Function at 0x1000999c
Capabilities:
Get disk size

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1160
call fcn.1006e5b0
push esi
push edi
mov dword [ebp - 0xd78], 1
mov dword [ebp - 0xe04], 0x56915a13
mov dword [ebp - 0xe0c], 0xebf0
mov dword [ebp - 0xe14], 0x80eec299
mov dword [ebp - 0x5e0], 0xc4dd
mov dword [ebp - 0xa4], 0
jmp 0x100099f6
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10009a12
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xe1c], 0
jmp 0x100099e9
mov dword [ebp - 0xa4], 0
jmp 0x10009a2b
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10009a47
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xe24], 0x28f6c74a
jmp 0x10009a1e
mov eax, dword [ebp - 0x5e0]
inc eax
mov dword [ebp - 0x5e0], eax
mov dword [ebp - 0xee0], 1
mov dword [ebp - 0xee8], 0x56915a13
mov dword [ebp - 0xef0], 0xebf0
mov dword [ebp - 0xef8], 0x80eec299
mov dword [ebp - 0x918], 0xc4dd
mov dword [ebp - 0x5c], 0
jmp 0x10009a96
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10009aac
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xf00], 0
jmp 0x10009a8f
mov dword [ebp - 0x5c], 0
jmp 0x10009abc
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10009ad2
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xf08], 0x28f6c74a
jmp 0x10009ab5
mov eax, dword [ebp - 0x918]
inc eax
mov dword [ebp - 0x918], eax
mov dword [ebp - 0xf10], 1
mov dword [ebp - 0xf18], 0xfffffffa
mov dword [ebp - 0x920], 1
mov dword [ebp - 0x2a4], 0
jmp 0x10009b16
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 2
jge 0x10009b32
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0x10b8], 0x7c7ce53d
jmp 0x10009b09
mov eax, dword [ebp - 0x920]
inc eax
mov dword [ebp - 0x920], eax
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x10009b5c
push 0x420
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [ebp - 0xf20], 0x56915a13
mov dword [ebp - 0xc4], 0
jmp 0x10009b7f
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x10009b9b
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x3d8], 0xfffffffc
jmp 0x10009b72
mov dword [ebp - 0xc4], 0
jmp 0x10009bb4
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x10009bd0
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0xbcc], 0x9849b76e
jmp 0x10009ba7
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3d8], 0
jmp 0x10009bfe
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d8]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3d8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3d8], 0xfffffff7
jg 0x10009e4f
mov dword [ebp - 0x290], 0xc4d1454b
mov dword [ebp - 0xf28], 0xfffffffe
mov dword [ebp - 0x8bc], 0x16e289aa
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d8]
mov dword [ebp - 0xf30], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d8]
mov dword [ebp - 0xf38], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0xf40], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xbcc]
cmp dword [ebp + eax - 0xbcc], ecx
jg 0x10009c88
mov dword [ebp - 0x928], 1
jmp 0x10009c8f
and dword [ebp - 0x928], 0
cmp dword [ebp - 0x928], 0xfffc
jae 0x10009ca7
mov dword [ebp - 0x930], 1
jmp 0x10009cae
and dword [ebp - 0x930], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3d8]
cmp eax, dword [ebp - 0x930]
jge 0x10009cce
mov dword [ebp - 0x938], 1
jmp 0x10009cd5
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0x938], eax
jne 0x10009cef
mov dword [ebp - 0x940], 1
jmp 0x10009cf6
and dword [ebp - 0x940], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d8]
cmp dword [ebp - 0x940], eax
jge 0x10009d17
mov dword [ebp - 0x948], 1
jmp 0x10009d1e
and dword [ebp - 0x948], 0
cmp dword [ebp - 0x948], 0x2afa
jl 0x10009d36
mov dword [ebp - 0x980], 1
jmp 0x10009d3d
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x290]
imul eax, dword [ebp - 0x980]
test eax, eax
je 0x10009e0e
xor eax, eax
inc eax
je 0x10009e0e
mov dword [ebp - 0x2ec], 0x1320
mov dword [ebp - 0xb9c], 4
xor eax, eax
inc eax
je 0x10009d7b
cmp dword [ebp - 0x290], 0
or eax, 0xffffffff
je 0x10009d8d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xbcc], 0
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x2ec], eax
jl 0x10009da7
mov dword [ebp - 0x988], 1
jmp 0x10009dae
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0x988]
sub eax, 7
je 0x10009dd7
mov byte [ebp - 0x103], 0
movzx eax, byte [ebp - 0x103]
test eax, eax
je 0x10009dd5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
jmp 0x10009df9
mov dword [ebp - 0xf48], 0x5faf
mov eax, dword [ebp - 0x8bc]
dec eax
mov dword [ebp - 0x8bc], eax
cmp dword [ebp - 0x2ec], 0
je 0x10009df9
jmp 0x10009e4f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d8]
mov dword [ebp - 0xb9c], eax
jmp 0x10009e22
mov dword [ebp - 0xa8c], 0xc7e12fd8
mov dword [ebp - 0xa8c], 0xffffffff
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x10009e4a
push 0
push 0
push 0x689
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x10009be3
mov byte [ebp - 0x107], 0
movzx eax, byte [ebp - 0x107]
test eax, eax
je 0x10009e67
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x24], 0x252cb136
mov dword [ebp - 0x200], 0xfffffff6
mov dword [ebp - 0xaa4], 0
mov dword [ebp - 0x2f8], 0xa862252
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1b4], 0
jmp 0x10009eb8
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x16
je 0x1000a345
mov dword [ebp - 0x298], 0xc295a527
mov dword [ebp - 0x64], 0
jmp 0x10009edf
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10009ef5
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x360], 0x129b8575
jmp 0x10009ed8
mov dword [ebp - 0x64], 0
jmp 0x10009f05
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10009f1b
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xe30], 0xffffffff
jmp 0x10009efe
mov dword [ebp - 0x24], 0
jmp 0x10009f2b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 7
jle 0x1000a0d9
mov dword [ebp - 0x348], 9
mov dword [ebp - 0x210], 0xfffffffe
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0xa94], eax
mov eax, dword [ebp - 0x348]
dec eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0xa94], 6
ja 0x10009f77
mov dword [ebp - 0xa9c], 1
jmp 0x10009f7e
and dword [ebp - 0xa9c], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x360], 0
je 0x10009fa8
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x360], 0
je 0x10009fa8
mov dword [ebp - 0x8f8], 1
jmp 0x10009faf
and dword [ebp - 0x8f8], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x360], 0x7dcd
jle 0x10009fcd
mov dword [ebp - 0x3e8], 1
jmp 0x10009fd4
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x8f8]
sub eax, dword [ebp - 0x3e8]
je 0x10009ffd
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x360], 0
je 0x10009ffd
mov dword [ebp - 0x3ec], 1
jmp 0x1000a004
