe3b61ea5
mov dword [ebp - 0x88], 0x4adc7c5a
mov dword [ebp - 0x11c], 0xcb45490a
mov dword [ebp - 0x334], 0xfffffffb
mov dword [ebp - 0xc0], 0
jmp 0x10016de1
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x10016dfa
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x14], 0xc3099cf
jmp 0x10016dd4
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x14]
neg ecx
cmp dword [ebp + eax - 0x14], ecx
jge 0x10016e1e
mov dword [ebp - 0x344], 1
jmp 0x10016e25
and dword [ebp - 0x344], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x344]
sub ecx, dword [ebp + eax - 0x14]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
add eax, 0x412124a4
imul ecx, eax
test ecx, ecx
je 0x10016fff
mov dword [ebp - 0x324], 0x7e3b6f9b
mov dword [ebp - 0x114], 0x3dec995f
mov dword [ebp - 0x3b8], 0x99ea5d84
mov dword [ebp - 0x3c0], 0xffffffff
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
je 0x10016fdb
xor eax, eax
inc eax
sub eax, dword [ebp - 0x114]
je 0x10016ea8
mov eax, 0x422d
test eax, eax
je 0x10016ea8
mov dword [ebp - 0x24c], 1
jmp 0x10016eaf
and dword [ebp - 0x24c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x24c], eax
jl 0x10016ed7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
jne 0x10016ed7
and dword [ebp - 0x2dc], 0
jmp 0x10016ee1
mov dword [ebp - 0x2dc], 1
mov eax, dword [ebp - 0x3b8]
cmp dword [ebp - 0x2dc], eax
jg 0x10016efb
mov dword [ebp - 0x254], 1
jmp 0x10016f02
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x254], eax
jge 0x10016f19
mov dword [ebp - 0x15c], 1
jmp 0x10016f20
and dword [ebp - 0x15c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0x15c]
je 0x10016f4a
mov dword [ebp - 0x2e4], 1
jmp 0x10016f51
and dword [ebp - 0x2e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x2e4], eax
jne 0x10016f6f
mov dword [ebp - 0x264], 1
jmp 0x10016f76
and dword [ebp - 0x264], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x264], eax
jg 0x10016f94
mov dword [ebp - 0x364], 1
jmp 0x10016f9b
and dword [ebp - 0x364], 0
cmp dword [ebp - 0x364], 0xfffffffd
jge 0x10016fb0
mov dword [ebp - 0x400], 1
jmp 0x10016fb7
and dword [ebp - 0x400], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
inc eax
inc eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x14]
jl 0x10016fdb
mov dword [ebp - 0x26c], 1
jmp 0x10016fe2
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x3c0], eax
jmp 0x100175cd
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0x2f4], 0x394ae982
mov dword [ebp - 0x228], 0xee7a
mov dword [ebp - 0x30], 0
jmp 0x1001702d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10017043
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x14c], 1
jmp 0x10017026
mov dword [ebp - 0x30], 0
jmp 0x10017053
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10017069
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x3ec], 0
jmp 0x1001704c
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x14c]
cmp dword [ebp + eax - 0x14], ecx
jge 0x1001708e
mov dword [ebp - 0x3fc], 1
jmp 0x10017095
and dword [ebp - 0x3fc], 0
cmp dword [ebp - 0x64], 0xffffffff
jbe 0x100170a7
mov dword [ebp - 0x13c], 1
jmp 0x100170ae
and dword [ebp - 0x13c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x13c]
mov dword [ebp + eax - 0x3ec], ecx
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jne 0x100170e5
cmp dword [ebp - 0x7c], 0
jne 0x100170e5
and dword [ebp - 0x2ec], 0
jmp 0x100170ef
mov dword [ebp - 0x2ec], 1
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x2ec], eax
je 0x10017109
mov dword [ebp - 0x274], 1
jmp 0x10017110
and dword [ebp - 0x274], 0
cmp dword [ebp - 0x274], 0
jg 0x10017125
mov dword [ebp - 0x32c], 1
jmp 0x1001712c
and dword [ebp - 0x32c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
add eax, dword [ebp - 0x32c]
je 0x10017166
mov eax, 0x9d52ffab
test eax, eax
je 0x10017166
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x14c], 0
je 0x10017166
mov dword [ebp - 0x27c], 1
jmp 0x1001716d
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x2f4], eax
jge 0x10017190
mov dword [ebp - 0x284], 1
jmp 0x10017197
and dword [ebp - 0x284], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
cmp dword [ebp - 0x284], eax
je 0x100171b8
mov dword [ebp - 0x34c], 1
jmp 0x100171bf
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x34c], eax
je 0x100171d9
mov dword [ebp - 0x28c], 1
jmp 0x100171e0
and dword [ebp - 0x28c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
cmp dword [ebp - 0x28c], eax
jle 0x10017201
