Function at 0x10009384
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x115c
call fcn.1007c780
push esi
push edi
mov dword [ebp - 0x198], 0x667a876e
mov dword [ebp - 0x238], 0
jmp 0x100093b6
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 2
jge 0x100093d2
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0xba0], 0
jmp 0x100093a9
mov dword [ebp - 0x198], 1
jmp 0x100093eb
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0
jl 0x100094c9
mov dword [ebp - 0x274], 0x6887e0
mov eax, dword [ebp - 0x198]
cmp dword [ebp + eax*4 - 0xba0], 0
jne 0x1000941e
mov dword [ebp - 0x9e8], 1
jmp 0x10009425
and dword [ebp - 0x9e8], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp + eax*4 - 0xba0], 0xffffaf82
jne 0x10009444
mov dword [ebp - 0x56c], 1
jmp 0x1000944b
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0
jge 0x10009460
mov dword [ebp - 0x9f0], 1
jmp 0x10009467
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x9e8]
cmp eax, dword [ebp - 0x9f0]
jge 0x1000948e
mov dword [ebp - 0x9f8], 0xfff7
mov eax, dword [ebp - 0x9f8]
dec eax
mov dword [ebp - 0x9f8], eax
jmp 0x100094c4
mov dword [ebp - 0x274], 1
jmp 0x100094a7
mov eax, dword [ebp - 0x274]
dec eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0
jl 0x100094c4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xba0], 0
je 0x100094c2
jmp 0x100094c4
jmp 0x1000949a
jmp 0x100093de
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0xd50], 0x2cb51dba
mov dword [ebp - 0xd4c], 0x2cb51dba
mov dword [ebp - 0xd48], 0x2cb51dba
mov dword [ebp - 0xd44], 0x2cb51dba
mov dword [ebp - 0xb54], 0x885c82f7
mov dword [ebp - 0x10c0], 0
mov dword [ebp - 0xee8], 0xfffffff9
mov dword [ebp - 0x1e8], 0
jmp 0x10009532
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 8
jge 0x100097a1
mov dword [ebp - 0x184], 0xffffffff
mov dword [ebp - 0xa20], 0x4c039ecf
mov dword [ebp - 0xb44], 0xf57440e7
mov dword [ebp - 0xef0], 0xfffffffe
mov dword [ebp - 0xef8], 0xffffffff
mov dword [ebp - 0xf00], 0xfffffffe
mov dword [ebp - 0xf08], 0x1fc53136
mov dword [ebp - 0x184], 0
jmp 0x1000959e
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jg 0x1000979c
mov dword [ebp - 0xec], 0xd2086bd0
mov dword [ebp - 0x2d0], 0x868fdadf
mov dword [ebp - 0xf10], 0x5c59c3f9
mov dword [ebp - 0xf18], 0x6a687e91
mov dword [ebp - 0xf20], 0x426ae69e
mov dword [ebp - 0x3bc], 0xffff
mov dword [ebp - 0xec], 0
jmp 0x10009600
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jg 0x10009797
mov dword [ebp - 0xb4c], 0x17d0b0a3
mov dword [ebp - 0xa64], 0x85bd
mov dword [ebp - 0x27c], 0
jmp 0x1000963a
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 2
jge 0x10009656
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0xf64], 0xd0d42ad0
jmp 0x1000962d
mov eax, dword [ebp - 0xa64]
cmp dword [ebp - 0x184], eax
jg 0x10009670
mov dword [ebp - 0xa08], 1
jmp 0x10009677
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0xa08]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0xf28], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0xf30], eax
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0xf38], eax
mov eax, 0x25ec
cmp eax, 0x449
jl 0x100096bf
mov dword [ebp - 0x2d8], 1
jmp 0x100096c6
and dword [ebp - 0x2d8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp + eax - 0xf64], ecx
mov eax, dword [ebp - 0xb44]
cmp dword [ebp - 0x2d8], eax
jle 0x100096f3
mov dword [ebp - 0xa10], 1
jmp 0x100096fa
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0xb4c]
cmp eax, dword [ebp - 0xa10]
jg 0x10009714
mov dword [ebp - 0xa28], 1
jmp 0x1000971b
and dword [ebp - 0xa28], 0
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp + eax*4 - 0xd50]
mov dword [ebp - 0xa18], eax
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xa18]
mov dword [ebp + eax*4 - 0xd50], ecx
mov eax, dword [ebp - 0xa18]
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0xa20]
imul eax, dword [ebp - 0xa28]
add eax, dword [ebp - 0xec]
je 0x10009772
xor eax, eax
je 0x10009772
mov dword [ebp - 0x92c], 1
jmp 0x10009779
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0xb54], eax
mov eax, dword [ebp - 0x3bc]
dec eax
mov dword [ebp - 0x3bc], eax
jmp 0x100095f3
jmp 0x10009591
jmp 0x10009525
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x100097b9
call dword [sym.imp.USER32.dll_GetMessageTime]
mov dword [ebp - 0x174], 0x95364446
mov dword [ebp - 0x10], 0xb871c7bf
mov dword [ebp - 0x90], 1
mov dword [ebp - 0x408], 8
mov dword [ebp - 0xc70], 1
mov dword [ebp - 0xc6c], 1
mov dword [ebp - 0xc68], 1
mov dword [ebp - 0xc64], 1
mov dword [ebp - 0xb7c], 0xfcd553b7
mov dword [ebp - 0x1f0], 0
jmp 0x10009829
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x10009845
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x350], 0x64a6847d
jmp 0x1000981c
mov dword [ebp - 0x10], 0
jmp 0x10009855
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x10009a19
mov dword [ebp - 0x1a4], 1
mov dword [ebp - 0xf4], 0xa4ccfd6
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x350]
mov dword [ebp - 0xf40], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x350]
mov dword [ebp - 0xf48], eax
cmp dword [ebp - 0x10], 0xfff6
jbe 0x100098ab
mov dword [ebp - 0x934], 1
jmp 0x100098b2
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x350]
cmp dword [ebp - 0x934], eax
jne 0x100098d6
mov eax, 0x1637
test eax, eax
jne 0x100098d6
and dword [ebp - 0xb5c], 0
jmp 0x100098e0
mov dword [ebp - 0xb5c], 1
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xf50], eax
cmp dword [ebp - 0x1a4], 0xfffffffe
jg 0x10009901
mov dword [ebp - 0xb64], 1
jmp 0x10009908
and dword [ebp - 0xb64], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x350]
mov dword [ebp - 0xf58], eax
mov dword [ebp - 0xf4], 3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x350]
mov dword [ebp - 0xfb8], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xfc0], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xfc8], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xfd0], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xfd8], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xfe0], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xfe8], eax
cmp dword [ebp - 0x10], 0xfffa
je 0x1000999b
mov dword [ebp - 0x3c4], 1
jmp 0x100099a2
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x3c4], eax
jg 0x100099c1
xor eax, eax
inc eax
je 0x100099c1
mov dword [ebp - 0x93c], 1
jmp 0x100099c8
and dword [ebp - 0x93c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x350]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp + eax*4 - 0x350], ecx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x93c]
add eax, dword [ebp - 0x3cc]
imul eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x1a4]
imul eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x90], eax
jmp 0x1000984e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x350], 0
je 0x10009a73
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xff0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x350]
cmp dword [ebp - 0x90], eax
jge 0x10009a52
mov dword [ebp - 0x944], 1
jmp 0x10009a59
and dword [ebp - 0x944], 0
imul eax, dword [ebp - 0x944], 0x16e1
test eax, eax
je 0x10009a73
mov dword [ebp - 0x3d4], 1
jmp 0x10009a7a
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x3d4]
cmp eax, 0xf7fa
jge 0x10009a96
mov dword [ebp - 0x94c], 1
jmp 0x10009a9d
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x94c]
sub eax, dword [ebp - 0x90]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x350]
sub eax, dword [ebp - 0x408]
je 0x10009aca
mov dword [ebp - 0x3dc], 1
jmp 0x10009ad1
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x3dc], eax
jne 0x10009ae8
mov dword [ebp - 0x954], 1
jmp 0x10009aef
and dword [ebp - 0x954], 0
cmp dword [ebp - 0x954], 0x7342
jge 0x10009b07
mov dword [ebp - 0x3e4], 1
jmp 0x10009b0e
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x3e4]
cmp eax, 0x7fcf6239
jne 0x10009b46
mov dword [ebp - 0xb6c], 0x3ad33dc2
mov dword [ebp - 0xb74], 0xfffffff8
mov eax, dword [ebp - 0xb6c]
mov dword [ebp - 0xb74], eax
jmp 0x10009d77
mov dword [ebp - 0x96c], 0x59a1248f
mov dword [ebp - 0x3f4], 0x7f4763cd
mov dword [ebp - 0x97c], 0xfffffffd
mov dword [ebp - 0x400], 0xb48eda29
mov dword [ebp - 0x284], 0
jmp 0x10009b87
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x10009ba3
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0xa40], 0x7b094c6
jmp 0x10009b7a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa40], 0
je 0x10009d64
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xc70]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0xc70]
dec ecx
push 4
pop edx
imul edx, edx, 3
mov dword [ebp + edx - 0xc70], ecx
test eax, eax
je 0x10009d64
push 4
pop eax
test eax, eax
je 0x10009c86
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10009c0e
cmp dword [ebp - 0xb7c], 0
je 0x10009c0e
mov dword [ebp - 0x964], 1
jmp 0x10009c15
and dword [ebp - 0x964], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x350]
imul eax, dword [ebp - 0x964]
test eax, eax
je 0x10009c42
mov eax, 0x90166331
test eax, eax
je 0x10009c42
mov dword [ebp - 0x3ec], 1
jmp 0x10009c49
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x96c], eax
mov eax, dword [ebp - 0x96c]
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0
jne 0x10009c7a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa40], 0
je 0x10009c86
mov dword [ebp - 0x974], 1
jmp 0x10009c8d
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0x97c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa40]
cmp eax, dword [ebp - 0x97c]
jg 0x10009cba
mov dword [ebp - 0x36c], 1
jmp 0x10009cc1
and dword [ebp - 0x36c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax - 0xa40], ecx
mov eax, dword [ebp - 0x36c]
sub eax, 9
cmp eax, dword [ebp - 0x400]
jle 0x10009cf1
mov dword [ebp - 0x710], 1
jmp 0x10009cf8
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x400]
cmp dword [ebp - 0x710], eax
jle 0x10009d1b
cmp dword [ebp - 0x408], 0
je 0x10009d1b
mov dword [ebp - 0x898], 1
jmp 0x10009d22
and dword [ebp - 0x898], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc70]
cmp dword [ebp - 0x898], eax
jl 0x10009d43
mov dword [ebp - 0x410], 1
jmp 0x10009d4a
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x410]
je 0x10009d64
mov dword [ebp - 0x718], 1
jmp 0x10009d6b
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x19c], 0x5bf25cbd
mov dword [ebp - 0xff8], 0xffffffff
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x10009dac
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x10009dc6
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
mov dword [ebp - 0xc00], 0x2891ba8
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x1f8], 1
mov dword [ebp - 0xb84], 0
mov dword [ebp - 0x88], 0
jmp 0x10009e04
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x10009e20
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xd30], 0x3198a8f9
jmp 0x10009df7
mov dword [ebp - 0x88], 0
jmp 0x10009e39
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10009e55
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x418], 0
jmp 0x10009e2c
mov dword [ebp - 0x70], 1
jmp 0x10009e65
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x10009eb0
mov dword [ebp - 0x1000], 0x6dd8
mov dword [ebp - 0x1008], 0xd00693e9
mov dword [ebp - 0x1010], 0xfffffffc
mov dword [ebp - 0x1018], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x418]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x418], eax
jmp 0x10009e5e
mov dword [ebp - 0x1f8], 0
jmp 0x10009ec9
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jl 0x10009f5f
mov byte [ebp - 0xd8], 0
movzx eax, byte [ebp - 0xd8]
test eax, eax
je 0x10009ef7
push 0x233
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov dword [ebp - 0x70], 1
jmp 0x10009f07
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x10009f5a
mov dword [ebp - 0x1d8], 0xffffffff
mov dword [ebp - 0x1d8], 0
jmp 0x10009f30
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jg 0x10009f58
mov eax, dword [ebp - 0x1d8]
mov eax, dword [ebp + eax*4 - 0xd30]
mov ecx, dword [ebp - 0x70]
add eax, dword [ebp + ecx*4 - 0xd30]
mov dword [ebp - 0xb84], eax
jmp 0x10009f23
jmp 0x10009f00
jmp 0x10009ebc
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x2e0], 0x6c0e263
mov dword [ebp - 0x428], 0xb4983ca3
mov dword [ebp - 0x80], 0
jmp 0x10009f8a
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xc
jge 0x1000a341
mov dword [ebp - 0xa0], 0xa12b57e8
mov dword [ebp - 0x728], 4
mov dword [ebp - 0xa0], 0
jmp 0x10009fc1
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 9
jne 0x1000a33c
mov dword [ebp - 0x64], 0xfffffff9
mov dword [ebp - 0xb8], 0xffffffff
mov dword [ebp - 0x64], 0xffffffe6
jmp 0x10009fef
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jg 0x1000a080
mov dword [ebp - 0xc0], 0x2c9cc141
mov dword [ebp - 0xc0], 9
jmp 0x1000a01c
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x11
jl 0x1000a03d
mov dword [ebp - 0xb8c], 1
mov eax, dword [ebp - 0xb8c]
mov dword [ebp - 0xb8], eax
jmp 0x1000a00f
mov dword [ebp - 0xc0], 0
jmp 0x1000a056
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xfffffff4
jle 0x1000a07b
mov byte [ebp - 0xda], 0
movzx eax, byte [ebp - 0xda]
test eax, eax
je 0x1000a079
push 0
call dword [sym.imp.USER32.dll_SetKeyboardState]
jmp 0x1000a049
jmp 0x10009fe8
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x1020], eax
mov eax, dword [ebp - 0x80]
neg eax
cmp dword [ebp - 0xb8], eax
jne 0x1000a0a5
mov dword [ebp - 0x420], 1
jmp 0x1000a0ac
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
add eax, 0x4adca1a1
cmp eax, 5
jne 0x1000a0da
mov dword [ebp - 0x9dc], 1
jmp 0x1000a0e1
and dword [ebp - 0x9dc], 0
mov eax, dword [ebp - 0x9dc]
sub eax, dword [ebp - 0x80]
cmp dword [ebp - 0x420], eax
jge 0x1000a122
mov byte [ebp - 0xdc], 0
movzx eax, byte [ebp - 0xdc]
test eax, eax
je 0x1000a11d
push 0xda8
push 0
push 0x50c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
jmp 0x1000a337
mov dword [ebp - 0xfc], 0xffffffff
mov dword [ebp - 0x28c], 0xb0f4f2d8
mov dword [ebp - 0xdf0], 0
mov dword [ebp - 0xdec], 0
mov dword [ebp - 0xde8], 0
mov dword [ebp - 0xde4], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0
je 0x1000a179
cmp dword [ebp - 0x428], 0
jne 0x1000a18b
cmp dword [ebp - 0xa0], 0
jne 0x1000a18b
and dword [ebp - 0x720], 0
jmp 0x1000a195
mov dword [ebp - 0x720], 1
mov eax, dword [ebp - 0x720]
neg eax
jne 0x1000a1ae
cmp dword [ebp - 0x64], 0
jne 0x1000a1ae
and dword [ebp - 0x8a0], 0
jmp 0x1000a1b8
mov dword [ebp - 0x8a0], 1
mov eax, dword [ebp - 0x428]
mov ecx, dword [ebp - 0x8a0]
add ecx, 8
imul eax, ecx
imul eax, eax, 0x5f7f
cmp eax, dword [ebp - 0xfc]
jle 0x1000a1e4
mov dword [ebp - 0x430], 1
jmp 0x1000a1eb
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x430]
test eax, eax
jne 0x1000a212
cmp dword [ebp - 0xfc], 0
jne 0x1000a212
cmp dword [ebp - 0xb8], 0
jne 0x1000a212
cmp dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x728], eax
cmp dword [ebp - 0x728], 1
jne 0x1000a233
mov dword [ebp - 0x438], 1
jmp 0x1000a23a
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0xa0], 0
jne 0x1000a256
cmp dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x1028], eax
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0xfc], eax
je 0x1000a27c
mov dword [ebp - 0x968], 1
jmp 0x1000a283
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x968]
jg 0x1000a29a
mov dword [ebp - 0x440], 1
jmp 0x1000a2a1
and dword [ebp - 0x440], 0
imul eax, dword [ebp - 0x440], 0xbe40
cmp eax, dword [ebp - 0x80]
jge 0x1000a2bc
mov dword [ebp - 0xb94], 1
jmp 0x1000a2c3
and dword [ebp - 0xb94], 0
cmp dword [ebp - 0x64], 0
jne 0x1000a2d0
cmp dword [ebp - 0x28c], 0
or eax, 0xffffffff
jae 0x1000a2e1
mov dword [ebp - 0x730], 1
jmp 0x1000a2e8
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0xb8]
imul eax, dword [ebp - 0x730]
cmp eax, dword [ebp - 0xfc]
jge 0x1000a304
cmp dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x28c]
cmp dword [ebp - 0xfc], eax
jl 0x1000a31e
mov dword [ebp - 0x448], 1
jmp 0x1000a325
and dword [ebp - 0x448], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x448]
mov dword [ebp + eax - 0xdf0], ecx
jmp 0x10009fb4
jmp 0x10009f83
mov dword [ebp - 0x200], 0xfffffff8
mov dword [ebp - 0x200], 0xfffffff9
jmp 0x1000a364
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0xffffffeb
je 0x1000a3ea
mov dword [ebp - 0x294], 0
jmp 0x1000a386
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 4
jge 0x1000a3a2
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x1104], 9
jmp 0x1000a379
mov byte [ebp - 0xde], 0
movzx eax, byte [ebp - 0xde]
test eax, eax
je 0x1000a3ca
push 0
push 0
push 0x7ac
push 0x8c2
push 0
call dword [sym.imp.USER32.dll_ModifyMenuW]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1104]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1104], eax
jmp 0x1000a357
mov dword [ebp - 0x208], 0
jmp 0x1000a403
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 3
jge 0x1000a41f
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x115c], 0
jmp 0x1000a3f6
cmp dword [ebp - 0x174], 1
jge 0x1000a434
mov dword [ebp - 0x8a8], 1
jmp 0x1000a43b
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x19c], 0
jmp 0x1000a460
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x14
jg 0x1000a53e
mov dword [ebp - 0xbf8], 0xf13b01d9
mov dword [ebp - 0x174], 0
jmp 0x1000a490
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x10
jg 0x1000a539
mov dword [ebp - 0xd68], 7
mov dword [ebp - 0xd64], 7
mov dword [ebp - 0xd60], 7
mov dword [ebp - 0xd5c], 7
mov eax, dword [ebp - 0x174]
inc eax
cmp eax, 2
je 0x1000a4dd
mov dword [ebp - 0xbf0], 1
jmp 0x1000a4e4
and dword [ebp - 0xbf0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd68]
mov dword [ebp - 0x1030], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd68]
cmp dword [ebp - 0xbf8], eax
jle 0x1000a51e
mov eax, 0x7f215a60
test eax, eax
jne 0x1000a51e
and dword [ebp - 0x450], 0
jmp 0x1000a528
mov dword [ebp - 0x450], 1
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0xc00], eax
jmp 0x1000a483
jmp 0x1000a453
mov dword [ebp - 0x194], 0x95364446
mov dword [ebp - 0x1cc], 0x5bf25cbd
mov dword [ebp - 0xc18], 0x2891ba8
mov dword [ebp - 0x29c], 0
jmp 0x1000a575
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 3
jge 0x1000a591
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x1144], 0
jmp 0x1000a568
cmp dword [ebp - 0x194], 1
jge 0x1000a5a6
mov dword [ebp - 0x738], 1
jmp 0x1000a5ad
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1cc], 0
jmp 0x1000a5d2
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x14
jg 0x1000a6b0
mov dword [ebp - 0xc10], 0xf13b01d9
mov dword [ebp - 0x194], 0
jmp 0x1000a602
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x10
jg 0x1000a6ab
mov dword [ebp - 0xd88], 7
mov dword [ebp - 0xd84], 7
mov dword [ebp - 0xd80], 7
mov dword [ebp - 0xd7c], 7
mov eax, dword [ebp - 0x194]
inc eax
cmp eax, 2
je 0x1000a64f
mov dword [ebp - 0xc08], 1
jmp 0x1000a656
and dword [ebp - 0xc08], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd88]
mov dword [ebp - 0x1038], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd88]
cmp dword [ebp - 0xc10], eax
jle 0x1000a690
mov eax, 0x7f215a60
test eax, eax
jne 0x1000a690
and dword [ebp - 0x458], 0
jmp 0x1000a69a
mov dword [ebp - 0x458], 1
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0xc18], eax
jmp 0x1000a5f5
jmp 0x1000a5c5
mov dword [ebp - 0x17c], 0x95364446
mov dword [ebp - 0x1ac], 0x5bf25cbd
mov dword [ebp - 0xc30], 0x2891ba8
mov dword [ebp - 0x210], 0
jmp 0x1000a6e7
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 3
jge 0x1000a703
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x1150], 0
jmp 0x1000a6da
cmp dword [ebp - 0x17c], 1
jge 0x1000a718
mov dword [ebp - 0xa0c], 1
jmp 0x1000a71f
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0xa0c]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1ac], 0
jmp 0x1000a744
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x14
jg 0x1000a822
mov dword [ebp - 0xc28], 0xf13b01d9
mov dword [ebp - 0x17c], 0
jmp 0x1000a774
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x10
jg 0x1000a81d
mov dword [ebp - 0xd78], 7
mov dword [ebp - 0xd74], 7
mov dword [ebp - 0xd70], 7
mov dword [ebp - 0xd6c], 7
mov eax, dword [ebp - 0x17c]
inc eax
cmp eax, 2
je 0x1000a7c1
mov dword [ebp - 0xc20], 1
jmp 0x1000a7c8
and dword [ebp - 0xc20], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd78]
mov dword [ebp - 0x1040], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd78]
cmp dword [ebp - 0xc28], eax
jle 0x1000a802
mov eax, 0x7f215a60
test eax, eax
jne 0x1000a802
and dword [ebp - 0x460], 0
jmp 0x1000a80c
mov dword [ebp - 0x460], 1
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0xc30], eax
jmp 0x1000a767
jmp 0x1000a737
mov dword [ebp - 0x2a4], 0xfd3df75d
mov dword [ebp - 0x2a4], 0xffffffe8
jmp 0x1000a845
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0xffffffea
jg 0x1000a8c2
mov dword [ebp - 0xc38], 0xffff
cmp dword [ebp - 0xc38], 0
je 0x1000a87d
mov byte [ebp - 0xe0], 0
movzx eax, byte [ebp - 0xe0]
test eax, eax
je 0x1000a87b
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
jmp 0x1000a8a5
mov byte [ebp - 0xe2], 0
movzx eax, byte [ebp - 0xe2]
test eax, eax
je 0x1000a8a5
push 0
push 0
push 0x16a5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1000a8bd
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
jmp 0x1000a838
mov dword [ebp - 0x218], 0xfd3df75d
mov dword [ebp - 0x218], 0xffffffe8
jmp 0x1000a8e5
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0xffffffea
jg 0x1000a962
mov dword [ebp - 0xc40], 0xffff
cmp dword [ebp - 0xc40], 0
je 0x1000a91d
mov byte [ebp - 0xe4], 0
movzx eax, byte [ebp - 0xe4]
test eax, eax
je 0x1000a91b
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
jmp 0x1000a945
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x1000a945
push 0
push 0
push 0x16a5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x1000a95d
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
jmp 0x1000a8d8
mov dword [ebp - 0x2ac], 0xfd3df75d
mov dword [ebp - 0x2ac], 0xffffffe8
jmp 0x1000a985
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0xffffffea
jg 0x1000aa02
mov dword [ebp - 0xb3c], 0xffff
cmp dword [ebp - 0xb3c], 0
je 0x1000a9bd
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x1000a9bb
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
jmp 0x1000a9e5
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x1000a9e5
push 0
push 0
push 0x16a5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x1000a9fd
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
jmp 0x1000a978
mov dword [ebp - 0x40], 0
mov dword [ebp - 0xa8], 5
mov dword [ebp - 0x18c], 0xc657e3b6
mov dword [ebp - 0x220], 1
mov dword [ebp - 0x1048], 0
mov dword [ebp - 0x1064], 0x3523e24b
mov dword [ebp - 0xa70], 0x657a
mov dword [ebp - 0x328], 0x38e0ea62
mov dword [ebp - 0xa78], 0xffffffff
cmp dword [ebp - 0x40], 0xaa9ac70c
jae 0x1000ab4b
cmp dword [ebp - 0x40], 0x6a92
jg 0x1000aa7b
mov dword [ebp - 0x740], 1
jmp 0x1000aa82
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x740], eax
je 0x1000aa9c
cmp dword [ebp - 0x40], 0
jne 0x1000aa9c
and dword [ebp - 0x468], 0
jmp 0x1000aaa6
mov dword [ebp - 0x468], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x468], eax
jl 0x1000aabd
mov dword [ebp - 0x8b0], 1
jmp 0x1000aac4
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x8b0]
jle 0x1000aadb
mov dword [ebp - 0x470], 1
jmp 0x1000aae2
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x470]
cmp eax, dword [ebp - 0x40]
jne 0x1000aafc
mov dword [ebp - 0x748], 1
jmp 0x1000ab03
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xa8], eax
jg 0x1000ab26
mov dword [ebp - 0x478], 1
jmp 0x1000ab2d
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jne 0x1000ab4b
and dword [ebp - 0x970], 0
jmp 0x1000ab55
mov dword [ebp - 0x970], 1
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x970]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x1000ab8c
cmp dword [ebp - 0x220], 0
jne 0x1000ab8c
and dword [ebp - 0x480], 0
jmp 0x1000ab96
mov dword [ebp - 0x480], 1
mov eax, dword [ebp - 0x480]
add eax, 3
cmp eax, dword [ebp - 0xa70]
jle 0x1000abb3
mov dword [ebp - 0x750], 1
jmp 0x1000abba
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x750]
cmp dword [ebp - 0xa8], eax
jne 0x1000abdb
cmp dword [ebp - 0x40], 0
jne 0x1000abdb
and dword [ebp - 0x488], 0
jmp 0x1000abe5
mov dword [ebp - 0x488], 1
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x488], eax
je 0x1000abff
mov dword [ebp - 0x8b8], 1
jmp 0x1000ac06
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
sub eax, dword [ebp - 0x8b8]
imul eax, dword [ebp - 0x328]
cmp eax, dword [ebp - 0xa8]
je 0x1000ac39
mov dword [ebp - 0xba8], 1
jmp 0x1000ac40
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x106c], eax
mov eax, dword [ebp - 0x328]
imul eax, dword [ebp - 0xa78]
test eax, eax
je 0x1000ac64
cmp dword [ebp - 0x18c], 0
cmp dword [ebp - 0x40], 0x47a0585c
jl 0x1000ac79
mov dword [ebp - 0x490], 1
jmp 0x1000ac80
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 0xffffffff
jle 0x1000ac95
mov dword [ebp - 0x758], 1
jmp 0x1000ac9c
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x758], eax
jl 0x1000acb6
mov dword [ebp - 0x498], 1
jmp 0x1000acbd
and dword [ebp - 0x498], 0
cmp dword [ebp - 0x498], 0xffff
je 0x1000acd5
mov dword [ebp - 0x9e4], 1
jmp 0x1000acdc
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x9e4]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x14], 0xb871c7bf
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0x4e8], 8
mov dword [ebp - 0xc94], 1
mov dword [ebp - 0xc90], 1
mov dword [ebp - 0xc8c], 1
mov dword [ebp - 0xc88], 1
mov dword [ebp - 0xbb8], 0xfcd553b7
mov dword [ebp - 0x2b4], 0
jmp 0x1000ad4e
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 3
jge 0x1000ad6a
mov eax, dword [ebp - 0x2b4]
mov dword [ebp + eax*4 - 0x368], 0x64a6847d
jmp 0x1000ad41
mov dword [ebp - 0x14], 0
jmp 0x1000ad7a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x1000af3e
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0x104], 0xa4ccfd6
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x368]
mov dword [ebp - 0x1074], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x368]
mov dword [ebp - 0x107c], eax
cmp dword [ebp - 0x14], 0xfff6
jbe 0x1000add0
mov dword [ebp - 0x4a0], 1
jmp 0x1000add7
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x368]
cmp dword [ebp - 0x4a0], eax
jne 0x1000adfb
mov eax, 0x1637
test eax, eax
jne 0x1000adfb
and dword [ebp - 0xbac], 0
jmp 0x1000ae05
mov dword [ebp - 0xbac], 1
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1084], eax
cmp dword [ebp - 0x1c4], 0xfffffffe
jg 0x1000ae26
mov dword [ebp - 0xa80], 1
jmp 0x1000ae2d
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x368]
mov dword [ebp - 0x108c], eax
mov dword [ebp - 0x104], 3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x368]
mov dword [ebp - 0x1094], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x109c], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10a4], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10ac], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10b4], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10bc], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x10c4], eax
cmp dword [ebp - 0x14], 0xfffa
je 0x1000aec0
mov dword [ebp - 0x760], 1
jmp 0x1000aec7
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x760], eax
jg 0x1000aee6
xor eax, eax
inc eax
je 0x1000aee6
mov dword [ebp - 0x4a8], 1
jmp 0x1000aeed
and dword [ebp - 0x4a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x368]
mov dword [ebp - 0x8c0], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x8c0]
mov dword [ebp + eax*4 - 0x368], ecx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x4a8]
add eax, dword [ebp - 0x8c0]
imul eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0x1c4]
imul eax, dword [ebp - 0x1c4]
mov dword [ebp - 0xc8], eax
jmp 0x1000ad73
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x368], 0
je 0x1000af98
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10cc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x368]
cmp dword [ebp - 0xc8], eax
jge 0x1000af77
mov dword [ebp - 0x4b0], 1
jmp 0x1000af7e
and dword [ebp - 0x4b0], 0
imul eax, dword [ebp - 0x4b0], 0x16e1
test eax, eax
je 0x1000af98
mov dword [ebp - 0x768], 1
jmp 0x1000af9f
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x768]
cmp eax, 0xf7fa
jge 0x1000afbb
mov dword [ebp - 0x4b8], 1
jmp 0x1000afc2
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
sub eax, dword [ebp - 0xc8]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x368]
sub eax, dword [ebp - 0x4e8]
je 0x1000afef
mov dword [ebp - 0x978], 1
jmp 0x1000aff6
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x978], eax
jne 0x1000b00d
mov dword [ebp - 0x4c0], 1
jmp 0x1000b014
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x4c0], 0x7342
jge 0x1000b02c
mov dword [ebp - 0x770], 1
jmp 0x1000b033
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0x770]
cmp eax, 0x7fcf6239
jne 0x1000b06b
mov dword [ebp - 0xbd8], 0x3ad33dc2
mov dword [ebp - 0xa88], 0xfffffff8
mov eax, dword [ebp - 0xbd8]
mov dword [ebp - 0xa88], eax
jmp 0x1000b29c
mov dword [ebp - 0x4d0], 0x59a1248f
mov dword [ebp - 0x778], 0x7f4763cd
mov dword [ebp - 0xa2c], 0xfffffffd
mov dword [ebp - 0x4e0], 0xb48eda29
mov dword [ebp - 0x228], 0
jmp 0x1000b0ac
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x1000b0c8
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0xa50], 0x7b094c6
jmp 0x1000b09f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa50], 0
je 0x1000b289
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xc94]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0xc94]
dec ecx
push 4
pop edx
imul edx, edx, 3
mov dword [ebp + edx - 0xc94], ecx
test eax, eax
je 0x1000b289
push 4
pop eax
test eax, eax
je 0x1000b1ab
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1000b133
cmp dword [ebp - 0xbb8], 0
je 0x1000b133
mov dword [ebp - 0x4c8], 1
jmp 0x1000b13a
and dword [ebp - 0x4c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x368]
imul eax, dword [ebp - 0x4c8]
test eax, eax
je 0x1000b167
mov eax, 0x90166331
test eax, eax
je 0x1000b167
mov dword [ebp - 0x8c8], 1
jmp 0x1000b16e
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x8c8]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x778], eax
cmp dword [ebp - 0x778], 0
jne 0x1000b19f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa50], 0
je 0x1000b1ab
mov dword [ebp - 0x4d8], 1
jmp 0x1000b1b2
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0xa2c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa50]
cmp eax, dword [ebp - 0xa2c]
jg 0x1000b1df
mov dword [ebp - 0x2e8], 1
jmp 0x1000b1e6
and dword [ebp - 0x2e8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp + eax - 0xa50], ecx
mov eax, dword [ebp - 0x2e8]
sub eax, 9
cmp eax, dword [ebp - 0x4e0]
jle 0x1000b216
mov dword [ebp - 0x780], 1
jmp 0x1000b21d
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0x4e0]
cmp dword [ebp - 0x780], eax
jle 0x1000b240
cmp dword [ebp - 0x4e8], 0
je 0x1000b240
mov dword [ebp - 0x8d0], 1
jmp 0x1000b247
and dword [ebp - 0x8d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc94]
cmp dword [ebp - 0x8d0], eax
jl 0x1000b268
mov dword [ebp - 0x4f0], 1
jmp 0x1000b26f
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x4f0]
je 0x1000b289
mov dword [ebp - 0x788], 1
jmp 0x1000b290
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0x44], 0
mov dword [ebp - 0xb0], 5
mov dword [ebp - 0x16c], 0xc657e3b6
mov dword [ebp - 0x2bc], 1
mov dword [ebp - 0x10d4], 0
mov dword [ebp - 0x10dc], 0x3523e24b
mov dword [ebp - 0xa90], 0x657a
mov dword [ebp - 0x334], 0x38e0ea62
mov dword [ebp - 0xa98], 0xffffffff
cmp dword [ebp - 0x44], 0xaa9ac70c
jae 0x1000b3e5
cmp dword [ebp - 0x44], 0x6a92
jg 0x1000b315
mov dword [ebp - 0x4f8], 1
jmp 0x1000b31c
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x4f8], eax
je 0x1000b336
cmp dword [ebp - 0x44], 0
jne 0x1000b336
and dword [ebp - 0x980], 0
jmp 0x1000b340
mov dword [ebp - 0x980], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x980], eax
jl 0x1000b357
mov dword [ebp - 0x500], 1
jmp 0x1000b35e
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x500]
jle 0x1000b375
mov dword [ebp - 0x790], 1
jmp 0x1000b37c
