Function at 0x42e103
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x734
push esi
push edi
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x430f6a
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x3d8], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
movzx eax, byte [eax]
test eax, eax
je 0x430f2a
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x80], 0x9f7fd1e8
mov dword [ebp - 0xa4], 0
jmp 0x42e18b
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x42e1a7
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x708], 1
jmp 0x42e17e
push 0x7c1a
push 1
push 0
push 0x6cf9
lea eax, [ebp - 0x80]
push eax
push 0x466c
lea edx, [ebp - 0x58]
mov cl, 1
call fcn.0044e426
add esp, 0x18
mov dword [ebp - 0x58], 0
jmp 0x42e1db
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jg 0x42e22c
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x708], 0
je 0x42e1f0
jmp 0x42e22c
mov dword [ebp - 0x80], 0
jmp 0x42e200
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jg 0x42e22a
push 0x67f5
push 0x410a
push 1
push 0x3478
push 1
push 0x7284
push 1
call fcn.004294d0
add esp, 0x1c
jmp 0x42e1f9
jmp 0x42e1d4
and dword [ebp - 0x1c], 0
push 2
lea ecx, [ebp - 0x5d8]
call fcn.004016e3
mov dword [ebp - 0xe8], 0xfffffffe
push 0x2320
push 0x553d
push 1
push 1
lea eax, [ebp - 0x520]
push eax
push 1
push 0x682
push 0x22cf
lea eax, [ebp - 0x5d8]
push eax
push 0x4341
call fcn.00429649
add esp, 0x28
mov dword [ebp - 0xe8], 0
jmp 0x42e295
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jg 0x42e2c2
push 1
push 0
push 0x2a95
push 0x7319
push 0x1b73
push 0x7d22
push 1
call fcn.00432c14
add esp, 0x1c
jmp 0x42e288
mov byte [ebp - 0x52], 0
movzx eax, byte [ebp - 0x52]
test eax, eax
je 0x42e2e3
push 0x7d94
push 0x3565
xor dl, dl
xor cl, cl
call fcn.004346e0
pop ecx
pop ecx
lea ecx, [ebp - 0x5d8]
call fcn.004017b5
mov dword [ebp - 0x90], 0xac64a684
and dword [ebp - 0x4cc], 0
and dword [ebp - 0x4c8], 0
and dword [ebp - 0x4c4], 0
and dword [ebp - 0x4c0], 0
lea ecx, [ebp - 0x105]
call fcn.004017d1
push eax
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x4cc]
push eax
lea ecx, [ebp - 0x6e0]
call fcn.004017d4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3f0]
call fcn.0040178f
mov dword [ebp - 0x114], 8
mov dword [ebp - 0x3e0], 0xe708bee
mov dword [ebp - 0x52c], 6
push 0x2051
push 0
push 1
push 0x28f4
push 0x1a61
call fcn.0042db5b
add esp, 0x14
mov dword [ebp - 0x90], 0
jmp 0x42e39b
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xfffffff7
je 0x42e58a
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0xb0], 0
jmp 0x42e3cb
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x42e3e4
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x6c], 0
jmp 0x42e3be
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6c], 3
jmp 0x42e409
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
jl 0x42e585
mov dword [ebp - 0xd8], 0
jmp 0x42e433
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x42e44c
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x64], 0xf17e2f9d
jmp 0x42e426
push 1
lea ecx, [ebp - 0x3f0]
call fcn.004012f8
cmp dword [eax], 0
je 0x42e46e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x114], eax
push 0
lea ecx, [ebp - 0x3f0]
call fcn.004012f8
cmp dword [eax], 0
je 0x42e49e
push 3
lea ecx, [ebp - 0x3f0]
call fcn.004012f8
cmp dword [eax], 0
je 0x42e49e
mov dword [ebp - 0x2cc], 1
jmp 0x42e4a5
and dword [ebp - 0x2cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x2cc], eax
jg 0x42e4c8
or eax, 0xffffffff
jne 0x42e4c8
mov dword [ebp - 0x2fc], 1
jmp 0x42e4cf
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x2fc]
jne 0x42e4f3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
jne 0x42e4f3
and dword [ebp - 0x304], 0
jmp 0x42e4fd
mov dword [ebp - 0x304], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
add eax, dword [ebp - 0x304]
mov dword [ebp - 0x2f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x2f4], eax
je 0x42e531
mov dword [ebp - 0x150], 1
jmp 0x42e538
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
neg eax
add eax, dword [ebp - 0x114]
je 0x42e553
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
push 1
lea ecx, [ebp - 0x3f0]
call fcn.004012f8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x64]
add eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x114], eax
jmp 0x42e3f4
jmp 0x42e38e
lea ecx, [ebp - 0x3f0]
call fcn.004017b5
mov dword [ebp - 0x478], 0xac64a684
and dword [ebp - 0x4b8], 0
and dword [ebp - 0x4b4], 0
and dword [ebp - 0x4b0], 0
and dword [ebp - 0x4ac], 0
lea ecx, [ebp - 0x132]
call fcn.004017d1
push eax
lea eax, [ebp - 0x4a8]
push eax
lea eax, [ebp - 0x4b8]
push eax
lea ecx, [ebp - 0x710]
call fcn.004017d4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5e8]
call fcn.0040178f
mov dword [ebp - 0x3c8], 8
mov dword [ebp - 0x324], 0xe708bee
mov dword [ebp - 0x534], 6
push 0xf08
push 1
push 1
call fcn.004252d3
add esp, 0xc
lea eax, [ebp - 0x478]
push eax
push 0x4c3c
lea eax, [ebp - 0x3c8]
push eax
push 0x4610
lea eax, [ebp - 0x324]
push eax
push 1
push 0x20ab
push 0
lea eax, [ebp - 0x5e8]
push eax
call fcn.004320ac
add esp, 0x24
lea ecx, [ebp - 0x5e8]
call fcn.004017b5
mov dword [ebp - 0x78], 0xe8cff0ea
push 3
lea ecx, [ebp - 0x5f8]
call fcn.004016e3
mov dword [ebp - 0x53c], 0
mov dword [ebp - 0x578], 0xfffffff6
mov dword [ebp - 0x3c4], 0xffffffff
lea eax, [ebp - 0x580]
push eax
push 0x61b6
push 0x395d
push 1
push 0x2bf2
push 0
push 1
mov edx, 0x51b5
lea ecx, [ebp - 0x5f8]
call fcn.0043475c
add esp, 0x1c
mov dword [ebp - 0x78], 0
jmp 0x42e6d2
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 7
jle 0x42e71f
mov dword [ebp - 0xb8], 0
jmp 0x42e6f1
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x42e70d
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x6cc], 0x9ef72d4e
jmp 0x42e6e4
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x78]
mov dword [ebp + eax - 0x6cc], ecx
jmp 0x42e6cb
push 1
push 1
push 0x43d5
push 0
push 0x85
push 0x3ad4
lea eax, [ebp - 0x3c4]
push eax
push 0x21cb
push 0x1f33
call fcn.0042ad46
add esp, 0x24
lea ecx, [ebp - 0x5f8]
call fcn.004017b5
push 0x675a
push 1
push 0
lea eax, [ebp - 0x124]
push eax
push 0x6291
push 0x5c55
lea eax, [ebp - 0x138]
push eax
call fcn.0042d8e1
add esp, 0x1c
mov dword [ebp - 0x32c], 0x91a049fe
mov dword [ebp - 0x444], 0
push 1
push 0x7dfa
push 0x731e
push 0x308c
push 0x15d3
lea eax, [ebp - 0x32c]
push eax
push 0x2ef7
push 0x4f98
push 0x4159
push 0x2817
push 1
lea eax, [ebp - 0x444]
push eax
push 0x59bb
push 0x676f
push 1
call fcn.00429b77
add esp, 0x3c
mov byte [ebp - 0x45], 0
push 1
push 0x272a
push 1
lea eax, [ebp - 0x45]
push eax
push 1
call fcn.0042abcb
add esp, 0x14
mov eax, dword [ebp - 0x138]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x42e911
mov dword [ebp - 0xf8], 0xa8eac8b1
mov dword [ebp - 0xf8], 0
jmp 0x42e835
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 8
jne 0x42e906
mov dword [ebp - 0xc0], 5
mov dword [ebp - 0xc0], 0
jmp 0x42e865
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x15
je 0x42e901
mov dword [ebp - 0xe0], 0
jmp 0x42e88b
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jge 0x42e8a7
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0xc8], 0xffffffff
jmp 0x42e87e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc8], 0xfffffff5
jmp 0x42e8d5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc8], 0xffffffe2
je 0x42e8fc
mov dword [ebp - 0x334], 0xd29729cf
cmp dword [ebp - 0x334], 0
je 0x42e8fa
jmp 0x42e8fc
jmp 0x42e8ba
jmp 0x42e858
jmp 0x42e828
mov eax, dword [ebp - 0x44]
and dword [eax], 0
jmp 0x431018
mov dword [ebp - 0x20], 0x5cbcef05
mov dword [ebp - 0x260], 0xd0122bf4
mov dword [ebp - 0x1b8], 0xfffffffd
push 1
lea ecx, [ebp - 0x400]
call fcn.004016e3
mov dword [ebp - 0x3d4], 0xfffffffa
mov dword [ebp - 0x28], 0
jmp 0x42e953
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x42e966
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xc], 1
jmp 0x42e94c
mov dword [ebp - 0x28], 0
jmp 0x42e976
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x42e992
push dword [ebp - 0x28]
lea ecx, [ebp - 0x400]
call fcn.004012f8
mov dword [eax], 0xfffffffd
jmp 0x42e96f
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x20], 2
jge 0x42e9ad
mov dword [ebp - 0x228], 1
jmp 0x42e9b4
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x228], eax
jl 0x42e9d5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
je 0x42e9d5
and dword [ebp - 0x158], 0
jmp 0x42e9df
mov dword [ebp - 0x158], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x158]
mov dword [ebp + eax - 0xc], ecx
mov eax, 0xde63
neg eax
imul eax, eax, 0xfff6
cmp eax, 0xfffffff6
jl 0x42ea13
cmp dword [ebp - 0x20], 0
je 0x42ea13
mov dword [ebp - 0x2d0], 1
jmp 0x42ea1a
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2d0], eax
jge 0x42ec86
mov dword [ebp - 0x24], 0xffff
mov dword [ebp - 0x3cc], 0xf0c8679
mov dword [ebp - 0x20], 0
jmp 0x42ea4a
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffec
jg 0x42ec52
mov dword [ebp - 0x12c], 0x3c095b67
mov dword [ebp - 0x188], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
jne 0x42eb30
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x590], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x598], eax
mov eax, dword [ebp - 0x24]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xc]
cmp eax, 0xffffffff
jg 0x42eab8
mov dword [ebp - 0x160], 1
jmp 0x42eabf
and dword [ebp - 0x160], 0
cmp dword [ebp - 0x160], 7
jg 0x42ead4
mov dword [ebp - 0x238], 1
jmp 0x42eadb
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x238], eax
jl 0x42eaf9
mov dword [ebp - 0x168], 1
jmp 0x42eb00
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 1
jl 0x42eb15
mov dword [ebp - 0x2a0], 1
jmp 0x42eb1c
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x2a0]
jl 0x42eb30
and dword [ebp - 0x170], 0
jmp 0x42eb3a
mov dword [ebp - 0x170], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x170], eax
jle 0x42eb51
mov dword [ebp - 0x240], 1
jmp 0x42eb58
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x24]
add eax, 0xb
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
shl eax, 2
imul eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jg 0x42eb8e
mov dword [ebp - 0x178], 1
jmp 0x42eb95
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x178]
cmp eax, 0xfffffff9
ja 0x42ebb9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
jne 0x42ebb9
and dword [ebp - 0x2f8], 0
jmp 0x42ebc3
mov dword [ebp - 0x2f8], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2f8], eax
jl 0x42ebda
mov dword [ebp - 0x180], 1
jmp 0x42ebe1
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x180]
jne 0x42ebf8
mov dword [ebp - 0x248], 1
jmp 0x42ebff
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x248], eax
jne 0x42ec19
mov dword [ebp - 0x2a8], 1
jmp 0x42ec20
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x2a8], eax
jne 0x42ec3a
mov dword [ebp - 0x190], 1
jmp 0x42ec41
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x3cc], eax
jmp 0x42ea43
mov byte [ebp - 0x54], 0
push 1
push 1
push 0x387d
push 1
push 0x3602
push 0x14d9
push 0x2b04
lea eax, [ebp - 0x54]
push eax
push 0x57af
call fcn.0042ad46
add esp, 0x24
jmp 0x42effc
mov dword [ebp - 0x250], 0xcd44262c
mov dword [ebp - 0x7c], 0x8cacf640
mov dword [ebp - 0x45c], 0xddad4dbf
mov dword [ebp - 0x2c], 0
jmp 0x42ecb1
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x42ecc7
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x104], 0xfffffffc
jmp 0x42ecaa
mov dword [ebp - 0x2c], 0
jmp 0x42ecd7
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x42eced
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2f0], 0x2083b01f
jmp 0x42ecd0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x104], 0
jne 0x42ed9e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x104], 0
jne 0x42ed1e
xor eax, eax
jne 0x42ed1e
and dword [ebp - 0x33c], 0
jmp 0x42ed28
mov dword [ebp - 0x33c], 1
mov dword [ebp - 0x250], 0xfffffff8
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x5a0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x5a8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x20], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7c]
cmp dword [ebp + eax - 0xc], ecx
jle 0x42ed76
mov dword [ebp - 0x198], 1
jmp 0x42ed7d
and dword [ebp - 0x198], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
add eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0x7c]
jle 0x42ed9e
and dword [ebp - 0x2d8], 0
jmp 0x42eda8
mov dword [ebp - 0x2d8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp eax, dword [ebp - 0x2d8]
jl 0x42edc6
mov dword [ebp - 0x1a0], 1
jmp 0x42edcd
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
sub eax, 6
cmp eax, 0xb5122599
jb 0x42ede9
mov dword [ebp - 0x258], 1
jmp 0x42edf0
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x258]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x104]
je 0x42ee15
mov dword [ebp - 0x1a8], 1
jmp 0x42ee1c
and dword [ebp - 0x1a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x1a8], eax
jge 0x42ee3a
mov dword [ebp - 0x2b0], 1
jmp 0x42ee41
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x104]
mov dword [ebp - 0x45c], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc], 0
xor eax, eax
je 0x42ee88
mov eax, 0xeb87
test eax, eax
je 0x42ee88
mov dword [ebp - 0x1b0], 1
jmp 0x42ee8f
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x344], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x344]
mov dword [ebp + eax - 0x2f0], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
mov dword [ebp - 0x5b0], eax
push 3
pop eax
test eax, eax
jne 0x42eef9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2f0], 0
jne 0x42eef9
and dword [ebp - 0x1c0], 0
jmp 0x42ef03
mov dword [ebp - 0x1c0], 1
push 0
lea ecx, [ebp - 0x400]
call fcn.004012f8
mov ecx, dword [ebp - 0x1c0]
cmp ecx, dword [eax]
jg 0x42ef26
mov dword [ebp - 0x268], 1
jmp 0x42ef2d
and dword [ebp - 0x268], 0
push 0
lea ecx, [ebp - 0x400]
call fcn.004012f8
mov ecx, dword [ebp - 0x268]
cmp ecx, dword [eax]
jne 0x42ef50
mov dword [ebp - 0x1c8], 1
jmp 0x42ef57
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 0x320af47d
jle 0x42ef6f
mov dword [ebp - 0x2b8], 1
jmp 0x42ef76
and dword [ebp - 0x2b8], 0
push 0
lea ecx, [ebp - 0x400]
call fcn.004012f8
mov ecx, dword [ebp - 0x2b8]
cmp ecx, dword [eax]
jg 0x42ef99
mov dword [ebp - 0x1d0], 1
jmp 0x42efa0
and dword [ebp - 0x1d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
cmp eax, dword [ebp - 0x1d0]
je 0x42efc1
mov dword [ebp - 0x270], 1
jmp 0x42efc8
and dword [ebp - 0x270], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x104]
cmp dword [ebp - 0x270], eax
jg 0x42efe9
mov dword [ebp - 0x1d8], 1
jmp 0x42eff0
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x3d4], eax
lea ecx, [ebp - 0x400]
call fcn.004017b5
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x124]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x8c], ecx
mov eax, dword [ebp - 0x8c]
cmp dword [eax], 0x4550
je 0x42f19c
mov dword [ebp - 0x1e0], 0xb505
mov dword [ebp - 0x278], 0xfffffffb
mov dword [ebp - 0x2e0], 0xfc558bac
mov dword [ebp - 0x34c], 5
mov dword [ebp - 0x5b8], 0xdb821342
mov dword [ebp - 0x354], 0x1ce3
mov dword [ebp - 0x5c0], 1
mov dword [ebp - 0x3dc], 0xffffffff
mov dword [ebp - 0x5c8], 0xca3691f6
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x680], 9
push 4
lea ecx, [ebp - 0x608]
call fcn.004016e3
mov dword [ebp - 0x35c], 0xc9ba5b04
push 0x6bc5
push 1
push 1
push 0
lea eax, [ebp - 0x688]
push eax
push 0x7673
push 0x2476
push 0x17e2
push 0xbba
push 0xe4d
lea eax, [ebp - 0x608]
push eax
push 0x30df
call fcn.0042aef9
add esp, 0x30
lea eax, [ebp - 0x2e0]
push eax
push 1
push 1
push 1
push 0x74d1
push 0x63fd
push 0x429d
push 0x2e60
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x278]
push eax
push 0x210a
push 0x75f9
call fcn.0042aef9
add esp, 0x30
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x464]
push eax
push 1
push 0xb70
push 0x3609
lea eax, [ebp - 0x354]
push eax
lea eax, [ebp - 0x3dc]
push eax
push 0
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x278]
push eax
push 0x6e79
call fcn.00427dc6
add esp, 0x34
lea ecx, [ebp - 0x608]
call fcn.004017b5
mov eax, dword [ebp - 0x44]
and dword [eax], 0
jmp 0x431018
push 2
lea ecx, [ebp - 0x618]
call fcn.004016e3
mov dword [ebp - 0x450], 1
push 0x5643
push 1
push 0x6639
push 0x3190
push 0x18b1
lea eax, [ebp - 0x690]
push eax
push 0x50bb
push 1
push 1
push 0x1789
push 0x45dc
lea eax, [ebp - 0x618]
push eax
call fcn.0042672d
add esp, 0x30
push 0x543e
lea eax, [ebp - 0x450]
push eax
push 1
push 0xf0a
push 1
push 0x7ce0
call fcn.0042b0a9
add esp, 0x18
lea ecx, [ebp - 0x618]
call fcn.004017b5
push dword [ebp - 0x8c]
push 1
push 1
lea eax, [ebp - 0xdc]
push eax
push 0x51ea
push 0x2499
call fcn.00424cb8
add esp, 0x18
mov dword [ebp - 0xf0], 0xec2e0cf5
mov dword [ebp - 0xf0], 0
jmp 0x42f265
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x1c
jne 0x42f2cc
mov dword [ebp - 0x364], 0xfffffff8
mov dword [ebp - 0xd0], 0
jmp 0x42f291
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x42f2ad
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x718], 5
jmp 0x42f284
push 1
push 0x4462
lea eax, [ebp - 0x364]
push eax
push 0x344e
push 1
call fcn.0042b190
add esp, 0x14
jmp 0x42f258
cmp dword [ebp - 0xdc], 0
jne 0x42f2e0
mov eax, dword [ebp - 0x44]
and dword [eax], 0
jmp 0x431018
mov dword [ebp - 0x10], 1
mov dword [ebp - 4], 1
mov dword [ebp - 0x11c], 0x96559653
mov dword [ebp - 0x314], 0x2a77b69c
mov dword [ebp - 0x310], 0x2a77b69c
mov dword [ebp - 0x30c], 0x2a77b69c
mov dword [ebp - 0x308], 0x2a77b69c
mov dword [ebp - 0x10], 0xffffffe6
jmp 0x42f330
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xfffffff6
jne 0x42f4f4
mov dword [ebp - 0x5c], 0xb8ee41b
mov dword [ebp - 0xa0], 0
jmp 0x42f35a
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x42f376
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x548], 0x5b5cf0ad
jmp 0x42f34d
xor eax, eax
jne 0x42f3b6
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x10], 0xbf889e02
ja 0x42f398
mov dword [ebp - 0x1e8], 1
jmp 0x42f39f
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
sub eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x10]
jne 0x42f3b6
and dword [ebp - 0x2c0], 0
jmp 0x42f3c0
mov dword [ebp - 0x2c0], 1
cmp dword [ebp - 0x2c0], 0xffffffff
jle 0x42f3d5
mov dword [ebp - 0x1f0], 1
jmp 0x42f3dc
and dword [ebp - 0x1f0], 0
imul eax, dword [ebp - 0x1f0], 0xa2ef
test eax, eax
je 0x42f3fc
cmp dword [ebp - 0x5c], 0
je 0x42f3fc
mov dword [ebp - 0x280], 1
jmp 0x42f403
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x5c]
jne 0x42f41d
mov dword [ebp - 0x1f8], 1
jmp 0x42f424
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1f8], eax
jl 0x42f43b
mov dword [ebp - 0x300], 1
jmp 0x42f442
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
dec eax
cmp dword [ebp - 0x5c], eax
je 0x42f45a
mov dword [ebp - 0x200], 1
jmp 0x42f461
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x200], eax
jg 0x42f478
mov dword [ebp - 0x288], 1
jmp 0x42f47f
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 0x8886a6c6
jbe 0x42f497
mov dword [ebp - 0x208], 1
jmp 0x42f49e
and dword [ebp - 0x208], 0
cmp dword [ebp - 0x208], 0xfffffff9
je 0x42f4b3
mov dword [ebp - 0x2c8], 1
jmp 0x42f4ba
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 4], 0
jmp 0x42f4d9
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x42f4ef
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x548], 0xfffffff6
jmp 0x42f4d2
jmp 0x42f329
mov dword [ebp - 4], 0
jmp 0x42f504
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jg 0x42f77c
push 2
lea ecx, [ebp - 0x410]
call fcn.004016e3
mov dword [ebp - 0x148], 0xb23fe298
push 0x5e0b
push 1
lea eax, [ebp - 0x674]
push eax
push 1
mov edx, 0xdd8
lea ecx, [ebp - 0x410]
call fcn.0044e31a
add esp, 0x10
mov dword [ebp - 0x10], 0
jmp 0x42f558
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x42f6d6
mov dword [ebp - 0x84], 7
mov dword [ebp - 0x36c], 0xf839313
mov dword [ebp - 0x218], 0x826fbc79
mov dword [ebp - 0x460], 0x70c0
mov dword [ebp - 0x3f4], 0x16744fa7
mov esi, dword [ebp - 4]
push 0
lea ecx, [ebp - 0x410]
call fcn.004012f8
cmp esi, dword [eax]
jne 0x42f5b4
mov dword [ebp - 0x3e4], 1
jmp 0x42f5bb
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x11c], eax
mov esi, dword [ebp - 0x11c]
push 0
lea ecx, [ebp - 0x410]
call fcn.004012f8
cmp esi, dword [eax]
jg 0x42f5f6
mov dword [ebp - 0x210], 1
jmp 0x42f5fd
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x210]
jle 0x42f617
mov dword [ebp - 0x290], 1
jmp 0x42f61e
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0
jne 0x42f645
cmp dword [ebp - 0x460], 0
jne 0x42f645
and dword [ebp - 0x374], 0
jmp 0x42f64f
mov dword [ebp - 0x374], 1
mov eax, dword [ebp - 4]
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x84], 0x6e8d
jne 0x42f670
mov dword [ebp - 0x220], 1
jmp 0x42f677
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x314]
inc eax
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x314], ecx
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x220]
jl 0x42f6b2
mov dword [ebp - 0x298], 1
jmp 0x42f6b9
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x3f4], eax
jmp 0x42f551
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x314]
sub eax, 0x5bcd
cmp dword [ebp - 4], eax
jl 0x42f6f6
mov dword [ebp - 0x37c], 1
jmp 0x42f6fd
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x314]
mov dword [ebp - 0x510], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x314]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x5cc], eax
push 0
lea ecx, [ebp - 0x410]
call fcn.004012f8
mov ecx, dword [ebp - 0x10]
cmp dword [eax], ecx
jl 0x42f74b
mov dword [ebp - 0x14c], 1
jmp 0x42f752
and dword [ebp - 0x14c], 0
imul eax, dword [ebp - 0x14c], 0x58d8
add eax, dword [ebp - 4]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x314], eax
lea ecx, [ebp - 0x410]
call fcn.004017b5
jmp 0x42f4fd
push 0x6d89
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x518]
push eax
push 0
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.0043194e
add esp, 0x1c
mov dword [ebp - 0x15c], 0x4ec2e0cf
mov dword [ebp - 0x154], 0x475ee4c2
mov dword [ebp - 0x404], 1
mov dword [ebp - 0x458], 0x585ca258
mov dword [ebp - 0x384], 2
mov dword [ebp - 0x38c], 0xfcc65ad6
lea eax, [ebp - 0x15c]
push eax
push 0x58aa
push 0
lea eax, [ebp - 0x154]
push eax
call fcn.00432bf2
add esp, 0x10
push 1
lea eax, [ebp - 0x458]
push eax
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x15c]
push eax
push 1
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x38c]
call fcn.00401228
add esp, 0x18
push 0x5212
push 1
lea eax, [ebp - 0x1c]
push eax
push 0xc23
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x8c]
push eax
push 1
push 0x57a5
call fcn.00427aa2
add esp, 0x20
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0xac], 0
jmp 0x42f885
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x42f8a1
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x140], 0x6950a4ba
jmp 0x42f878
mov dword [ebp - 0x18], 7
jmp 0x42f8b1
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe9
jg 0x42fad1
mov dword [ebp - 0x4c], 5
mov dword [ebp - 0x414], 1
mov dword [ebp - 0x318], 0
cmp dword [ebp - 0x4c], 0xf6802998
jbe 0x42f8eb
mov dword [ebp - 0x164], 1
jmp 0x42f8f2
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x164]
cmp eax, 0x9519
je 0x42f90f
mov dword [ebp - 0x448], 1
jmp 0x42f916
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x5dc], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x140], 3
push 3
pop eax
cmp eax, 3
jne 0x42f956
mov dword [ebp - 0x16c], 1
jmp 0x42f95d
and dword [ebp - 0x16c], 0
cmp dword [ebp - 0x16c], 8
jb 0x42f972
mov dword [ebp - 0x174], 1
jmp 0x42f979
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x528], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x140], 0xffffffff
jle 0x42f9aa
mov dword [ebp - 0x394], 1
jmp 0x42f9b1
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x66c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x140]
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x550], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
mov dword [ebp - 0x538], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
sub eax, dword [ebp - 0x414]
cmp eax, dword [ebp - 0x18]
jne 0x42fa0d
mov dword [ebp - 0x17c], 1
jmp 0x42fa14
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x17c], eax
je 0x42fa2b
mov dword [ebp - 0x184], 1
jmp 0x42fa32
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x184], eax
jle 0x42fa4c
mov dword [ebp - 0x44c], 1
jmp 0x42fa53
and dword [ebp - 0x44c], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x140], 0x9bf0
mov eax, 0x9bf0
test eax, eax
jne 0x42fa7f
mov eax, 0xffff
test eax, eax
jne 0x42fa7f
and dword [ebp - 0x18c], 0
jmp 0x42fa89
mov dword [ebp - 0x18c], 1
cmp dword [ebp - 0x18c], 0xffffffff
jg 0x42fa9e
mov dword [ebp - 0x194], 1
jmp 0x42faa5
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x194], eax
je 0x42fabc
mov dword [ebp - 0x19c], 1
jmp 0x42fac3
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x4c], eax
jmp 0x42f8aa
push 0
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0xdc]
push eax
push 0x3565
lea eax, [ebp - 0x8c]
push eax
push 0x70b9
mov dl, 1
mov ecx, 0x1de1
call fcn.00401aa1
add esp, 0x18
mov dword [ebp - 0x558], 0xffffffff
mov dword [ebp - 0x10c], 0xfffa
mov dword [ebp - 0x110], 0xcc424770
mov dword [ebp - 0x34], 0
jmp 0x42fb2f
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x42fb45
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x424], 1
jmp 0x42fb28
mov dword [ebp - 0x34], 0
jmp 0x42fb55
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x42fb6b
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x3ac], 6
jmp 0x42fb4e
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x3a4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp + eax - 0x424], ecx
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3ac], 1
cmp dword [ebp - 0x1b4], 0
je 0x42fddb
push 2
lea ecx, [ebp - 0x628]
call fcn.004016e3
mov dword [ebp - 0x98], 0xb13638ec
mov dword [ebp - 0x560], 1
mov dword [ebp - 0x454], 0xa7221ebc
mov dword [ebp - 8], 0
jmp 0x42fc09
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x42fc25
push dword [ebp - 8]
lea ecx, [ebp - 0x628]
call fcn.004012f8
mov dword [eax], 0x342eb90d
jmp 0x42fc02
mov dword [ebp - 8], 0
jmp 0x42fc35
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x42fc4b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x6f0], 0x11ec
jmp 0x42fc2e
mov dword [ebp - 8], 0
jmp 0x42fc5b
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x42fc71
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x54c], 5
jmp 0x42fc54
mov dword [ebp - 0x98], 1
jmp 0x42fc8a
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x42fd85
mov dword [ebp - 0x568], 0xf29a
mov dword [ebp - 0x570], 1
mov dword [ebp - 0x118], 0x2268f62c
mov dword [ebp - 0xb4], 0
jmp 0x42fcce
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x42fcea
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x6d8], 5
jmp 0x42fcc1
mov byte [ebp - 0x53], 0
push 1
push 0x3577
push 0x27d
lea eax, [ebp - 0x53]
push eax
push 0xf5a
push 0x3490
mov dl, 1
mov ecx, 0x4301
call fcn.00401aa1
add esp, 0x18
xor eax, eax
inc eax
je 0x42fd38
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6d8], 0
je 0x42fd38
mov dword [ebp - 0x1a4], 1
jmp 0x42fd3f
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x1a4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x6f0]
je 0x42fd66
mov dword [ebp - 0x1ac], 1
jmp 0x42fd6d
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x118]
imul eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x118], eax
jmp 0x42fc7d
push 0x4dac
push 0
push 0x3996
push 0x6dc7
push 1
push 0xb5b
lea eax, [ebp - 0x454]
push eax
call fcn.00432358
add esp, 0x1c
lea ecx, [ebp - 0x628]
call fcn.004017b5
push 1
push 0x21d4
push 0x2b59
push dword [ebp - 0x1c]
push 0x41df
push 1
push dword [ebp - 0x1b4]
call fcn.00423a79
add esp, 0x1c
push 2
lea ecx, [ebp - 0x420]
call fcn.004016e3
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0xbc], 0xfffffff6
mov dword [ebp - 0x5ec], 0xffffffff
push 0x4762
push 0x5725
push 0
push 0x391e
lea eax, [ebp - 0x420]
push eax
push 0x60de
push 0x455e
lea eax, [ebp - 0x55c]
push eax
push 0x52f
push 1
push 0x1a5d
call fcn.0042869f
add esp, 0x2c
push 1
lea ecx, [ebp - 0x420]
call fcn.004012f8
cmp dword [eax], 0
je 0x42feca
mov dword [ebp - 0x3bc], 0xffffffff
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x31c], 0xffffffff
mov dword [ebp - 0x434], 0
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x3b4]
push eax
lea eax, [ebp - 0x434]
push eax
push 1
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x1dc]
push eax
push 0x1d4f
push 1
push 0x2c5e
mov dl, 1
lea ecx, [ebp - 0xbc]
call fcn.00447fe9
add esp, 0x28
jmp 0x43006e
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x1c4], 0xfffffff8
mov dword [ebp - 0x320], 1
push 1
lea ecx, [ebp - 0x4e4]
call fcn.004016e3
push 1
push 0x3388
push 0x1ca1
lea eax, [ebp - 0x670]
push eax
push 0x295f
push 0x1d65
push 0
lea eax, [ebp - 0x4e4]
push eax
call fcn.00428144
add esp, 0x20
cmp dword [ebp - 0x38], 0
je 0x42ffb4
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x564], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x5fc], eax
cmp dword [ebp - 0x38], 0
je 0x42ff57
mov eax, 0xe33e
test eax, eax
je 0x42ff57
mov dword [ebp - 0x1bc], 1
jmp 0x42ff5e
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x38], eax
jg 0x42ff81
mov dword [ebp - 0x120], 1
jmp 0x42ff88
and dword [ebp - 0x120], 0
push 1
lea ecx, [ebp - 0x420]
call fcn.004012f8
mov ecx, dword [ebp - 0x120]
mov dword [eax], ecx
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x120]
jl 0x42ffb4
mov dword [ebp - 0x1cc], 1
jmp 0x42ffbb
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xbc], eax
je 0x42ffde
mov dword [ebp - 0x1d4], 1
jmp 0x42ffe5
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x1d4], eax
jle 0x42ffff
mov dword [ebp - 0x1e4], 1
jmp 0x430006
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x1e4], eax
jle 0x430029
cmp dword [ebp - 0xbc], 0
je 0x430029
mov dword [ebp - 0x1ec], 1
jmp 0x430030
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x1ec]
jle 0x430047
mov dword [ebp - 0x1f4], 1
jmp 0x43004e
and dword [ebp - 0x1f4], 0
push 0
lea ecx, [ebp - 0x4e4]
call fcn.004012f8
mov ecx, dword [ebp - 0x1f4]
mov dword [eax], ecx
lea ecx, [ebp - 0x4e4]
call fcn.004017b5
push 0x265
push 0x713f
push 0x6483
push 0x3836
push 0x3315
push 0
push 0x3544
push 1
push 0x4f5c
push 0x364c
call fcn.0042d6be
add esp, 0x28
lea ecx, [ebp - 0x420]
call fcn.004017b5
push dword [ebp - 0x1c]
call fcn.00424b16
pop ecx
test eax, eax
jne 0x430165
mov dword [ebp - 0x56c], 0x6ce125d
mov dword [ebp - 0x678], 0x69f4288a
mov dword [ebp - 0x328], 5
mov dword [ebp - 0xc4], 0
jmp 0x4300f5
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 4
jge 0x430111
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x734], 0x91f782a1
jmp 0x4300e8
push 0x2bf3
push 1
push 0x45df
push 0x685c
push 0x6582
push 0x4b6f
push 0x77f
push 1
push 0x23ef
call fcn.00427cf0
add esp, 0x24
push 1
lea eax, [ebp - 0x328]
push eax
push 1
push 0x2fb6
push 0
call fcn.0042abcb
add esp, 0x14
mov eax, dword [ebp - 0x44]
and dword [eax], 0
jmp 0x431018
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x330], 7
mov dword [ebp - 0x574], 0xffffffff
mov dword [ebp - 0x500], 0xfffffff7
mov dword [ebp - 0x4fc], 0xfffffff7
mov dword [ebp - 0x4f8], 0xfffffff7
mov dword [ebp - 0x4f4], 0xfffffff7
mov dword [ebp - 0x60c], 0xfffffffc
mov dword [ebp - 0xcc], 0
jmp 0x4301cb
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x4301e7
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x484], 0x7117
jmp 0x4301be
mov dword [ebp - 0x50], 0
jmp 0x4301f7
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jg 0x430479
mov dword [ebp - 0x1fc], 1
push 3
lea ecx, [ebp - 0x490]
call fcn.004016e3
mov dword [ebp - 0x57c], 0x8e22
mov dword [ebp - 0xd4], 0x90635300
mov dword [ebp - 0x9c], 0
jmp 0x430245
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x430267
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x490]
call fcn.004012f8
mov dword [eax], 3
jmp 0x430238
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xd4]
dec ecx
mov dword [ebp - 0xd4], ecx
test eax, eax
jne 0x43028b
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x484], 0
je 0x4302a9
push 0
lea ecx, [ebp - 0x490]
call fcn.004012f8
cmp dword [eax], 0
je 0x4302a9
mov dword [ebp - 0x204], 1
jmp 0x4302b0
and dword [ebp - 0x204], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x484]
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 1
jg 0x4302d8
mov dword [ebp - 0x20c], 1
jmp 0x4302df
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x204]
cmp eax, dword [ebp - 0x20c]
jg 0x4302f9
mov dword [ebp - 0x214], 1
jmp 0x430300
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x484]
mov ecx, dword [ebp - 0x50]
sub eax, dword [ebp + ecx*4 - 0x484]
mov ecx, dword [ebp - 0x330]
add eax, dword [ebp - 0x214]
add ecx, eax
je 0x43037e
mov dword [ebp - 0x340], 0x6a4a
mov dword [ebp - 0x338], 0x69ff9e6b
push 0x4226
push 1
push 0
push 1
push 0x2be5
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0xd4]
push eax
push 0x846
push 0x4899
push 0x5bae
push 0x1397
lea eax, [ebp - 0x340]
push eax
call fcn.0042aef9
add esp, 0x30
jmp 0x430469
or dword [ebp - 0x4a4], 0xffffffff
or dword [ebp - 0x4a0], 0xffffffff
or dword [ebp - 0x49c], 0xffffffff
or dword [ebp - 0x498], 0xffffffff
lea ecx, [ebp - 0x131]
call fcn.004017d1
push eax
lea eax, [ebp - 0x494]
push eax
lea eax, [ebp - 0x4a4]
push eax
lea ecx, [ebp - 0x6f8]
call fcn.004017d4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x638]
call fcn.0040178f
mov dword [ebp - 0x21c], 0xfffffffd
mov dword [ebp - 0x348], 0
push 0
lea ecx, [ebp - 0x638]
call fcn.004012f8
push 4
pop ecx
shl ecx, 1
mov eax, dword [eax]
mov dword [ebp + ecx - 0x500], eax
xor eax, eax
jne 0x43041e
mov dword [ebp - 0x21c], 1
cmp dword [ebp - 0x21c], 0
jne 0x43041e
and dword [ebp - 0x224], 0
jmp 0x430428
mov dword [ebp - 0x224], 1
push 0
lea ecx, [ebp - 0x490]
call fcn.004012f8
mov ecx, dword [ebp - 0x224]
cmp ecx, dword [eax]
jne 0x43044b
mov dword [ebp - 0x234], 1
jmp 0x430452
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x348], eax
lea ecx, [ebp - 0x638]
call fcn.004017b5
lea ecx, [ebp - 0x490]
call fcn.004017b5
jmp 0x4301f0
push 1
push 1
push 0x5d32
push 0x32ee
push 0
push 0x10fe
lea eax, [ebp - 0x1c]
push eax
call fcn.004283f1
add esp, 0x1c
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x430edd
mov dword [ebp - 0x6a8], 0xfffffff7
mov dword [ebp - 0x584], 0x4cd45360
mov dword [ebp - 0x61c], 0x473e
mov dword [ebp - 0x58c], 0xa9831117
push 1
lea ecx, [ebp - 0x648]
call fcn.004016e3
mov dword [ebp - 0x67c], 0xbc1c234a
mov dword [ebp - 0x594], 0x4f77722a
mov dword [ebp - 0x62c], 1
push 4
lea ecx, [ebp - 0x4d8]
call fcn.004016e3
mov dword [ebp - 0x60], 0
jmp 0x430519
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x43052f
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x724], 0xfffffff7
jmp 0x430512
push 1
push 0x5df1
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x648]
push eax
push 1
push 0x406
call fcn.00428052
add esp, 0x18
push 0x85a
push 0x501e
push 1
lea eax, [ebp - 0x60]
push eax
push 1
push 0x3d62
push 0x5d17
push 0x6e9b
push 0x8fd
push 0x3377
push 1
push 0x649e
mov edx, 0x7fd5
lea ecx, [ebp - 0x4d8]
call fcn.00447f0c
add esp, 0x30
push 0xaf9
push 1
push 1
push 0x782
push 0x37c3
lea eax, [ebp - 0x4d8]
push eax
push 0x30d6
call fcn.0042d8e1
add esp, 0x1c
lea ecx, [ebp - 0x4d8]
call fcn.004017b5
lea ecx, [ebp - 0x648]
call fcn.004017b5
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xdc]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0xec], 0xfffffffd
mov dword [ebp - 0x350], 0xb26d
mov dword [ebp - 0xe4], 0
jmp 0x430613
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 4
jge 0x43062f
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x474], 1
jmp 0x430606
mov dword [ebp - 0xec], 0x1c
jmp 0x430648
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x14
je 0x430926
mov dword [ebp - 0x14], 0xc19c5a65
mov dword [ebp - 0xfc], 0xfb37b048
mov dword [ebp - 0x14], 3
jmp 0x430676
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x430921
mov dword [ebp - 0x2a4], 0xffffffff
mov dword [ebp - 0xf4], 0
jmp 0x4306a3
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x4306bf
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x658], 0
jmp 0x430696
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x474]
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x474], 0xb26d5d64
jae 0x4306f4
mov dword [ebp - 0x23c], 1
jmp 0x4306fb
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x23c]
jle 0x430712
mov dword [ebp - 0x244], 1
jmp 0x430719
and dword [ebp - 0x244], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x474]
imul eax, dword [ebp - 0x244]
add eax, dword [ebp - 0x350]
cmp eax, dword [ebp - 0x2a4]
jg 0x430747
mov dword [ebp - 0x24c], 1
jmp 0x43074e
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x24c], eax
je 0x430768
mov dword [ebp - 0x358], 1
jmp 0x43076f
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x694], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x658], 1
jne 0x430796
mov dword [ebp - 0x254], 1
jmp 0x43079d
and dword [ebp - 0x254], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x474]
cmp dword [ebp - 0x254], eax
jge 0x4307be
mov dword [ebp - 0x25c], 1
jmp 0x4307c5
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 0x38e486ae
je 0x4307dd
mov dword [ebp - 0x264], 1
jmp 0x4307e4
and dword [ebp - 0x264], 0
cmp dword [ebp - 0x264], 0xffffffff
jbe 0x4307f9
mov dword [ebp - 0x360], 1
jmp 0x430800
and dword [ebp - 0x360], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x474], 0xffff
cmp eax, dword [ebp - 0x14]
je 0x430822
mov dword [ebp - 0x26c], 1
jmp 0x430829
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
sub eax, 0x9caa
mov ecx, dword [ebp - 0x14]
cmp eax, dword [ebp + ecx*4 - 0x474]
jl 0x43084c
mov dword [ebp - 0x274], 1
jmp 0x430853
and dword [ebp - 0x274], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x474]
cmp dword [ebp - 0x274], eax
jge 0x430874
mov dword [ebp - 0x27c], 1
jmp 0x43087b
and dword [ebp - 0x27c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x658]
cmp dword [ebp - 0x27c], eax
je 0x43089c
mov dword [ebp - 0x284], 1
jmp 0x4308a3
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x284], eax
jg 0x4308ba
mov dword [ebp - 0x28c], 1
jmp 0x4308c1
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0xfc]
imul eax, dword [ebp - 0x28c]
test eax, eax
jne 0x4308e1
cmp dword [ebp - 0x14], 0
jne 0x4308e1
and dword [ebp - 0x294], 0
jmp 0x4308eb
mov dword [ebp - 0x294], 1
cmp dword [ebp - 0x294], 0
jle 0x430909
mov eax, 0x190
test eax, eax
je 0x430909
mov dword [ebp - 0x29c], 1
jmp 0x430910
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x2a4], eax
jmp 0x43066f
jmp 0x43063b
cmp dword [ebp - 0x2dc], 0
jne 0x430bc6
mov dword [ebp - 0x128], 0xfff6
mov dword [ebp - 0x368], 0xffffffff
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
push 0x5968
lea eax, [ebp - 0x368]
push eax
push 0x6573
lea eax, [ebp - 0x128]
push eax
push 0
push 1
call fcn.004316a9
add esp, 0x18
mov dword [ebp - 0x5a4], 0xbcd
mov dword [ebp - 0x3c], 0xbe8e56f9
mov dword [ebp - 0x30], 0x318d5816
mov dword [ebp - 0x63c], 9
push 2
lea ecx, [ebp - 0x430]
call fcn.004016e3
mov dword [ebp - 0x5ac], 6
mov dword [ebp - 0x370], 0xe93d0b54
mov dword [ebp - 0x74], 0
jmp 0x4309cb
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x4309e1
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x230], 0xffffffff
jmp 0x4309c4
push 0x5cb3
push 1
push 1
lea eax, [ebp - 0x430]
push eax
push 0x2a7e
lea eax, [ebp - 0x74]
push eax
mov edx, 0x31ef
mov cl, 1
call fcn.0044e426
add esp, 0x18
push 0
lea eax, [ebp - 0x370]
push eax
call fcn.00431dcb
pop ecx
pop ecx
mov dword [ebp - 0x30], 0
jmp 0x430a29
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x430bb0
mov dword [ebp - 0x2c4], 1
push 1
push 0x5dc7
push 0x2e3f
push 1
push 0x5a4e
push 0x57be
push 0x60f9
call fcn.0042d9d1
add esp, 0x1c
mov dword [ebp - 0x3c], 1
jmp 0x430a72
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x430bab
mov dword [ebp - 0x380], 0xef7e2919
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x230], 0
je 0x430b8f
mov dword [ebp - 0x378], 0xc4f32b7b
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x230], 0x426a760
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x230]
mov dword [ebp - 0x684], eax
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x430]
call fcn.004012f8
mov esi, eax
mov eax, dword [ebp - 0x30]
mov edi, dword [ebp + eax*4 - 0x230]
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x430]
call fcn.004012f8
imul edi, dword [eax]
cmp dword [esi], edi
je 0x430afa
mov dword [ebp - 0x2ac], 1
jmp 0x430b01
and dword [ebp - 0x2ac], 0
push 4
pop eax
test eax, eax
je 0x430b27
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x430]
call fcn.004012f8
cmp dword [eax], 0
je 0x430b27
mov dword [ebp - 0x2b4], 1
jmp 0x430b2e
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2ac]
sub eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0x230], ecx
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x2c4], 0
je 0x430b7a
cmp dword [ebp - 0x2c4], 0
je 0x430b7a
mov dword [ebp - 0x144], 1
jmp 0x430b81
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x380], eax
jmp 0x430ba6
mov byte [ebp - 0x51], 0
push 0
lea eax, [ebp - 0x51]
push eax
push 0x5b0d
call fcn.0043250a
add esp, 0xc
jmp 0x430a6b
jmp 0x430a22
lea ecx, [ebp - 0x430]
call fcn.004017b5
mov eax, dword [ebp - 0x44]
and dword [eax], 0
jmp 0x431018
push 2
lea ecx, [ebp - 0x4f0]
call fcn.004016e3
push 2
lea ecx, [ebp - 0x440]
call fcn.004016e3
mov dword [ebp - 0x388], 0xfffffffc
mov dword [ebp - 0x94], 0
jmp 0x430c03
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x430c25
push dword [ebp - 0x94]
lea ecx, [ebp - 0x4f0]
call fcn.004012f8
mov dword [eax], 0xfffffff8
jmp 0x430bf6
lea eax, [ebp - 0x94]
push eax
push 1
push 1
lea eax, [ebp - 0x440]
push eax
push 0x439a
call fcn.0042db5b
add esp, 0x14
push 1
lea ecx, [ebp - 0x440]
call fcn.004012f8
and dword [eax], 0
jmp 0x430c7a
push 1
lea ecx, [ebp - 0x440]
call fcn.004012f8
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2d4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x440]
call fcn.004012f8
cmp dword [eax], 1
jg 0x430cac
mov byte [ebp - 0x3d], 0
push 0x2237
push 1
push 1
push 0x20ee
lea eax, [ebp - 0x3d]
push eax
call fcn.0042dc45
add esp, 0x14
jmp 0x430c56
push 1
push 1
push 0x2a22
lea eax, [ebp - 0x4f0]
push eax
push 1
lea eax, [ebp - 0x388]
push eax
push 0xf00
call fcn.004283f1
add esp, 0x1c
lea ecx, [ebp - 0x440]
call fcn.004017b5
lea ecx, [ebp - 0x4f0]
call fcn.004017b5
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x2dc]
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0
jne 0x430deb
push 0
push 0x1b3
push 1
push 0x4596
push 0x488a
push 1
call fcn.00431aff
add esp, 0x18
mov dword [ebp - 0x5b4], 6
mov dword [ebp - 0x64c], 0xfffffff9
push 1
lea ecx, [ebp - 0x668]
call fcn.004016e3
mov dword [ebp - 0x5bc], 0xf759
mov dword [ebp - 0x6b0], 0
push 0x46c
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x668]
push eax
push 1
push 0
push 0x2ef1
push 0x71fa
call fcn.00429375
add esp, 0x1c
mov dword [ebp - 0x88], 0
jmp 0x430d9e
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x430dba
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x6c0], 0xbce008fb
jmp 0x430d91
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6c0], eax
lea ecx, [ebp - 0x668]
call fcn.004017b5
mov eax, dword [ebp - 0x44]
and dword [eax], 0
jmp 0x431018
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x398], 0xbab59342
mov dword [ebp - 0xa8], 0
jmp 0x430e15
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x430e31
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x130], 0x13b9
jmp 0x430e08
mov dword [ebp - 0x68], 0
jmp 0x430e41
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x430ec5
mov dword [ebp - 0x70], 0x6e838462
mov dword [ebp - 0x70], 0
jmp 0x430e5e
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x430ea1
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x130]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0x130], ecx
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x70]
cmp dword [ebp + eax*4 - 0x130], 0
je 0x430e9f
jmp 0x430ea1
jmp 0x430e57
push 1
push 0x22c5
push 0x5f55
push 0x1c63
lea eax, [ebp - 0x70]
push eax
push 0
call fcn.0042b288
add esp, 0x18
jmp 0x430e3a
push 0
push 0x28d5
push 0xf8a
lea eax, [ebp - 0x1c]
push eax
call fcn.0043252c
add esp, 0x10
push 0x76e
push 0x78f7
push 0x29e9
push 1
push 0x4a5c
push 1
call fcn.0042dd32
add esp, 0x18
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0
je 0x430f11
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2ec], eax
jmp 0x430f18
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x2ec]
mov dword [eax], ecx
jmp 0x431018
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x3b0]
movzx eax, byte [eax]
test eax, eax
je 0x430f65
push 0x595
push 0
push 0
push 0x298b
call fcn.00423dbd
add esp, 0x10
jmp 0x431018
lea eax, [ebp + 0x14]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
movzx eax, byte [eax]
test eax, eax
je 0x430f8f
push 0
push 0
call dword [0xa640e8]
jmp 0x431018
mov dword [ebp - 0x5c4], 0x99ac
mov dword [ebp - 0x508], 0xa4a12b57
mov dword [ebp - 0x50c], 0x914d2edc
mov dword [ebp - 0x514], 1
mov dword [ebp - 0x51c], 0xc196a162
mov dword [ebp - 0x524], 0
mov dword [ebp - 0x6a4], 1
mov dword [ebp - 0x6a0], 1
mov dword [ebp - 0x69c], 1
mov dword [ebp - 0x698], 1
mov dword [ebp - 0x3c0], 0xb5f0b10
lea eax, [ebp - 0x3c0]
push eax
push 0
push 0x2637
push 0x1b1c
call fcn.00424f11
add esp, 0x10
pop edi
pop esi
mov esp, ebp
pop ebp
ret