mov dword [ebp - 0x3c8], 1
jmp 0x10017208
and dword [ebp - 0x3c8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x14c]
mov dword [ebp - 0x4cc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x14c], 0
jne 0x10017240
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
jne 0x10017240
and dword [ebp - 0x2fc], 0
jmp 0x1001724a
mov dword [ebp - 0x2fc], 1
cmp dword [ebp - 0x2fc], 0xe93343de
jae 0x10017268
cmp dword [ebp - 0x11c], 0
jne 0x10017268
and dword [ebp - 0x294], 0
jmp 0x10017272
mov dword [ebp - 0x294], 1
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
jne 0x10017299
cmp dword [ebp - 0x88], 0
jne 0x10017299
and dword [ebp - 0x29c], 0
jmp 0x100172a3
mov dword [ebp - 0x29c], 1
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x29c], eax
jne 0x100172bd
mov dword [ebp - 0x304], 1
jmp 0x100172c4
and dword [ebp - 0x304], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
cmp dword [ebp - 0x304], eax
jg 0x100172ee
mov eax, 0x9758ac42
test eax, eax
je 0x100172ee
mov dword [ebp - 0x378], 1
jmp 0x100172f5
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x48c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
mov dword [ebp - 0x4ac], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x14c], 0x2aac5da2
jge 0x10017333
mov dword [ebp - 0x2a4], 1
jmp 0x1001733a
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 0xffff
jb 0x10017352
mov dword [ebp - 0x35c], 1
jmp 0x10017359
and dword [ebp - 0x35c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x35c], eax
jge 0x10017377
mov dword [ebp - 0x2ac], 1
jmp 0x1001737e
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
sub eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x228]
test eax, eax
je 0x1001739b
cmp dword [ebp - 0x88], 0
je 0x100173ae
push 7
pop eax
test eax, eax
je 0x100173ae
mov dword [ebp - 0x30c], 1
jmp 0x100173b5
and dword [ebp - 0x30c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x30c], eax
jle 0x100175b9
mov dword [ebp - 0xf8], 0x7443
mov dword [ebp - 0x74], 0x166c0c08
mov dword [ebp - 0x220], 0x28c64988
mov dword [ebp - 0xc8], 0
jmp 0x100173ff
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x1001741b
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x500], 6
jmp 0x100173f2
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x10017484
mov dword [ebp - 0x37c], 0xfffffffe
mov eax, dword [ebp - 0x37c]
cmp dword [ebp - 0x11c], eax
jle 0x1001744e
mov dword [ebp - 0x2b4], 1
jmp 0x10017455
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x2b4], eax
je 0x1001746f
mov dword [ebp - 0x204], 1
jmp 0x10017476
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x134], eax
jmp 0x100174b3
mov dword [ebp - 0x64], 0xfffffff6
jmp 0x10017494
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 6
jge 0x100174b3
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x74]
push eax
push 0x4075
push 1
call fcn.100158b3
add esp, 0x10
jmp 0x1001748d
cmp dword [ebp - 0xf8], 0
jne 0x10017561
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14], 6
push 6
pop eax
test eax, eax
jne 0x10017561
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0x208], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x208]
mov dword [ebp + eax - 0x14], ecx
cmp dword [ebp - 0x208], 0
jl 0x1001750e
mov dword [ebp - 0x210], 1
jmp 0x10017515
and dword [ebp - 0x210], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ec]
cmp dword [ebp - 0x210], eax
jl 0x10017536
mov dword [ebp - 0x218], 1
jmp 0x1001753d
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
jne 0x10017561
and dword [ebp - 0x100], 0
jmp 0x1001756b
mov dword [ebp - 0x100], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x100]
mov dword [ebp + eax - 0x3ec], ecx
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x100]
jne 0x1001759b
cmp dword [ebp - 0x228], 0
jne 0x1001759b
and dword [ebp - 0x230], 0
jmp 0x100175a5
mov dword [ebp - 0x230], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x230]
mov dword [ebp + eax - 0x500], ecx
jmp 0x100175cd
mov byte [ebp - 0x40], 0
movzx eax, byte [ebp - 0x40]
test eax, eax
je 0x100175cd
push 1
call fcn.10015900
pop ecx
mov ecx, dword [ebp + 0xc]
call fcn.100105f4
mov dword [ebp - 0x384], eax
lea eax, [ebp - 0x518]
push eax
push dword [ebp - 0x384]
push dword [ebp - 0xd0]
lea eax, [ebp - 0x554]
push eax
call fcn.10012fca
add esp, 0x10
mov dword [ebp - 0x38c], eax
push dword [ebp - 0x38c]
lea ecx, [ebp - 0x4e8]
call fcn.10018014
lea ecx, [ebp - 0x554]
call fcn.10018039
cmp dword [ebp - 0xd0], 6