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x790]
cmp eax, dword [ebp - 0x44]
jne 0x1000b396
mov dword [ebp - 0x508], 1
jmp 0x1000b39d
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0xb0], eax
jg 0x1000b3c0
mov dword [ebp - 0x8d8], 1
jmp 0x1000b3c7
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x8d8]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
jne 0x1000b3e5
and dword [ebp - 0x510], 0
jmp 0x1000b3ef
mov dword [ebp - 0x510], 1
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x510]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 1
jge 0x1000b426
cmp dword [ebp - 0x2bc], 0
jne 0x1000b426
and dword [ebp - 0x798], 0
jmp 0x1000b430
mov dword [ebp - 0x798], 1
mov eax, dword [ebp - 0x798]
add eax, 3
cmp eax, dword [ebp - 0xa90]
jle 0x1000b44d
mov dword [ebp - 0x518], 1
jmp 0x1000b454
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x518]
cmp dword [ebp - 0xb0], eax
jne 0x1000b475
cmp dword [ebp - 0x44], 0
jne 0x1000b475
and dword [ebp - 0x9ec], 0
jmp 0x1000b47f
mov dword [ebp - 0x9ec], 1
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x9ec], eax
je 0x1000b499
mov dword [ebp - 0x520], 1
jmp 0x1000b4a0
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
sub eax, dword [ebp - 0x520]
imul eax, dword [ebp - 0x334]
cmp eax, dword [ebp - 0xb0]
je 0x1000b4d3
mov dword [ebp - 0xbe0], 1
jmp 0x1000b4da
and dword [ebp - 0xbe0], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x10e4], eax
mov eax, dword [ebp - 0x334]
imul eax, dword [ebp - 0xa98]
test eax, eax
je 0x1000b4fe
cmp dword [ebp - 0x16c], 0
cmp dword [ebp - 0x44], 0x47a0585c
jl 0x1000b513
mov dword [ebp - 0x7a0], 1
jmp 0x1000b51a
and dword [ebp - 0x7a0], 0
cmp dword [ebp - 0x7a0], 0xffffffff
jle 0x1000b52f
mov dword [ebp - 0x528], 1
jmp 0x1000b536
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x528], eax
jl 0x1000b550
mov dword [ebp - 0x8e0], 1
jmp 0x1000b557
and dword [ebp - 0x8e0], 0
cmp dword [ebp - 0x8e0], 0xffff
je 0x1000b56f
mov dword [ebp - 0x530], 1
jmp 0x1000b576
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x94], 5
mov dword [ebp - 0x170], 0xc657e3b6
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x1050], 0
mov dword [ebp - 0xdfc], 0x3523e24b
mov dword [ebp - 0xbe8], 0x657a
mov dword [ebp - 0x2f0], 0x38e0ea62
mov dword [ebp - 0xbc4], 0xffffffff
cmp dword [ebp - 0x3c], 0xaa9ac70c
jae 0x1000b6cb
cmp dword [ebp - 0x3c], 0x6a92
jg 0x1000b5fb
mov dword [ebp - 0x7a8], 1
jmp 0x1000b602
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x7a8], eax
je 0x1000b61c
cmp dword [ebp - 0x3c], 0
jne 0x1000b61c
and dword [ebp - 0x538], 0
jmp 0x1000b626
mov dword [ebp - 0x538], 1
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x538], eax
jl 0x1000b63d
mov dword [ebp - 0x98c], 1
jmp 0x1000b644
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x98c]
jle 0x1000b65b
mov dword [ebp - 0x540], 1
jmp 0x1000b662
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x540]
cmp eax, dword [ebp - 0x3c]
jne 0x1000b67c
mov dword [ebp - 0x7b0], 1
jmp 0x1000b683
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x94], eax
jg 0x1000b6a6
mov dword [ebp - 0x548], 1
jmp 0x1000b6ad
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jne 0x1000b6cb
and dword [ebp - 0x8e8], 0
jmp 0x1000b6d5
mov dword [ebp - 0x8e8], 1
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x8e8]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 1
jge 0x1000b70c
cmp dword [ebp - 0x230], 0
jne 0x1000b70c
and dword [ebp - 0x550], 0
jmp 0x1000b716
mov dword [ebp - 0x550], 1
mov eax, dword [ebp - 0x550]
add eax, 3
cmp eax, dword [ebp - 0xbe8]
jle 0x1000b733
mov dword [ebp - 0x7b8], 1
jmp 0x1000b73a
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x7b8]
cmp dword [ebp - 0x94], eax
jne 0x1000b75b
cmp dword [ebp - 0x3c], 0
jne 0x1000b75b
and dword [ebp - 0x558], 0
jmp 0x1000b765
mov dword [ebp - 0x558], 1
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x558], eax
je 0x1000b77f
mov dword [ebp - 0xa14], 1
jmp 0x1000b786
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
sub eax, dword [ebp - 0xa14]
imul eax, dword [ebp - 0x2f0]
cmp eax, dword [ebp - 0x94]
je 0x1000b7b9
mov dword [ebp - 0xaa0], 1
jmp 0x1000b7c0
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0xf8c], eax
mov eax, dword [ebp - 0x2f0]
imul eax, dword [ebp - 0xbc4]
test eax, eax
je 0x1000b7e4
cmp dword [ebp - 0x170], 0
cmp dword [ebp - 0x3c], 0x47a0585c
jl 0x1000b7f9
mov dword [ebp - 0x560], 1
jmp 0x1000b800
and dword [ebp - 0x560], 0
cmp dword [ebp - 0x560], 0xffffffff
jle 0x1000b815
mov dword [ebp - 0x7c0], 1
jmp 0x1000b81c
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x7c0], eax
jl 0x1000b836
mov dword [ebp - 0x568], 1
jmp 0x1000b83d
and dword [ebp - 0x568], 0
cmp dword [ebp - 0x568], 0xffff
je 0x1000b855
mov dword [ebp - 0x8f0], 1
jmp 0x1000b85c
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x1b4], 0xffffffff
mov dword [ebp - 0x2c4], 0
jmp 0x1000b88b
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 1
jge 0x1000b8a7
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xaa8], 0xf1124f01
jmp 0x1000b87e
mov byte [ebp - 0xd3], 0
movzx eax, byte [ebp - 0xd3]
test eax, eax
je 0x1000b8bf
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1b4], 0
jmp 0x1000b8d8
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x1000b8f4
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0xaa8], 1
jmp 0x1000b8cb
movzx eax, byte [0x11a9ac88]
test eax, eax
je 0x1000b912
mov esi, 0x10085620
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10010aa0
mov dword [ebp - 0x2f8], 0xd303f024
mov dword [ebp - 0x570], 0x84e5a945
mov dword [ebp - 0x998], 0x83a0f0f5
mov dword [ebp - 0x330], 0x593c8699
mov dword [ebp - 0x338], 0x9919c44d
mov dword [ebp - 0xc34], 0xfffffff9
mov dword [ebp - 0xe04], 0x8670fc24
mov dword [ebp - 0x2cc], 0
jmp 0x1000b971
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 3
jge 0x1000b98d
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0x3a0], 0xd020bd2a
jmp 0x1000b964
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3a0], 0
jne 0x1000b9ad
push 3
pop eax
test eax, eax
jne 0x1000b9ad
and dword [ebp - 0x580], 0
jmp 0x1000b9b7
mov dword [ebp - 0x580], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
mov dword [ebp - 0x570], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x570], eax
jl 0x1000b9eb
mov dword [ebp - 0x7c8], 1
jmp 0x1000b9f2
and dword [ebp - 0x7c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x7c8]
jle 0x1000ba1f
mov dword [ebp - 0x578], 1
jmp 0x1000ba26
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x998]
add eax, dword [ebp - 0x330]
cmp dword [ebp - 0x580], eax
jle 0x1000ba52
mov dword [ebp - 0x7d0], 1
jmp 0x1000ba59
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0xfa0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a0]
mov dword [ebp - 0xe0c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3a0], 0xcced
jle 0x1000baa3
mov dword [ebp - 0x588], 1
jmp 0x1000baaa
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x588], eax
jl 0x1000bac4
mov dword [ebp - 0x8f8], 1
jmp 0x1000bacb
and dword [ebp - 0x8f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x8f8], eax
jl 0x1000baec
mov dword [ebp - 0x590], 1
jmp 0x1000baf3
and dword [ebp - 0x590], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x590], eax
jne 0x1000bb14
mov dword [ebp - 0x7d8], 1
jmp 0x1000bb1b
and dword [ebp - 0x7d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x7d8], eax
jne 0x1000bb3c
mov dword [ebp - 0x598], 1
jmp 0x1000bb43
and dword [ebp - 0x598], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x598]
mov dword [ebp + eax - 0x3a0], ecx
cmp dword [ebp - 0x2f8], 0xbcf5
jge 0x1000bb6e
mov dword [ebp - 0x9f4], 1
jmp 0x1000bb75
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x9f4], eax
jge 0x1000bb8f
mov dword [ebp - 0x5a0], 1
jmp 0x1000bb96
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x5a0], eax
jge 0x1000bbb0
mov dword [ebp - 0x7e0], 1
jmp 0x1000bbb7
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0xc34], eax
mov dword [ebp - 0x18], 0xb871c7bf
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0x5f0], 8
mov dword [ebp - 0xca8], 1
mov dword [ebp - 0xca4], 1
mov dword [ebp - 0xca0], 1
mov dword [ebp - 0xc9c], 1
mov dword [ebp - 0xac0], 0xfcd553b7
mov dword [ebp - 0x2a8], 0
jmp 0x1000bc29
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 3
jge 0x1000bc45
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x378], 0x64a6847d
jmp 0x1000bc1c
mov dword [ebp - 0x18], 0
jmp 0x1000bc55
cmp dword [ebp - 0x18], 2
jg 0x1000be19
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x10c], 0xa4ccfd6
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x378]
mov dword [ebp - 0xf98], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x378]
mov dword [ebp - 0xe14], eax
cmp dword [ebp - 0x18], 0xfff6
jbe 0x1000bcab
mov dword [ebp - 0x5a8], 1
jmp 0x1000bcb2
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x378]
cmp dword [ebp - 0x5a8], eax
jne 0x1000bcd6
mov eax, 0x1637
test eax, eax
jne 0x1000bcd6
and dword [ebp - 0xab0], 0
jmp 0x1000bce0
mov dword [ebp - 0xab0], 1
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xfa8], eax
cmp dword [ebp - 0x1d4], 0xfffffffe
jg 0x1000bd01
mov dword [ebp - 0xbcc], 1
jmp 0x1000bd08
and dword [ebp - 0xbcc], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x378]
mov dword [ebp - 0xe1c], eax
mov dword [ebp - 0x10c], 3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x378]
mov dword [ebp - 0xfb0], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xe24], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xfa4], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xe2c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x105c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xe34], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xfac], eax
cmp dword [ebp - 0x18], 0xfffa
je 0x1000bd9b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x378], 0
je 0x1000be73
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xe3c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x378]
cmp dword [ebp - 0x9c], eax
jge 0x1000be52
mov dword [ebp - 0x5b8], 1
jmp 0x1000be59
and dword [ebp - 0x5b8], 0
imul eax, dword [ebp - 0x5b8], 0x16e1
test eax, eax
je 0x1000be73
mov dword [ebp - 0x9a4], 1
jmp 0x1000be7a
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x9a4]
cmp eax, 0xf7fa
jge 0x1000be96
mov dword [ebp - 0x5c0], 1
jmp 0x1000be9d
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
sub eax, dword [ebp - 0x9c]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x378]
sub eax, dword [ebp - 0x5f0]
je 0x1000beca
mov dword [ebp - 0x7f0], 1
jmp 0x1000bed1
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x7f0], eax
jne 0x1000bee8
pop edi
pop esi
mov esp, ebp
pop ebp
ret