Function at 0x43751c
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x938
push esi
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x43b94d
lea eax, [ebp + 0xc]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x5a8], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x528]
movzx eax, byte [eax]
test eax, eax
je 0x43b8de
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x84], 0x9714a025
push 2
lea ecx, [ebp - 0xf4]
call fcn.0040194d
mov dword [ebp - 0x130], 0
push 2
lea ecx, [ebp - 0x51c]
call fcn.0040194d
mov dword [ebp - 0x184], 0x211521fa
mov dword [ebp - 0xe4], 9
mov dword [ebp - 0x1d0], 0xb862b336
push 1
push 1
push 0x6fb1
push 0x1c12
push 0x4586
lea eax, [ebp - 0xf4]
push eax
push 0x3842
lea eax, [ebp - 0x5e8]
push eax
call fcn.0043470f
add esp, 0x20
push 0x7a03
push 1
push 0
lea eax, [ebp - 0x5e8]
push eax
push 0x2a3a
lea eax, [ebp - 0x51c]
push eax
push 0x6203
call fcn.00432589
add esp, 0x1c
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x84], 0
je 0x437659
xor eax, eax
je 0x437659
mov dword [ebp - 0x2d0], 1
jmp 0x437660
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x84], eax
mov esi, dword [ebp - 0x84]
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401379
cmp esi, dword [eax]
jne 0x43768f
mov dword [ebp - 0x4cc], 1
jmp 0x437696
and dword [ebp - 0x4cc], 0
cmp dword [ebp - 0x4cc], 0xb445acee
ja 0x4376ae
mov dword [ebp - 0x4d4], 1
jmp 0x4376b5
and dword [ebp - 0x4d4], 0
imul eax, dword [ebp - 0x4d4], 0x80ee
cmp eax, 0x4bcd
je 0x4376d2
mov dword [ebp - 0x5f0], 1
jmp 0x4376d9
and dword [ebp - 0x5f0], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401379
push 0
lea ecx, [ebp - 0xf4]
call fcn.00401379
mov eax, dword [eax]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x808], eax
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401379
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401379
mov esi, dword [eax]
add esi, 0xc4dd
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401379
cmp esi, dword [eax]
jne 0x437746
mov dword [ebp - 0x4dc], 1
jmp 0x43774d
and dword [ebp - 0x4dc], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401379
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [eax]
jne 0x437770
mov dword [ebp - 0x15c], 1
jmp 0x437777
and dword [ebp - 0x15c], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401379
mov ecx, dword [ebp - 0x15c]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x51c]
call fcn.00401379
mov ecx, dword [ebp - 0x15c]
mov dword [eax], ecx
cmp dword [ebp - 0x15c], 0
je 0x4377c8
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401379
cmp dword [eax], 0
je 0x4377c8
mov dword [ebp - 0x4e4], 1
jmp 0x4377cf
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x4e4], eax
jle 0x4377ee
or eax, 0xffffffff
je 0x4377ee
mov dword [ebp - 0x4ec], 1
jmp 0x4377f5
and dword [ebp - 0x4ec], 0
cmp dword [ebp - 0x4ec], 0
je 0x437a9d
mov dword [ebp - 0x54], 0xf509e13c
mov dword [ebp - 0xc], 0
jmp 0x437819
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x43782f
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x44c], 1
jmp 0x437812
mov dword [ebp - 0xc], 0
jmp 0x43783f
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x437855
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x38c], 0x832a49e8
jmp 0x437838
mov dword [ebp - 0xc], 0
jmp 0x437865
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x43787b
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x730], 0
jmp 0x43785e
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x54], 0x53c8
jne 0x437899
mov dword [ebp - 0x1c8], 1
jmp 0x4378a0
and dword [ebp - 0x1c8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c8]
mov dword [ebp + eax - 0x38c], ecx
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x1c8], eax
je 0x4378cd
mov dword [ebp - 0x4f4], 1
jmp 0x4378d4
and dword [ebp - 0x4f4], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401379
mov esi, dword [ebp - 0x4f4]
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401379
cmp esi, dword [eax]
je 0x437907
mov dword [ebp - 0x4b8], 1
jmp 0x43790e
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x4b8], 1
jle 0x437923
mov dword [ebp - 0x5f8], 1
jmp 0x43792a
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x810], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x54], 0
je 0x43795e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38c], 0
je 0x43795e
mov dword [ebp - 0x214], 1
jmp 0x437965
and dword [ebp - 0x214], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x730]
cmp dword [ebp - 0x214], eax
jne 0x437986
mov dword [ebp - 0x600], 1
jmp 0x43798d
and dword [ebp - 0x600], 0
push 1
lea ecx, [ebp - 0x51c]
call fcn.00401379
mov dword [eax], 0x7673ed13
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x44c], 0x7673ed13
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x730]
mov dword [ebp - 0x818], eax
push 0
lea ecx, [ebp - 0x51c]
call fcn.00401379
mov eax, dword [eax]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
inc eax
mov ecx, dword [ebp - 0x130]
imul ecx, eax
test ecx, ecx
je 0x4379fb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44c], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401379
cmp dword [eax], 0xfff8
jne 0x437a1c
mov dword [ebp - 0x21c], 1
jmp 0x437a23
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x184]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x730]
jle 0x437a50
mov dword [ebp - 0x394], 1
jmp 0x437a57
and dword [ebp - 0x394], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x730]
imul eax, dword [ebp - 0x394]
mov dword [ebp - 0x1d0], eax
push 0x3423
push 1
push 1
push 1
push 0x43fa
push 0x2b92
push 0x7f96
push 0x4ce6
call fcn.0043480a
add esp, 0x20
jmp 0x437fc2
mov dword [ebp - 0x154], 0x6993
push 1
lea ecx, [ebp - 0x504]
call fcn.0040194d
mov dword [ebp - 0x45c], 8
push 4
lea ecx, [ebp - 0x650]
call fcn.0040194d
mov dword [ebp - 0x610], 0x9b3eeac6
mov dword [ebp - 0x620], 0x4cddccf3
mov dword [ebp - 0x18], 0
jmp 0x437aef
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x437b0b
push dword [ebp - 0x18]
lea ecx, [ebp - 0x504]
call fcn.00401379
mov dword [eax], 5
jmp 0x437ae8
mov dword [ebp - 0x18], 0
jmp 0x437b1b
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x437b31
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b4], 0xfffffff9
jmp 0x437b14
push 1
lea eax, [ebp - 0x650]
push eax
push 1
push 0x269
lea eax, [ebp - 0x18]
push eax
call fcn.004318d3
add esp, 0x14
cmp dword [ebp - 0x154], 1
je 0x437b62
mov dword [ebp - 0x224], 1
jmp 0x437b69
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
sub eax, dword [ebp - 0x154]
cmp eax, 0xb4c2
jne 0x437b88
mov dword [ebp - 0x4ac], 1
jmp 0x437b8f
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
add eax, 0x322e546e
cmp eax, 0x85ae
jl 0x437bad
mov dword [ebp - 0x608], 1
jmp 0x437bb4
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x8a4], eax
mov eax, 0x6c9a5ce7
cmp eax, 9
jl 0x437bd6
mov dword [ebp - 0x22c], 1
jmp 0x437bdd
and dword [ebp - 0x22c], 0
push 0
lea ecx, [ebp - 0xf4]
call fcn.00401379
mov esi, dword [ebp - 0x22c]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x504]
call fcn.00401379
cmp esi, dword [eax]
je 0x437c10
mov dword [ebp - 0x39c], 1
jmp 0x437c17
and dword [ebp - 0x39c], 0
imul eax, dword [ebp - 0x39c], 0x5a44
cmp eax, 0xfffffff9
jbe 0x437c32
mov dword [ebp - 0x234], 1
jmp 0x437c39
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x234]
jl 0x437c53
mov dword [ebp - 0x454], 1
jmp 0x437c5a
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x454], eax
jne 0x437c74
mov dword [ebp - 0x23c], 1
jmp 0x437c7b
and dword [ebp - 0x23c], 0
push 0
lea ecx, [ebp - 0x504]
call fcn.00401379
mov ecx, dword [ebp - 0x23c]
cmp ecx, dword [eax]
jle 0x437c9e
mov dword [ebp - 0x3a4], 1
jmp 0x437ca5
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x3a4], eax
jle 0x437cbf
mov dword [ebp - 0x244], 1
jmp 0x437cc6
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x154]
add eax, 0x267fa09d
cmp eax, dword [ebp - 0x244]
je 0x437cee
cmp dword [ebp - 0x1d0], 0
je 0x437cee
mov dword [ebp - 0x1d8], 1
jmp 0x437cf5
and dword [ebp - 0x1d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp + eax - 0x1b4], ecx
push 1
lea ecx, [ebp - 0x51c]
call fcn.00401379
mov ecx, dword [ebp - 0x1d8]
cmp ecx, dword [eax]
jg 0x437d2b
mov dword [ebp - 0x4f0], 1
jmp 0x437d32
and dword [ebp - 0x4f0], 0
mov esi, dword [ebp - 0x4f0]
sub esi, dword [ebp - 0xe4]
push 0
lea ecx, [ebp - 0x504]
call fcn.00401379
cmp esi, dword [eax]
je 0x437d5b
mov dword [ebp - 0x24c], 1
jmp 0x437d62
and dword [ebp - 0x24c], 0
cmp dword [ebp - 0x24c], 0x2b4d3a61
jl 0x437d7a
mov dword [ebp - 0x3ac], 1
jmp 0x437d81
and dword [ebp - 0x3ac], 0
push 0
lea ecx, [ebp - 0x504]
call fcn.00401379
mov ecx, dword [ebp - 0x3ac]
cmp ecx, dword [eax]
jne 0x437da4
mov dword [ebp - 0x254], 1
jmp 0x437dab
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x45c]
cmp dword [ebp - 0x254], eax
jne 0x437dc5
mov dword [ebp - 0x178], 1
jmp 0x437dcc
and dword [ebp - 0x178], 0
push 0
lea ecx, [ebp - 0x650]
call fcn.00401379
mov ecx, dword [ebp - 0x178]
mov dword [eax], ecx
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x610], eax
mov eax, 0x37f7
test eax, eax
je 0x437f24
push 0
lea ecx, [ebp - 0x504]
call fcn.00401379
mov ecx, dword [ebp - 0x45c]
imul ecx, dword [eax]
test ecx, ecx
je 0x437e32
push 1
lea ecx, [ebp - 0x51c]
call fcn.00401379
cmp dword [eax], 0
je 0x437e32
mov dword [ebp - 0x25c], 1
jmp 0x437e39
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x25c], eax
je 0x437e53
mov dword [ebp - 0x3b4], 1
jmp 0x437e5a
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0xd17825fa
jae 0x437e72
mov dword [ebp - 0x618], 1
jmp 0x437e79
and dword [ebp - 0x618], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b4]
mov dword [ebp - 0x778], eax
mov eax, 0x696e02f5
cmp eax, 5
jne 0x437ea2
mov dword [ebp - 0x264], 1
jmp 0x437ea9
and dword [ebp - 0x264], 0
push 0
lea ecx, [ebp - 0x504]
call fcn.00401379
mov ecx, dword [ebp - 0x264]
cmp ecx, dword [eax]
jle 0x437ecc
mov dword [ebp - 0x4b4], 1
jmp 0x437ed3
and dword [ebp - 0x4b4], 0
push 2
lea ecx, [ebp - 0x650]
call fcn.00401379
mov ecx, dword [ebp - 0x4b4]
cmp ecx, dword [eax]
jle 0x437ef6
mov dword [ebp - 0x26c], 1
jmp 0x437efd
and dword [ebp - 0x26c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b4]
mov ecx, dword [ebp - 0x26c]
lea eax, [eax + ecx - 2]
test eax, eax
je 0x437f24
mov dword [ebp - 0x3bc], 1
jmp 0x437f2b
and dword [ebp - 0x3bc], 0
push 0
lea ecx, [ebp - 0xf4]
call fcn.00401379
mov esi, dword [ebp - 0x3bc]
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0xf4]
call fcn.00401379
cmp esi, dword [eax]
jl 0x437f5e
mov dword [ebp - 0x274], 1
jmp 0x437f65
and dword [ebp - 0x274], 0
cmp dword [ebp - 0x274], 8
je 0x437f7a
mov dword [ebp - 0x464], 1
jmp 0x437f81
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0xc366
je 0x437f99
mov dword [ebp - 0x27c], 1
jmp 0x437fa0
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x620], eax
lea ecx, [ebp - 0x650]
call fcn.00401a1f
lea ecx, [ebp - 0x504]
call fcn.00401a1f
push 0x6b96
push 0x2131
push 0x41c6
push 0x2db
push 1
lea eax, [ebp - 0x51c]
push eax
push 1
push 0x6d3b
lea eax, [ebp - 0x184]
push eax
call fcn.004349a2
add esp, 0x24
lea ecx, [ebp - 0x51c]
call fcn.00401a1f
lea ecx, [ebp - 0xf4]
call fcn.00401a1f
and dword [ebp - 0x20], 0
mov dword [ebp - 0x98], 0xffffffff
push 4
lea ecx, [ebp - 0x1f8]
call fcn.0040194d
mov dword [ebp - 0x3cc], 5
mov dword [ebp - 0x1c], 0x16488a9
push 2
lea ecx, [ebp - 0x824]
call fcn.0040194d
lea eax, [ebp - 0x628]
push eax
push 1
lea eax, [ebp - 0x1f8]
push eax
push 1
push 0x5498
call fcn.004319ca
add esp, 0x14
push 1
lea eax, [ebp - 0x628]
push eax
mov dl, 1
lea ecx, [ebp - 0x824]
call fcn.00427396
pop ecx
pop ecx
cmp dword [ebp - 0x98], 0
je 0x4380b4
mov dword [ebp - 0x780], 6
mov dword [ebp - 0x788], 0xfffffffb
mov dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
jmp 0x438231
mov dword [ebp - 0x1dc], 0x149cec79
mov dword [ebp - 0x104], 0
jmp 0x4380d7
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jge 0x4380f3
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x284], 0x92eda8ed
jmp 0x4380ca
push 3
lea ecx, [ebp - 0x1f8]
call fcn.00401379
mov dword [eax], 1
mov dword [ebp - 0x3cc], 1
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x798], eax
push 0
lea ecx, [ebp - 0x1f8]
call fcn.00401379
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x284]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1c], 0
jmp 0x43815e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x438231
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1f8]
call fcn.00401379
mov esi, eax
push 3
lea ecx, [ebp - 0x1f8]
call fcn.00401379
imul eax, dword [eax], 0
cmp dword [esi], eax
jge 0x438216
cmp dword [ebp - 0x1c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x284], 0xc9e4
jg 0x4381b3
mov dword [ebp - 0x4e0], 1
jmp 0x4381ba
and dword [ebp - 0x4e0], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1f8]
call fcn.00401379
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4e0]
je 0x4381de
mov dword [ebp - 0x18c], 1
jmp 0x4381e5
and dword [ebp - 0x18c], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1f8]
call fcn.00401379
mov ecx, dword [ebp - 0x18c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18c]
sub eax, 0xff84
cmp eax, 0xfff6
je 0x438216
and dword [ebp - 0x28c], 0
jmp 0x438220
mov dword [ebp - 0x28c], 1
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x3cc], eax
jmp 0x438157
mov dword [ebp - 0x98], 0
jmp 0x43824a
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jg 0x438279
push 0x6007
push 1
push 0x5fb4
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x98]
push eax
push 0
call fcn.004354d8
add esp, 0x18
jmp 0x43823d
lea ecx, [ebp - 0x824]
call fcn.00401a1f
lea ecx, [ebp - 0x1f8]
call fcn.00401a1f
push 2
lea ecx, [ebp - 0x6cc]
call fcn.0040194d
mov dword [ebp - 0x5d0], 8
lea eax, [ebp - 0x6cc]
push eax
push 0x5382
lea eax, [ebp - 0x7a0]
push eax
push 0
push 1
call fcn.00432691
add esp, 0x14
push 1
push 1
push 0x385a
push 0x6a2e
lea eax, [ebp - 0x5d0]
push eax
push 0x493c
lea eax, [ebp - 0x6cc]
push eax
push 1
push 0x866
call fcn.00434acc
add esp, 0x24
lea ecx, [ebp - 0x6cc]
call fcn.00401a1f
mov dword [ebp - 0x294], 1
mov dword [ebp - 0x7a8], 0xffffffff
mov dword [ebp - 0x194], 0xee39f3fa
mov dword [ebp - 0x3e4], 0xf6085e07
mov dword [ebp - 0x5bc], 0x13d0bb94
mov dword [ebp - 0x7b0], 9
mov dword [ebp - 0x29c], 0xfff839e0
mov dword [ebp - 0x580], 1
mov dword [ebp - 0x1bc], 0xfffa
push 2
lea ecx, [ebp - 0x6e4]
call fcn.0040194d
mov dword [ebp - 0x2b4], 0xffffffff
mov dword [ebp - 0x538], 0x633933b8
mov dword [ebp - 0x28], 0
jmp 0x43838b
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x4383a1
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x524], 0xc9a130df
jmp 0x438384
mov dword [ebp - 0x28], 0
jmp 0x4383b1
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x4383ca
push dword [ebp - 0x28]
lea ecx, [ebp - 0x6e4]
call fcn.00401379
and dword [eax], 0
jmp 0x4383aa
lea eax, [ebp - 0x294]
push eax
push 0
push 1
push 0x5269
push 0x7993
call fcn.004353e8
add esp, 0x14
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x7b8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x524], 0
je 0x438418
cmp dword [ebp - 0x580], 0
je 0x438418
mov dword [ebp - 0x46c], 1
jmp 0x43841f
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x31e
jg 0x438443
mov dword [ebp - 0x3d4], 1
jmp 0x43844a
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x3d4], eax
jle 0x438464
mov dword [ebp - 0x2a4], 1
jmp 0x43846b
and dword [ebp - 0x2a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x524]
cmp eax, dword [ebp - 0x2a4]
je 0x43848c
mov dword [ebp - 0x4bc], 1
jmp 0x438493
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
mov esi, dword [ebp - 0x1bc]
push 1
lea ecx, [ebp - 0x6e4]
call fcn.00401379
add esi, dword [eax]
cmp esi, dword [ebp - 0x4bc]
jl 0x4384c9
mov dword [ebp - 0x2ac], 1
jmp 0x4384d0
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
sub eax, 0xc6dd
cmp eax, dword [ebp - 0x2b4]
jg 0x4384f8
cmp dword [ebp - 0x194], 0
je 0x4384f8
mov dword [ebp - 0x3dc], 1
jmp 0x4384ff
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3e4]
cmp dword [ebp - 0x3dc], eax
jg 0x438519
mov dword [ebp - 0x474], 1
jmp 0x438520
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x474], eax
jge 0x43853a
mov dword [ebp - 0x2bc], 1
jmp 0x438541
and dword [ebp - 0x2bc], 0
cmp dword [ebp - 0x2bc], 1
jae 0x438556
mov dword [ebp - 0x2c4], 1
jmp 0x43855d
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x3e4]
cmp dword [ebp - 0x2c4], eax
jle 0x438577
mov dword [ebp - 0x4c0], 1
jmp 0x43857e
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x538]
cmp dword [ebp - 0x4c0], eax
jg 0x438598
mov dword [ebp - 0x2cc], 1
jmp 0x43859f
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 0xffffffff
jne 0x4385b4
mov dword [ebp - 0x3ec], 1
jmp 0x4385bb
and dword [ebp - 0x3ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x524]
cmp dword [ebp - 0x3ec], eax
jle 0x4385dc
mov dword [ebp - 0x53c], 1
jmp 0x4385e3
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x7c8], eax
xor eax, eax
inc eax
cmp eax, 0x62699ff9
jne 0x438611
mov dword [ebp - 0x2d4], 1
jmp 0x438618
and dword [ebp - 0x2d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp + eax - 0x524], ecx
lea ecx, [ebp - 0x6e4]
call fcn.00401a1f
mov dword [ebp - 0xa0], 0x9714a025
push 2
lea ecx, [ebp - 0xb8]
call fcn.0040194d
mov dword [ebp - 0x148], 0
push 2
lea ecx, [ebp - 0x20c]
call fcn.0040194d
mov dword [ebp - 0x1ac], 0x211521fa
mov dword [ebp - 0xe0], 9
mov dword [ebp - 0x19c], 0xb862b336
lea eax, [ebp - 0xb8]
push eax
push 1
push 0x7092
push 0x33ac
push 1
lea eax, [ebp - 0x544]
push eax
push 0x35b2
push 0x4c1a
call fcn.00434c6b
add esp, 0x20
push 1
push 0x93e
push 0x4f9
lea eax, [ebp - 0x20c]
push eax
push 1
lea eax, [ebp - 0x544]
push eax
call fcn.00434d7a
add esp, 0x18
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x7d8], eax
cmp dword [ebp - 0xa0], 0
je 0x438705
xor eax, eax
je 0x438705
mov dword [ebp - 0x47c], 1
jmp 0x43870c
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0xa0], eax
mov esi, dword [ebp - 0xa0]
push 1
lea ecx, [ebp - 0xb8]
call fcn.00401379
cmp esi, dword [eax]
jne 0x43873b
mov dword [ebp - 0x2dc], 1
jmp 0x438742
and dword [ebp - 0x2dc], 0
cmp dword [ebp - 0x2dc], 0xb445acee
ja 0x43875a
mov dword [ebp - 0x3f4], 1
jmp 0x438761
and dword [ebp - 0x3f4], 0
imul eax, dword [ebp - 0x3f4], 0x80ee
cmp eax, 0x4bcd
je 0x43877e
mov dword [ebp - 0x5fc], 1
jmp 0x438785
and dword [ebp - 0x5fc], 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00401379
push 0
lea ecx, [ebp - 0xb8]
call fcn.00401379
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x7e0], eax
push 1
lea ecx, [ebp - 0xb8]
call fcn.00401379
push 1
lea ecx, [ebp - 0xb8]
call fcn.00401379
mov esi, dword [eax]
add esi, 0xc4dd
push 1
lea ecx, [ebp - 0xb8]
call fcn.00401379
cmp esi, dword [eax]
jne 0x4387f2
mov dword [ebp - 0x2e4], 1
jmp 0x4387f9
and dword [ebp - 0x2e4], 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00401379
mov ecx, dword [ebp - 0x2e4]
cmp ecx, dword [eax]
jne 0x43881c
mov dword [ebp - 0x108], 1
jmp 0x438823
and dword [ebp - 0x108], 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00401379
mov ecx, dword [ebp - 0x108]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x20c]
call fcn.00401379
mov ecx, dword [ebp - 0x108]
mov dword [eax], ecx
cmp dword [ebp - 0x108], 0
je 0x438874
push 1
lea ecx, [ebp - 0xb8]
call fcn.00401379
cmp dword [eax], 0
je 0x438874
mov dword [ebp - 0x4c4], 1
jmp 0x43887b
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x4c4], eax
jle 0x43889a
or eax, 0xffffffff
je 0x43889a
mov dword [ebp - 0x2ec], 1
jmp 0x4388a1
and dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x2ec], 0
je 0x438b38
mov dword [ebp - 0x5c], 0xf509e13c
mov dword [ebp - 0x10], 0
jmp 0x4388c5
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x4388db
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x404], 1
jmp 0x4388be
mov dword [ebp - 0x10], 0
jmp 0x4388eb
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x438901
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x484], 0x832a49e8
jmp 0x4388e4
mov dword [ebp - 0x10], 0
jmp 0x438911
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x438927
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x760], 0
jmp 0x43890a
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x7e8], eax
cmp dword [ebp - 0x5c], 0x53c8
jne 0x438945
mov dword [ebp - 0x1d4], 1
jmp 0x43894c
and dword [ebp - 0x1d4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x484], ecx
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x1d4], eax
je 0x438979
mov dword [ebp - 0x3fc], 1
jmp 0x438980
and dword [ebp - 0x3fc], 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00401379
mov esi, dword [ebp - 0x3fc]
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0xb8]
call fcn.00401379
cmp esi, dword [eax]
je 0x4389b3
mov dword [ebp - 0x2f4], 1
jmp 0x4389ba
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 1
jle 0x4389cf
mov dword [ebp - 0x54c], 1
jmp 0x4389d6
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x5c], 0
je 0x438a0a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x484], 0
je 0x438a0a
mov dword [ebp - 0x2fc], 1
jmp 0x438a11
and dword [ebp - 0x2fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x760]
cmp dword [ebp - 0x2fc], eax
jne 0x438a32
mov dword [ebp - 0x5c4], 1
jmp 0x438a39
and dword [ebp - 0x5c4], 0
push 1
lea ecx, [ebp - 0x20c]
call fcn.00401379
mov dword [eax], 0x7673ed13
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x404], 0x7673ed13
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x760]
mov dword [ebp - 0x804], eax
push 0
lea ecx, [ebp - 0x20c]
call fcn.00401379
mov eax, dword [eax]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
inc eax
mov ecx, dword [ebp - 0x148]
imul ecx, eax
test ecx, ecx
je 0x438aa7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x404], 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00401379
cmp dword [eax], 0xfff8
jne 0x438ac8
mov dword [ebp - 0x304], 1
jmp 0x438acf
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x1ac]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x760]
jle 0x438afc
mov dword [ebp - 0x4c8], 1
jmp 0x438b03
and dword [ebp - 0x4c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x760]
imul eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x19c], eax
push 0x2153
push 1
push 0x2707
push 0
call fcn.00435fb1
add esp, 0x10
jmp 0x439076
mov dword [ebp - 0x110], 0x6993
push 1
lea ecx, [ebp - 0x510]
call fcn.0040194d
mov dword [ebp - 0x424], 8
push 4
lea ecx, [ebp - 0x644]
call fcn.0040194d
mov dword [ebp - 0x61c], 0x9b3eeac6
mov dword [ebp - 0x5cc], 0x4cddccf3
push 1
push 1
push 0x1d51
push 0x2527
lea eax, [ebp - 0x510]
push eax
push 0x1ce9
lea eax, [ebp - 0x90]
push eax
call fcn.00431f28
add esp, 0x1c
mov dword [ebp - 0x90], 0
jmp 0x438bbc
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x438bd8
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x1e0], 0xfffffff9
jmp 0x438baf
push 1
push 0x1d4e
lea eax, [ebp - 0x90]
push eax
push 0x5859
push 1
lea eax, [ebp - 0x644]
push eax
push 0x492c
call fcn.00434ee6
add esp, 0x1c
cmp dword [ebp - 0x110], 1
je 0x438c16
mov dword [ebp - 0x30c], 1
jmp 0x438c1d
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x30c]
sub eax, dword [ebp - 0x110]
cmp eax, 0xb4c2
jne 0x438c3c
mov dword [ebp - 0x40c], 1
jmp 0x438c43
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
add eax, 0x322e546e
cmp eax, 0x85ae
jl 0x438c61
mov dword [ebp - 0x554], 1
jmp 0x438c68
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x80c], eax
mov eax, 0x6c9a5ce7
cmp eax, 9
jl 0x438c8a
mov dword [ebp - 0x314], 1
jmp 0x438c91
and dword [ebp - 0x314], 0
push 0
lea ecx, [ebp - 0xb8]
call fcn.00401379
mov esi, dword [ebp - 0x314]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x510]
call fcn.00401379
cmp esi, dword [eax]
je 0x438cc4
mov dword [ebp - 0x48c], 1
jmp 0x438ccb
and dword [ebp - 0x48c], 0
imul eax, dword [ebp - 0x48c], 0x5a44
cmp eax, 0xfffffff9
jbe 0x438ce6
mov dword [ebp - 0x31c], 1
jmp 0x438ced
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x31c]
jl 0x438d07
mov dword [ebp - 0x414], 1
jmp 0x438d0e
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x414], eax
jne 0x438d28
mov dword [ebp - 0x324], 1
jmp 0x438d2f
and dword [ebp - 0x324], 0
push 0
lea ecx, [ebp - 0x510]
call fcn.00401379
mov ecx, dword [ebp - 0x324]
cmp ecx, dword [eax]
jle 0x438d52
mov dword [ebp - 0x4e8], 1
jmp 0x438d59
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x4e8], eax
jle 0x438d73
mov dword [ebp - 0x32c], 1
jmp 0x438d7a
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x110]
add eax, 0x267fa09d
cmp eax, dword [ebp - 0x32c]
je 0x438da2
cmp dword [ebp - 0x19c], 0
je 0x438da2
mov dword [ebp - 0x1c4], 1
jmp 0x438da9
and dword [ebp - 0x1c4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp + eax - 0x1e0], ecx
push 1
lea ecx, [ebp - 0x20c]
call fcn.00401379
mov ecx, dword [ebp - 0x1c4]
cmp ecx, dword [eax]
jg 0x438ddf
mov dword [ebp - 0x41c], 1
jmp 0x438de6
and dword [ebp - 0x41c], 0
mov esi, dword [ebp - 0x41c]
sub esi, dword [ebp - 0xe0]
push 0
lea ecx, [ebp - 0x510]
call fcn.00401379
cmp esi, dword [eax]
je 0x438e0f
mov dword [ebp - 0x334], 1
jmp 0x438e16
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 0x2b4d3a61
jl 0x438e2e
mov dword [ebp - 0x494], 1
jmp 0x438e35
and dword [ebp - 0x494], 0
push 0
lea ecx, [ebp - 0x510]
call fcn.00401379
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [eax]
jne 0x438e58
mov dword [ebp - 0x33c], 1
jmp 0x438e5f
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0x33c], eax
jne 0x438e79
mov dword [ebp - 0x1a4], 1
jmp 0x438e80
and dword [ebp - 0x1a4], 0
push 0
lea ecx, [ebp - 0x644]
call fcn.00401379
mov ecx, dword [ebp - 0x1a4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x61c], eax
mov eax, 0x37f7
test eax, eax
je 0x438fd8
push 0
lea ecx, [ebp - 0x510]
call fcn.00401379
mov ecx, dword [ebp - 0x424]
imul ecx, dword [eax]
test ecx, ecx
je 0x438ee6
push 1
lea ecx, [ebp - 0x20c]
call fcn.00401379
cmp dword [eax], 0
je 0x438ee6
mov dword [ebp - 0x344], 1
jmp 0x438eed
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x344], eax
je 0x438f07
mov dword [ebp - 0x4d0], 1
jmp 0x438f0e
and dword [ebp - 0x4d0], 0
cmp dword [ebp - 0x4d0], 0xd17825fa
jae 0x438f26
mov dword [ebp - 0x55c], 1
jmp 0x438f2d
and dword [ebp - 0x55c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e0]
mov dword [ebp - 0x814], eax
mov eax, 0x696e02f5
cmp eax, 5
jne 0x438f56
mov dword [ebp - 0x34c], 1
jmp 0x438f5d
and dword [ebp - 0x34c], 0
push 0
lea ecx, [ebp - 0x510]
call fcn.00401379
mov ecx, dword [ebp - 0x34c]
cmp ecx, dword [eax]
jle 0x438f80
mov dword [ebp - 0x42c], 1
jmp 0x438f87
and dword [ebp - 0x42c], 0
push 2
lea ecx, [ebp - 0x644]
call fcn.00401379
mov ecx, dword [ebp - 0x42c]
cmp ecx, dword [eax]
jle 0x438faa
mov dword [ebp - 0x354], 1
jmp 0x438fb1
and dword [ebp - 0x354], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e0]
mov ecx, dword [ebp - 0x354]
lea eax, [eax + ecx - 2]
test eax, eax
je 0x438fd8
mov dword [ebp - 0x49c], 1
jmp 0x438fdf
and dword [ebp - 0x49c], 0
push 0
lea ecx, [ebp - 0xb8]
call fcn.00401379
mov esi, dword [ebp - 0x49c]
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0xb8]
call fcn.00401379
cmp esi, dword [eax]
jl 0x439012
mov dword [ebp - 0x35c], 1
jmp 0x439019
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 8
je 0x43902e
mov dword [ebp - 0x434], 1
jmp 0x439035
and dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 0xc366
je 0x43904d
mov dword [ebp - 0x364], 1
jmp 0x439054
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x5cc], eax
lea ecx, [ebp - 0x644]
call fcn.00401a1f
lea ecx, [ebp - 0x510]
call fcn.00401a1f
mov esi, dword [ebp - 0x1ac]
push 0
lea ecx, [ebp - 0x20c]
call fcn.00401379
mov dword [eax], esi
lea ecx, [ebp - 0x20c]
call fcn.00401a1f
lea ecx, [ebp - 0xb8]
call fcn.00401a1f
lea eax, [ebp - 0x190]
push eax
push 0x5666
lea eax, [ebp - 0x198]
push eax
push 1
push 0
push 0x6cb7
call fcn.00436085
add esp, 0x18
mov dword [ebp - 0x88], 5
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x138], 0
jmp 0x4390f2
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jge 0x43910e
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x8f0], 0xcd546735
jmp 0x4390e5
mov dword [ebp - 0x88], 0
jmp 0x439127
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1c
jl 0x4391f6
mov dword [ebp - 0x5d4], 0xffffffff
mov dword [ebp - 0x56c], 4
mov dword [ebp - 0x564], 0xffffffff
cmp dword [ebp - 0x88], 0
je 0x4391ca
mov dword [ebp - 0x604], 0xffffffff
lea eax, [ebp - 0x564]
push eax
lea eax, [ebp - 0x604]
push eax
push 1
lea eax, [ebp - 0x56c]
push eax
lea eax, [ebp - 0x5d4]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x8c]
push eax
push 0
push 0x3c3f
call fcn.00437089
add esp, 0x24
mov byte [ebp - 0x77], 0
push 0x1018
push 1
push 1
lea eax, [ebp - 0x77]
push eax
push 0x5914
push 0x6514
push 0x5f88
call fcn.0043500a
add esp, 0x1c
jmp 0x4391f1
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x4391f1
push 0
push 1
push 0x6cca
push 0x67e7
push 0x403b
call fcn.004350cd
add esp, 0x14
jmp 0x43911a
mov dword [ebp - 0x8c], 0
jmp 0x43920f
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x43922b
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x8f0], 0x3876a47c
jmp 0x439202
mov eax, dword [ebp - 0x190]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x43974a
push 1
lea ecx, [ebp - 0x1ec]
call fcn.0040194d
mov dword [ebp - 0x1cc], 1
mov dword [ebp - 0x584], 7
push 0x5eef
push 0x69ee
push 0x1eb5
push 1
push 0x1568
push 0x2302
lea eax, [ebp - 0x1ec]
push eax
push 0x6268
lea eax, [ebp - 0xc0]
push eax
push 0
push 0x7e9d
push 0x3931
call fcn.00435cef
add esp, 0x30
mov dword [ebp - 0xc0], 0
jmp 0x4392bb
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x4392d7
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x908], 0xfffffffc
jmp 0x4392ae
push 0
lea ecx, [ebp - 0x1ec]
call fcn.00401379
cmp dword [eax], 1
jl 0x4392f5
mov dword [ebp - 0x4f8], 1
jmp 0x4392fc
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x4f8], eax
jg 0x439316
mov dword [ebp - 0x574], 1
jmp 0x43931d
and dword [ebp - 0x574], 0
push 0
lea ecx, [ebp - 0x1ec]
call fcn.00401379
push 0
lea ecx, [ebp - 0x1ec]
call fcn.00401379
cmp dword [eax], 0
jge 0x439348
mov dword [ebp - 0x36c], 1
jmp 0x43934f
and dword [ebp - 0x36c], 0
push 0
lea ecx, [ebp - 0x1ec]
call fcn.00401379
mov ecx, dword [ebp - 0x36c]
add ecx, dword [eax]
sub ecx, dword [ebp - 0x1cc]
imul eax, ecx, 0xfffffffd
cmp eax, dword [ebp - 0x1cc]
jg 0x439381
mov dword [ebp - 0x43c], 1
jmp 0x439388
and dword [ebp - 0x43c], 0
push 0
lea ecx, [ebp - 0x1ec]
call fcn.00401379
mov esi, dword [eax]
add esi, dword [ebp - 0x43c]
push 0
lea ecx, [ebp - 0x1ec]
call fcn.00401379
cmp esi, dword [eax]
jge 0x4393ba
mov dword [ebp - 0x374], 1
jmp 0x4393c1
and dword [ebp - 0x374], 0
push 0
lea ecx, [ebp - 0x1ec]
call fcn.00401379
mov ecx, dword [ebp - 0x374]
add ecx, dword [eax]
je 0x4394c0
push 2
lea ecx, [ebp - 0x6a8]
call fcn.0040194d
mov dword [ebp - 0x5dc], 0xfffffff7
push 1
lea ecx, [ebp - 0x720]
call fcn.0040194d
mov dword [ebp - 0x57c], 0xf6f6d779
lea eax, [ebp - 0x62c]
push eax
push 0x3914
push 0x65fa
lea eax, [ebp - 0x6a8]
push eax
push 0
push 0x575
push 0
call fcn.004366a5
add esp, 0x1c
push 0x2fa5
push 1
push 1
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0x720]
push eax
push 1
push 0x3fd7
call fcn.0043227b
add esp, 0x1c
push 0x18a7
lea eax, [ebp - 0x57c]
push eax
lea eax, [ebp - 0x6a8]
push eax
push 0
push 0x41e1
push 0x27ab
push 0x1eec
lea eax, [ebp - 0x720]
push eax
push 1
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x584]
push eax
lea eax, [ebp - 0x1ec]
push eax
push 0x25b0
call fcn.00436267
add esp, 0x34
lea ecx, [ebp - 0x720]
call fcn.00401a1f
lea ecx, [ebp - 0x6a8]
call fcn.00401a1f
jmp 0x4394f9
mov dword [ebp - 0x4a4], 0x4b76fef6
push 1
push 1
push 0x59f2
push 0xe1c
lea eax, [ebp - 0x4a4]
push eax
call fcn.004350cd
add esp, 0x14
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp + eax - 0x908], ecx
lea ecx, [ebp - 0x1ec]
call fcn.00401a1f
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x17c], 0xffffffff
mov dword [ebp - 0x384], 0xfffffff8
push 1
lea ecx, [ebp - 0x714]
call fcn.0040194d
mov dword [ebp - 0x4c], 0xde574131
push 1
push 0x44bb
lea eax, [ebp - 0x714]
push eax
push 0x2ab8
push 0xb12
push 1
lea eax, [ebp - 0x878]
push eax
call fcn.0043515e
add esp, 0x1c
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x880], eax
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], eax
je 0x43957c
mov dword [ebp - 0x37c], 1
jmp 0x439583
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x37c]
lea eax, [ecx + eax - 0xa]
cmp eax, dword [ebp - 0x384]
jne 0x4395a7
mov dword [ebp - 0x444], 1
jmp 0x4395ae
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x444]
jge 0x439636
mov dword [ebp - 0x118], 0
jmp 0x4395d2
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 4
jge 0x4395ee
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x8bc], 9
jmp 0x4395c5
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x8bc], 0
jne 0x43960c
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x8bc], 0
push 0
lea ecx, [ebp - 0x714]
call fcn.00401379
push 4
pop ecx
imul ecx, ecx, 3
xor edx, edx
sub edx, dword [ebp + ecx - 0x8bc]
imul edx, dword [eax]
mov dword [ebp - 0x384], edx
jmp 0x4396c0
mov dword [ebp - 0x60c], 7
mov byte [ebp - 0x7a], 0
push 1
push 0x6989
push 0x383e
lea eax, [ebp - 0x7a]
push eax
push 1
call fcn.00435243
add esp, 0x14
cmp dword [ebp - 0x17c], 0
je 0x439699
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x60c]
add eax, dword [ebp - 0x4c]
je 0x439699
push 1
lea eax, [ebp - 0x4c]
push eax
push 0x344c
push 1
push 0x1098
lea eax, [ebp - 0x3c]
push eax
call fcn.0043530a
add esp, 0x18
jmp 0x4396c0
mov dword [ebp - 0x58c], 0xb4af
push 0x4128
push 0x7b39
push 1
push 1
lea eax, [ebp - 0x58c]
push eax
call fcn.004323a2
add esp, 0x14
mov dword [ebp - 0x3c], 0
jmp 0x4396d0
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x439734
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x4396fd
push 0x5843
push 1
push 1
push 0x6fec
push 0x45a4
call fcn.004353e8
add esp, 0x14
mov dword [ebp - 0x4c], 0
jmp 0x43970d
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x439732
push 0
push 1
push 1
push 0x7fcb
mov edx, 0x2b03
mov ecx, 0x6ad5
call fcn.00478d43
add esp, 0x10
jmp 0x439706
jmp 0x4396c9
lea ecx, [ebp - 0x714]
call fcn.00401a1f
mov eax, dword [ebp - 0x74]
and dword [eax], 0
jmp 0x43b977
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x190]
push eax
push 0
push 0x6dce
push 0x3180
lea edx, [ebp - 0x198]
xor cl, cl
call fcn.00478cd7
add esp, 0x14
mov eax, dword [ebp - 0xe8]
cmp dword [eax], 0x4550
je 0x439a0f
push 0x2fce
push 0x3a75
push 0x6475
push 0x579b
push 1
push 0x57c
push 0x1982
push 0x1bef
push 0x354b
push 1
push 0
call fcn.0043baae
add esp, 0x2c
mov dword [ebp - 8], 0
cmp dword [ebp - 8], 0
je 0x439866
mov dword [ebp - 8], 0
jmp 0x4397dd
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jl 0x439823
mov dword [ebp - 0x5e4], 0x6e6
mov byte [ebp - 0x78], 0
movzx eax, byte [ebp - 0x78]
test eax, eax
je 0x439816
push 1
push 1
push 1
push 0x48ce
mov edx, 0x477f
mov ecx, 0x34c1
call fcn.00478d43
add esp, 0x10
cmp dword [ebp - 0x5e4], 0
je 0x439821
jmp 0x4397d6
jmp 0x4397d6
mov dword [ebp - 8], 0
jmp 0x439833
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 5
jge 0x439861
mov dword [ebp - 0x594], 0x693e93
push 1
push 0x7ea1
push 1
call fcn.0043545c
add esp, 0xc
cmp dword [ebp - 0x594], 0
je 0x43985f
jmp 0x439861
jmp 0x43982c
jmp 0x439a04
mov dword [ebp - 0x684], 6
mov dword [ebp - 0x680], 6
mov dword [ebp - 0x67c], 6
mov dword [ebp - 0x678], 6
lea ecx, [ebp - 0x1bd]
call fcn.00401a3b
push eax
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x684]
push eax
lea ecx, [ebp - 0x910]
call fcn.00401a3e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x834]
call fcn.004019f9
mov dword [ebp - 0x624], 0xd99ea7eb
mov dword [ebp - 0x158], 0
jmp 0x4398e6
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jge 0x439902
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x180], 1
jmp 0x4398d9
mov dword [ebp - 8], 0xffffffff
jmp 0x439912
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 8
jge 0x4399f9
mov dword [ebp - 0x4d8], 1
cmp dword [ebp - 0x4d8], 0
je 0x43993e
cmp dword [ebp - 8], 0
je 0x43993e
cmp dword [ebp - 0x4d8], 0
jne 0x439957
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x180], 0
jne 0x439957
and dword [ebp - 0x200], 0
jmp 0x439961
mov dword [ebp - 0x200], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x180]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x180]
cmp eax, 0xb0ae
je 0x43998f
mov dword [ebp - 0x210], 1
jmp 0x439996
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x200]
cmp eax, dword [ebp - 0x210]
jne 0x4399b0
mov dword [ebp - 0x188], 1
jmp 0x4399b7
and dword [ebp - 0x188], 0
push 0
lea ecx, [ebp - 0x834]
call fcn.00401379
mov ecx, dword [ebp - 0x188]
mov dword [eax], ecx
cmp dword [ebp - 0x188], 0xfffffffd
jne 0x4399e1
mov dword [ebp - 0x218], 1
jmp 0x4399e8
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x624], eax
jmp 0x43990b
lea ecx, [ebp - 0x834]
call fcn.00401a1f
mov eax, dword [ebp - 0x74]
and dword [eax], 0
jmp 0x43b977
mov dword [ebp - 0x64], 0x69fdf99f
mov dword [ebp - 0x220], 0x2ea21e1d
mov dword [ebp - 0x120], 0xf4e1c2e9
mov dword [ebp - 0x270], 0xfffffffb
mov dword [ebp - 0x5a4], 0xffffffff
push 3
lea ecx, [ebp - 0x6fc]
call fcn.0040194d
push 0x5f29
push 0x2eac
lea eax, [ebp - 0xd8]
push eax
push 0x78d1
push 1
push 0x5b25
lea eax, [ebp - 0x6fc]
push eax
push 0
call fcn.00436e3e
add esp, 0x20
mov dword [ebp - 0xd8], 0
jmp 0x439a92
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jge 0x439aae
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x800], 0
jmp 0x439a85
mov dword [ebp - 0x64], 0
jmp 0x439abe
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffff0
jne 0x439de1
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x94], 0
push 2
lea ecx, [ebp - 0x6c0]
call fcn.0040194d
lea eax, [ebp - 0x888]
push eax
push 0x5bba
push 0x4847
push 0x41ed
push 1
push 1
push 0x1530
push 0x6c08
push 1
lea eax, [ebp - 0x6c0]
push eax
push 0x2727
push 0x44c9
push 0xf66
push 0x4c34
push 0x797f
push 0x467b
call fcn.004355cd
add esp, 0x40
mov byte [ebp - 0x7d], 0
push 0x6119
push 0x9ea
lea eax, [ebp - 0x7d]
push eax
push 0x7e16
push 0x273b
push 1
push 0x3690
push 0x53ef
push 1
push 0
call fcn.00435e22
add esp, 0x28
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x64], eax
jge 0x439b99
mov dword [ebp - 0x228], 1
jmp 0x439ba0
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x120], eax
jge 0x439bcc
cmp dword [ebp - 0x40], 0
je 0x439bcc
mov dword [ebp - 0x230], 1
jmp 0x439bd3
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 2
jle 0x439be8
mov dword [ebp - 0x238], 1
jmp 0x439bef
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x238], eax
jg 0x439c09
mov dword [ebp - 0x240], 1
jmp 0x439c10
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x240], 0x7142b622
jg 0x439c28
mov dword [ebp - 0x248], 1
jmp 0x439c2f
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x248]
cmp eax, dword [ebp - 0x120]
je 0x439c4c
mov dword [ebp - 0x250], 1
jmp 0x439c53
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jne 0x439c77
cmp dword [ebp - 0x40], 0
jne 0x439c77
and dword [ebp - 0x258], 0
jmp 0x439c81
mov dword [ebp - 0x258], 1
mov eax, dword [ebp - 0x258]
sub eax, dword [ebp - 0x270]
inc eax
jne 0x439c9f
cmp dword [ebp - 0x40], 0
jne 0x439c9f
and dword [ebp - 0x260], 0
jmp 0x439ca9
mov dword [ebp - 0x260], 1
cmp dword [ebp - 0x260], 0x88ca
jge 0x439cc1
mov dword [ebp - 0x268], 1
jmp 0x439cc8
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x268], eax
jge 0x439cdf
mov dword [ebp - 0x59c], 1
jmp 0x439ce6
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x774], eax
cmp dword [ebp - 0x64], 0x1d89e177
jge 0x439d07
mov dword [ebp - 0x5ec], 1
jmp 0x439d0e
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x5a4], 0xffffffff
jl 0x439d35
cmp dword [ebp - 0x120], 0
je 0x439d35
mov dword [ebp - 0x278], 1
jmp 0x439d3c
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x278], eax
jge 0x439d53
mov dword [ebp - 0x280], 1
jmp 0x439d5a
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x280], eax
jg 0x439d71
mov dword [ebp - 0x140], 1
jmp 0x439d78
and dword [ebp - 0x140], 0
push 1
lea ecx, [ebp - 0x6c0]
call fcn.00401379
mov ecx, dword [ebp - 0x140]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x6fc]
call fcn.00401379
mov ecx, dword [ebp - 0x140]
mov dword [eax], ecx
cmp dword [ebp - 0x140], 1
jg 0x439db7
mov dword [ebp - 0x288], 1
jmp 0x439dbe
and dword [ebp - 0x288], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x288]
mov dword [ebp + eax - 0x800], ecx
lea ecx, [ebp - 0x6c0]
call fcn.00401a1f
jmp 0x439ab7
lea ecx, [ebp - 0x6fc]
call fcn.00401a1f
push 1
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0xe8]
push eax
push 1
call fcn.004359d6
add esp, 0x10
mov dword [ebp - 0x8a0], 0xa049fe38
mov dword [ebp - 0x8a8], 0
mov dword [ebp - 0x8c0], 0xfffffff8
mov dword [ebp - 0x77c], 0x4b811476
mov dword [ebp - 0x828], 0xfffffff8
mov dword [ebp - 0x784], 0x70cd5099
push 2
lea ecx, [ebp - 0x844]
call fcn.0040194d
mov dword [ebp - 0x614], 0xa1654207
mov dword [ebp - 0x88c], 1
mov dword [ebp - 0xc8], 0
jmp 0x439e7c
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x439e98
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x92c], 0
jmp 0x439e6f
push 1
push 0x69b8
push 0x360d
push 1
lea eax, [ebp - 0x844]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.00432a74
add esp, 0x18
push 1
push 0x287c
push 0
push 0x7e28
lea eax, [ebp - 0x614]
push eax
call fcn.00432ccc
add esp, 0x14
mov byte [ebp - 0x7c], 0
push 0
push 0x4b0b
lea eax, [ebp - 0x7c]
push eax
push 1
push 0x7aff
call fcn.0043662b
add esp, 0x14
lea ecx, [ebp - 0x844]
call fcn.00401a1f
cmp dword [ebp - 0x12c], 0
jne 0x43a012
push 0x386a
push 0x6a03
push 0x286c
push 0x59cd
push 0x4863
push 1
push 1
call fcn.00435b54
add esp, 0x1c
mov dword [ebp - 0x5ac], 0xe125d16d
push 4
lea ecx, [ebp - 0x6d8]
call fcn.0040194d
mov dword [ebp - 0x128], 0
jmp 0x439f64
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 4
jge 0x439f86
push dword [ebp - 0x128]
lea ecx, [ebp - 0x6d8]
call fcn.00401379
mov dword [eax], 0xf4288a13
jmp 0x439f57
push 0x1582
push 0x4cf0
push 0x7355
push 1
push 0x665d
push 0x5322
push 0x3a2f
lea eax, [ebp - 0x6d8]
push eax
push 0x6b6d
push 1
push 0x358
lea eax, [ebp - 0x5ac]
push eax
call fcn.00435cef
add esp, 0x30
mov byte [ebp - 0x55], 0
push 0x101a
lea eax, [ebp - 0x55]
push eax
push 0x442d
push 0x274a
push 0x5682
push 1
push 0x2665
push 0x676e
push 1
push 1
call fcn.00435e22
add esp, 0x28
lea ecx, [ebp - 0x6d8]
call fcn.00401a1f
mov eax, dword [ebp - 0x74]
and dword [eax], 0
jmp 0x43b977
mov dword [ebp - 0x150], 0x5c68ec0a
mov dword [ebp - 0x150], 0
jmp 0x43a035
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x1b
jl 0x43a073
push 0x7e30
push 1
push 0x5519
push 1
call fcn.00435fb1
add esp, 0x10
push 1
push 0x7e19
push 1
push 0x1dc5
push 0x604a
push 0
call fcn.004364de
add esp, 0x18
jmp 0x43a028
push 0
push 1
push 1
push 0x288b
push 0xc2
mov edx, 0x5516
mov ecx, 0x4b18
call fcn.0040261d
add esp, 0x14
lea eax, [ebp - 0x20]
push eax
push 1
push 0x58b7
lea eax, [ebp - 0x12c]
push eax
push 1
lea eax, [ebp - 0x190]
push eax
push 0x6c42
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x78c]
push eax
call fcn.00432dd3
add esp, 0x24
mov dword [ebp - 0x9c], 0x3c69
push 1
lea ecx, [ebp - 0x854]
call fcn.0040194d
lea eax, [ebp - 0x838]
push eax
lea eax, [ebp - 0x854]
push eax
push 0
call fcn.0043c84e
add esp, 0xc
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x9c], 0
jmp 0x43a120
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x34
jne 0x43a150
mov byte [ebp - 0x76], 0
push 0x61a8
push 0x7eee
push 1
push 0x3ac3
push 1
push 1
lea eax, [ebp - 0x76]
push eax
call fcn.0043613c
add esp, 0x1c
jmp 0x43a113
lea ecx, [ebp - 0x854]
call fcn.00401a1f
push 0x5faa
push 1
push 0
push 1
push 0x39ee
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043480a
add esp, 0x20
push 0x4af6
push 0x2dec
push 0x2eae
push 1
lea eax, [ebp - 0xe8]
push eax
push 0x3b04
lea eax, [ebp - 0x290]
push eax
push 0x79e8
push 1
push 0xedd
push 0x58bd
push 0x4a04
lea eax, [ebp - 0x12c]
push eax
call fcn.00436267
add esp, 0x34
mov dword [ebp - 0x740], 0x5bb2c213
mov dword [ebp - 0x73c], 0x5bb2c213
mov dword [ebp - 0x738], 0x5bb2c213
mov dword [ebp - 0x734], 0x5bb2c213
mov dword [ebp - 0x100], 0xa2768935
mov dword [ebp - 0x100], 0
jmp 0x43a219
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jg 0x43a295
mov dword [ebp - 0xd0], 0x5010f7a7
mov dword [ebp - 0xd0], 0
jmp 0x43a245
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jg 0x43a290
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0xfc], 0
jmp 0x43a271
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jg 0x43a28e
mov eax, dword [ebp - 0xd0]
cmp dword [ebp + eax*4 - 0x740], 0
je 0x43a28c
jmp 0x43a28e
jmp 0x43a264
jmp 0x43a238
jmp 0x43a20c
cmp dword [ebp - 0x290], 0
je 0x43a2da
push 1
push 0x6b0f
push 1
push 0x49c5
push 0x724c
push 1
call fcn.004364de
add esp, 0x18
push dword [ebp - 0x20]
push 0x633d
push 0x7e7c
push dword [ebp - 0x290]
push 0
push 0
call fcn.00437401
add esp, 0x18
push 1
push 1
push 1
push 0x6346
push 0x2d4c
mov edx, 0x6fd9
mov ecx, 0x5cf1
call fcn.0040261d
add esp, 0x14
push dword [ebp - 0x20]
call fcn.004316f1
pop ecx
test eax, eax
jne 0x43a398
mov dword [ebp - 0x5f4], 0xe125d16d
push 4
lea ecx, [ebp - 0x708]
call fcn.0040194d
push 0x172f
push 0x3409
lea eax, [ebp - 0x794]
push eax
push 0
lea eax, [ebp - 0x708]
push eax
push 0
call fcn.0043c770
add esp, 0x18
push 0x7347
lea eax, [ebp - 0x5f4]
push eax
push 0x2efa
push 1
push 0x2c0c
push 1
lea eax, [ebp - 0x708]
push eax
call fcn.00436798
add esp, 0x1c
push 0x2c85
push 1
push 1
call fcn.00436880
add esp, 0xc
lea ecx, [ebp - 0x708]
call fcn.00401a1f
mov eax, dword [ebp - 0x74]
and dword [eax], 0
jmp 0x43b977
push 2
lea ecx, [ebp - 0x174]
call fcn.0040194d
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x14], 0xa9bacde9
push 2
lea ecx, [ebp - 0x6f0]
call fcn.0040194d
mov dword [ebp - 0x5b4], 0xf7c1ae2e
lea eax, [ebp - 0xa4]
push eax
push 0x61de
lea eax, [ebp - 0x174]
push eax
push 1
push 1
mov edx, 0x1426
mov ecx, 0x1884
call fcn.00478bfa
add esp, 0x14
mov dword [ebp - 0xa4], 0
jmp 0x43a413
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x43a42f
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x8d4], 0x835a23e8
jmp 0x43a406
push 1
lea eax, [ebp - 0xa4]
push eax
push 1
push 0x4b6b
push 0x4e29
push 0x2cfc
push 0x6eec
push 0x4ee4
push 0x4d2a
push 0x489c
lea eax, [ebp - 0x6f0]
push eax
call fcn.0043692c
add esp, 0x2c
push 1
lea ecx, [ebp - 0x174]
call fcn.00401379
cmp dword [eax], 0
jne 0x43a4ab
push 4
pop eax
imul eax, eax, 3
lea eax, [ebp + eax - 0x8d4]
mov dword [ebp - 0x298], eax
push 0
lea ecx, [ebp - 0x174]
call fcn.00401379
mov ecx, dword [ebp - 0x298]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x2c]
jne 0x43a4bf
mov dword [ebp - 0x2a0], 1
jmp 0x43a4c6
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x14], eax
mov esi, dword [ebp - 0x14]
push 1
lea ecx, [ebp - 0x6f0]
call fcn.00401379
mov dword [eax], esi
mov dword [ebp - 0x2c], 0
jmp 0x43a4f7
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 9
jl 0x43a868
mov dword [ebp - 0xac], 0xfffffffc
mov dword [ebp - 0x2f8], 0x1e52
mov dword [ebp - 0x2e8], 0x92ff8224
mov dword [ebp - 0x2f0], 4
mov dword [ebp - 0x14], 1
jmp 0x43a539
cmp dword [ebp - 0x14], 0
jl 0x43a863
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x85c], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x174]
call fcn.00401379
push dword [ebp - 0x14]
lea ecx, [ebp - 0x174]
call fcn.00401379
cmp dword [eax], 0x8fab
jg 0x43a585
mov eax, 0x2121
test eax, eax
jne 0x43a585
and dword [ebp - 0x2a8], 0
jmp 0x43a58f
mov dword [ebp - 0x2a8], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x174]
call fcn.00401379
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2a8]
add ecx, 8
cmp eax, ecx
jle 0x43a5b9
mov dword [ebp - 0x2b0], 1
jmp 0x43a5c0
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 0
jg 0x43a5d5
mov dword [ebp - 0x2b8], 1
jmp 0x43a5dc
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x2b8], eax
jge 0x43a5f6
mov dword [ebp - 0x2c0], 1
jmp 0x43a5fd
and dword [ebp - 0x2c0], 0
push 1
lea ecx, [ebp - 0x174]
call fcn.00401379
mov ecx, dword [ebp - 0x2c0]
cmp ecx, dword [eax]
jge 0x43a620
mov dword [ebp - 0x2c8], 1
jmp 0x43a627
and dword [ebp - 0x2c8], 0
imul eax, dword [ebp - 0x2c8], 0x3da5
cmp eax, dword [ebp - 0xac]
je 0x43a645
mov dword [ebp - 0x1fc], 1
jmp 0x43a64c
and dword [ebp - 0x1fc], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x174]
call fcn.00401379
mov ecx, dword [ebp - 0x1fc]
cmp ecx, dword [eax]
jg 0x43a679
jmp 0x43a4f0
lea ecx, [ebp - 0x6f0]
call fcn.00401a1f
lea ecx, [ebp - 0x174]
call fcn.00401a1f
push 0
push dword [ebp - 0x20]
push 0xa08
call fcn.0043df36
add esp, 0xc
mov dword [ebp - 0x114], 0xbe8e56f9
mov dword [ebp - 0x10c], 0
jmp 0x43a8b3
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 1
jge 0x43a8cf
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x7a4], 0x6bdde0bc
jmp 0x43a8a6
mov dword [ebp - 0x114], 0
jmp 0x43a8e8
cmp dword [ebp - 0x114], 0
jg 0x43a9ae
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x860], 0xb7f37c04
mov dword [ebp - 0x44], 0
jmp 0x43a916
cmp dword [ebp - 0x44], 0
jl 0x43a96e
mov dword [ebp - 0x11c], 0
jmp 0x43a935
cmp dword [ebp - 0x11c], 4
jge 0x43a951
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x8e4], 0
jmp 0x43a928
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8e4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x8e4], eax
jmp 0x43a90f
mov dword [ebp - 0x44], 0
jmp 0x43a97e
cmp dword [ebp - 0x44], 0
jl 0x43a9a9
mov byte [ebp - 0x5d], 0
push 0x79b5
lea eax, [ebp - 0x5d]
push eax
push 0x5b7c
push 0
push 0x40a8
push 1
call fcn.0043c770
add esp, 0x18
jmp 0x43a977
jmp 0x43a8db
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x43a9d0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x43b7a9
mov dword [ebp - 0x48], 0xb871c7bf
push 2
lea ecx, [ebp - 0x690]
call fcn.0040194d
mov dword [ebp - 0x124], 0
jmp 0x43aa0c
cmp dword [ebp - 0x124], 2
jge 0x43aa2e
push dword [ebp - 0x124]
lea ecx, [ebp - 0x690]
call fcn.00401379
mov dword [eax], 0x24d8f3b1
jmp 0x43a9ff
cmp dword [ebp - 0x48], 0
jne 0x43aa3e
mov dword [ebp - 0x598], 0xa5c62e08
mov dword [ebp - 0x7dc], 0
mov dword [ebp - 0x8ac], 0xfffffffe
mov dword [ebp - 0x7e4], 0x1c3c39ba
mov dword [ebp - 0x874], 0xffffffff
mov dword [ebp - 0x7ec], 4
mov dword [ebp - 0x89c], 0xa0d461e3
mov dword [ebp - 0x7f4], 0
push 1
lea ecx, [ebp - 0x6b4]
call fcn.0040194d
mov dword [ebp - 0xdc], 0
jmp 0x43b81f
cmp dword [ebp - 0xdc], 4
jge 0x43b83b
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x920], 0x398
jmp 0x43b812
lea eax, [ebp - 0xdc]
push eax
push 1
push 0x106e
lea eax, [ebp - 0x6b4]
push eax
push 0x828
push 0
call fcn.0043b9b5
add esp, 0x18
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x920], 0
jne 0x43b87b
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x5b8], eax
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1b8]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1b8]
mov esi, dword [eax]
push 1
mov ecx, dword [ebp - 0x4b0]
call fcn.00401379
mov eax, dword [eax]
add eax, 0x6a756a33
sub esi, eax
push 1
mov ecx, dword [ebp - 0x4b0]
call fcn.00401379
mov dword [eax], esi
jmp 0x43b977
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x5c8], eax
lea eax, [ebp + 0x24]
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x5c0]
push dword [eax]
push dword [ebp - 0x5c8]
push 0
call fcn.0042e2fe
add esp, 0xc
pop esi
mov esp, ebp
pop ebp
ret