jae 0x10017650
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x394], eax
lea eax, [ebp - 0x4e8]
push eax
lea eax, [ebp - 0x394]
push eax
mov ecx, 0x10ca7f70
call fcn.1001849a
mov ecx, eax
call fcn.10018043
mov dword [ebp - 0x6c], 0x8dac
mov dword [ebp - 0x98], 0xe3b61ea5
mov dword [ebp - 0x70], 0x4adc7c5a
mov dword [ebp - 0x118], 0xcb45490a
mov dword [ebp - 0x18c], 0xfffffffb
mov dword [ebp - 0xac], 0
jmp 0x10017695
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x100176ae
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x18], 0xc3099cf
jmp 0x10017688
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x18]
neg ecx
cmp dword [ebp + eax - 0x18], ecx
jge 0x100176d2
mov dword [ebp - 0x238], 1
jmp 0x100176d9
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x238]
sub ecx, dword [ebp + eax - 0x18]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
add eax, 0x412124a4
imul ecx, eax
test ecx, ecx
je 0x100178b3
mov dword [ebp - 0x258], 0x7e3b6f9b
mov dword [ebp - 0x108], 0x3dec995f
mov dword [ebp - 0x39c], 0x99ea5d84
mov dword [ebp - 0x3ac], 0xffffffff
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
je 0x1001788f
xor eax, eax
inc eax
sub eax, dword [ebp - 0x108]
je 0x1001775c
mov eax, 0x422d
test eax, eax
je 0x1001775c
mov dword [ebp - 0x240], 1
jmp 0x10017763
and dword [ebp - 0x240], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x240], eax
jl 0x1001778b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
jne 0x1001778b
and dword [ebp - 0x248], 0
jmp 0x10017795
mov dword [ebp - 0x248], 1
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x248], eax
jg 0x100177af
mov dword [ebp - 0x250], 1
jmp 0x100177b6
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x250], eax
jge 0x100177cd
mov dword [ebp - 0x260], 1
jmp 0x100177d4
and dword [ebp - 0x260], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
cmp eax, dword [ebp - 0x260]
je 0x100177fe
mov dword [ebp - 0x268], 1
jmp 0x10017805
and dword [ebp - 0x268], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x268], eax
jne 0x10017823
mov dword [ebp - 0x270], 1
jmp 0x1001782a
and dword [ebp - 0x270], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x270], eax
jg 0x10017848
mov dword [ebp - 0x278], 1
jmp 0x1001784f
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0xfffffffd
jge 0x10017864
mov dword [ebp - 0x3a4], 1
jmp 0x1001786b
and dword [ebp - 0x3a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
inc eax
inc eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x18]
jl 0x1001788f
mov dword [ebp - 0x280], 1
jmp 0x10017896
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x3ac], eax
jmp 0x10017e82
mov dword [ebp - 0x120], 0xffffffff
mov dword [ebp - 0x160], 0x394ae982
mov dword [ebp - 0x1f4], 0xee7a
mov dword [ebp - 0x2c], 0
jmp 0x100178e1
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100178f7
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x158], 1
jmp 0x100178da
mov dword [ebp - 0x2c], 0
jmp 0x10017907
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1001791d
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x3f8], 0
jmp 0x10017900
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x158]
cmp dword [ebp + eax - 0x18], ecx
jge 0x10017942
mov dword [ebp - 0x3b4], 1
jmp 0x10017949
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x6c], 0xffffffff
jbe 0x1001795b
mov dword [ebp - 0x110], 1
jmp 0x10017962
and dword [ebp - 0x110], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x110]
mov dword [ebp + eax - 0x3f8], ecx
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jne 0x1001799c
cmp dword [ebp - 0x98], 0
jne 0x1001799c
and dword [ebp - 0x288], 0
jmp 0x100179a6
mov dword [ebp - 0x288], 1
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x288], eax
je 0x100179bd
mov dword [ebp - 0x290], 1
jmp 0x100179c4
and dword [ebp - 0x290], 0
cmp dword [ebp - 0x290], 0
jg 0x100179d9
mov dword [ebp - 0x298], 1
jmp 0x100179e0
and dword [ebp - 0x298], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x158]
add eax, dword [ebp - 0x298]
je 0x10017a1a
mov eax, 0x9d52ffab
test eax, eax
je 0x10017a1a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x158], 0
je 0x10017a1a
mov dword [ebp - 0x2a0], 1
jmp 0x10017a21
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x160], eax
jge 0x10017a47
mov dword [ebp - 0x164], 1
jmp 0x10017a4e
and dword [ebp - 0x164], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x164], eax
je 0x10017a6f
mov dword [ebp - 0x16c], 1
jmp 0x10017a76
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x16c], eax
je 0x10017a8d
mov dword [ebp - 0x174], 1
jmp 0x10017a94
and dword [ebp - 0x174], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x174], eax
jle 0x10017ab5
mov dword [ebp - 0x3bc], 1
jmp 0x10017abc
and dword [ebp - 0x3bc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x158]
mov dword [ebp - 0x494], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x158], 0
jne 0x10017af4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
jne 0x10017af4
and dword [ebp - 0x17c], 0
jmp 0x10017afe
mov dword [ebp - 0x17c], 1
cmp dword [ebp - 0x17c], 0xe93343de
jae 0x10017b1c
cmp dword [ebp - 0x118], 0
jne 0x10017b1c
and dword [ebp - 0x184], 0
jmp 0x10017b26
mov dword [ebp - 0x184], 1
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jne 0x10017b4a
cmp dword [ebp - 0x70], 0
jne 0x10017b4a
and dword [ebp - 0x194], 0
jmp 0x10017b54
mov dword [ebp - 0x194], 1
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x194], eax
jne 0x10017b6b
mov dword [ebp - 0x19c], 1
jmp 0x10017b72
and dword [ebp - 0x19c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x19c], eax
jg 0x10017b9c
mov eax, 0x9758ac42
test eax, eax
je 0x10017b9c
mov dword [ebp - 0x3c4], 1
jmp 0x10017ba3
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x4c4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x158]
mov dword [ebp - 0x49c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x158], 0x2aac5da2
jge 0x10017be1
mov dword [ebp - 0x1a4], 1
jmp 0x10017be8
and dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1a4], 0xffff
jb 0x10017c00
mov dword [ebp - 0x1ac], 1
jmp 0x10017c07
and dword [ebp - 0x1ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x1ac], eax
jge 0x10017c25
mov dword [ebp - 0x1b4], 1
jmp 0x10017c2c
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
sub eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x1f4]
test eax, eax
je 0x10017c49
cmp dword [ebp - 0x70], 0
je 0x10017c5c
push 7
pop eax
test eax, eax
je 0x10017c5c
mov dword [ebp - 0x1bc], 1
jmp 0x10017c63
and dword [ebp - 0x1bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x1bc], eax
jle 0x10017e6e
mov dword [ebp - 0x128], 0x7443
mov dword [ebp - 0x90], 0x166c0c08
mov dword [ebp - 0x1ec], 0x28c64988
mov dword [ebp - 0xe0], 0
jmp 0x10017cb0
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x10017ccc
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x50c], 6
jmp 0x10017ca3
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x10017d3b
mov dword [ebp - 0x3cc], 0xfffffffe
mov eax, dword [ebp - 0x3cc]
cmp dword [ebp - 0x118], eax
jle 0x10017d05
mov dword [ebp - 0x1c4], 1
jmp 0x10017d0c
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x1c4], eax
je 0x10017d26
mov dword [ebp - 0x1cc], 1
jmp 0x10017d2d
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x120], eax
jmp 0x10017d5f
mov dword [ebp - 0x6c], 0xfffffff6
jmp 0x10017d4b
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 6
jge 0x10017d5f
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x90], eax
jmp 0x10017d44
cmp dword [ebp - 0x128], 0
jne 0x10017e13
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x18], 6
push 6
pop eax
test eax, eax
jne 0x10017e13
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0x1d4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x18], ecx
cmp dword [ebp - 0x1d4], 0
jl 0x10017dba
mov dword [ebp - 0x1dc], 1
jmp 0x10017dc1
and dword [ebp - 0x1dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f8]
cmp dword [ebp - 0x1dc], eax
jl 0x10017de2
mov dword [ebp - 0x1e4], 1
jmp 0x10017de9
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jne 0x10017e13
and dword [ebp - 0x130], 0
jmp 0x10017e1d
mov dword [ebp - 0x130], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax - 0x3f8], ecx
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0x130]
jne 0x10017e50
cmp dword [ebp - 0x1f4], 0
jne 0x10017e50
and dword [ebp - 0x1fc], 0
jmp 0x10017e5a
mov dword [ebp - 0x1fc], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp + eax - 0x50c], ecx
jmp 0x10017e82
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x10017e82
push 1
call fcn.1001592d
pop ecx
lea eax, [ebp - 0x4e8]
push eax
mov ecx, dword [ebp + 8]
call fcn.10017fef
mov eax, dword [ebp - 0xe8]
or eax, 1
mov dword [ebp - 0xe8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4e8]
call fcn.10018039
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret