Function at 0x1004b68a
Capabilities:
Clear file content
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10074420
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x117c
call fcn.1006f150
push esi
push edi
push 4
lea ecx, [ebp - 0x1ac]
call fcn.10013d2b
and dword [ebp - 4], 0
mov dword [ebp - 0x3c], 0
jmp 0x1004b6cf
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1004b6e5
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x708], 0xfffffff6
jmp 0x1004b6c8
mov dword [ebp - 0x3c], 0
jmp 0x1004b6f5
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x1004b711
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x1ac]
call fcn.10013deb
mov dword [eax], 0xe83c773
jmp 0x1004b6ee
mov dword [ebp - 0x3c], 0
jmp 0x1004b721
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1004b737
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x5ac], 0x3afc3718
jmp 0x1004b71a
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1004b751
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push 3
lea ecx, [ebp - 0x1ac]
call fcn.10013deb
mov dword [eax], 2
jmp 0x1004b78a
push 3
lea ecx, [ebp - 0x1ac]
call fcn.10013deb
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x430]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x1ac]
call fcn.10013deb
cmp dword [eax], 0
jl 0x1004bcdf
mov dword [ebp - 0x24], 0xd86e52d8
mov dword [ebp - 0x4ec], 0xb416c011
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x24]
mov dword [ebp + eax - 0x5ac], ecx
mov dword [ebp - 0x24], 0
jmp 0x1004b7d1
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x1004bcda
mov dword [ebp - 0x1c], 0x1d847576
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jge 0x1004b7ff
mov dword [ebp - 0x574], 1
jmp 0x1004b806
and dword [ebp - 0x574], 0
mov esi, dword [ebp - 0x24]
push 3
lea ecx, [ebp - 0x1ac]
call fcn.10013deb
mov eax, dword [eax]
imul eax, dword [ebp - 0x574]
sub eax, dword [ebp - 0x1c]
cmp esi, eax
jg 0x1004b832
mov dword [ebp - 0x57c], 1
jmp 0x1004b839
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1c]
jle 0x1004b853
mov dword [ebp - 0x604], 1
jmp 0x1004b85a
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x8e0], eax
push 2
lea ecx, [ebp - 0x1ac]
call fcn.10013deb
push 3
lea ecx, [ebp - 0x1ac]
call fcn.10013deb
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jg 0x1004b891
mov dword [ebp - 0x584], 1
jmp 0x1004b898
and dword [ebp - 0x584], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5ac]
cmp dword [ebp - 0x584], eax
jg 0x1004b8b9
mov dword [ebp - 0x58c], 1
jmp 0x1004b8c0
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x58c]
imul eax, dword [ebp - 0x1c]
mov dword [ebp - 0x594], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x594]
mov dword [ebp + eax - 0x5ac], ecx
cmp dword [ebp - 0x24], 0
je 0x1004ba59
mov dword [ebp - 0x1c], 2
jmp 0x1004b8fd
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1004ba54
mov dword [ebp - 0x63c], 0x1d32
cmp dword [ebp - 0x63c], 0x47a
jge 0x1004ba21
call fcn.1004b1cc
push 8
pop eax
imul eax, eax, 0
and dword [eax + 0x108de558], 0
and dword [eax + 0x108de55c], 0
mov dword [ebp - 0x8c], 1
jmp 0x1004b953
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xc7
jge 0x1004b9b6
mov eax, dword [ebp - 0x8c]
movzx eax, byte [eax + 0x108debd8]
test eax, eax
je 0x1004b97e
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x59c], eax
jmp 0x1004b985
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x59c]
cdq
mov ecx, dword [ebp - 0x8c]
add eax, dword [ecx*8 + 0x108de550]
adc edx, dword [ecx*8 + 0x108de554]
mov ecx, dword [ebp - 0x8c]
mov dword [ecx*8 + 0x108de558], eax
mov dword [ecx*8 + 0x108de55c], edx
jmp 0x1004b946
lea eax, [ebp - 0x224]
push eax
push 0x1000b5e8
call fcn.1005821b
pop ecx
pop ecx
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x224]
dec eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x644], 0
je 0x1004ba21
lea eax, [ebp - 0x64c]
push eax
push 0x1000b5e8
call fcn.1005821b
pop ecx
pop ecx
mov eax, dword [ebp - 0x64c]
push dword [eax*8 + 0x108de55c]
push dword [eax*8 + 0x108de558]
push 0x1000b5ec
call fcn.100585c5
add esp, 0xc
jmp 0x1004b9c9
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x708]
mov dword [ebp + ecx*4 - 0x708], eax
mov byte [ebp - 0x9f], 0
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x1004ba4f
push 0
call dword [sym.imp.USER32.dll_DestroyIcon]
jmp 0x1004b8f6
jmp 0x1004bccb
mov dword [ebp - 0xe4], 0xe8ee72c9
mov dword [ebp - 0x1c], 0
jmp 0x1004ba73
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x1004bb7c
mov dword [ebp - 0x180], 0x4daed0f1
mov dword [ebp - 0x180], 0
jmp 0x1004baa0
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jg 0x1004bb77
push 2
lea ecx, [ebp - 0x6f8]
call fcn.10013d2b
mov byte [ebp - 4], 1
mov dword [ebp - 0x178], 0
jmp 0x1004bad7
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jge 0x1004baf9
push dword [ebp - 0x178]
lea ecx, [ebp - 0x6f8]
call fcn.10013deb
mov dword [eax], 0xfffffff7
jmp 0x1004baca
push 1
lea ecx, [ebp - 0x6f8]
call fcn.10013deb
and dword [eax], 0
jmp 0x1004bb2f
push 1
lea ecx, [ebp - 0x6f8]
call fcn.10013deb
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0x5a4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5a4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x6f8]
call fcn.10013deb
cmp dword [eax], 1
jg 0x1004bb63
push 3
lea ecx, [ebp - 0x1ac]
call fcn.10013deb
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x708]
mov dword [ebp + ecx*4 - 0x704], eax
jmp 0x1004bb0b
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6f8]
call fcn.10013d8d
jmp 0x1004ba93
jmp 0x1004ba6c
push 2
lea ecx, [ebp - 0x1ac]
call fcn.10013deb
cmp dword [eax], 0xffff
ja 0x1004bb9d
mov dword [ebp - 0x560], 1
jmp 0x1004bba4
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x1c]
neg eax
cmp dword [ebp - 0x560], eax
je 0x1004bbbd
mov dword [ebp - 0x654], 1
jmp 0x1004bbc4
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x868], eax
push 2
lea ecx, [ebp - 0x1ac]
call fcn.10013deb
mov ecx, dword [ebp - 0x24]
imul ecx, dword [eax]
cmp ecx, 0xffffffff
jl 0x1004bbf1
mov dword [ebp - 0x4dc], 1
jmp 0x1004bbf8
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x4dc], eax
jge 0x1004bc0f
mov dword [ebp - 0x26c], 1
jmp 0x1004bc16
and dword [ebp - 0x26c], 0
imul eax, dword [ebp - 0x26c], 0xeddd
cmp eax, dword [ebp - 0x24]
jle 0x1004bc31
mov dword [ebp - 0x4e4], 1
jmp 0x1004bc38
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
je 0x1004bc51
cmp dword [ebp - 0x24], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x708]
push 3
lea ecx, [ebp - 0x1ac]
call fcn.10013deb
cmp dword [ebp - 0xe4], 0
je 0x1004bc89
cmp dword [ebp - 0xe4], 0
je 0x1004bc89
mov dword [ebp - 0x65c], 1
jmp 0x1004bc90
and dword [ebp - 0x65c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5ac]
mov dword [ebp - 0x928], eax
cmp dword [ebp - 0xe4], 0
jne 0x1004bcb8
mov dword [ebp - 0x274], 1
jmp 0x1004bcbf
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x4ec], eax
mov dword [ebp - 0x4ec], 0xfffffffa
jmp 0x1004b7ca
jmp 0x1004b766
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ac]
call fcn.10013d8d
push 4
lea ecx, [ebp - 0x1a0]
call fcn.10013d2b
mov dword [ebp - 4], 2
mov dword [ebp - 0x44], 0
jmp 0x1004bd12
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1004bd28
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x728], 0xfffffff6
jmp 0x1004bd0b
mov dword [ebp - 0x44], 0
jmp 0x1004bd38
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x1004bd54
push dword [ebp - 0x44]
lea ecx, [ebp - 0x1a0]
call fcn.10013deb
mov dword [eax], 0xe83c773
jmp 0x1004bd31
mov dword [ebp - 0x44], 0
jmp 0x1004bd64
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x1004bd7a
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x5b4], 0x3afc3718
jmp 0x1004bd5d
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x1004bd94
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push 3
lea ecx, [ebp - 0x1a0]
call fcn.10013deb
mov dword [eax], 2
jmp 0x1004bdcd
push 3
lea ecx, [ebp - 0x1a0]
call fcn.10013deb
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x27c]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x1a0]
call fcn.10013deb
cmp dword [eax], 0
jl 0x1004c33b
mov dword [ebp - 0x20], 0xd86e52d8
mov dword [ebp - 0x2ac], 0xb416c011
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp + eax - 0x5b4], ecx
mov dword [ebp - 0x20], 0
jmp 0x1004be14
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x1004c336
mov dword [ebp - 0x18], 0x1d847576
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jge 0x1004be42
mov dword [ebp - 0x4f4], 1
jmp 0x1004be49
and dword [ebp - 0x4f4], 0
mov esi, dword [ebp - 0x20]
push 3
lea ecx, [ebp - 0x1a0]
call fcn.10013deb
mov eax, dword [eax]
imul eax, dword [ebp - 0x4f4]
sub eax, dword [ebp - 0x18]
cmp esi, eax
jg 0x1004be75
mov dword [ebp - 0x284], 1
jmp 0x1004be7c
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x18]
jle 0x1004be96
mov dword [ebp - 0x664], 1
jmp 0x1004be9d
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x8f0], eax
push 2
lea ecx, [ebp - 0x1a0]
call fcn.10013deb
push 3
lea ecx, [ebp - 0x1a0]
call fcn.10013deb
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jg 0x1004bed4
mov dword [ebp - 0x4fc], 1
jmp 0x1004bedb
and dword [ebp - 0x4fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5b4]
cmp dword [ebp - 0x4fc], eax
jg 0x1004befc
mov dword [ebp - 0x28c], 1
jmp 0x1004bf03
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x504], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x504]
mov dword [ebp + eax - 0x5b4], ecx
cmp dword [ebp - 0x20], 0
je 0x1004c0b5
mov dword [ebp - 0x18], 2
jmp 0x1004bf40
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1004c0b0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x728]
mov dword [ebp + ecx*4 - 0x728], eax
mov dword [ebp - 0x66c], 0x146b
cmp dword [ebp - 0x66c], 0x7b0
jge 0x1004c091
lea eax, [ebp - 0x1bc]
push eax
push 0x1000b5e8
call fcn.1005821b
pop ecx
pop ecx
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x674], 0
je 0x1004c091
lea eax, [ebp - 0x67c]
push eax
push 0x1000b5e8
call fcn.1005821b
pop ecx
pop ecx
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x14c], 1
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x67c]
jg 0x1004c07a
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
inc eax
imul eax, dword [ebp - 0xfc]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0xa4]
push eax
mov ecx, 0x108ded64
call fcn.10051717
test eax, eax
je 0x1004c04a
lea eax, [ebp - 0xa4]
push eax
mov ecx, 0x108ded64
call fcn.1004a02e
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
jmp 0x1004bfe2
push dword [ebp - 0xa4]
call fcn.1004b25b
pop ecx
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0xa4]
push eax
mov ecx, 0x108ded64
call fcn.1004a02e
mov ecx, dword [ebp - 0x14c]
mov dword [eax], ecx
jmp 0x1004bfe2
push dword [ebp - 0xa4]
push 0x1000b5fc
call fcn.100585c5
pop ecx
pop ecx
jmp 0x1004bf8b
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x1004c0ab
push 0
call dword [sym.imp.USER32.dll_DestroyIcon]
jmp 0x1004bf39
jmp 0x1004c327
mov dword [ebp - 0xe8], 0xe8ee72c9
mov dword [ebp - 0x18], 0
jmp 0x1004c0cf
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x1004c1d8
mov dword [ebp - 0x104], 0x4daed0f1
mov dword [ebp - 0x104], 0
jmp 0x1004c0fc
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 2
jg 0x1004c1d3
push 2
lea ecx, [ebp - 0x718]
call fcn.10013d2b
mov byte [ebp - 4], 3
mov dword [ebp - 0x174], 0
jmp 0x1004c133
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x1004c155
push dword [ebp - 0x174]
lea ecx, [ebp - 0x718]
call fcn.10013deb
mov dword [eax], 0xfffffff7
jmp 0x1004c126
push 1
lea ecx, [ebp - 0x718]
call fcn.10013deb
and dword [eax], 0
jmp 0x1004c18b
push 1
lea ecx, [ebp - 0x718]
call fcn.10013deb
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x294]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x718]
call fcn.10013deb
cmp dword [eax], 1
jg 0x1004c1bf
push 3
lea ecx, [ebp - 0x1a0]
call fcn.10013deb
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x728]
mov dword [ebp + ecx*4 - 0x724], eax
jmp 0x1004c167
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x718]
call fcn.10013d8d
jmp 0x1004c0ef
jmp 0x1004c0c8
push 2
lea ecx, [ebp - 0x1a0]
call fcn.10013deb
cmp dword [eax], 0xffff
ja 0x1004c1f9
mov dword [ebp - 0x50c], 1
jmp 0x1004c200
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x18]
neg eax
cmp dword [ebp - 0x50c], eax
je 0x1004c219
mov dword [ebp - 0x684], 1
jmp 0x1004c220
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x900], eax
push 2
lea ecx, [ebp - 0x1a0]
call fcn.10013deb
mov ecx, dword [ebp - 0x20]
imul ecx, dword [eax]
cmp ecx, 0xffffffff
jl 0x1004c24d
mov dword [ebp - 0x29c], 1
jmp 0x1004c254
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x29c], eax
jge 0x1004c26b
mov dword [ebp - 0x514], 1
jmp 0x1004c272
and dword [ebp - 0x514], 0
imul eax, dword [ebp - 0x514], 0xeddd
cmp eax, dword [ebp - 0x20]
jle 0x1004c28d
mov dword [ebp - 0x2a4], 1
jmp 0x1004c294
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
je 0x1004c2ad
cmp dword [ebp - 0x20], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x728]
push 3
lea ecx, [ebp - 0x1a0]
call fcn.10013deb
cmp dword [ebp - 0xe8], 0
je 0x1004c2e5
cmp dword [ebp - 0xe8], 0
je 0x1004c2e5
mov dword [ebp - 0x68c], 1
jmp 0x1004c2ec
and dword [ebp - 0x68c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5b4]
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0xe8], 0
jne 0x1004c314
mov dword [ebp - 0x51c], 1
jmp 0x1004c31b
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2ac], 0xfffffffa
jmp 0x1004be0d
jmp 0x1004bda9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a0]
call fcn.10013d8d
push 4
lea ecx, [ebp - 0x25c]
call fcn.10013d2b
mov dword [ebp - 4], 4
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x5c], 0
jmp 0x1004c378
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1004c38e
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x94], 0x40d7
jmp 0x1004c371
mov dword [ebp - 0x5c], 0
jmp 0x1004c39e
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1004c3b7
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x25c]
call fcn.10013deb
or dword [eax], 0xffffffff
jmp 0x1004c397
push 2
lea ecx, [ebp - 0x25c]
call fcn.10013deb
and dword [eax], 0
jmp 0x1004c3ed
push 2
lea ecx, [ebp - 0x25c]
call fcn.10013deb
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x524]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x25c]
call fcn.10013deb
cmp dword [eax], 0
jg 0x1004c61e
mov dword [ebp - 0xac], 0xfffffffe
mov dword [ebp - 0x69c], 0x1ec2
mov dword [ebp - 0x694], 1
mov dword [ebp - 0x534], 0x78cca699
mov dword [ebp - 0x10c], 0
jmp 0x1004c444
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jge 0x1004c460
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x87c], 0x5c8a52b4
jmp 0x1004c437
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1004c47a
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x1004c4a3
push 0x1fa2
push 0
push 0xe28
push 0xe4d
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov dword [ebp - 0xac], 0
jmp 0x1004c4bc
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x1004c619
mov dword [ebp - 0x6ac], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x694]
cmp dword [ebp + eax - 0x94], ecx
jne 0x1004c4f4
mov dword [ebp - 0x2b4], 1
jmp 0x1004c4fb
and dword [ebp - 0x2b4], 0
push 2
lea ecx, [ebp - 0x25c]
call fcn.10013deb
mov ecx, dword [ebp - 0x2b4]
cmp ecx, dword [eax]
jge 0x1004c51e
mov dword [ebp - 0x52c], 1
jmp 0x1004c525
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x69c]
cmp eax, dword [ebp - 0x52c]
jl 0x1004c53f
mov dword [ebp - 0x6a4], 1
jmp 0x1004c546
and dword [ebp - 0x6a4], 0
push 2
lea ecx, [ebp - 0x25c]
call fcn.10013deb
push 2
lea ecx, [ebp - 0x25c]
call fcn.10013deb
mov eax, dword [eax]
mov ecx, dword [ebp - 0xac]
mov ecx, dword [ebp + ecx*4 - 0x94]
cmp dword [ebp + eax*4 - 0x94], ecx
jne 0x1004c586
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x87c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x94]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
neg eax
imul eax, eax, 3
neg eax
sub eax, 0x2488a74d
mov dword [ebp - 0x534], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x94]
cmp dword [ebp - 0x534], eax
jne 0x1004c5e8
push 2
lea ecx, [ebp - 0x25c]
call fcn.10013deb
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x94], 0
jne 0x1004c5e8
and dword [ebp - 0x53c], 0
jmp 0x1004c5f2
mov dword [ebp - 0x53c], 1
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp + eax*4 - 0x94]
mov ecx, dword [ebp - 0x53c]
add ecx, 0x695c
imul eax, ecx
mov dword [ebp - 0x6ac], eax
jmp 0x1004c4af
jmp 0x1004c3c9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x25c]
call fcn.10013d8d
push 1
lea ecx, [ebp - 0x1b8]
call fcn.10013d2b
mov dword [ebp - 4], 5
mov dword [ebp - 0x28], 0x81c2900
mov dword [ebp - 0x2d0], 0xffffffff
mov dword [ebp - 0x154], 0
jmp 0x1004c66b
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x1004c68d
push dword [ebp - 0x154]
lea ecx, [ebp - 0x1b8]
call fcn.10013deb
mov dword [eax], 0x1713b910
jmp 0x1004c65e
mov dword [ebp - 0x28], 0
jmp 0x1004c69d
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1004c922
mov dword [ebp - 0x244], 0x5546
mov dword [ebp - 0x814], 0
mov dword [ebp - 0x810], 0
mov dword [ebp - 0x80c], 0
mov dword [ebp - 0x808], 0
mov dword [ebp - 0x6b4], 0x30b91300
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1b8]
call fcn.10013deb
mov esi, eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1b8]
call fcn.10013deb
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x1004c713
mov dword [ebp - 0x2e8], 1
jmp 0x1004c71a
and dword [ebp - 0x2e8], 0
push 0
lea ecx, [ebp - 0x1b8]
call fcn.10013deb
push 0
lea ecx, [ebp - 0x1b8]
call fcn.10013deb
cmp dword [eax], 0
je 0x1004c74b
cmp dword [ebp - 0x28], 0
je 0x1004c74b
mov dword [ebp - 0x2c8], 1
jmp 0x1004c752
and dword [ebp - 0x2c8], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1b8]
call fcn.10013deb
mov ecx, dword [ebp - 0x2c8]
cmp ecx, dword [eax]
jl 0x1004c779
cmp dword [ebp - 0x28], 0
jne 0x1004c779
and dword [ebp - 0x444], 0
jmp 0x1004c783
mov dword [ebp - 0x444], 1
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0
je 0x1004c7ad
mov eax, 0xe2bf
test eax, eax
je 0x1004c7ad
mov dword [ebp - 0x448], 1
jmp 0x1004c7b4
and dword [ebp - 0x448], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1b8]
call fcn.10013deb
mov ecx, dword [ebp - 0x448]
cmp ecx, dword [eax]
jg 0x1004c7d8
mov dword [ebp - 0x23c], 1
jmp 0x1004c7df
and dword [ebp - 0x23c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x23c]
mov dword [ebp + eax - 0x814], ecx
cmp dword [ebp - 0x23c], 0
je 0x1004c810
mov eax, 0xaa2910a8
test eax, eax
je 0x1004c810
mov dword [ebp - 0x2d8], 1
jmp 0x1004c817
and dword [ebp - 0x2d8], 0
mov esi, dword [ebp - 0x244]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1b8]
call fcn.10013deb
mov edi, dword [ebp - 0x2d8]
add edi, dword [eax]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1b8]
call fcn.10013deb
imul edi, dword [eax]
sub edi, dword [ebp - 0x244]
cmp esi, edi
jne 0x1004c860
cmp dword [ebp - 0x28], 0
je 0x1004c860
mov dword [ebp - 0x500], 1
jmp 0x1004c867
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x500], eax
jg 0x1004c881
mov dword [ebp - 0x2e0], 1
jmp 0x1004c888
and dword [ebp - 0x2e0], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1b8]
call fcn.10013deb
mov ecx, dword [ebp - 0x2e0]
add ecx, dword [eax]
jne 0x1004c8b2
mov eax, 0x452a2c7a
test eax, eax
jne 0x1004c8b2
and dword [ebp - 0x450], 0
jmp 0x1004c8bc
mov dword [ebp - 0x450], 1
mov eax, dword [ebp - 0x450]
neg eax
imul eax, eax, 0
cmp dword [ebp - 0x2e8], eax
jge 0x1004c8db
mov dword [ebp - 0x5a0], 1
jmp 0x1004c8e2
and dword [ebp - 0x5a0], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1b8]
call fcn.10013deb
mov ecx, dword [ebp - 0x5a0]
sub ecx, dword [eax]
je 0x1004c90a
xor eax, eax
je 0x1004c90a
mov dword [ebp - 0x2f0], 1
jmp 0x1004c911
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x6b4], eax
jmp 0x1004c696
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b8]
call fcn.10013d8d
push 4
lea ecx, [ebp - 0x250]
call fcn.10013d2b
mov dword [ebp - 4], 6
mov dword [ebp - 0x300], 0
mov dword [ebp - 0x54], 0
jmp 0x1004c95f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1004c972
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x70], 0x40d7
jmp 0x1004c958
mov dword [ebp - 0x54], 0
jmp 0x1004c982
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x1004c99b
push dword [ebp - 0x54]
lea ecx, [ebp - 0x250]
call fcn.10013deb
or dword [eax], 0xffffffff
jmp 0x1004c97b
push 2
lea ecx, [ebp - 0x250]
call fcn.10013deb
and dword [eax], 0
jmp 0x1004c9d1
push 2
lea ecx, [ebp - 0x250]
call fcn.10013deb
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x458]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x458]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x250]
call fcn.10013deb
cmp dword [eax], 0
jg 0x1004cbed
mov dword [ebp - 0xa8], 0xfffffffe
mov dword [ebp - 0x6bc], 0x1ec2
mov dword [ebp - 0x734], 1
mov dword [ebp - 0x460], 0x78cca699
mov dword [ebp - 0x114], 0
jmp 0x1004ca28
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jge 0x1004ca44
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x93c], 0x5c8a52b4
jmp 0x1004ca1b
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x1004ca5e
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x1004ca87
push 0x1fa2
push 0
push 0xe28
push 0xe4d
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov dword [ebp - 0xa8], 0
jmp 0x1004caa0
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x1004cbe8
mov dword [ebp - 0x610], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x734]
cmp dword [ebp + eax - 0x70], ecx
jne 0x1004cad5
mov dword [ebp - 0x2f8], 1
jmp 0x1004cadc
and dword [ebp - 0x2f8], 0
push 2
lea ecx, [ebp - 0x250]
call fcn.10013deb
mov ecx, dword [ebp - 0x2f8]
cmp ecx, dword [eax]
jge 0x1004caff
mov dword [ebp - 0x508], 1
jmp 0x1004cb06
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x6bc]
cmp eax, dword [ebp - 0x508]
jl 0x1004cb20
mov dword [ebp - 0x634], 1
jmp 0x1004cb27
and dword [ebp - 0x634], 0
push 2
lea ecx, [ebp - 0x250]
call fcn.10013deb
push 2
lea ecx, [ebp - 0x250]
call fcn.10013deb
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa8]
mov ecx, dword [ebp + ecx*4 - 0x70]
cmp dword [ebp + eax*4 - 0x70], ecx
jne 0x1004cb61
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x93c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x300]
neg eax
imul eax, eax, 3
neg eax
sub eax, 0x2488a74d
mov dword [ebp - 0x460], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
cmp dword [ebp - 0x460], eax
jne 0x1004cbba
push 2
lea ecx, [ebp - 0x250]
call fcn.10013deb
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x70], 0
jne 0x1004cbba
and dword [ebp - 0x308], 0
jmp 0x1004cbc4
mov dword [ebp - 0x308], 1
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0x70]
mov ecx, dword [ebp - 0x308]
add ecx, 0x695c
imul eax, ecx
mov dword [ebp - 0x610], eax
jmp 0x1004ca93
jmp 0x1004c9ad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x250]
call fcn.10013d8d
push 1
lea ecx, [ebp - 0x194]
call fcn.10013d2b
mov dword [ebp - 4], 7
mov dword [ebp - 0x2c], 0x81c2900
mov dword [ebp - 0x468], 0xffffffff
mov dword [ebp - 0xf0], 0
jmp 0x1004cc3a
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x1004cc5c
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x194]
call fcn.10013deb
mov dword [eax], 0x1713b910
jmp 0x1004cc2d
mov dword [ebp - 0x2c], 0
jmp 0x1004cc6c
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1004cef1
mov dword [ebp - 0x208], 0x5546
mov dword [ebp - 0x824], 0
mov dword [ebp - 0x820], 0
mov dword [ebp - 0x81c], 0
mov dword [ebp - 0x818], 0
mov dword [ebp - 0x6e8], 0x30b91300
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x194]
call fcn.10013deb
mov esi, eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x194]
call fcn.10013deb
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x1004cce2
mov dword [ebp - 0x588], 1
jmp 0x1004cce9
and dword [ebp - 0x588], 0
push 0
lea ecx, [ebp - 0x194]
call fcn.10013deb
push 0
lea ecx, [ebp - 0x194]
call fcn.10013deb
cmp dword [eax], 0
je 0x1004cd1a
cmp dword [ebp - 0x2c], 0
je 0x1004cd1a
mov dword [ebp - 0x568], 1
jmp 0x1004cd21
and dword [ebp - 0x568], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x194]
call fcn.10013deb
mov ecx, dword [ebp - 0x568]
cmp ecx, dword [eax]
jl 0x1004cd48
cmp dword [ebp - 0x2c], 0
jne 0x1004cd48
and dword [ebp - 0x310], 0
jmp 0x1004cd52
mov dword [ebp - 0x310], 1
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0
je 0x1004cd7c
mov eax, 0xe2bf
test eax, eax
je 0x1004cd7c
mov dword [ebp - 0x318], 1
jmp 0x1004cd83
and dword [ebp - 0x318], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x194]
call fcn.10013deb
mov ecx, dword [ebp - 0x318]
cmp ecx, dword [eax]
jg 0x1004cda7
mov dword [ebp - 0x230], 1
jmp 0x1004cdae
and dword [ebp - 0x230], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x230]
mov dword [ebp + eax - 0x824], ecx
cmp dword [ebp - 0x230], 0
je 0x1004cddf
mov eax, 0xaa2910a8
test eax, eax
je 0x1004cddf
mov dword [ebp - 0x510], 1
jmp 0x1004cde6
and dword [ebp - 0x510], 0
mov esi, dword [ebp - 0x208]
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x194]
call fcn.10013deb
mov edi, dword [ebp - 0x510]
add edi, dword [eax]
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x194]
call fcn.10013deb
imul edi, dword [eax]
sub edi, dword [ebp - 0x208]
cmp esi, edi
jne 0x1004ce2f
cmp dword [ebp - 0x2c], 0
je 0x1004ce2f
mov dword [ebp - 0x320], 1
jmp 0x1004ce36
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x320], eax
jg 0x1004ce50
mov dword [ebp - 0x470], 1
jmp 0x1004ce57
and dword [ebp - 0x470], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x194]
call fcn.10013deb
mov ecx, dword [ebp - 0x470]
add ecx, dword [eax]
jne 0x1004ce81
mov eax, 0x452a2c7a
test eax, eax
jne 0x1004ce81
and dword [ebp - 0x328], 0
jmp 0x1004ce8b
mov dword [ebp - 0x328], 1
mov eax, dword [ebp - 0x328]
neg eax
imul eax, eax, 0
cmp dword [ebp - 0x588], eax
jge 0x1004ceaa
mov dword [ebp - 0x330], 1
jmp 0x1004ceb1
and dword [ebp - 0x330], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x194]
call fcn.10013deb
mov ecx, dword [ebp - 0x330]
sub ecx, dword [eax]
je 0x1004ced9
xor eax, eax
je 0x1004ced9
mov dword [ebp - 0x478], 1
jmp 0x1004cee0
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x6e8], eax
jmp 0x1004cc65
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x194]
call fcn.10013d8d
movzx eax, byte [0x108ded6c]
test eax, eax
je 0x1004cf1e
mov esi, 0x106637d0
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1004febe
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x11c], 0x355fff83
mov dword [ebp - 0x1c8], 0x7af2c9a1
mov dword [ebp - 0x914], 0xf15cc7c4
mov dword [ebp - 0x8a8], 0xffffffff
mov dword [ebp - 0x910], 0x31ea062
mov dword [ebp - 0x8b0], 0xc6dd3ed2
mov dword [ebp - 0x91c], 0xfffffffa
push 4
lea ecx, [ebp - 0x8dc]
call fcn.10013d2b
mov dword [ebp - 4], 8
mov dword [ebp - 0x184], 0
jmp 0x1004cf98
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 4
jge 0x1004cfba
push dword [ebp - 0x184]
lea ecx, [ebp - 0x8dc]
call fcn.10013deb
mov dword [eax], 0x7f4a1d2d
jmp 0x1004cf8b
mov dword [ebp - 0x78], 1
cmp dword [ebp - 0x78], 0
je 0x1004cfdc
mov eax, 0x414b58e1
test eax, eax
je 0x1004cfdc
mov dword [ebp - 0x338], 1
jmp 0x1004cfe3
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x78]
cmp eax, 0x383c
jge 0x1004cfff
or eax, 0xffffffff
jne 0x1004cfff
and dword [ebp - 0x618], 0
jmp 0x1004d009
mov dword [ebp - 0x618], 1
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x8b8], eax
cmp dword [ebp - 0x338], 1
jne 0x1004d027
mov dword [ebp - 0x518], 1
jmp 0x1004d02e
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x518], eax
je 0x1004d048
mov dword [ebp - 0x340], 1
jmp 0x1004d04f
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x1c8]
imul eax, dword [ebp - 0x340]
cmp eax, dword [ebp - 0x11c]
jg 0x1004d070
mov dword [ebp - 0x480], 1
jmp 0x1004d077
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
add eax, 0x74ca
cmp eax, dword [ebp - 0x11c]
jle 0x1004d09c
mov dword [ebp - 0x348], 1
jmp 0x1004d0a3
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x348], eax
jle 0x1004d0bd
mov dword [ebp - 0x570], 1
jmp 0x1004d0c4
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x570], eax
jg 0x1004d0de
mov dword [ebp - 0x350], 1
jmp 0x1004d0e5
and dword [ebp - 0x350], 0
cmp dword [ebp - 0x350], 0xffffffff
jl 0x1004d0fa
mov dword [ebp - 0x488], 1
jmp 0x1004d101
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x488], eax
je 0x1004d11b
mov dword [ebp - 0x358], 1
jmp 0x1004d122
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
add eax, 0x58aae07e
je 0x1004d157
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x1004d152
push 0
push 0x26c5
push 0x1272
push 0x14f1
call dword [sym.imp.USER32.dll_SetDlgItemInt]
jmp 0x1004d35e
mov dword [ebp - 0x740], 0x1703
cmp dword [ebp - 0x740], 0xdb7
jge 0x1004d2be
mov dword [ebp - 0xb0], 1
jmp 0x1004d18a
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x10
jg 0x1004d222
mov eax, dword [ebp - 0xb0]
mov dword [0x108de554], eax
mov dword [ebp - 0xec], 1
jmp 0x1004d1bb
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x10
jg 0x1004d21d
cmp dword [ebp - 0xb0], 1
jle 0x1004d1e4
push 0x10
push dword [ebp - 0xec]
call fcn.1004b4f8
pop ecx
pop ecx
mov dword [ebp - 0x520], eax
jmp 0x1004d1ee
mov dword [ebp - 0x520], 1
push dword [ebp - 0x520]
push 0x1000b7e8
mov eax, dword [ebp - 0xb0]
shl eax, 7
lea eax, [ebp + eax - 0x1188]
mov ecx, dword [ebp - 0xec]
lea eax, [eax + ecx*8]
push eax
call fcn.10057878
add esp, 0xc
jmp 0x1004d1ae
jmp 0x1004d17d
xor eax, eax
inc eax
je 0x1004d2be
lea eax, [ebp - 0x360]
push eax
call fcn.1004b590
pop ecx
cmp dword [ebp - 0x360], 0
jne 0x1004d243
jmp 0x1004d2be
lea eax, [ebp - 0x6c4]
push eax
call fcn.1004b590
pop ecx
lea eax, [ebp - 0x620]
push eax
call fcn.1004b590
pop ecx
mov eax, dword [ebp - 0x620]
dec eax
mov dword [ebp - 0x15c], eax
jmp 0x1004d279
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jl 0x1004d2b1
mov eax, dword [ebp - 0x360]
shl eax, 7
lea eax, [ebp + eax - 0x1188]
mov ecx, dword [ebp - 0x6c4]
lea eax, [eax + ecx*8]
push 6
pop ecx
sub ecx, dword [ebp - 0x15c]
movsx eax, byte [eax + ecx]
push eax
call fcn.1005b2e4
pop ecx
jmp 0x1004d26c
push 0xa
call fcn.1005b2e4
pop ecx
jmp 0x1004d222
mov dword [ebp - 0x924], 0xfffffffe
push 2
lea ecx, [ebp - 0x7bc]
call fcn.10013d2b
mov byte [ebp - 4], 9
mov dword [ebp - 0x58], 0
jmp 0x1004d2e9
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1004d2ff
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x82c], 0xffffffff
jmp 0x1004d2e2
mov dword [ebp - 0x58], 0
jmp 0x1004d30f
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1004d32b
push dword [ebp - 0x58]
lea ecx, [ebp - 0x7bc]
call fcn.10013deb
mov dword [eax], 1
jmp 0x1004d308
push 1
lea ecx, [ebp - 0x7bc]
call fcn.10013deb
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x490]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x490]
mov dword [ecx], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x7bc]
call fcn.10013d8d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8dc]
call fcn.10013d8d
mov dword [ebp - 0x834], 0x106637d0
mov dword [ebp - 0x630], 0x2c32b96c
mov dword [ebp - 0x83c], 0x15a60915
mov dword [ebp - 0x4b0], 0x91ba8027
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x578], 0xd933bd3e
mov dword [ebp - 0x390], 0xdb88dcfd
mov dword [ebp - 0x844], 0x2b622b60
mov dword [ebp - 0x84c], 0xfffffffe
push 1
lea ecx, [ebp - 0x74c]
call fcn.10013d2b
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x70c], 0xfffffffe
mov dword [ebp - 0x73c], 0x12393dfe
mov dword [ebp - 0x854], 0xc0d2
mov dword [ebp - 0x638], 0
mov dword [ebp - 0x628], 0xfffffff9
mov dword [ebp - 0x1d0], 0x348f3bea
mov dword [ebp - 0x17c], 0x9bf80b7f
mov dword [ebp - 0x1d8], 6
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x124], 0
jmp 0x1004d44e
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 1
jge 0x1004d470
push dword [ebp - 0x124]
lea ecx, [ebp - 0x74c]
call fcn.10013deb
mov dword [eax], 0xde9e5a93
jmp 0x1004d441
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
jne 0x1004d49d
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x85c], eax
cmp dword [ebp - 0x1d8], 0
jne 0x1004d49d
and dword [ebp - 0x368], 0
jmp 0x1004d4a7
mov dword [ebp - 0x368], 1
push 0
lea ecx, [ebp - 0x74c]
call fcn.10013deb
xor ecx, ecx
inc ecx
sub ecx, dword [eax]
add ecx, dword [ebp - 0x210]
add ecx, dword [ebp - 0x390]
je 0x1004d4dc
cmp dword [ebp - 0x1d0], 0
je 0x1004d4dc
mov dword [ebp - 0x598], 1
jmp 0x1004d4e3
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x368]
sub eax, dword [ebp - 0x598]
cmp eax, 0xfffa
jbe 0x1004d502
mov dword [ebp - 0x370], 1
jmp 0x1004d509
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x628]
cmp dword [ebp - 0x370], eax
jl 0x1004d523
mov dword [ebp - 0x498], 1
jmp 0x1004d52a
and dword [ebp - 0x498], 0
cmp dword [ebp - 0x498], 0x52cf
je 0x1004d542
mov dword [ebp - 0x378], 1
jmp 0x1004d549
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x378]
sub eax, dword [ebp - 0x1d0]
jne 0x1004d55e
cmp dword [ebp - 0x70c], 0
cmp dword [ebp - 0x17c], 0x5fdd
jne 0x1004d576
mov dword [ebp - 0x528], 1
jmp 0x1004d57d
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x630]
cmp eax, dword [ebp - 0x528]
jge 0x1004d597
mov dword [ebp - 0x380], 1
jmp 0x1004d59e
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x380], eax
jge 0x1004d5bd
or eax, 0xffffffff
je 0x1004d5bd
mov dword [ebp - 0x4a0], 1
jmp 0x1004d5c4
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x578]
cmp dword [ebp - 0x4a0], eax
jl 0x1004d5de
mov dword [ebp - 0x388], 1
jmp 0x1004d5e5
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x4b0]
imul eax, dword [ebp - 0x388]
imul eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x578]
jg 0x1004d60d
mov dword [ebp - 0x6cc], 1
jmp 0x1004d614
and dword [ebp - 0x6cc], 0
cmp dword [ebp - 0x390], 0
jbe 0x1004d629
mov dword [ebp - 0x4a8], 1
jmp 0x1004d630
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 0x5c8a
jl 0x1004d648
mov dword [ebp - 0x398], 1
jmp 0x1004d64f
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x1d0]
imul eax, dword [ebp - 0x398]
imul eax, eax, 0xffff
cmp eax, dword [ebp - 0x210]
push 0
lea ecx, [ebp - 0x74c]
call fcn.10013deb
cmp dword [eax], 0
jne 0x1004d68c
cmp dword [ebp - 0x638], 0
jne 0x1004d68c
and dword [ebp - 0x530], 0
jmp 0x1004d696
mov dword [ebp - 0x530], 1
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
sub eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x73c]
jne 0x1004d6c2
mov dword [ebp - 0x3a0], 1
jmp 0x1004d6c9
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x4b0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x74c]
call fcn.10013d8d
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x164], 0x355fff83
mov dword [ebp - 0x234], 0x7af2c9a1
mov dword [ebp - 0x864], 0xf15cc7c4
mov dword [ebp - 0x86c], 0xffffffff
mov dword [ebp - 0x874], 0x31ea062
mov dword [ebp - 0x880], 0xc6dd3ed2
mov dword [ebp - 0x88c], 0xfffffffa
push 4
lea ecx, [ebp - 0x8ec]
call fcn.10013d2b
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x12c], 0
jmp 0x1004d75e
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 4
jge 0x1004d780
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x8ec]
call fcn.10013deb
mov dword [eax], 0x7f4a1d2d
jmp 0x1004d751
mov dword [ebp - 0x80], 1
cmp dword [ebp - 0x80], 0
je 0x1004d7a2
mov eax, 0x414b58e1
test eax, eax
je 0x1004d7a2
mov dword [ebp - 0x3a8], 1
jmp 0x1004d7a9
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x80]
cmp eax, 0x383c
jge 0x1004d7c5
or eax, 0xffffffff
jne 0x1004d7c5
and dword [ebp - 0x640], 0
jmp 0x1004d7cf
mov dword [ebp - 0x640], 1
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x3a8], 1
jne 0x1004d7ed
mov dword [ebp - 0x590], 1
jmp 0x1004d7f4
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x590], eax
je 0x1004d80e
mov dword [ebp - 0x3b0], 1
jmp 0x1004d815
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x234]
imul eax, dword [ebp - 0x3b0]
cmp eax, dword [ebp - 0x164]
jg 0x1004d836
mov dword [ebp - 0x4b8], 1
jmp 0x1004d83d
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
add eax, 0x74ca
cmp eax, dword [ebp - 0x164]
jle 0x1004d862
mov dword [ebp - 0x3b8], 1
jmp 0x1004d869
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x3b8], eax
jle 0x1004d883
mov dword [ebp - 0x538], 1
jmp 0x1004d88a
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x538], eax
jg 0x1004d8a4
mov dword [ebp - 0x3c0], 1
jmp 0x1004d8ab
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x3c0], 0xffffffff
jl 0x1004d8c0
mov dword [ebp - 0x4c0], 1
jmp 0x1004d8c7
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x4c0], eax
je 0x1004d8e1
mov dword [ebp - 0x3c8], 1
jmp 0x1004d8e8
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
add eax, 0x58aae07e
je 0x1004d923
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x1004d91e
push 0
push 0x26c5
push 0x1272
push 0x14f1
call dword [sym.imp.USER32.dll_SetDlgItemInt]
jmp 0x1004d9c3
mov dword [ebp - 0x828], 0xfffffffe
push 2
lea ecx, [ebp - 0x7d4]
call fcn.10013d2b
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x60], 0
jmp 0x1004d94e
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1004d964
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x8ac], 0xffffffff
jmp 0x1004d947
mov dword [ebp - 0x60], 0
jmp 0x1004d974
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1004d990
push dword [ebp - 0x60]
lea ecx, [ebp - 0x7d4]
call fcn.10013deb
mov dword [eax], 1
jmp 0x1004d96d
push 1
lea ecx, [ebp - 0x7d4]
call fcn.10013deb
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x580]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x580]
mov dword [ecx], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x7d4]
call fcn.10013d8d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8ec]
call fcn.10013d8d
mov dword [ebp - 0x1e0], 3
push 4
lea ecx, [ebp - 0x7f8]
call fcn.10013d2b
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x6d4], 0x1e6e2bf
mov dword [ebp - 0x3d8], 0x8cf5a8
mov dword [ebp - 0x540], 0
push 4
lea ecx, [ebp - 0x7e0]
call fcn.10013d2b
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x40], 0
jmp 0x1004da2f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x1004da4b
push dword [ebp - 0x40]
lea ecx, [ebp - 0x7f8]
call fcn.10013deb
mov dword [eax], 1
jmp 0x1004da28
mov dword [ebp - 0x40], 0
jmp 0x1004da5b
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1004da71
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x954], 1
jmp 0x1004da54
mov dword [ebp - 0x40], 0
jmp 0x1004da81
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x1004da9d
push dword [ebp - 0x40]
lea ecx, [ebp - 0x7e0]
call fcn.10013deb
mov dword [eax], 0x9c7c6f1f
jmp 0x1004da7a
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x1004dab1
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov eax, dword [ebp - 0x1e0]
add eax, 0xa1fa
cmp dword [ebp - 0x1e0], eax
je 0x1004dad0
mov dword [ebp - 0x218], 1
jmp 0x1004dad7
and dword [ebp - 0x218], 0
push 3
lea ecx, [ebp - 0x7f8]
call fcn.10013deb
mov ecx, dword [ebp - 0x218]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x218]
jle 0x1004db06
mov dword [ebp - 0x3d0], 1
jmp 0x1004db0d
and dword [ebp - 0x3d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x954]
add eax, dword [ebp - 0x3d0]
cmp eax, dword [ebp - 0x6d4]
jne 0x1004db34
mov dword [ebp - 0x4c8], 1
jmp 0x1004db3b
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3d8]
sub eax, 0x60d2f38d
mov dword [ebp - 0x540], eax
mov esi, dword [ebp - 0x540]
push 1
lea ecx, [ebp - 0x7e0]
call fcn.10013deb
mov dword [eax], esi
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x7e0]
call fcn.10013d8d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7f8]
call fcn.10013d8d
mov dword [ebp - 0x8b4], 0x106637d4
mov byte [0x108ded6c], 1
mov dword [ebp - 0x650], 0x2c32b96c
mov dword [ebp - 0x8bc], 0x15a60915
mov dword [ebp - 0x558], 0x91ba8027
mov dword [ebp - 0x1f0], 1
mov dword [ebp - 0x4e0], 0xd933bd3e
mov dword [ebp - 0x408], 0xdb88dcfd
mov dword [ebp - 0x8c4], 0x2b622b60
mov dword [ebp - 0x8cc], 0xfffffffe
push 1
lea ecx, [ebp - 0x770]
call fcn.10013d2b
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x71c], 0xfffffffe
mov dword [ebp - 0x730], 0x12393dfe
mov dword [ebp - 0x92c], 0xc0d2
mov dword [ebp - 0x658], 0
mov dword [ebp - 0x648], 0xfffffff9
mov dword [ebp - 0x240], 0x348f3bea
mov dword [ebp - 0x188], 0x9bf80b7f
mov dword [ebp - 0x220], 6
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x134], 0
jmp 0x1004dc73
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jge 0x1004dc95
push dword [ebp - 0x134]
lea ecx, [ebp - 0x770]
call fcn.10013deb
mov dword [eax], 0xde9e5a93
jmp 0x1004dc66
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x1e8], eax
jne 0x1004dcc2
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x934], eax
cmp dword [ebp - 0x220], 0
jne 0x1004dcc2
and dword [ebp - 0x3e0], 0
jmp 0x1004dccc
mov dword [ebp - 0x3e0], 1
push 0
lea ecx, [ebp - 0x770]
call fcn.10013deb
xor ecx, ecx
inc ecx
sub ecx, dword [eax]
add ecx, dword [ebp - 0x1f0]
add ecx, dword [ebp - 0x408]
je 0x1004dd01
cmp dword [ebp - 0x240], 0
je 0x1004dd01
mov dword [ebp - 0x4d0], 1
jmp 0x1004dd08
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x3e0]
sub eax, dword [ebp - 0x4d0]
cmp eax, 0xfffa
jbe 0x1004dd27
mov dword [ebp - 0x3e8], 1
jmp 0x1004dd2e
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x648]
cmp dword [ebp - 0x3e8], eax
jl 0x1004dd48
mov dword [ebp - 0x55c], 1
jmp 0x1004dd4f
and dword [ebp - 0x55c], 0
cmp dword [ebp - 0x55c], 0x52cf
je 0x1004dd67
mov dword [ebp - 0x3f0], 1
jmp 0x1004dd6e
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
sub eax, dword [ebp - 0x240]
jne 0x1004dd83
cmp dword [ebp - 0x71c], 0
cmp dword [ebp - 0x188], 0x5fdd
jne 0x1004dd9b
mov dword [ebp - 0x4d8], 1
jmp 0x1004dda2
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x650]
cmp eax, dword [ebp - 0x4d8]
jge 0x1004ddbc
mov dword [ebp - 0x3f8], 1
jmp 0x1004ddc3
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x220]
cmp dword [ebp - 0x3f8], eax
jge 0x1004dde2
or eax, 0xffffffff
je 0x1004dde2
mov dword [ebp - 0x54c], 1
jmp 0x1004dde9
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x4e0]
cmp dword [ebp - 0x54c], eax
jl 0x1004de03
mov dword [ebp - 0x400], 1
jmp 0x1004de0a
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x558]
imul eax, dword [ebp - 0x400]
imul eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x4e0]
jg 0x1004de32
mov dword [ebp - 0x6dc], 1
jmp 0x1004de39
and dword [ebp - 0x6dc], 0
cmp dword [ebp - 0x408], 0
jbe 0x1004de4e
mov dword [ebp - 0x564], 1
jmp 0x1004de55
and dword [ebp - 0x564], 0
cmp dword [ebp - 0x564], 0x5c8a
jl 0x1004de6d
mov dword [ebp - 0x410], 1
jmp 0x1004de74
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x240]
imul eax, dword [ebp - 0x410]
imul eax, eax, 0xffff
cmp eax, dword [ebp - 0x1f0]
push 0
lea ecx, [ebp - 0x770]
call fcn.10013deb
cmp dword [eax], 0
jne 0x1004deb1
cmp dword [ebp - 0x658], 0
jne 0x1004deb1
and dword [ebp - 0x4e8], 0
jmp 0x1004debb
mov dword [ebp - 0x4e8], 1
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
sub eax, dword [ebp - 0x220]
cmp eax, dword [ebp - 0x730]
jne 0x1004dee7
mov dword [ebp - 0x418], 1
jmp 0x1004deee
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x558], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x770]
call fcn.10013d8d
mov dword [ebp - 0x940], 0xfffffff7
push 3
lea ecx, [ebp - 0x5c8]
call fcn.10013d2b
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x4f8], 0xd5d7
mov dword [ebp - 0x948], 0x2ad015b0
mov dword [ebp - 0x2d4], 1
mov dword [ebp - 0x200], 0x3ebe1552
mov dword [ebp - 0x13c], 0xfffffffb
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x6e4], 0x3c6e85a6
mov dword [ebp - 0x668], 0xffffffff
push 1
lea ecx, [ebp - 0x764]
call fcn.10013d2b
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x14], 0
jmp 0x1004df98
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1004dfb4
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c8]
call fcn.10013deb
mov dword [eax], 0x315362d
jmp 0x1004df91
mov dword [ebp - 0x14], 0
jmp 0x1004dfc4
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1004dfda
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x548], 0xbefc7127
jmp 0x1004dfbd
mov dword [ebp - 0x14], 0
jmp 0x1004dfea
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1004e003
push dword [ebp - 0x14]
lea ecx, [ebp - 0x764]
call fcn.10013deb
or dword [eax], 0xffffffff
jmp 0x1004dfe3
mov dword [ebp - 0x14], 0
jmp 0x1004e013
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1004e029
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x888], 1
jmp 0x1004e00c
cmp dword [ebp - 0x200], 1
jl 0x1004e03e
mov dword [ebp - 0x1f8], 1
jmp 0x1004e045
and dword [ebp - 0x1f8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp + eax - 0x548], ecx
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x13c], eax
push 1
lea ecx, [ebp - 0x5c8]
call fcn.10013deb
or dword [eax], 0xffffffff
or eax, 0xffffffff
je 0x1004e25e
push 0
lea ecx, [ebp - 0x5c8]
call fcn.10013deb
mov dword [eax], 1
push 0
lea ecx, [ebp - 0x5c8]
call fcn.10013deb
cmp dword [eax], 9
jne 0x1004e0b5
and dword [ebp - 0x2c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x548]
cmp eax, dword [ebp - 0x2c4]
jle 0x1004e286
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret