Function at 0x1002ed80
Capabilities:
Get disk size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006c41b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1590
call fcn.10063650
push esi
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x10034119
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x7d4], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x7dc], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x7c4], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x798], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x7ec]
movzx eax, byte [eax]
test eax, eax
je 0x1002ee75
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0x7a0], eax
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x7a8], eax
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x7a8]
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x130]
mov dword [eax], 0
jmp 0x1002ee4a
mov eax, dword [ebp - 0x130]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x130]
mov dword [ecx], eax
mov eax, dword [ebp - 0x130]
cmp dword [eax], 1
jge 0x1002ee70
mov eax, dword [ebp - 0x130]
push dword [eax]
mov ecx, dword [ebp - 0x7bc]
call fcn.10012743
mov dword [eax], 0x488f5754
jmp 0x1002ee39
jmp 0x10034117
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x7e4], eax
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x7ac], eax
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x7e4]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x5dc], 0xffffffff
mov dword [ebp - 0x5c4], 0xffffffff
mov dword [ebp - 0x2b0], 0x46507e67
push 1
lea ecx, [ebp - 0x948]
call fcn.100126dc
and dword [ebp - 4], 0
mov dword [ebp - 0x998], 0xfffffffa
mov dword [ebp - 0x5b0], 0x6ce028f4
mov dword [ebp - 0x65c], 9
mov dword [ebp - 0x298], 0xc863cc1d
push 2
lea ecx, [ebp - 0x930]
call fcn.100126dc
mov byte [ebp - 4], 1
mov dword [ebp - 0x20c], 0xffff
mov dword [ebp - 0x9f0], 0xffffffff
mov dword [ebp - 0x14], 0
jmp 0x1002ef40
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002ef56
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa28], 0x161ab6ec
jmp 0x1002ef39
mov dword [ebp - 0x14], 0
jmp 0x1002ef66
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002ef7c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xaf0], 0xd91e
jmp 0x1002ef5f
mov dword [ebp - 0x14], 0
jmp 0x1002ef8c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002efa5
push dword [ebp - 0x14]
lea ecx, [ebp - 0x948]
call fcn.10012743
or dword [eax], 0xffffffff
jmp 0x1002ef85
mov dword [ebp - 0x14], 0
jmp 0x1002efb5
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002efd1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x930]
call fcn.10012743
mov dword [eax], 1
jmp 0x1002efae
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
mov esi, dword [ebp - 0x20c]
push 1
lea ecx, [ebp - 0x930]
call fcn.10012743
cmp esi, dword [eax]
je 0x1002f001
mov dword [ebp - 0x36c], 1
jmp 0x1002f008
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x290], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x290]
mov dword [ebp + eax - 0xaf0], ecx
push 0
lea ecx, [ebp - 0x948]
call fcn.10012743
mov ecx, dword [ebp - 0x290]
mov dword [eax], ecx
mov eax, dword [ebp - 0x290]
cmp eax, dword [ebp - 0x36c]
jne 0x1002f056
mov dword [ebp - 0x5cc], 1
jmp 0x1002f05d
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x5cc], eax
je 0x1002f077
mov dword [ebp - 0x5d4], 1
jmp 0x1002f07e
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x65c]
cmp dword [ebp - 0x5d4], eax
je 0x1002f098
mov dword [ebp - 0x468], 1
jmp 0x1002f09f
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x540], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x540]
mov dword [ebp + eax - 0xa28], ecx
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0x468]
je 0x1002f0f0
mov dword [ebp - 0x2b8], 1
jmp 0x1002f0f7
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x2b8], eax
jle 0x1002f111
mov dword [ebp - 0x74c], 1
jmp 0x1002f118
and dword [ebp - 0x74c], 0
xor eax, eax
add eax, 0xfffffffd
mov dword [ebp - 0x5b0], eax
je 0x1002f146
mov byte [ebp - 0x79], 0
push 0
push 0x723a
push 0x79d0
lea eax, [ebp - 0x79]
push eax
call fcn.10035a2a
add esp, 0x10
jmp 0x1002f30e
mov dword [ebp - 0x208], 0xb400765e
mov dword [ebp - 0x6b4], 0
mov dword [ebp - 0x788], 2
push 1
lea ecx, [ebp - 0x918]
call fcn.100126dc
mov byte [ebp - 4], 2
mov dword [ebp - 0x86c], 1
mov dword [ebp - 0x868], 1
mov dword [ebp - 0x864], 1
mov dword [ebp - 0x860], 1
push 0x6933
push 0x65a
lea eax, [ebp - 0x918]
push eax
push 0
lea eax, [ebp - 0xa14]
push eax
call fcn.10035930
add esp, 0x14
cmp dword [ebp - 0x298], 0
jne 0x1002f2a2
cmp dword [ebp - 0x788], 4
jg 0x1002f1e1
mov dword [ebp - 0x2c0], 1
jmp 0x1002f1e8
and dword [ebp - 0x2c0], 0
imul esi, dword [ebp - 0x208], 0
push 0
lea ecx, [ebp - 0x918]
call fcn.10012743
cmp esi, dword [eax]
jg 0x1002f20c
mov dword [ebp - 0x470], 1
jmp 0x1002f213
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x2c0]
imul eax, dword [ebp - 0x470]
test eax, eax
je 0x1002f239
mov eax, 0xe01a
test eax, eax
je 0x1002f239
mov dword [ebp - 0x2c8], 1
jmp 0x1002f240
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
add eax, 0x2c19
cmp eax, dword [ebp - 0x208]
jle 0x1002f25f
mov dword [ebp - 0x2d0], 1
jmp 0x1002f266
and dword [ebp - 0x2d0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x86c]
dec eax
mov dword [ebp - 0x548], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x548]
mov dword [ebp + eax - 0x86c], ecx
mov eax, dword [ebp - 0x548]
cmp eax, dword [ebp - 0x2d0]
jg 0x1002f2a2
and dword [ebp - 0x478], 0
jmp 0x1002f2ac
mov dword [ebp - 0x478], 1
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x478], eax
jle 0x1002f2c6
mov dword [ebp - 0x2d8], 1
jmp 0x1002f2cd
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x208]
sub eax, dword [ebp - 0x2d8]
cmp eax, 0x2393dfe8
jle 0x1002f2ec
mov dword [ebp - 0x5ec], 1
jmp 0x1002f2f3
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x6b4], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x918]
call fcn.1001273e
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x930]
call fcn.1001273e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x948]
call fcn.1001273e
mov dword [ebp - 0x16c], 0
jmp 0x1002f345
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x1002f361
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x14c], 0xfffffffe
jmp 0x1002f338
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x1002f37b
push 0
call fcn.10045556
pop ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14c], 0xffffffff
jmp 0x1002f3a9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x14c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14c], 0xfffffff1
je 0x1002f451
mov dword [ebp - 0x670], 2
mov dword [ebp - 0x66c], 0x147c
cmp dword [ebp - 0x66c], 0x1360
jge 0x1002f441
xorpd xmm0, xmm0
movlpd qword [ebp - 0x5e8], xmm0
lea eax, [ebp - 0x5e8]
push eax
push 0x1000e160
call fcn.1005030b
pop ecx
pop ecx
push 0
push 6
push dword [ebp - 0x5e4]
push dword [ebp - 0x5e8]
call fcn.10056300
mov ecx, dword [ebp - 0x5e8]
sub ecx, 1
mov esi, dword [ebp - 0x5e4]
sbb esi, 0
push esi
push ecx
push edx
push eax
call fcn.10056300
add eax, 1
adc edx, 0
push edx
push eax
push 0x1000e168
call fcn.10050c2e
add esp, 0xc
cmp dword [ebp - 0x670], 0
je 0x1002f44c
jmp 0x1002f451
jmp 0x1002f38e
push 1
lea ecx, [ebp - 0x7fc]
call fcn.100126dc
mov dword [ebp - 4], 3
mov dword [ebp - 0x9f8], 3
mov dword [ebp - 0x154], 0
jmp 0x1002f488
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x1002f4aa
push dword [ebp - 0x154]
lea ecx, [ebp - 0x7fc]
call fcn.10012743
mov dword [eax], 0x8cff0ea7
jmp 0x1002f47b
push 0
lea ecx, [ebp - 0x7fc]
call fcn.10012743
mov dword [eax], 7
jmp 0x1002f4e3
push 0
lea ecx, [ebp - 0x7fc]
call fcn.10012743
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2e0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x7fc]
call fcn.10012743
cmp dword [eax], 0xffffffef
jle 0x1002f521
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x1002f51f
push 0
push 1
push 0x6798
push 0x64e3
push 0
call fcn.10039f5b
add esp, 0x14
jmp 0x1002f4bf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7fc]
call fcn.1001273e
mov dword [ebp - 0x4c8], 0xffffffff
mov dword [ebp - 0x750], 0x1928c176
push 0x1bd0
push 0
push 0
lea eax, [ebp - 0x750]
push eax
push 0x4158
call fcn.10041921
add esp, 0x14
mov dword [ebp - 0x5c8], 0xffffffff
mov dword [ebp - 0x380], 0x46507e67
push 1
lea ecx, [ebp - 0x90c]
call fcn.100126dc
mov dword [ebp - 4], 4
mov dword [ebp - 0x214], 0xfffffffd
mov dword [ebp - 0x98], 5
mov dword [ebp - 0xec], 0x95e3b372
mov dword [ebp - 0x138], 0x8d9a2b82
mov dword [ebp - 0x680], 0
cmp dword [ebp - 0x214], 0
jne 0x1002f5e7
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xa1c], eax
imul eax, dword [ebp - 0x98], 0xcda2
test eax, eax
jne 0x1002f5e7
and dword [ebp - 0x480], 0
jmp 0x1002f5f1
mov dword [ebp - 0x480], 1
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x480], eax
jg 0x1002f60b
mov dword [ebp - 0x2e8], 1
jmp 0x1002f612
and dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2e8], 0x25a80e35
jg 0x1002f62a
mov dword [ebp - 0x550], 1
jmp 0x1002f631
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
dec eax
cmp eax, dword [ebp - 0x214]
je 0x1002f64c
mov dword [ebp - 0x2f0], 1
jmp 0x1002f653
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x2f0]
lea eax, [eax + ecx - 1]
test eax, eax
je 0x1002f67c
cmp dword [ebp - 0x98], 0
je 0x1002f67c
mov dword [ebp - 0x488], 1
jmp 0x1002f683
and dword [ebp - 0x488], 0
cmp dword [ebp - 0x488], 0xe83
jle 0x1002f69b
mov dword [ebp - 0x2f8], 1
jmp 0x1002f6a2
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x138], 0
jmp 0x1002f6c7
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x14
jne 0x1002f7b3
mov dword [ebp - 0x678], 0
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x1002f6fb
push 0
push 0
call fcn.10029a2e
pop ecx
pop ecx
mov dword [ebp - 0x98], 0
jmp 0x1002f714
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xfffffffc
jg 0x1002f7ae
mov dword [ebp - 0x7b8], 1
cmp dword [ebp - 0x678], 0
je 0x1002f747
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1002f747
mov dword [ebp - 0x5b8], 1
jmp 0x1002f74e
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0xec], 0
jmp 0x1002f773
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x2d
jg 0x1002f7a9
push 0x3d52
push 0
push 0x3412
lea eax, [ebp - 0x680]
push eax
push 0
push 1
lea eax, [ebp - 0xec]
push eax
push 0x65c0
call fcn.1003f0e5
add esp, 0x20
jmp 0x1002f766
jmp 0x1002f707
jmp 0x1002f6ba
mov dword [ebp - 0xa00], 0xfffffffa
mov dword [ebp - 0x578], 0x6ce028f4
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x25c], 0xfffffff7
mov dword [ebp - 0x498], 0xc2e9378f
mov dword [ebp - 0x310], 0x5a9390df
mov dword [ebp - 0x1e8], 0
jmp 0x1002f805
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 3
jge 0x1002f821
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0xb5c], 0xfffffffc
jmp 0x1002f7f8
mov dword [ebp - 0x5c], 0
jmp 0x1002f831
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffff3
jg 0x1002f997
mov dword [ebp - 0xf8], 0xb7161ab6
mov dword [ebp - 0xa30], 0x7e0d1b71
mov dword [ebp - 0xa94], 0
mov dword [ebp - 0xa20], 0xa60915bb
push 2
lea ecx, [ebp - 0xa60]
call fcn.100126dc
mov byte [ebp - 4], 5
mov dword [ebp - 0x15c], 0
jmp 0x1002f88d
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 2
jge 0x1002f8af
push dword [ebp - 0x15c]
lea ecx, [ebp - 0xa60]
call fcn.10012743
mov dword [eax], 0x2f34e401
jmp 0x1002f880
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xaa0], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xf8], eax
jl 0x1002f8e1
cmp dword [ebp - 0x5c], 0
jne 0x1002f8e1
and dword [ebp - 0x300], 0
jmp 0x1002f8eb
mov dword [ebp - 0x300], 1
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x300]
jl 0x1002f905
mov dword [ebp - 0x490], 1
jmp 0x1002f90c
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
add eax, 6
je 0x1002f91b
cmp dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x25c], eax
imul eax, dword [ebp - 0x25c], 0xe1d8
cmp eax, dword [ebp - 0xf8]
jne 0x1002f945
mov dword [ebp - 0x308], 1
jmp 0x1002f94c
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x308], eax
jge 0x1002f963
mov dword [ebp - 0x558], 1
jmp 0x1002f96a
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa60]
call fcn.1001273e
jmp 0x1002f82a
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x7c8], 9
mov dword [ebp - 0x140], 1
mov dword [ebp - 0x688], 0x2f9d
mov dword [ebp - 0x754], 0x4ccfd66c
mov dword [ebp - 0x1f0], 0
jmp 0x1002f9e4
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x1002fa00
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xb50], 0
jmp 0x1002f9d7
mov dword [ebp - 0x140], 0
jmp 0x1002fa19
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 2
jg 0x1002fac5
mov dword [ebp - 0x164], 0xb51dba33
mov dword [ebp - 0x164], 0
jmp 0x1002fa49
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jg 0x1002fac0
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x1002fabb
push 0x50b2
push 0x58c9
push 0xf3c
push 0x2cf6
push 0x5571
push 0
push 0x591f
push 0
push 0x30cc
push 0x53fd
push 0x31bd
push 0xf8e
push 0x3200
push 0x3d90
push 0x7cef
push 0x525c
push 0x39e3
call fcn.10034ead
add esp, 0x44
jmp 0x1002fa3c
jmp 0x1002fa0c
push 0x45e
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x754]
push eax
push 0
push 0x5dd6
push 0x435
lea eax, [ebp - 0x688]
push eax
push 0x17ba
push 1
call fcn.10029bf3
add esp, 0x24
mov dword [ebp - 0x250], 0xc863cc1d
push 1
lea ecx, [ebp - 0x978]
call fcn.100126dc
mov byte [ebp - 4], 6
push 1
lea ecx, [ebp - 0x960]
call fcn.100126dc
mov byte [ebp - 4], 7
mov dword [ebp - 0x318], 1
push 0x7f4f
push 0
lea eax, [ebp - 0x978]
push eax
push 0x184f
push 1
push 1
push 0x7a2
lea eax, [ebp - 0x13c]
push eax
call fcn.1003f0e5
add esp, 0x20
mov dword [ebp - 0x13c], 0
jmp 0x1002fb74
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x1002fb96
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x960]
call fcn.10012743
mov dword [eax], 0x182eac45
jmp 0x1002fb67
push 0
lea ecx, [ebp - 0x978]
call fcn.10012743
push 0
lea ecx, [ebp - 0x960]
call fcn.10012743
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x318], eax
lea eax, [ebp - 0x318]
push eax
push 0
call fcn.1003457e
pop ecx
pop ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x960]
call fcn.1001273e
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x978]
call fcn.1001273e
push 2
lea ecx, [ebp - 0x96c]
call fcn.100126dc
mov byte [ebp - 4], 8
mov dword [ebp - 0x8a4], 0xfffffff8
mov dword [ebp - 0x8a0], 0xfffffff8
mov dword [ebp - 0x89c], 0xfffffff8
mov dword [ebp - 0x898], 0xfffffff8
lea ecx, [ebp - 0x285]
call fcn.10012752
push eax
lea eax, [ebp - 0x894]
push eax
lea eax, [ebp - 0x8a4]
push eax
lea ecx, [ebp - 0xb34]
call fcn.10012755
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5f8]
call fcn.10012718
mov byte [ebp - 4], 9
mov dword [ebp - 0x1bc], 0xffffffff
mov dword [ebp - 0x21c], 0xa2324015
mov dword [ebp - 0x81c], 0xffffffff
mov dword [ebp - 0xaa8], 0xfffffff9
mov dword [ebp - 0xa34], 0xfffffff7
mov dword [ebp - 0xabc], 1
mov dword [ebp - 0xa3c], 0xffffffff
mov dword [ebp - 0xaa4], 0x3b3bbbb5
mov dword [ebp - 0x1f8], 0
jmp 0x1002fcc2
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 1
jge 0x1002fcde
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0xa44], 0xa7160c63
jmp 0x1002fcb5
push 0
lea ecx, [ebp - 0x5f8]
call fcn.10012743
and dword [eax], 0
jmp 0x1002fd14
push 0
lea ecx, [ebp - 0x5f8]
call fcn.10012743
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x610]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x610]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x5f8]
call fcn.10012743
cmp dword [eax], 0x11
jne 0x1002ffc2
mov dword [ebp - 0x320], 0xb63e8e1b
mov dword [ebp - 0x29c], 0x3cfce294
mov dword [ebp - 0x994], 0xffffffff
mov dword [ebp - 0xadc], 0xffffffff
mov dword [ebp - 0xad8], 0xffffffff
mov dword [ebp - 0xad4], 0xffffffff
mov dword [ebp - 0xad0], 0xffffffff
push 1
lea ecx, [ebp - 0x990]
call fcn.100126dc
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x200], 0
jmp 0x1002fd9a
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 1
jge 0x1002fdbc
push dword [ebp - 0x200]
lea ecx, [ebp - 0x990]
call fcn.10012743
mov dword [eax], 6
jmp 0x1002fd8d
cmp dword [ebp - 0x320], 0
jne 0x1002fdd2
push 0
lea ecx, [ebp - 0x5f8]
call fcn.10012743
push 0
lea ecx, [ebp - 0x5f8]
call fcn.10012743
cmp dword [eax], 0
je 0x1002fe42
cmp dword [ebp - 0x320], 0x93d0b548
ja 0x1002fdfc
mov dword [ebp - 0x4a0], 1
jmp 0x1002fe03
and dword [ebp - 0x4a0], 0
mov dword [ebp - 0x29c], 0xeb77278f
mov eax, dword [ebp - 0x29c]
cmp eax, dword [ebp - 0x4a0]
jne 0x1002fe24
mov eax, 0x2215
test eax, eax
jne 0x1002fe36
push 0
lea ecx, [ebp - 0x5f8]
call fcn.10012743
cmp dword [eax], 0
je 0x1002fe42
mov dword [ebp - 0x328], 1
jmp 0x1002fe49
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
add eax, 0x415
je 0x1002fe83
push 0
push 0x1622
call fcn.10045793
pop ecx
pop ecx
mov byte [ebp - 0xc2], 0
push 1
push 0
lea eax, [ebp - 0xc2]
push eax
call fcn.1002aaeb
add esp, 0xc
jmp 0x1002ffae
mov dword [ebp - 0x560], 0xfffffff8
mov dword [ebp - 0x330], 0xb2455f99
mov dword [ebp - 0x690], 9
mov dword [ebp - 0x99c], 5
mov dword [ebp - 0x9a4], 0
push 1
lea ecx, [ebp - 0xa70]
call fcn.100126dc
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0xa70]
push eax
push 0
lea eax, [ebp - 0x9ac]
push eax
push 1
push 0
call fcn.1004064d
add esp, 0x14
mov dword [ebp - 0x1bc], 1
push 0
lea ecx, [ebp - 0x5f8]
call fcn.10012743
mov eax, dword [eax]
neg eax
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
sub eax, 8
mov ecx, dword [ebp - 0x1bc]
imul ecx, eax
test ecx, ecx
je 0x1002ff5e
mov dword [ebp - 0x560], 0xce35
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
add eax, dword [ebp - 0x21c]
je 0x1002ff5e
cmp dword [ebp - 0x29c], 0
je 0x1002ff5e
mov dword [ebp - 0x4a8], 1
jmp 0x1002ff65
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x81c], eax
mov dword [ebp - 0x690], 0xffffffff
push 0
push 0x250f
push 0x1569
push 1
push 0
push 0x777d
lea eax, [ebp - 0x990]
push eax
call fcn.10035505
add esp, 0x1c
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa70]
call fcn.1001273e
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x990]
call fcn.1001273e
jmp 0x1002fcf0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x5f8]
call fcn.1001273e
mov dword [ebp - 0x264], 0xffff
mov dword [ebp - 0x9b4], 0xffffffff
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x764], 0x9d5fac12
mov dword [ebp - 0x6a8], 0x31eb
mov dword [ebp - 0x174], 0
jmp 0x1003001c
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 4
jge 0x10030038
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0xb44], 0xfffffffd
jmp 0x1003000f
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1003006c
push 0
push 0x830
push 0xa17
push 0
push 1
push 0x58eb
push 0x301e
call fcn.10034d94
add esp, 0x1c
mov dword [ebp - 0x75c], 0x2665
cmp dword [ebp - 0x75c], 0xfb4
jge 0x10030170
lea eax, [ebp - 0x6a0]
push eax
lea eax, [ebp - 0x698]
push eax
push 0x1000e09c
call fcn.1005030b
add esp, 0xc
or dword [ebp - 0x128], 0xffffffff
and dword [ebp - 0x224], 0
jmp 0x100300be
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
cmp eax, dword [ebp - 0x698]
jge 0x1003015e
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x7c0]
push eax
push 0x1000e06c
call fcn.1005030b
add esp, 0xc
imul eax, dword [ebp - 0x7c0], 0xb6
add eax, dword [ebp - 0x1e4]
imul ecx, dword [ebp - 0x6a0], 0xb6
cmp eax, ecx
jg 0x10030159
cmp dword [ebp - 0x128], 0
jge 0x1003012d
mov eax, 0xb6
sub eax, dword [ebp - 0x1e4]
cdq
mov ecx, 0xb6
idiv ecx
mov dword [ebp - 0x128], edx
jmp 0x10030159
mov eax, 0xb6
sub eax, dword [ebp - 0x1e4]
cdq
mov ecx, 0xb6
idiv ecx
cmp dword [ebp - 0x128], edx
jge 0x10030159
mov eax, 0xb6
sub eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x128], eax
jmp 0x100300b1
push dword [ebp - 0x128]
push 0x1000df90
call fcn.10050c2e
pop ecx
pop ecx
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x110], eax
jl 0x1003018a
mov dword [ebp - 0x338], 1
jmp 0x10030191
and dword [ebp - 0x338], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xb44], 0xfffb
imul eax, dword [ebp - 0x110], 0xfffb
cmp eax, dword [ebp - 0x338]
jge 0x100301bf
mov dword [ebp - 0x5c0], 1
jmp 0x100301c6
and dword [ebp - 0x5c0], 0
cmp dword [ebp - 0x5c0], 0
jl 0x100301db
mov dword [ebp - 0x340], 1
jmp 0x100301e2
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
imul eax, dword [ebp - 0x764]
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x1c], 0
jmp 0x10030211
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10030227
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa0c], 0x161ab6ec
jmp 0x1003020a
mov dword [ebp - 0x1c], 0
jmp 0x10030237
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1003024d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb14], 0xd91e
jmp 0x10030230
mov dword [ebp - 0x1c], 0
jmp 0x1003025d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10030276
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x90c]
call fcn.10012743
or dword [eax], 0xffffffff
jmp 0x10030256
mov dword [ebp - 0x4b0], 0
push 4
lea ecx, [ebp - 0x828]
call fcn.100126dc
mov byte [ebp - 4], 0xc
push 2
lea ecx, [ebp - 0x984]
call fcn.100126dc
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x76c], 0xf5fdfda8
mov dword [ebp - 0x6b0], 0x26f2c0e8
mov dword [ebp - 0x7f0], 0x41af53c8
mov dword [ebp - 0x54], 0
jmp 0x100302d0
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x100302ec
push dword [ebp - 0x54]
lea ecx, [ebp - 0x828]
call fcn.10012743
mov dword [eax], 0x386cce57
jmp 0x100302c9
mov dword [ebp - 0x54], 0
jmp 0x100302fc
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x10030318
push dword [ebp - 0x54]
lea ecx, [ebp - 0x984]
call fcn.10012743
mov dword [eax], 0xe5fef407
jmp 0x100302f5
mov esi, dword [ebp - 0x4b0]
add esi, 8
push 1
lea ecx, [ebp - 0x828]
call fcn.10012743
mov dword [eax], esi
push 0x1dc7
push 0x3fc4
push 0
lea eax, [ebp - 0x4b0]
push eax
lea eax, [ebp - 0x7f0]
push eax
lea eax, [ebp - 0x6b0]
push eax
push 0x5f88
lea eax, [ebp - 0x76c]
push eax
lea eax, [ebp - 0x828]
push eax
push 0x36e6
lea eax, [ebp - 0x984]
push eax
push 0
push 1
call fcn.1002dde1
add esp, 0x34
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x984]
call fcn.1001273e
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x828]
call fcn.1001273e
lea eax, [ebp - 0x1c]
push eax
push 0x4d46
push 0x4ee7
push 0
lea eax, [ebp - 0x96c]
push eax
push 0x39a6
push 0x64da
push 0
call fcn.1002eb41
add esp, 0x20
mov dword [ebp - 0x20], 0xfff6
mov dword [ebp - 0x34], 1
push 3
lea ecx, [ebp - 0x8dc]
call fcn.100126dc
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x17c], 0
jmp 0x100303fd
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jge 0x1003041f
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x8dc]
call fcn.10012743
mov dword [eax], 0x638299fa
jmp 0x100303f0
mov eax, dword [ebp - 0x20]
sub eax, 0xffff
mov dword [ebp - 0x34], eax
jne 0x10030448
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x20]
mov eax, 0x38dc5336
sub eax, dword [ebp - 0x20]
jne 0x10030448
and dword [ebp - 0x348], 0
jmp 0x10030452
mov dword [ebp - 0x348], 1
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x348]
je 0x10030469
mov dword [ebp - 0x568], 1
jmp 0x10030470
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x568]
je 0x10030487
mov dword [ebp - 0x350], 1
jmp 0x1003048e
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x350], eax
jg 0x100304ef
mov dword [ebp - 0x20], 0x1b
jmp 0x100304a9
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x2c
jne 0x100304ea
mov byte [ebp - 0xc4], 0
lea eax, [ebp - 0xc4]
push eax
push 0x18a8
push 0
push 0
call fcn.10034a8c
add esp, 0x10
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x100304e8
push 0
call fcn.10045153
pop ecx
jmp 0x100304a2
jmp 0x10030710
push 1
lea ecx, [ebp - 0x840]
call fcn.100126dc
mov byte [ebp - 4], 0xf
push 0
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0x840]
push eax
push 0
push 0x24c2
call fcn.1002a2f5
add esp, 0x14
mov dword [ebp - 0x34], 0
jmp 0x1003052f
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10030701
mov dword [ebp - 0x1c4], 0
jmp 0x10030552
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 2
jge 0x1003056e
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x7b4], 0xfffffffd
jmp 0x10030545
mov dword [ebp - 0x20], 0
jmp 0x1003057e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x100306a6
push 2
lea ecx, [ebp - 0x80c]
call fcn.100126dc
mov byte [ebp - 4], 0x10
push 1
lea eax, [ebp - 0x80c]
push eax
push 0
push 0x5119
lea eax, [ebp - 0x9c4]
push eax
push 0x57d7
call fcn.1002a9f5
add esp, 0x18
push 1
lea ecx, [ebp - 0x80c]
call fcn.10012743
and dword [eax], 0
jmp 0x100305f3
push 1
lea ecx, [ebp - 0x80c]
call fcn.10012743
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x4b8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4b8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x80c]
call fcn.10012743
cmp dword [eax], 0
jg 0x10030692
mov dword [ebp - 0x6b8], 0xbd18
push dword [ebp - 0x34]
lea ecx, [ebp - 0x840]
call fcn.10012743
cmp dword [eax], 0x4d07
je 0x10030635
mov dword [ebp - 0x358], 1
jmp 0x1003063c
and dword [ebp - 0x358], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x358]
mov dword [ebp + eax - 0x7b4], ecx
push dword [ebp - 0x34]
lea ecx, [ebp - 0x840]
call fcn.10012743
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x7b4]
cmp dword [eax], ecx
jl 0x1003067a
mov dword [ebp - 0x5fc], 1
jmp 0x10030681
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x6b8], eax
jmp 0x100305cf
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x80c]
call fcn.1001273e
jmp 0x10030577
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7b4]
cmp dword [ebp - 0x34], eax
jge 0x100306c4
mov dword [ebp - 0x360], 1
jmp 0x100306cb
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x360], 7
ja 0x100306e0
mov dword [ebp - 0x4c0], 1
jmp 0x100306e7
and dword [ebp - 0x4c0], 0
push 1
lea ecx, [ebp - 0x8dc]
call fcn.10012743
mov ecx, dword [ebp - 0x4c0]
mov dword [eax], ecx
jmp 0x10030528
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x840]
call fcn.1001273e
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x8dc]
call fcn.1001273e
mov eax, dword [ebp - 0x264]
dec eax
mov dword [ebp - 0x264], eax
mov esi, dword [ebp - 0x264]
push 1
lea ecx, [ebp - 0x96c]
call fcn.10012743
cmp esi, dword [eax]
je 0x1003074f
mov dword [ebp - 0x368], 1
jmp 0x10030756
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x22c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x22c]
mov dword [ebp + eax - 0xb14], ecx
push 0
lea ecx, [ebp - 0x90c]
call fcn.10012743
mov ecx, dword [ebp - 0x22c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x22c]
cmp eax, dword [ebp - 0x368]
jne 0x100307a4
mov dword [ebp - 0x570], 1
jmp 0x100307ab
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x570], eax
je 0x100307c5
mov dword [ebp - 0x370], 1
jmp 0x100307cc
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x7c8]
cmp dword [ebp - 0x370], eax
je 0x100307e6
mov dword [ebp - 0x4d0], 1
jmp 0x100307ed
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x378], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x378]
mov dword [ebp + eax - 0xa0c], ecx
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
cmp eax, dword [ebp - 0x4d0]
je 0x1003083e
mov dword [ebp - 0x388], 1
jmp 0x10030845
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x388], eax
jle 0x1003085f
mov dword [ebp - 0x6c0], 1
jmp 0x10030866
and dword [ebp - 0x6c0], 0
xor eax, eax
add eax, 0xfffffffd
mov dword [ebp - 0x578], eax
je 0x1003110b
mov dword [ebp - 0x6c], 0x5d6c05ba
mov dword [ebp - 0x284], 0xca8c
mov dword [ebp - 0x6d0], 0
mov dword [ebp - 0x890], 1
mov dword [ebp - 0x88c], 1
mov dword [ebp - 0x888], 1
mov dword [ebp - 0x884], 1
lea ecx, [ebp - 0x29d]
call fcn.10012752
push eax
lea eax, [ebp - 0x880]
push eax
lea eax, [ebp - 0x890]
push eax
lea ecx, [ebp - 0xb1c]
call fcn.10012755
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa80]
call fcn.10012718
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x23c], 0xf6f6d779
mov dword [ebp - 0x6c], 0
jmp 0x1003090d
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffff6
jg 0x10031073
mov dword [ebp - 0x12c], 0x4074dd03
mov dword [ebp - 0x774], 0x14a3a6d7
mov dword [ebp - 0x294], 0x32afcb06
cmp dword [ebp - 0x12c], 0
je 0x10030b9e
mov dword [ebp - 0x234], 0x98aa
mov dword [ebp - 0x204], 6
mov dword [ebp - 0x77c], 0x2ba1
mov dword [ebp - 0x184], 0
jmp 0x10030979
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jge 0x10030995
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0xb08], 0xab1943c6
jmp 0x1003096c
mov eax, dword [ebp - 0x234]
imul eax, dword [ebp - 0x6c]
cmp eax, 0x7d6c5051
jne 0x100309b2
mov dword [ebp - 0x390], 1
jmp 0x100309b9
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x390], eax
jl 0x100309d3
mov dword [ebp - 0x4d8], 1
jmp 0x100309da
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x4d8]
je 0x100309f1
mov dword [ebp - 0x398], 1
jmp 0x100309f8
and dword [ebp - 0x398], 0
cmp dword [ebp - 0x398], 0x53b1dab5
jl 0x10030a0d
cmp dword [ebp - 0x12c], 0
je 0x10030a14
cmp dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x12c], eax
jg 0x10030a3a
mov dword [ebp - 0x614], 1
jmp 0x10030a41
and dword [ebp - 0x614], 0
cmp dword [ebp - 0x614], 0xffffffff
ja 0x10030a56
mov dword [ebp - 0x3a0], 1
jmp 0x10030a5d
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x774], eax
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x10030a82
cmp dword [ebp - 0x204], 0
jne 0x10030a82
and dword [ebp - 0x6c8], 0
jmp 0x10030a8c
mov dword [ebp - 0x6c8], 1
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x234], eax
je 0x10030aa6
mov dword [ebp - 0x4e0], 1
jmp 0x10030aad
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 0x20f
jl 0x10030ac5
mov dword [ebp - 0x3a8], 1
jmp 0x10030acc
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x3a8], eax
jle 0x10030ae3
mov dword [ebp - 0x818], 1
jmp 0x10030aea
and dword [ebp - 0x818], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb08]
mov dword [ebp - 0x9cc], eax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x9d4], eax
mov eax, 0x40b319
cmp eax, 1
je 0x10030b28
mov eax, 0xffff
test eax, eax
je 0x10030b28
mov dword [ebp - 0x580], 1
jmp 0x10030b2f
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x6d0]
cmp dword [ebp - 0x580], eax
jge 0x10030b49
mov dword [ebp - 0x3b0], 1
jmp 0x10030b50
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x3b0], eax
jne 0x10030b6a
mov dword [ebp - 0x26c], 1
jmp 0x10030b71
and dword [ebp - 0x26c], 0
push 3
lea ecx, [ebp - 0xa80]
call fcn.10012743
mov ecx, dword [ebp - 0x26c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x294]
imul eax, dword [ebp - 0x26c]
mov dword [ebp - 0x77c], eax
jmp 0x1003106e
mov dword [ebp - 0x6d8], 0xa6ae
mov dword [ebp - 0x3b8], 0xa2db6377
mov dword [ebp - 0x4e8], 0xffffffff
cmp dword [ebp - 0x12c], 0
jne 0x10030bd1
mov dword [ebp - 0x5d0], 1
jmp 0x10030bd8
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
add eax, dword [ebp - 0x5d0]
cmp dword [ebp - 0x6d8], eax
jge 0x10030c29
mov dword [ebp - 0x3c0], 1
jmp 0x10030c30
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
sub eax, 4
je 0x10030c63
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x10030c5e
push 1
push 0x7760
push 0
call fcn.1002a7bf
add esp, 0xc
jmp 0x1003106e
mov dword [ebp - 0x7d0], 0xfff8
push 0x5e22
push 0
lea eax, [ebp - 0x7d0]
push eax
call fcn.10034c57
add esp, 0xc
mov dword [ebp - 0x6e0], 0x26af
cmp dword [ebp - 0x6e0], 0x540
jge 0x1003106e
push fcn.1001273e
push fcn.1001ba39
push 0xa3
push 0xc
lea eax, [ebp - 0x159c]
push eax
call fcn.100515e0
mov byte [ebp - 4], 0x12
xor eax, eax
inc eax
je 0x10031052
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x1000dfbc
call fcn.1005030b
add esp, 0xc
cmp dword [ebp - 0x28], 0
jne 0x10030cea
jmp 0x10031052
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28c]
mov dword [ebp - 0x784], eax
and dword [ebp - 0x18c], 0
jmp 0x10030d10
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x784]
jge 0x10030d33
imul eax, dword [ebp - 0x18c], 0xc
lea ecx, [ebp + eax - 0x159c]
call fcn.100288d2
jmp 0x10030d03
and dword [ebp - 0x2c], 0
jmp 0x10030d40
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28c]
lea eax, [eax + eax - 1]
cmp dword [ebp - 0x2c], eax
jge 0x10030f08
mov eax, dword [ebp - 0x2c]
and eax, 1
je 0x10030e30
and dword [ebp - 0xa0], 0
jmp 0x10030d75
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x28]
jge 0x10030e2b
lea eax, [ebp - 0x244]
push eax
push 0x1000df8c
call fcn.1005030b
pop ecx
pop ecx
cmp dword [ebp - 0x244], 0
jne 0x10030e26
mov eax, dword [ebp - 0x2c]
cdq
sub eax, edx
sar eax, 1
inc eax
imul eax, dword [ebp - 0x28]
add eax, dword [ebp - 0xa0]
mov dword [ebp - 0x6e8], eax
lea eax, [ebp - 0x6e8]
push eax
mov eax, dword [ebp - 0x2c]
cdq
sub eax, edx
sar eax, 1
imul eax, dword [ebp - 0x28]
add eax, dword [ebp - 0xa0]
imul eax, eax, 0xc
lea ecx, [ebp + eax - 0x159c]
call fcn.1001ba46
mov eax, dword [ebp - 0x2c]
cdq
sub eax, edx
sar eax, 1
imul eax, dword [ebp - 0x28]
add eax, dword [ebp - 0xa0]
mov dword [ebp - 0x800], eax
lea eax, [ebp - 0x800]
push eax
mov eax, dword [ebp - 0x2c]
cdq
sub eax, edx
sar eax, 1
inc eax
imul eax, dword [ebp - 0x28]
add eax, dword [ebp - 0xa0]
imul eax, eax, 0xc
lea ecx, [ebp + eax - 0x159c]
call fcn.1001ba46
jmp 0x10030d68
jmp 0x10030f03
and dword [ebp - 0xa8], 0
jmp 0x10030e46
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x28]
dec eax
cmp dword [ebp - 0xa8], eax
jge 0x10030f03
lea eax, [ebp - 0x244]
push eax
push 0x1000df8c
call fcn.1005030b
pop ecx
pop ecx
cmp dword [ebp - 0x244], 0
jne 0x10030efe
mov eax, dword [ebp - 0x2c]
cdq
sub eax, edx
sar eax, 1
imul eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0xa8]
lea eax, [eax + ecx + 1]
mov dword [ebp - 0x6f0], eax
lea eax, [ebp - 0x6f0]
push eax
mov eax, dword [ebp - 0x2c]
cdq
sub eax, edx
sar eax, 1
imul eax, dword [ebp - 0x28]
add eax, dword [ebp - 0xa8]
imul eax, eax, 0xc
lea ecx, [ebp + eax - 0x159c]
call fcn.1001ba46
mov eax, dword [ebp - 0x2c]
cdq
sub eax, edx
sar eax, 1
imul eax, dword [ebp - 0x28]
add eax, dword [ebp - 0xa8]
mov dword [ebp - 0x78c], eax
lea eax, [ebp - 0x78c]
push eax
mov eax, dword [ebp - 0x2c]
cdq
sub eax, edx
sar eax, 1
imul eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0xa8]
lea eax, [eax + ecx + 1]
imul eax, eax, 0xc
lea ecx, [ebp + eax - 0x159c]
call fcn.1001ba46
jmp 0x10030e39
jmp 0x10030d39
lea ecx, [ebp - 0x8b8]
call fcn.10045f87
mov byte [ebp - 4], 0x13
push 0x28c
push 0xffffffffffffffff
lea eax, [ebp - 0xdf8]
push eax
call fcn.1001b868
add esp, 0xc
and dword [ebp - 0x6f8], 0
lea eax, [ebp - 0x6f8]
push eax
lea ecx, [ebp - 0x8b8]
call fcn.10045fbd
push 4
pop eax
imul eax, eax, 0
and dword [ebp + eax - 0xdf8], 0
lea ecx, [ebp - 0x8b8]
call fcn.10045fc6
movzx eax, al
test eax, eax
jne 0x1003101f
lea ecx, [ebp - 0x8b8]
call fcn.10045fcf
mov eax, dword [eax]
mov dword [ebp - 0x274], eax
lea ecx, [ebp - 0x8b8]
call fcn.10046006
imul eax, dword [ebp - 0x274], 0xc
lea ecx, [ebp + eax - 0x159c]
call fcn.10017673
dec eax
mov dword [ebp - 0x1cc], eax
jmp 0x10030fb1
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0
jl 0x1003101a
push dword [ebp - 0x1cc]
imul eax, dword [ebp - 0x274], 0xc
lea ecx, [ebp + eax - 0x159c]
call fcn.10012743
mov eax, dword [eax]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
cmp dword [ebp + eax*4 - 0xdf8], 0xffffffff
jne 0x10031018
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x8b8]
call fcn.10045fbd
mov eax, dword [ebp - 0x274]
mov eax, dword [ebp + eax*4 - 0xdf8]
inc eax
mov ecx, dword [ebp - 0x24c]
mov dword [ebp + ecx*4 - 0xdf8], eax
jmp 0x10030fa4
jmp 0x10030f54
mov eax, dword [ebp - 0x28c]
imul eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xdfc]
inc eax
push eax
push 0x1000dfc4
call fcn.10050c2e
pop ecx
pop ecx
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x8b8]
call fcn.10046014
jmp 0x10030cbe
mov byte [ebp - 4], 0x11
push fcn.1001273e
push 0xa3
push 0xc
lea eax, [ebp - 0x159c]
push eax
call fcn.100514fa
jmp 0x10030906
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa80]
call fcn.1001273e
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x10031106
mov dword [ebp - 0x700], 1
mov dword [ebp - 0x7d8], 8
mov dword [ebp - 0x9dc], 0xfffffffe
push 0x774a
push 1
lea eax, [ebp - 0x7d8]
push eax
push 0x64b7
push 0x40fe
push 0x375c
push 0x703
push 1
push 0x5153
push 0x1b0
lea eax, [ebp - 0x700]
push eax
push 0x7d2e
push 0
call fcn.1002e8b8
add esp, 0x34
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
jmp 0x1003207a
mov dword [ebp - 0x1ac], 0xb400765e
mov dword [ebp - 0x730], 0
mov dword [ebp - 0x9e4], 0xfffffff6
mov dword [ebp - 0x9ec], 0
mov dword [ebp - 0x9f4], 9
mov dword [ebp - 0x9fc], 0xffffffff
mov dword [ebp - 0xa04], 0x999fb023
mov dword [ebp - 0xa10], 0x5dae5a6
mov dword [ebp - 0xa38], 0
mov dword [ebp - 0xa40], 0xfffffffe
mov dword [ebp - 0xa48], 0
mov dword [ebp - 0xa50], 0xdead9bac
mov dword [ebp - 0xab0], 0xfffffff6
mov dword [ebp - 0xab8], 0x45ee28fd
mov dword [ebp - 0xac0], 4
mov dword [ebp - 0x794], 0xffff
push 0
push 0x373d
lea eax, [ebp - 0x794]
push eax
call fcn.100414af
add esp, 0xc
mov dword [ebp - 0x810], 2
mov dword [ebp - 0xd8], 0xfffa
mov dword [ebp - 0xd4], 0xfffa
mov dword [ebp - 0xd0], 0xfffa
mov dword [ebp - 0xcc], 0xfffa
mov dword [ebp - 0x10], 3
mov dword [ebp - 0xb0], 0
push 1
lea ecx, [ebp - 0x634]
call fcn.100126dc
mov byte [ebp - 4], 0x14
push 1
lea ecx, [ebp - 0x64c]
call fcn.100126dc