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
add eax, 0x8319
cmp eax, dword [ebp - 0x210]
je 0x1000a023
mov dword [ebp - 0x6c8], 1
jmp 0x1000a02a
and dword [ebp - 0x6c8], 0
xor eax, eax
sub eax, dword [ebp - 0x6c8]
add eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0xaa4]
jne 0x1000a059
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x360], 0
jne 0x1000a059
and dword [ebp - 0xaac], 0
jmp 0x1000a063
mov dword [ebp - 0xaac], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x360]
mov dword [ebp - 0xf50], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x360]
mov dword [ebp - 0xf58], eax
cmp dword [ebp - 0x210], 0xffffffff
jne 0x1000a09d
mov dword [ebp - 0x3f4], 1
jmp 0x1000a0a4
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x3f4], eax
je 0x1000a0be
mov dword [ebp - 0x6bc], 1
jmp 0x1000a0c5
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x6bc]
add eax, 8
mov dword [ebp - 0x298], eax
jmp 0x10009f24
mov dword [ebp - 0x24], 0
jmp 0x1000a0e9
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe6
je 0x1000a340
mov dword [ebp - 0x40c], 0x96f77d90
mov dword [ebp - 0x91c], 0xe0c42ef3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x360], 0
jne 0x1000a12f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x360], 0
jne 0x1000a12f
and dword [ebp - 0x3fc], 0
jmp 0x1000a139
mov dword [ebp - 0x3fc], 1
mov eax, 0x11771b70
sub eax, dword [ebp - 0x3fc]
cmp eax, dword [ebp - 0x298]
jl 0x1000a158
mov dword [ebp - 0x814], 1
jmp 0x1000a15f
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x814], eax
jne 0x1000a176
mov dword [ebp - 0x404], 1
jmp 0x1000a17d
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x40c]
cmp dword [ebp - 0x404], eax
jl 0x1000a197
mov dword [ebp - 0x6c4], 1
jmp 0x1000a19e
and dword [ebp - 0x6c4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x360]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
cmp eax, dword [ebp - 0x6c4]
jl 0x1000a321
mov dword [ebp - 0xab4], 0x84865e5a
cmp dword [ebp - 0x200], 5
jne 0x1000a1e1
mov dword [ebp - 0x81c], 1
jmp 0x1000a1e8
and dword [ebp - 0x81c], 0
cmp dword [ebp - 0x40c], 0
je 0x1000a225
mov dword [ebp - 0x91c], 0xab95
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0xf60], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0xf68], eax
cmp dword [ebp - 0x24], 0
je 0x1000a225
mov dword [ebp - 0x414], 1
jmp 0x1000a22c
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x2f8], eax
jge 0x1000a252
mov dword [ebp - 0x6cc], 1
jmp 0x1000a259
and dword [ebp - 0x6cc], 0
cmp dword [ebp - 0x6cc], 0xe20
jl 0x1000a271
mov dword [ebp - 0x41c], 1
jmp 0x1000a278
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0xab4]
cmp dword [ebp - 0x41c], eax
jg 0x1000a292
mov dword [ebp - 0xabc], 1
jmp 0x1000a299
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0xf70], eax
cmp dword [ebp - 0x2f8], 0
je 0x1000a2c3
mov eax, 0x1db06d67
test eax, eax
je 0x1000a2c3
mov dword [ebp - 0x424], 1
jmp 0x1000a2ca
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x81c]
cmp eax, dword [ebp - 0x424]
jg 0x1000a2e4
mov dword [ebp - 0x6d4], 1
jmp 0x1000a2eb
and dword [ebp - 0x6d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe30]
cmp eax, dword [ebp - 0x6d4]
jne 0x1000a30c
mov dword [ebp - 0x42c], 1
jmp 0x1000a313
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x200], eax
jmp 0x1000a33b
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x1000a33b
push 0
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
jmp 0x1000a0e2
jmp 0x10009eab
mov dword [ebp - 0x1018], 0xebf0
mov dword [ebp - 0x1020], 0x80eec299
mov dword [ebp - 0x184], 0x73eb905d
mov dword [ebp - 0x96c], 0x3111738a
mov dword [ebp - 0x308], 5
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x444], 0xe81720d7
mov dword [ebp - 0x350], 0x6d6dbc1c
mov dword [ebp - 0xd4], 0xffffffff
mov dword [ebp - 0x33c], 0xfffffff8
mov dword [ebp - 0x218], 0
jmp 0x1000a3c2
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 4
jge 0x1000a3de
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0xc18], 0xae4f78d7
jmp 0x1000a3b5
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1028], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1030], eax
cmp dword [ebp - 0x184], 0
jne 0x1000a418
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc18], 0
jne 0x1000a418
and dword [ebp - 0xac4], 0
jmp 0x1000a422
mov dword [ebp - 0xac4], 1
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x1038], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x1040], eax
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x308], eax
jle 0x1000a45a
cmp dword [ebp - 0xd4], 0
jne 0x1000a45a
and dword [ebp - 0x8c4], 0
jmp 0x1000a464
mov dword [ebp - 0x8c4], 1
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
cmp eax, dword [ebp - 0x8c4]
jne 0x1000a48b
mov dword [ebp - 0x434], 1
jmp 0x1000a492
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x434], eax
jne 0x1000a4ac
mov dword [ebp - 0x6dc], 1
jmp 0x1000a4b3
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x6dc], eax
jl 0x1000a4cd
mov dword [ebp - 0x300], 1
jmp 0x1000a4d4
and dword [ebp - 0x300], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x300]
mov dword [ebp + eax - 0xc18], ecx
cmp dword [ebp - 0x300], 0
je 0x1000a50c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc18], 0
je 0x1000a50c
mov dword [ebp - 0x43c], 1
jmp 0x1000a513
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x43c], eax
jge 0x1000a52d
mov dword [ebp - 0x824], 1
jmp 0x1000a534
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x824], eax
jg 0x1000a54e
mov dword [ebp - 0xacc], 1
jmp 0x1000a555
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x444], eax
jne 0x1000a57b
mov dword [ebp - 0x6e4], 1
jmp 0x1000a582
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x350]
add eax, dword [ebp - 0x2a0]
cmp eax, dword [ebp - 0xd4]
jl 0x1000a5be
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc18], 0
je 0x1000a5be
mov dword [ebp - 0x44c], 1
jmp 0x1000a5c5
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
sub eax, dword [ebp - 0xd4]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x526d2e85
jg 0x1000a5ef
mov dword [ebp - 0x454], 1
jmp 0x1000a5f6
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x96c], eax
mov eax, dword [ebp - 0x96c]
cmp eax, dword [ebp - 0x454]
jl 0x1000a61c
mov dword [ebp - 0x6ec], 1
jmp 0x1000a623
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x6ec], eax
jge 0x1000a63d
mov dword [ebp - 0x45c], 1
jmp 0x1000a644
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x4a4], 0xc4dd
mov dword [ebp - 0x220], 0x75b57fd5
mov dword [ebp - 0x220], 0xfffffff8
jmp 0x1000a67d
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 6
jg 0x1000a6ea
mov dword [ebp - 0xae8], 4
mov dword [ebp - 0xaf0], 0xf9d78659
mov byte [ebp - 0x10b], 0
movzx eax, byte [ebp - 0x10b]
test eax, eax
je 0x1000a6bd
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp dword [ebp - 0xae8], 0
jae 0x1000a6d2
mov dword [ebp - 0x82c], 1
jmp 0x1000a6d9
and dword [ebp - 0x82c], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0x82c]
mov dword [ebp - 0xaf0], eax
jmp 0x1000a670
mov dword [ebp - 0xbc], 0
jmp 0x1000a703
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x1000a71f
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x1048], 0
jmp 0x1000a6f6
mov dword [ebp - 0x494], 1
mov dword [ebp - 0x83c], 0xaec2b2a8
mov dword [ebp - 0xac], 0
jmp 0x1000a74c
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x1000a768
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0xf80], 0xf825
jmp 0x1000a73f
mov dword [ebp - 0xac], 0
jmp 0x1000a781
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x1000a79d
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x904], 1
jmp 0x1000a774
xor eax, eax
inc eax
je 0x1000a7be
mov dword [ebp - 0x464], 0xd65121ac
mov eax, dword [ebp - 0x464]
inc eax
mov dword [ebp - 0x464], eax
jmp 0x1000abb7
mov dword [ebp - 0x6c], 0xb4b13281
mov dword [ebp - 0xaf8], 0x78bea8e4
mov dword [ebp - 0x6c], 0xfffffff8
jmp 0x1000a7df
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffff
je 0x1000a806
mov byte [ebp - 0x10e], 0
movzx eax, byte [ebp - 0x10e]
test eax, eax
je 0x1000a804
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
jmp 0x1000a7d8
mov dword [ebp - 0x6c], 0x15
jmp 0x1000a816
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffff8
jl 0x1000abb7
mov dword [ebp - 0x1e4], 0x858f9c25
mov dword [ebp - 0x194], 0xffffffff
mov dword [ebp - 0x1e4], 0x16
jmp 0x1000a84d
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xffffffff
jle 0x1000abb2
mov dword [ebp - 0x2a8], 0
jmp 0x1000a873
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 1
jge 0x1000a88c
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x1c], 0x28ed4a55
jmp 0x1000a866
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1c], 0
jmp 0x1000a8b1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0x1a
jge 0x1000abad
mov dword [ebp - 0x1cc], 0xc924b541
mov dword [ebp - 0x1cc], 0xfffffff6
jmp 0x1000a8e5
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0xffffffe3
jg 0x1000a9a8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0x1311e2db
jle 0x1000a90e
mov dword [ebp - 0x46c], 1
jmp 0x1000a915
and dword [ebp - 0x46c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp - 0x1050], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1c]
cmp dword [ebp + eax - 0xf80], ecx
jg 0x1000a94a
mov dword [ebp - 0x6f4], 1
jmp 0x1000a951
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x1e4]
push 4
pop ecx
shl ecx, 1
mov edx, dword [ebp - 0x6f4]
sub edx, dword [ebp + ecx - 0xf80]
sub eax, edx
cmp dword [ebp - 0x46c], eax
jg 0x1000a97f
mov dword [ebp - 0x8cc], 1
jmp 0x1000a986
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x8cc]
mov dword [ebp - 0x194], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x904], 6
jmp 0x1000a8d8
mov eax, 0xa104
test eax, eax
je 0x1000aaa4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp - 0x1058], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp - 0x1060], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
jge 0x1000a9ee
mov dword [ebp - 0x474], 1
jmp 0x1000a9f5
and dword [ebp - 0x474], 0
cmp dword [ebp - 0x474], 0xfff6
jne 0x1000aa0d
mov dword [ebp - 0x6fc], 1
jmp 0x1000aa14
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x6fc]
add eax, 0x84a4
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x904]
jl 0x1000aa3e
xor eax, eax
je 0x1000aa3e
mov dword [ebp - 0x47c], 1
jmp 0x1000aa45
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x47c]
jle 0x1000aa5f
mov dword [ebp - 0x834], 1
jmp 0x1000aa66
and dword [ebp - 0x834], 0
cmp dword [ebp - 0x834], 0xf5d3
jg 0x1000aa7f
xor eax, eax
jne 0x1000aa7f
and dword [ebp - 0x484], 0
jmp 0x1000aa89
mov dword [ebp - 0x484], 1
imul eax, dword [ebp - 0x484], 0xfffc
cmp eax, dword [ebp - 0x6c]
je 0x1000aaa4
mov dword [ebp - 0x704], 1
jmp 0x1000aaab
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x704], eax
jle 0x1000aac5
mov dword [ebp - 0x48c], 1
jmp 0x1000aacc
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0x9ce85662
je 0x1000aaed
mov eax, 0x2dc1b2d8
test eax, eax
je 0x1000aaed
mov dword [ebp - 0x924], 1
jmp 0x1000aaf4
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0x494], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x904]
add ecx, dword [ebp - 0x494]
imul ecx, dword [ebp + eax - 0x904]
test ecx, ecx
ja 0x1000ab31
mov dword [ebp - 0x70c], 1
jmp 0x1000ab38
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
je 0x1000ab5a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
jne 0x1000ab6c
mov eax, 0xfff7
test eax, eax
jne 0x1000ab6c
and dword [ebp - 0x49c], 0
jmp 0x1000ab76
mov dword [ebp - 0x49c], 1
mov eax, dword [ebp - 0x1cc]
add eax, dword [ebp - 0x49c]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x904]
lea eax, [eax + ecx + 0x1e1c3e23]
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0xaf8], eax
jmp 0x1000a89c
jmp 0x1000a840
jmp 0x1000a80f
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1000abd3
push 0
push 0
call dword [sym.imp.USER32.dll_LoadMenuW]
mov dword [ebp - 0xbc], 0
jmp 0x1000abec
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x1000ac08
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x1068], 0x28f6c74a
jmp 0x1000abdf
mov eax, dword [ebp - 0x4a4]
inc eax
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x180], 0xda115252
mov dword [ebp - 0x74], 0
jmp 0x1000ac2f
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x1000ac45
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xbf8], 0xfffffffc
jmp 0x1000ac28
mov dword [ebp - 0x74], 0
jmp 0x1000ac55
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1000ac6b
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x1074], 4
jmp 0x1000ac4e
mov dword [ebp - 0x180], 1
mov dword [ebp - 0x180], 0
jmp 0x1000ac8e
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 3
jg 0x1000af7b
mov dword [ebp - 0xe4], 0xffffffff
mov dword [ebp - 0x8d4], 0xfffffffb
mov dword [ebp - 0xffc], 0xc4779d44
mov dword [ebp - 0x228], 0
jmp 0x1000acd2
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 1
jge 0x1000acee
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x1014], 0xfcc8af95
jmp 0x1000acc5
mov dword [ebp - 0xe4], 0
jmp 0x1000ad07
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jg 0x1000af64
mov dword [ebp - 0x19c], 6
mov dword [ebp - 0xe64], 0xfffffffb
mov dword [ebp - 0xc38], 0xffffffff
mov dword [ebp - 0xeb8], 9
mov dword [ebp - 0xc40], 0xfffffff8
mov dword [ebp - 0xe70], 0xfffffffd
mov dword [ebp - 0x2b0], 0
jmp 0x1000ad69
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 2
jge 0x1000ad85
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0x1118], 0x7221ebc5
jmp 0x1000ad5c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbf8]
mov dword [ebp - 0xc48], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1074], 3
mov eax, 0xba7b7e80
add eax, 3
cmp eax, dword [ebp - 0x19c]
jge 0x1000adc5
mov dword [ebp - 0x714], 1
jmp 0x1000adcc
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x714]
jne 0x1000ade6
mov dword [ebp - 0x4ac], 1
jmp 0x1000aded
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x8d4], eax
mov eax, dword [ebp - 0x8d4]
sub eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
mov ecx, dword [ebp + ecx*4 - 0xbf8]
sub ecx, eax
cmp ecx, dword [ebp - 0xe4]
jl 0x1000ae28
mov dword [ebp - 0x4b4], 1
jmp 0x1000ae2f
and dword [ebp - 0x4b4], 0
cmp dword [ebp - 0x4b4], 0x5f27
jge 0x1000ae47
mov dword [ebp - 0x71c], 1
jmp 0x1000ae4e
and dword [ebp - 0x71c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x71c]
mov dword [ebp + eax - 0xbf8], ecx
mov dword [ebp - 0x19c], 0
jmp 0x1000ae7a
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jg 0x1000af5f
mov dword [ebp - 0xec0], 0xb09b37d0
mov dword [ebp - 0xc50], 0
mov dword [ebp - 0xe7c], 0x2f4e55b6
mov dword [ebp - 0xc58], 0
mov dword [ebp - 0xec8], 0xffffffff
mov dword [ebp - 0xc60], 0x7aebb1bb
mov dword [ebp - 0xe88], 0xd3709e8e
mov dword [ebp - 0xc68], 0xe183a099
mov dword [ebp - 0x9c], 0
jmp 0x1000aef0
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x1000af0c
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x1150], 0x705618d7
jmp 0x1000aee3
mov dword [ebp - 0x9c], 0
jmp 0x1000af25
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x1000af41
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xf90], 0
jmp 0x1000af18
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf90]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xf90], eax
jmp 0x1000ae6d
jmp 0x1000acfa
mov eax, dword [ebp - 0x180]
cmp dword [ebp + eax*4 - 0xbf8], 0
je 0x1000af76
jmp 0x1000af7b
jmp 0x1000ac81
mov dword [ebp - 0xc], 0x666a
mov dword [ebp - 0x9b8], 0x237ddc4e
mov dword [ebp - 0x9b4], 0x237ddc4e
mov dword [ebp - 0x9b0], 0x237ddc4e
mov dword [ebp - 0x9ac], 0x237ddc4e
mov dword [ebp - 0xed0], 0xb7466640
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0x73c], 0xe56b76af
mov dword [ebp - 0x504], 6
mov dword [ebp - 0xbb0], 0
cmp dword [ebp - 0xc], 0
je 0x1000b091
cmp dword [ebp - 0xc], 0
je 0x1000b001
cmp dword [ebp - 0xc], 0xbefc
jl 0x1000b001
mov dword [ebp - 0x4bc], 1
jmp 0x1000b008
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x4bc], eax
jle 0x1000b01f
mov dword [ebp - 0x844], 1
jmp 0x1000b026
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x844], eax
jl 0x1000b03d
mov dword [ebp - 0xb00], 1
jmp 0x1000b044
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc70], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xed8], eax
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0xc]
jge 0x1000b06d
mov dword [ebp - 0xb08], 1
jmp 0x1000b074
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc78], eax
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xc]
je 0x1000b091
mov dword [ebp - 0xb10], 1
jmp 0x1000b098
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xe94], eax
cmp dword [ebp - 0xc], 0
jne 0x1000b0b6
cmp dword [ebp - 0xc], 0
jne 0x1000b0b6
and dword [ebp - 0x4c4], 0
jmp 0x1000b0c0
mov dword [ebp - 0x4c4], 1
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x4c4]
cmp eax, 0x5205300c
jg 0x1000b0ea
mov eax, 0x97867a7b
test eax, eax
je 0x1000b0ea
xor eax, eax
inc eax
je 0x1000b0ea
mov dword [ebp - 0x724], 1
jmp 0x1000b0f1
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0x724]
test eax, eax
je 0x1000b156
mov dword [ebp - 0xb98], 0x9ebef9f3
mov dword [ebp - 0x230], 0
jmp 0x1000b122
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 4
jge 0x1000b13e
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x1130], 1
jmp 0x1000b115
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1130]
mov dword [ebp - 0xb98], eax
jmp 0x1000b4dd
mov dword [ebp - 0xc80], 0xe27dfdee
mov dword [ebp - 0xf6c], 7
mov dword [ebp - 0xc88], 0x795bcd59
mov dword [ebp - 0xe9c], 8
mov dword [ebp - 0xc90], 0x4db59fb1
mov dword [ebp - 0x1054], 0xfffffff9
mov dword [ebp - 0xc98], 0
mov dword [ebp - 0xea4], 0
mov dword [ebp - 0x7c], 0
jmp 0x1000b1b6
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1000b1cc
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xfa0], 0xc77e2192
jmp 0x1000b1af
mov dword [ebp - 0x7c], 0
jmp 0x1000b1dc
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x1000b1f2
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xca0], 1
jmp 0x1000b1d5
mov dword [ebp - 0xc], 0
jmp 0x1000b202
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jg 0x1000b4d0
mov dword [ebp - 0x1f4], 4
mov dword [ebp - 0xba8], 0x497a847e
mov dword [ebp - 0x1f4], 0xfffffffc
jmp 0x1000b239
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 9
jle 0x1000b4cb
mov dword [ebp - 0x310], 1
mov dword [ebp - 0x2b8], 0
jmp 0x1000b269
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 4
jge 0x1000b285
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0x3c0], 0x2be2ff5
jmp 0x1000b25c
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x3c0], 0
jmp 0x1000b2b3
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3c0]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x3c0], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3c0], 5
jl 0x1000b3e0
mov dword [ebp - 0x4d4], 0xc710
mov dword [ebp - 0xba0], 0xd9132e88
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x3c0]
cmp dword [ebp + eax - 0x3c0], ecx
jl 0x1000b384
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3c0]
mov dword [ebp - 0xf74], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xca8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfa0]
mov dword [ebp - 0xeac], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3c0]
add eax, dword [ebp - 0xc]
jne 0x1000b34d
mov eax, 0xffff
test eax, eax
jne 0x1000b34d
and dword [ebp - 0x4cc], 0
jmp 0x1000b357
mov dword [ebp - 0x4cc], 1
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x4cc], eax
je 0x1000b371
mov dword [ebp - 0x94c], 1
jmp 0x1000b378
and dword [ebp - 0x94c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfa0]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3c0]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0xba0]
cmp dword [ebp - 0x4d4], eax
jle 0x1000b3b1
mov dword [ebp - 0x344], 1
jmp 0x1000b3b8
and dword [ebp - 0x344], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x344]
mov dword [ebp + eax - 0x9b8], ecx
mov eax, 0xdbb7a2e2
sub eax, dword [ebp - 0x344]
mov dword [ebp - 0x310], eax
jmp 0x1000b298
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9b8]
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0xfffffff9
jle 0x1000b407
mov dword [ebp - 0x72c], 1
jmp 0x1000b40e
and dword [ebp - 0x72c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c0]
dec eax
cmp dword [ebp - 0x72c], eax
jl 0x1000b430
mov dword [ebp - 0x4dc], 1
jmp 0x1000b437
and dword [ebp - 0x4dc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3c0]
cmp dword [ebp - 0x4dc], eax
jl 0x1000b458
mov dword [ebp - 0x84c], 1
jmp 0x1000b45f
and dword [ebp - 0x84c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c0]
cmp dword [ebp - 0x84c], eax
je 0x1000b480
mov dword [ebp - 0x4e4], 1
jmp 0x1000b487
and dword [ebp - 0x4e4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3c0]
mov ecx, dword [ebp - 0x4e4]
add ecx, 0x6cbc8ca9
add eax, ecx
cmp eax, 0xfffffff7
jle 0x1000b4b3
mov dword [ebp - 0x734], 1
jmp 0x1000b4ba
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0xba8], eax
jmp 0x1000b22c
jmp 0x1000b1fb
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9b8], 0
je 0x1000b5fc
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xdc]
cmp dword [ebp + eax - 0x9b8], ecx
jne 0x1000b511
mov dword [ebp - 0x4ec], 1
jmp 0x1000b518
and dword [ebp - 0x4ec], 0
cmp dword [ebp - 0x4ec], 0x7d4e0d3b
jle 0x1000b530
mov dword [ebp - 0x8dc], 1
jmp 0x1000b537
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x73c]
cmp dword [ebp - 0x8dc], eax
je 0x1000b551
mov dword [ebp - 0x4f4], 1
jmp 0x1000b558
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x4f4], eax
jg 0x1000b57e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9b8], 0
jne 0x1000b57e
and dword [ebp - 0x4fc], 0
jmp 0x1000b588
mov dword [ebp - 0x4fc], 1
mov eax, dword [ebp - 0xdc]
neg eax
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x73c]
add edx, dword [ebp - 0x4fc]
sub ecx, edx
mov edx, 0xffff
sub edx, ecx
imul eax, edx
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x9b8], eax
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xdc], eax
jle 0x1000b5d4
mov dword [ebp - 0x854], 1
jmp 0x1000b5db
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x854]
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 0
je 0x1000b5fc
mov dword [ebp - 0x744], 1
jmp 0x1000b603
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0xbb0], eax
mov dword [ebp - 0x168], 0xda115252
mov dword [ebp - 0xa0], 0
jmp 0x1000b632
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x1000b64e
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xc08], 0xfffffffc
jmp 0x1000b625
mov dword [ebp - 0xa0], 0
jmp 0x1000b667
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x1000b683
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x1098], 4
jmp 0x1000b65a
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x168], 0
jmp 0x1000b6a6
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jg 0x1000b993
mov dword [ebp - 0xec], 0xffffffff
mov dword [ebp - 0x514], 0xfffffffb
mov dword [ebp - 0xcb0], 0xc4779d44
mov dword [ebp - 0x238], 0
jmp 0x1000b6ea
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 1
jge 0x1000b706
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x101c], 0xfcc8af95
jmp 0x1000b6dd
mov dword [ebp - 0xec], 0
jmp 0x1000b71f
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jg 0x1000b97c
mov dword [ebp - 0x1a4], 6
mov dword [ebp - 0xcb8], 0xfffffffb
mov dword [ebp - 0xeb4], 0xffffffff
mov dword [ebp - 0xcc0], 9
mov dword [ebp - 0xf84], 0xfffffff8
mov dword [ebp - 0xcc8], 0xfffffffd
mov dword [ebp - 0x2c0], 0
jmp 0x1000b781
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 2
jge 0x1000b79d
mov eax, dword [ebp - 0x2c0]
mov dword [ebp + eax*4 - 0x10d0], 0x7221ebc5
jmp 0x1000b774
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc08]
mov dword [ebp - 0xebc], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1098], 3
mov eax, 0xba7b7e80
add eax, 3
cmp eax, dword [ebp - 0x1a4]
jge 0x1000b7dd
mov dword [ebp - 0x50c], 1
jmp 0x1000b7e4
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0x50c]
jne 0x1000b7fe
mov dword [ebp - 0x92c], 1
jmp 0x1000b805
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x514]
sub eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xec]
mov ecx, dword [ebp + ecx*4 - 0xc08]
sub ecx, eax
cmp ecx, dword [ebp - 0xec]
jl 0x1000b840
mov dword [ebp - 0x74c], 1
jmp 0x1000b847
and dword [ebp - 0x74c], 0
cmp dword [ebp - 0x74c], 0x5f27
jge 0x1000b85f
mov dword [ebp - 0x51c], 1
jmp 0x1000b866
and dword [ebp - 0x51c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x51c]
mov dword [ebp + eax - 0xc08], ecx
mov dword [ebp - 0x1a4], 0
jmp 0x1000b892
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jg 0x1000b977
mov dword [ebp - 0xcd0], 0xb09b37d0
mov dword [ebp - 0x1044], 0
mov dword [ebp - 0xcd8], 0x2f4e55b6
mov dword [ebp - 0xec4], 0
mov dword [ebp - 0xce0], 0xffffffff
mov dword [ebp - 0xf94], 0x7aebb1bb
mov dword [ebp - 0xce8], 0xd3709e8e
mov dword [ebp - 0xecc], 0xe183a099
mov dword [ebp - 0x84], 0
jmp 0x1000b908
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x1000b924
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x1110], 0x705618d7
jmp 0x1000b8fb
mov dword [ebp - 0x84], 0
jmp 0x1000b93d
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x1000b959
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0xfb0], 0
jmp 0x1000b930
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfb0]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xfb0], eax
jmp 0x1000b885
jmp 0x1000b712
mov eax, dword [ebp - 0x168]
cmp dword [ebp + eax*4 - 0xc08], 0
je 0x1000b98e
jmp 0x1000b993
jmp 0x1000b699
mov dword [ebp - 0xcf0], 0
mov dword [ebp - 0x1024], 0xffffffff
mov dword [ebp - 0xcf8], 0x51d69f42
mov dword [ebp - 0xed4], 0xffffffff
mov dword [ebp - 0xd00], 0xa1836ccb
mov dword [ebp - 0xfa4], 0xfffffffa
mov dword [ebp - 0xd08], 0xe4b28306
mov dword [ebp - 0x85c], 0xe6b
mov dword [ebp - 0x240], 0
jmp 0x1000b9fc
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x1000ba18
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x10e0], 0x327439cb
jmp 0x1000b9ef
mov byte [ebp - 0x10f], 0
movzx eax, byte [ebp - 0x10f]
test eax, eax
je 0x1000ba4a
push 0
push 0xa40
push 0x1408
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
mov eax, dword [ebp - 0x85c]
dec eax
mov dword [ebp - 0x85c], eax
mov dword [ebp - 0x178], 0xda115252
mov dword [ebp - 0xa8], 0
jmp 0x1000ba7a
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 4
jge 0x1000ba96
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xc28], 0xfffffffc
jmp 0x1000ba6d
mov dword [ebp - 0xa8], 0
jmp 0x1000baaf
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x1000bacb
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x10b0], 4
jmp 0x1000baa2
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x178], 0
jmp 0x1000baee
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 3
jg 0x1000bddb
mov dword [ebp - 0xd0], 0xffffffff
mov dword [ebp - 0x52c], 0xfffffffb
mov dword [ebp - 0xedc], 0xc4779d44
mov dword [ebp - 0x2c8], 0
jmp 0x1000bb32
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 1
jge 0x1000bb4e
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0xd10], 0xfcc8af95
jmp 0x1000bb25
mov dword [ebp - 0xd0], 0
jmp 0x1000bb67
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jg 0x1000bdc4
mov dword [ebp - 0x1d4], 6
mov dword [ebp - 0x1064], 0xfffffffb
mov dword [ebp - 0xd18], 0xffffffff
mov dword [ebp - 0xee4], 9
mov dword [ebp - 0xd20], 0xfffffff8
mov dword [ebp - 0xfb4], 0xfffffffd
mov dword [ebp - 0x248], 0
jmp 0x1000bbc9
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 2
jge 0x1000bbe5
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x1138], 0x7221ebc5
jmp 0x1000bbbc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc28]
mov dword [ebp - 0xd28], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x10b0], 3
mov eax, 0xba7b7e80
add eax, 3
cmp eax, dword [ebp - 0x1d4]
jge 0x1000bc25
mov dword [ebp - 0x524], 1
jmp 0x1000bc2c
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0x524]
jne 0x1000bc46
mov dword [ebp - 0x754], 1
jmp 0x1000bc4d
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x52c]
sub eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xd0]
mov ecx, dword [ebp + ecx*4 - 0xc28]
sub ecx, eax
cmp ecx, dword [ebp - 0xd0]
jl 0x1000bc88
mov dword [ebp - 0x8e4], 1
jmp 0x1000bc8f
and dword [ebp - 0x8e4], 0
cmp dword [ebp - 0x8e4], 0x5f27
jge 0x1000bca7
mov dword [ebp - 0x534], 1
jmp 0x1000bcae
and dword [ebp - 0x534], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x534]
mov dword [ebp + eax - 0xc28], ecx
mov dword [ebp - 0x1d4], 0
jmp 0x1000bcda
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jg 0x1000bdbf
mov dword [ebp - 0xeec], 0xb09b37d0
mov dword [ebp - 0xd30], 0
mov dword [ebp - 0x102c], 0x2f4e55b6
mov dword [ebp - 0xd38], 0
mov dword [ebp - 0xef4], 0xffffffff
mov dword [ebp - 0xd40], 0x7aebb1bb
mov dword [ebp - 0xfc4], 0xd3709e8e
mov dword [ebp - 0xd48], 0xe183a099
mov dword [ebp - 0x8c], 0
jmp 0x1000bd50
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x1000bd6c
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x10f0], 0x705618d7
jmp 0x1000bd43
mov dword [ebp - 0x8c], 0
jmp 0x1000bd85
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1000bda1
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xfc0], 0
jmp 0x1000bd78
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfc0]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xfc0], eax
jmp 0x1000bccd
jmp 0x1000bb5a
mov eax, dword [ebp - 0x178]
cmp dword [ebp + eax*4 - 0xc28], 0
je 0x1000bdd6
jmp 0x1000bddb
jmp 0x1000bae1
mov dword [ebp - 4], 0x666a
mov dword [ebp - 0x9d0], 0x237ddc4e
mov dword [ebp - 0x9cc], 0x237ddc4e
mov dword [ebp - 0x9c8], 0x237ddc4e
mov dword [ebp - 0x9c4], 0x237ddc4e
mov dword [ebp - 0xefc], 0xb7466640
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x574], 0xe56b76af
mov dword [ebp - 0x874], 6
mov dword [ebp - 0xae0], 0
cmp dword [ebp - 4], 0
je 0x1000bef1
cmp dword [ebp - 4], 0
je 0x1000be61
cmp dword [ebp - 4], 0xbefc
jl 0x1000be61
mov dword [ebp - 0x75c], 1
jmp 0x1000be68
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x75c], eax
jle 0x1000be7f
mov dword [ebp - 0x53c], 1
jmp 0x1000be86
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x53c], eax
jl 0x1000be9d
mov dword [ebp - 0xbb8], 1
jmp 0x1000bea4
and dword [ebp - 0xbb8], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0xd50], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x104c], eax
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
cmp eax, dword [ebp - 4]
jge 0x1000becd
mov dword [ebp - 0xbc0], 1
jmp 0x1000bed4
and dword [ebp - 0xbc0], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0xd58], eax
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
je 0x1000bef1
mov dword [ebp - 0xb8c], 1
jmp 0x1000bef8
and dword [ebp - 0xb8c], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0xf04], eax
cmp dword [ebp - 4], 0
jne 0x1000bf16
cmp dword [ebp - 4], 0
jne 0x1000bf16
and dword [ebp - 0x864], 0
jmp 0x1000bf20
mov dword [ebp - 0x864], 1
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x864]
cmp eax, 0x5205300c
jg 0x1000bf4a
mov eax, 0x97867a7b
test eax, eax
je 0x1000bf4a
xor eax, eax
inc eax
je 0x1000bf4a
mov dword [ebp - 0x544], 1
jmp 0x1000bf51
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x544]
test eax, eax
je 0x1000bfb6
mov dword [ebp - 0xad4], 0x9ebef9f3
mov dword [ebp - 0x2d0], 0
jmp 0x1000bf82
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 4
jge 0x1000bf9e
mov eax, dword [ebp - 0x2d0]
mov dword [ebp + eax*4 - 0x1148], 1
jmp 0x1000bf75
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1148]
mov dword [ebp - 0xad4], eax
jmp 0x1000c35b
mov dword [ebp - 0xd60], 0xe27dfdee
mov dword [ebp - 0xfd4], 7
mov dword [ebp - 0xd68], 0x795bcd59
mov dword [ebp - 0xf0c], 8
mov dword [ebp - 0xd70], 0x4db59fb1
mov dword [ebp - 0xff8], 0xfffffff9
mov dword [ebp - 0xc2c], 0
mov dword [ebp - 0xf14], 0
mov dword [ebp - 0xb0], 0
jmp 0x1000c01f
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x1000c03b
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0xfd0], 0xc77e2192
jmp 0x1000c012
mov dword [ebp - 0xb0], 0
jmp 0x1000c054
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x1000c070
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0xd80], 1
jmp 0x1000c047
mov dword [ebp - 4], 0
jmp 0x1000c080
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x1000c34e
mov dword [ebp - 0x1ac], 4
mov dword [ebp - 0xa00], 0x497a847e
mov dword [ebp - 0x1ac], 0xfffffffc
jmp 0x1000c0b7
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 9
jle 0x1000c349
mov dword [ebp - 0x318], 1
mov dword [ebp - 0x250], 0
jmp 0x1000c0e7
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 4
jge 0x1000c103
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x3b0], 0x2be2ff5
jmp 0x1000c0da
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x3b0], 0
jmp 0x1000c131
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3b0]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x3b0], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3b0], 5
jl 0x1000c25e
mov dword [ebp - 0x984], 0xc710
mov dword [ebp - 0xa84], 0xd9132e88
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x3b0]
cmp dword [ebp + eax - 0x3b0], ecx
jl 0x1000c202
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3b0]
mov dword [ebp - 0xfe4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0xd88], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfd0]
mov dword [ebp - 0xf1c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3b0]
add eax, dword [ebp - 4]
jne 0x1000c1cb
mov eax, 0xffff
test eax, eax
jne 0x1000c1cb
and dword [ebp - 0x764], 0
jmp 0x1000c1d5
mov dword [ebp - 0x764], 1
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x764], eax
je 0x1000c1ef
mov dword [ebp - 0x54c], 1
jmp 0x1000c1f6
and dword [ebp - 0x54c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfd0]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3b0]
mov dword [ebp - 0x984], eax
mov eax, dword [ebp - 0xa84]
cmp dword [ebp - 0x984], eax
jle 0x1000c22f
mov dword [ebp - 0x354], 1
jmp 0x1000c236
and dword [ebp - 0x354], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x354]
mov dword [ebp + eax - 0x9d0], ecx
mov eax, 0xdbb7a2e2
sub eax, dword [ebp - 0x354]
mov dword [ebp - 0x318], eax
jmp 0x1000c116
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9d0]
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0xfffffff9
jle 0x1000c285
mov dword [ebp - 0x554], 1
jmp 0x1000c28c
and dword [ebp - 0x554], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b0]
dec eax
cmp dword [ebp - 0x554], eax
jl 0x1000c2ae
mov dword [ebp - 0x76c], 1
jmp 0x1000c2b5
and dword [ebp - 0x76c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3b0]
cmp dword [ebp - 0x76c], eax
jl 0x1000c2d6
mov dword [ebp - 0x55c], 1
jmp 0x1000c2dd
and dword [ebp - 0x55c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b0]
cmp dword [ebp - 0x55c], eax
je 0x1000c2fe
mov dword [ebp - 0x86c], 1
jmp 0x1000c305
and dword [ebp - 0x86c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3b0]
mov ecx, dword [ebp - 0x86c]
add ecx, 0x6cbc8ca9
add eax, ecx
cmp eax, 0xfffffff7
jle 0x1000c331
mov dword [ebp - 0x564], 1
jmp 0x1000c338
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0xa00], eax
jmp 0x1000c0aa
jmp 0x1000c079
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9d0], 0
je 0x1000c47a
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xd8]
cmp dword [ebp + eax - 0x9d0], ecx
jne 0x1000c38f
mov dword [ebp - 0x774], 1
jmp 0x1000c396
and dword [ebp - 0x774], 0
cmp dword [ebp - 0x774], 0x7d4e0d3b
jle 0x1000c3ae
mov dword [ebp - 0x56c], 1
jmp 0x1000c3b5
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x574]
cmp dword [ebp - 0x56c], eax
je 0x1000c3cf
mov dword [ebp - 0x8ec], 1
jmp 0x1000c3d6
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x8ec], eax
jg 0x1000c3fc
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9d0], 0
jne 0x1000c3fc
and dword [ebp - 0x77c], 0
jmp 0x1000c406
mov dword [ebp - 0x77c], 1
mov eax, dword [ebp - 0xd8]
neg eax
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ebp - 0x574]
add edx, dword [ebp - 0x77c]
sub ecx, edx
mov edx, 0xffff
sub edx, ecx
imul eax, edx
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x9d0], eax
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0xd8], eax
jle 0x1000c452
mov dword [ebp - 0x57c], 1
jmp 0x1000c459
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x874], eax
cmp dword [ebp - 0x874], 0
je 0x1000c47a
mov dword [ebp - 0x584], 1
jmp 0x1000c481
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0xae0], eax
mov dword [ebp - 0xd90], 0x99ac
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x784], 1
mov dword [ebp - 0x94], 0
jmp 0x1000c4c4
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1000c4e0
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x108c], 0
jmp 0x1000c4b7
mov dword [ebp - 0x94], 0
jmp 0x1000c4f9
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x1000c515
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x1120], 0xd19ac196
jmp 0x1000c4ec
mov eax, dword [ebp - 0x784]
inc eax
mov dword [ebp - 0x784], eax
mov dword [ebp - 0x1ec], 0
jmp 0x1000c53b
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x1000c557
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x108c], 0
jmp 0x1000c52e
mov dword [ebp - 8], 0x666a
mov dword [ebp - 0x998], 0x237ddc4e
mov dword [ebp - 0x994], 0x237ddc4e
mov dword [ebp - 0x990], 0x237ddc4e
mov dword [ebp - 0x98c], 0x237ddc4e
mov dword [ebp - 0x1000], 0xb7466640
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x7a4], 0xe56b76af
mov dword [ebp - 0x5d4], 6
mov dword [ebp - 0xa20], 0
cmp dword [ebp - 8], 0
je 0x1000c66d
cmp dword [ebp - 8], 0
je 0x1000c5dd
cmp dword [ebp - 8], 0xbefc
jl 0x1000c5dd
mov dword [ebp - 0x58c], 1
jmp 0x1000c5e4
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x58c], eax
jle 0x1000c5fb
mov dword [ebp - 0x934], 1
jmp 0x1000c602
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x934], eax
jl 0x1000c619
mov dword [ebp - 0xa08], 1
jmp 0x1000c620
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0xd98], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0xf24], eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
cmp eax, dword [ebp - 8]
jge 0x1000c649
mov dword [ebp - 0xb54], 1
jmp 0x1000c650
and dword [ebp - 0xb54], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0xda0], eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
je 0x1000c66d
mov dword [ebp - 0xa10], 1
jmp 0x1000c674
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0xff4], eax
cmp dword [ebp - 8], 0
jne 0x1000c692
cmp dword [ebp - 8], 0
jne 0x1000c692
and dword [ebp - 0x594], 0
jmp 0x1000c69c
mov dword [ebp - 0x594], 1
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x594]
cmp eax, 0x5205300c
jg 0x1000c6c6
mov eax, 0x97867a7b
test eax, eax
je 0x1000c6c6
xor eax, eax
inc eax
je 0x1000c6c6
mov dword [ebp - 0x78c], 1
jmp 0x1000c6cd
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x78c]
test eax, eax
je 0x1000c732
mov dword [ebp - 0xadc], 0x9ebef9f3
mov dword [ebp - 0x2d8], 0
jmp 0x1000c6fe
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 4
jge 0x1000c71a
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0x1160], 1
jmp 0x1000c6f1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1160]
mov dword [ebp - 0xadc], eax
jmp 0x1000cad7
mov dword [ebp - 0xda8], 0xe27dfdee
mov dword [ebp - 0xf2c], 7
mov dword [ebp - 0xdb0], 0x795bcd59
mov dword [ebp - 0x1008], 8
mov dword [ebp - 0xdb8], 0x4db59fb1
mov dword [ebp - 0xf34], 0xfffffff9
mov dword [ebp - 0xdc0], 0
mov dword [ebp - 0x1010], 0
mov dword [ebp - 0xb8], 0
jmp 0x1000c79b
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x1000c7b7
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0xfe0], 0xc77e2192
jmp 0x1000c78e
mov dword [ebp - 0xb8], 0
jmp 0x1000c7d0
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x1000c7ec
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0xdc8], 1
jmp 0x1000c7c3
mov dword [ebp - 8], 0
jmp 0x1000c7fc
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jg 0x1000caca
mov dword [ebp - 0x188], 4
mov dword [ebp - 0x9f4], 0x497a847e
mov dword [ebp - 0x188], 0xfffffffc
jmp 0x1000c833
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 9
jle 0x1000cac5
mov dword [ebp - 0x320], 1
mov dword [ebp - 0x258], 0
jmp 0x1000c863
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 4
jge 0x1000c87f
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0x3a0], 0x2be2ff5
jmp 0x1000c856
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x3a0], 0
jmp 0x1000c8ad
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a0]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x3a0], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3a0], 5
jl 0x1000c9da
mov dword [ebp - 0x5a4], 0xc710
mov dword [ebp - 0xa18], 0xd9132e88
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x3a0]
cmp dword [ebp + eax - 0x3a0], ecx
jl 0x1000c97e
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a0]
mov dword [ebp - 0xf3c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0xdd0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfe0]
mov dword [ebp - 0x1034], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a0]
add eax, dword [ebp - 8]
jne 0x1000c947
mov eax, 0xffff
test eax, eax
jne 0x1000c947
and dword [ebp - 0x59c], 0
jmp 0x1000c951
mov dword [ebp - 0x59c], 1
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x59c], eax
je 0x1000c96b
mov dword [ebp - 0x87c], 1
jmp 0x1000c972
and dword [ebp - 0x87c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfe0]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a0]
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0xa18]
cmp dword [ebp - 0x5a4], eax
jle 0x1000c9ab
mov dword [ebp - 0x34c], 1
jmp 0x1000c9b2
and dword [ebp - 0x34c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x34c]
mov dword [ebp + eax - 0x998], ecx
mov eax, 0xdbb7a2e2
sub eax, dword [ebp - 0x34c]
mov dword [ebp - 0x320], eax
jmp 0x1000c892
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x998]
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0xfffffff9
jle 0x1000ca01
mov dword [ebp - 0x794], 1
jmp 0x1000ca08
and dword [ebp - 0x794], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a0]
dec eax
cmp dword [ebp - 0x794], eax
jl 0x1000ca2a
mov dword [ebp - 0x5ac], 1
jmp 0x1000ca31
and dword [ebp - 0x5ac], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x5ac], eax
jl 0x1000ca52
mov dword [ebp - 0x8f4], 1
jmp 0x1000ca59
and dword [ebp - 0x8f4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x8f4], eax
je 0x1000ca7a
mov dword [ebp - 0x5b4], 1
jmp 0x1000ca81
and dword [ebp - 0x5b4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a0]
mov ecx, dword [ebp - 0x5b4]
add ecx, 0x6cbc8ca9
add eax, ecx
cmp eax, 0xfffffff7
jle 0x1000caad
mov dword [ebp - 0x79c], 1
jmp 0x1000cab4
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x9f4], eax
jmp 0x1000c826
jmp 0x1000c7f5
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x998], 0
je 0x1000cbf6
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xe0]
cmp dword [ebp + eax - 0x998], ecx
jne 0x1000cb0b
mov dword [ebp - 0x5bc], 1
jmp 0x1000cb12
and dword [ebp - 0x5bc], 0
cmp dword [ebp - 0x5bc], 0x7d4e0d3b
jle 0x1000cb2a
mov dword [ebp - 0x884], 1
jmp 0x1000cb31
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x7a4]
cmp dword [ebp - 0x884], eax
je 0x1000cb4b
mov dword [ebp - 0x5c4], 1
jmp 0x1000cb52
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x5c4], eax
jg 0x1000cb78
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x998], 0
jne 0x1000cb78
and dword [ebp - 0x5cc], 0
jmp 0x1000cb82
mov dword [ebp - 0x5cc], 1
mov eax, dword [ebp - 0xe0]
neg eax
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebp - 0x7a4]
add edx, dword [ebp - 0x5cc]
sub ecx, edx
mov edx, 0xffff
sub edx, ecx
imul eax, edx
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x998], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0xe0], eax
jle 0x1000cbce
mov dword [ebp - 0x95c], 1
jmp 0x1000cbd5
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0x5d4], eax
cmp dword [ebp - 0x5d4], 0
je 0x1000cbf6
mov dword [ebp - 0x7ac], 1
jmp 0x1000cbfd
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 0xa20], eax
movzx eax, byte [0x10676ef0]
test eax, eax
je 0x1000cc27
mov esi, 0x1008b620
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x100111c8
mov dword [ebp - 0xdd8], 0x99ac
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x5dc], 1
mov dword [ebp - 0x50], 0
jmp 0x1000cc55
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1000cc6b
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x10a4], 0
jmp 0x1000cc4e
mov dword [ebp - 0x50], 0
jmp 0x1000cc7b
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x1000cc91
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x1100], 0xd19ac196
jmp 0x1000cc74
mov eax, dword [ebp - 0x5dc]
inc eax
mov dword [ebp - 0x5dc], eax
mov dword [ebp - 0x1dc], 0
jmp 0x1000ccb7
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x1000ccd3
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x10a4], 0
jmp 0x1000ccaa
mov dword [ebp - 0x170], 3
mov dword [ebp - 0x5ec], 0xffffffff
mov dword [ebp - 0xa28], 0x11d01887
mov dword [ebp - 0x7bc], 0x206dd2cc
mov dword [ebp - 0xf44], 0xef70
mov dword [ebp - 0x2e0], 0
jmp 0x1000cd1e
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 2
jge 0x1000cd3a
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0xe3c], 0xde9bf9f3
jmp 0x1000cd11
cmp dword [ebp - 0x170], 0xffff
je 0x1000cd52
mov dword [ebp - 0x88c], 1
jmp 0x1000cd59
and dword [ebp - 0x88c], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe3c], 8
cmp dword [ebp - 0x88c], 8
je 0x1000cd7f
mov dword [ebp - 0xae4], 1
jmp 0x1000cd86
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0xde0], eax
cmp dword [ebp - 0x5ec], 6
jl 0x1000cda7
mov dword [ebp - 0x5e4], 1
jmp 0x1000cdae
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x170]
sub eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x170]
add ecx, dword [ebp - 0x5e4]
cmp eax, ecx
jl 0x1000cdd6
mov dword [ebp - 0x7b4], 1
jmp 0x1000cddd
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x7b4], eax
jge 0x1000cdf7
mov dword [ebp - 0x8fc], 1
jmp 0x1000cdfe
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x5ec]
cmp dword [ebp - 0x8fc], eax
jge 0x1000ce18
mov dword [ebp - 0x5f4], 1
jmp 0x1000ce1f
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0xa28], eax
mov eax, dword [ebp - 0x7bc]
dec eax
mov dword [ebp - 0x7bc], eax
mov dword [ebp - 0x1004], 0x99ac
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x5fc], 1
mov dword [ebp - 0xc0], 0
jmp 0x1000ce6f
cmp dword [ebp - 0xc0], 3
jge 0x1000ce8b
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x1080], 0
jmp 0x1000ce62
mov dword [ebp - 0xc0], 0
jmp 0x1000cea4
pop edi
pop esi
mov esp, ebp
pop ebp
ret