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x58], 0
jmp 0x10031236
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10031252
push dword [ebp - 0x58]
lea ecx, [ebp - 0x634]
call fcn.10012743
mov dword [eax], 1
jmp 0x1003122f
mov dword [ebp - 0x58], 0
jmp 0x10031262
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1003127e
push dword [ebp - 0x58]
lea ecx, [ebp - 0x64c]
call fcn.10012743
mov dword [eax], 0xfffffffe
jmp 0x1003125b
mov dword [ebp - 0x10], 0
jmp 0x1003128e
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x100317cc
mov dword [ebp - 0x120], 0x29694d2b
mov dword [ebp - 0x708], 0x2564
cmp dword [ebp - 0x708], 0x68a
jge 0x100313d4
and dword [ebp - 0x104], 0
lea eax, [ebp - 0x104]
push eax
push 0x1000df8c
call fcn.1005030b
pop ecx
pop ecx
and dword [ebp - 0x27c], 0
mov dword [ebp - 0x118], 1
jmp 0x100312f6
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x104]
jge 0x100313c2
mov byte [ebp - 0x15], 1
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x254], 1
jmp 0x1003132c
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x104]
dec eax
dec eax
cmp dword [ebp - 0x254], eax
jg 0x10031364
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x118]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cdq
idiv dword [ebp - 0x104]
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 1
jne 0x10031362
mov byte [ebp - 0x15], 0
jmp 0x10031364
jmp 0x1003131f
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x100313a8
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x118]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cdq
idiv dword [ebp - 0x104]
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 1
jne 0x10031398
mov dword [ebp - 0x4f0], 1
jmp 0x1003139f
and dword [ebp - 0x4f0], 0
mov al, byte [ebp - 0x4f0]
mov byte [ebp - 0x15], al
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x100313bd
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
jmp 0x100312e9
push dword [ebp - 0x27c]
push 0x1000dfc4
call fcn.10050c2e
pop ecx
pop ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp + ecx*4 - 0xd8]
cmp dword [ebp + eax*4 - 0xd8], ecx
jg 0x100313f6
mov dword [ebp - 0x4f8], 1
jmp 0x100313fd
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xd8], 0xca3691f6
jae 0x10031419
mov dword [ebp - 0x3c8], 1
jmp 0x10031420
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x3c8], 0xedb3
jle 0x10031438
mov dword [ebp - 0x588], 1
jmp 0x1003143f
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xd8]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x588]
jne 0x10031469
mov dword [ebp - 0x3d0], 1
jmp 0x10031470
and dword [ebp - 0x3d0], 0
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x3d0]
jge 0x1003149b
push 3
pop eax
test eax, eax
je 0x1003149b
mov dword [ebp - 0x3d8], 1
jmp 0x100314a2
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x4f8]
cmp eax, dword [ebp - 0x3d8]
jne 0x100314cc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd8], 0
je 0x100314cc
mov dword [ebp - 0x60c], 1
jmp 0x100314d3
and dword [ebp - 0x60c], 0
cmp dword [ebp - 0x60c], 0x8ceef9a8
je 0x100314eb
mov dword [ebp - 0x3e0], 1
jmp 0x100314f2
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 0x2e26595a
jle 0x1003150a
mov dword [ebp - 0x500], 1
jmp 0x10031511
and dword [ebp - 0x500], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd8]
add eax, dword [ebp - 0x500]
jne 0x1003153c
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xd8], 0
jne 0x1003153c
and dword [ebp - 0x3e8], 0
jmp 0x10031546
mov dword [ebp - 0x3e8], 1
mov eax, dword [ebp - 0x3e8]
add eax, 0x8eb1
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0xd8]
jg 0x10031569
mov dword [ebp - 0x590], 1
jmp 0x10031570
and dword [ebp - 0x590], 0
cmp dword [ebp - 0x590], 0xffffffff
je 0x1003159b
mov eax, 0x5b04
test eax, eax
jne 0x1003159b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd8], 0
jne 0x1003159b
and dword [ebp - 0x3f0], 0
jmp 0x100315a5
mov dword [ebp - 0x3f0], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xd8]
cmp dword [ebp - 0x3f0], eax
jg 0x100315c3
mov dword [ebp - 0x508], 1
jmp 0x100315ca
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x508], eax
jle 0x100315e1
mov dword [ebp - 0x3f8], 1
jmp 0x100315e8
and dword [ebp - 0x3f8], 0
cmp dword [ebp - 0x3f8], 3
jae 0x100315fd
mov dword [ebp - 0x210], 1
jmp 0x10031604
and dword [ebp - 0x210], 0
push 0
lea ecx, [ebp - 0x634]
call fcn.10012743
mov ecx, dword [ebp - 0x210]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x64c]
call fcn.10012743
mov ecx, dword [ebp - 0x210]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x634]
call fcn.10012743
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xd8], 0x312a7fad
jne 0x1003165a
mov dword [ebp - 0x5d8], 1
jmp 0x10031661
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xd8]
cmp dword [ebp - 0x5d8], eax
jne 0x1003167f
mov dword [ebp - 0x400], 1
jmp 0x10031686
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 1
jne 0x1003169b
mov dword [ebp - 0x510], 1
jmp 0x100316a2
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xd8]
cmp eax, dword [ebp - 0x510]
jle 0x100316c0
mov dword [ebp - 0x408], 1
jmp 0x100316c7
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xd8]
cmp dword [ebp - 0x408], eax
jle 0x100316e5
mov dword [ebp - 0x598], 1
jmp 0x100316ec
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xd8]
sub eax, 0xfffa
cmp eax, dword [ebp - 0x598]
jne 0x1003170f
mov dword [ebp - 0x410], 1
jmp 0x10031716
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x410], eax
je 0x10031730
mov dword [ebp - 0x814], 1
jmp 0x10031737
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xd8]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xd8]
cmp dword [ebp - 0x120], eax
jge 0x10031765
mov dword [ebp - 0x710], 1
jmp 0x1003176c
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xac8], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xd8]
mov dword [ebp - 0xae4], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xd8], 0
jne 0x100317a8
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xd8], 0
jne 0x100317a8
and dword [ebp - 0x518], 0
jmp 0x100317b2
mov dword [ebp - 0x518], 1
push 0
lea ecx, [ebp - 0x64c]
call fcn.10012743
mov ecx, dword [ebp - 0x518]
mov dword [eax], ecx
jmp 0x10031287
mov dword [ebp - 0x10], 0xe
jmp 0x100317dc
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x18
jne 0x10031a6b
mov dword [ebp - 0x430], 0xffffffff
mov dword [ebp - 0xb0], 0xe
jmp 0x10031809
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x18
jge 0x10031a66
mov dword [ebp - 0x24], 0xec31937d
mov dword [ebp - 0x218], 0xfffffffb
cmp dword [ebp - 0x24], 0
je 0x10031832
jmp 0x10031a66
mov dword [ebp - 0x24], 0
jmp 0x10031842
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x10031a61
mov dword [ebp - 0x194], 0xb613644c
mov dword [ebp - 0x194], 3
jmp 0x1003186f
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jl 0x10031a45
mov dword [ebp - 0x5a0], 5
cmp dword [ebp - 0xb0], 0
je 0x100318ce
push 0
lea ecx, [ebp - 0x64c]
call fcn.10012743
mov eax, dword [eax]
add eax, 0x61f0
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xd8]
cmp dword [ebp - 0x218], eax
je 0x100318c7
mov dword [ebp - 0x418], 1
jmp 0x100318ce
and dword [ebp - 0x418], 0
cmp dword [ebp - 0x218], 0xffff
jb 0x100318e6
mov dword [ebp - 0x79c], 1
jmp 0x100318ed
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xd8]
mov dword [ebp - 0xa9c], eax
mov esi, dword [ebp - 0x430]
push 0
lea ecx, [ebp - 0x64c]
call fcn.10012743
imul esi, dword [eax]
cmp esi, dword [ebp - 0x24]
jg 0x10031924
mov dword [ebp - 0x61c], 1
jmp 0x1003192b
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xd8]
cmp eax, dword [ebp - 0x61c]
jg 0x10031949
mov dword [ebp - 0x420], 1
jmp 0x10031950
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xd8]
cmp eax, dword [ebp - 0x420]
jne 0x10031978
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xd8], 0
jne 0x10031978
and dword [ebp - 0x520], 0
jmp 0x10031982
mov dword [ebp - 0x520], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xd8]
cmp dword [ebp - 0x520], eax
jl 0x100319a0
mov dword [ebp - 0x428], 1
jmp 0x100319a7
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 0
je 0x10031a1e
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xd8], 0
je 0x10031a1e
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x100319f3
push 0x6018
push 0
push 0x4e14
push 1
push 1
call fcn.1004064d
add esp, 0x14
lea eax, [ebp - 0x634]
push eax
push 0xb00
lea eax, [ebp - 0x430]
push eax
push 0
push 0
push 0xe62
push 0x3fc4
call fcn.10029f63
add esp, 0x1c
jmp 0x10031a40
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x10031a40
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
jmp 0x10031862
push 0
lea ecx, [ebp - 0x634]
call fcn.10012743
cmp dword [eax], 0
je 0x10031a5c
jmp 0x1003183b
jmp 0x1003183b
jmp 0x100317fc
jmp 0x100317d5
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x64c]
call fcn.1001273e
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x634]
call fcn.1001273e
push 1
lea ecx, [ebp - 0x8f4]
call fcn.100126dc
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x87c], 1
mov dword [ebp - 0x878], 1
mov dword [ebp - 0x874], 1
mov dword [ebp - 0x870], 1
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x718], 0xb101
mov dword [ebp - 0x720], 0x574b6046
mov dword [ebp - 0x1ec], 0
jmp 0x10031af6
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x10031b12
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0xafc], 0xb06c0e26
jmp 0x10031ae9
mov dword [ebp - 0x4c], 0
jmp 0x10031b22
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jle 0x10031cdd
mov dword [ebp - 0x220], 0x92c6eed1
push 3
lea ecx, [ebp - 0x93c]
call fcn.100126dc
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x7e0], 0
mov dword [ebp - 0x19c], 0
jmp 0x10031b6a
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jge 0x10031b8c
push dword [ebp - 0x19c]
lea ecx, [ebp - 0x93c]
call fcn.10012743
mov dword [eax], 1
jmp 0x10031b5d
imul eax, dword [ebp - 0x220], 0xc710
cmp eax, dword [ebp - 0x220]
jge 0x10031baa
mov dword [ebp - 0x528], 1
jmp 0x10031bb1
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
inc eax
cmp eax, dword [ebp - 0x4c]
jl 0x10031bc9
mov dword [ebp - 0x438], 1
jmp 0x10031bd0
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x718]
sub eax, dword [ebp - 0x438]
imul eax, dword [ebp - 0x220]
cmp dword [ebp - 0x4c], eax
jne 0x10031bf4
mov dword [ebp - 0x228], 1
jmp 0x10031bfb
and dword [ebp - 0x228], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x228]
mov dword [ebp + eax - 0xafc], ecx
cmp dword [ebp - 0x228], 2
jl 0x10031c22
mov dword [ebp - 0x5e0], 1
jmp 0x10031c29
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x5e0]
jl 0x10031c40
mov dword [ebp - 0x230], 1
jmp 0x10031c47
and dword [ebp - 0x230], 0
push 1
lea ecx, [ebp - 0x93c]
call fcn.10012743
mov ecx, dword [ebp - 0x230]
mov dword [eax], ecx
cmp dword [ebp - 0x230], 0
jne 0x10031c74
cmp dword [ebp - 0x4c], 0
jne 0x10031c74
and dword [ebp - 0x440], 0
jmp 0x10031c7e
mov dword [ebp - 0x440], 1
mov eax, dword [ebp - 0x7e0]
cmp dword [ebp - 0x440], eax
jl 0x10031c98
mov dword [ebp - 0x530], 1
jmp 0x10031c9f
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x530], eax
jne 0x10031cb6
mov dword [ebp - 0x448], 1
jmp 0x10031cbd
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x720], eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x93c]
call fcn.1001273e
jmp 0x10031b1b
mov dword [ebp - 0x1d4], 0
jmp 0x10031cf6
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 1
jge 0x10031d18
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x8f4]
call fcn.10012743
mov dword [eax], 0x1bd43d9c
jmp 0x10031ce9
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x240], 6
mov dword [ebp - 0x728], 0xfffffff6
mov dword [ebp - 0x1a4], 0
jmp 0x10031d4f
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x10031d6b
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x7a4], 0x31e468a0
jmp 0x10031d42
cmp dword [ebp - 0x238], 0
je 0x10031ea6
mov dword [ebp - 0x134], 0x989d221e
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x134], eax
jne 0x10031d9c
mov dword [ebp - 0x5a8], 1
jmp 0x10031da3
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x5a8], eax
jg 0x10031dbd
mov dword [ebp - 0x450], 1
jmp 0x10031dc4
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x450], eax
jle 0x10031de7
mov eax, 0x5196
test eax, eax
je 0x10031de7
mov dword [ebp - 0x538], 1
jmp 0x10031dee
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x240], eax
jne 0x10031e14
mov dword [ebp - 0x458], 1
jmp 0x10031e1b
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x238]
cmp eax, dword [ebp - 0x458]
jle 0x10031e3b
cmp dword [ebp - 0x240], 0
jne 0x10031e3b
and dword [ebp - 0x618], 0
jmp 0x10031e45
mov dword [ebp - 0x618], 1
cmp dword [ebp - 0x618], 0xfffffffa
jg 0x10031e5a
mov dword [ebp - 0x460], 1
jmp 0x10031e61
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x460], eax
jg 0x10031e7b
mov dword [ebp - 0x248], 1
jmp 0x10031e82
and dword [ebp - 0x248], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x248]
mov dword [ebp + eax - 0x7a4], ecx
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x728], eax
jmp 0x10031f2b
mov dword [ebp - 0xa18], 0xf9beab1d
mov dword [ebp - 0xacc], 0x7fc0549e
mov dword [ebp - 0x9a0], 0x2294bb48
mov dword [ebp - 0xa4c], 0x2e819d33
mov dword [ebp - 0x2a8], 0x7f3c88fe
mov dword [ebp - 0x1fc], 0
jmp 0x10031ef1
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 4
jge 0x10031f0d
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xb6c], 0xaf066b7a
jmp 0x10031ee4
push 0x6b29
push 0
push 0
call fcn.100411c4
add esp, 0xc
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x250], 0
jne 0x1003200e
cmp dword [ebp - 0x810], 4
jg 0x10031f4d
mov dword [ebp - 0x2ac], 1
jmp 0x10031f54
and dword [ebp - 0x2ac], 0
imul esi, dword [ebp - 0x1ac], 0
push 0
lea ecx, [ebp - 0x8f4]
call fcn.10012743
cmp esi, dword [eax]
jg 0x10031f78
mov dword [ebp - 0x2b4], 1
jmp 0x10031f7f
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2ac]
imul eax, dword [ebp - 0x2b4]
test eax, eax
je 0x10031fa5
mov eax, 0xe01a
test eax, eax
je 0x10031fa5
mov dword [ebp - 0x2bc], 1
jmp 0x10031fac
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
add eax, 0x2c19
cmp eax, dword [ebp - 0x1ac]
jle 0x10031fcb
mov dword [ebp - 0x2cc], 1
jmp 0x10031fd2
and dword [ebp - 0x2cc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x87c]
dec eax
mov dword [ebp - 0x2c4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp + eax - 0x87c], ecx
mov eax, dword [ebp - 0x2c4]
cmp eax, dword [ebp - 0x2cc]
jg 0x1003200e
and dword [ebp - 0x2d4], 0
jmp 0x10032018
mov dword [ebp - 0x2d4], 1
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x2d4], eax
jle 0x10032032
mov dword [ebp - 0x2dc], 1
jmp 0x10032039
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x1ac]
sub eax, dword [ebp - 0x2dc]
cmp eax, 0x2393dfe8
jle 0x10032058
mov dword [ebp - 0x2e4], 1
jmp 0x1003205f
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x730], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x8f4]
call fcn.1001273e
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x96c]
call fcn.1001273e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90c]
call fcn.1001273e
cmp dword [ebp - 0x278], 0
jle 0x10034117
push 3
lea ecx, [ebp - 0xa90]
call fcn.100126dc
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x1dc], 0
jmp 0x100320d2
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x100320f4
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0xa90]
call fcn.10012743
mov dword [eax], 0xae9714a
jmp 0x100320c5
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x10032113
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x10032130
push 0
push 1
call fcn.10029a2e
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa90]
call fcn.1001273e
push 4
push 0x1000
push dword [ebp - 0x278]
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [ebp - 0x7ac]
add ecx, dword [eax + 0xc]
push ecx
push 0x882b
push 0x913d
call fcn.1001b6be
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x280]
mov dword [ecx], eax
mov dword [ebp - 0x38], 0xf89b546
mov dword [ebp - 0x100], 0xea964a90
mov dword [ebp - 0x1b4], 0
jmp 0x100321a1
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jge 0x100321bd
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x834], 0x85f70ad6
jmp 0x10032194
mov dword [ebp - 0x38], 0
jmp 0x100321cd
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jg 0x1003235a
mov dword [ebp - 0xb8], 0x52c58fb7
mov dword [ebp - 0x748], 0x7008b15e
push 4
lea ecx, [ebp - 0x954]
call fcn.100126dc
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x1f4], 0
jmp 0x10032218
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 4
jge 0x1003223a
push dword [ebp - 0x1f4]
lea ecx, [ebp - 0x954]
call fcn.10012743
mov dword [eax], 0xc18ab9c
jmp 0x1003220b
mov dword [ebp - 0xb8], 2
jmp 0x10032253
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jl 0x10032313
mov dword [ebp - 0x7e8], 0x58bdfadf
mov dword [ebp - 0x740], 4
mov dword [ebp - 0x668], 0x87d6364d
mov eax, dword [ebp - 0xb8]
cmp dword [ebp + eax*4 - 0x834], 0
je 0x10032293
jmp 0x10032313
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x834], 8
jne 0x100322ae
mov dword [ebp - 0x738], 1
jmp 0x100322b5
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x7e8]
mov dword [ebp - 0xaac], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
je 0x100322f9
mov eax, dword [ebp - 0xb8]
cmp dword [ebp + eax*4 - 0x834], 0
push 2
lea ecx, [ebp - 0x954]
call fcn.10012743
mov eax, dword [eax]
mov dword [ebp - 0x668], eax
jmp 0x10032246
mov dword [ebp - 0x100], 0
jmp 0x1003232c
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jg 0x10032346
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x834], 0
je 0x10032344
jmp 0x10032346
jmp 0x1003231f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x954]
call fcn.1001273e
jmp 0x100321c6
mov dword [ebp - 0x38], 2
jmp 0x1003236a
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x10032552
mov dword [ebp - 0x664], 0x1a54
cmp dword [ebp - 0x664], 0xe45
jge 0x100324e7
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xe8]
push eax
push 0x1000e10c
call fcn.1005030b
add esp, 0xc
xorpd xmm0, xmm0
movlpd qword [ebp - 0x148], xmm0
cmp dword [ebp - 0xe4], 0
jl 0x100324ce
jg 0x100323d1
cmp dword [ebp - 0xe8], 0
jbe 0x100324ce
cmp dword [ebp - 0xdc], 0
jl 0x100324ce
jg 0x100323ed
cmp dword [ebp - 0xe0], 0
jbe 0x100324ce
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xdc]
jl 0x1003246b
jg 0x1003240b
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0xe0]
jbe 0x1003246b
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
call fcn.1006b110
add eax, dword [ebp - 0x148]
adc edx, dword [ebp - 0x144]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], edx
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
call fcn.1006b1c0
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], edx
jmp 0x100324c9
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
call fcn.1006b110
add eax, dword [ebp - 0x148]
adc edx, dword [ebp - 0x144]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], edx
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
call fcn.1006b1c0
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], edx
jmp 0x100323b5
push dword [ebp - 0x144]
push dword [ebp - 0x148]
push 0x1000e168
call fcn.10050c2e
add esp, 0xc
mov dword [ebp - 0x168], 0
jmp 0x10032500
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 1
jge 0x1003251c
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x2ec], 7
jmp 0x100324f3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ec]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2ec], eax
push 0x7271
push 0
push 0x73d
push 0
call fcn.1003a11c
add esp, 0x10
jmp 0x10032363
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x108], 0x77cccaea
mov dword [ebp - 0x30], 6
jmp 0x10032573
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xa
jle 0x1003269a
mov dword [ebp - 0xf4], 0x37d45db3
mov dword [ebp - 0x170], 0
jmp 0x100325a0
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x100325bc
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x2f4], 0xd925
jmp 0x10032593
mov dword [ebp - 0xf4], 0
jmp 0x100325d5
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jl 0x10032676
mov dword [ebp - 0x178], 0
jmp 0x100325fb
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x10032617
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x180], 0xd9ba07e4
jmp 0x100325ee
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x180], 0
jmp 0x10032645
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x180]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x180], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x180], 0
jl 0x10032671
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp + eax*4 - 0x2f4]
mov dword [ebp + ecx*4 - 0x2f4], eax
jmp 0x1003262a
jmp 0x100325c8
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x10032695
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
jmp 0x1003256c
xor eax, eax
jne 0x100326ab
mov dword [ebp - 0x30], 0
cmp dword [ebp - 0x30], 0
je 0x100326e5
xor eax, eax
jne 0x100326b3
cmp dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jle 0x100326c7
mov dword [ebp - 0x2fc], 1
jmp 0x100326ce
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x2fc], eax
jge 0x100326e5
mov dword [ebp - 0x304], 1
jmp 0x100326ec
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 0xfffffffc
jl 0x10032707
cmp dword [ebp - 0x30], 0
je 0x10032707
mov dword [ebp - 0x30c], 1
jmp 0x1003270e
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0xe3d1
je 0x10032726
mov dword [ebp - 0x314], 1
jmp 0x1003272d
and dword [ebp - 0x314], 0
cmp dword [ebp - 0x314], 0x46c2
jle 0x10032745
mov dword [ebp - 0x31c], 1
jmp 0x1003274c
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x31c], eax
jne 0x10032766
mov dword [ebp - 0x324], 1
jmp 0x1003276d
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x324], eax
jle 0x100329b4
mov dword [ebp - 0x70], 0x6d767c8f
mov dword [ebp - 0x260], 0xfffffff9
mov dword [ebp - 0x67c], 0xb404
mov dword [ebp - 0x188], 0
jmp 0x100327b3
cmp dword [ebp - 0x188], 1
jge 0x100327cf
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x100329dc
push 0
push 0
push 0x7c3d
push 0x44d5
call fcn.1002eca1
add esp, 0x10
mov dword [ebp - 0x3c], 0x90ac204e
mov dword [ebp - 0x48], 0
jmp 0x100329f3
jmp 0x10034137
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x780], eax
push 0
push 0x4584
push dword [ebp - 0x780]
call fcn.100414af
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret