Function at 0x4374e2
Capabilities:
Encrypt data using speck
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bc6fb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1378
call fcn.004b8740
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x40]
test eax, eax
je 0x440b72
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0xc14], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xa58], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0xa60], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xc24], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb28], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xc1c], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xb10], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xa48], eax
lea eax, [ebp + 0x38]
mov dword [ebp - 0xb08], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xc2c], eax
mov eax, dword [ebp + 0x50]
mov dword [ebp - 0xa38], eax
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 0xa40], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0xa64], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0xb18], eax
lea eax, [ebp + 0x48]
mov dword [ebp - 0xa50], eax
mov eax, dword [ebp - 0xa64]
movzx eax, byte [eax]
test eax, eax
je 0x4407d9
mov eax, dword [ebp - 0xb08]
mov dword [ebp - 0xc34], eax
mov eax, dword [ebp - 0xb10]
mov dword [ebp - 0xc4c], eax
mov eax, dword [ebp - 0xb18]
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp - 0xb20]
mov dword [ebp - 0x928], eax
mov eax, dword [ebp - 0xb28]
mov dword [ebp - 0xc44], eax
mov eax, dword [ebp - 0xc14]
mov dword [ebp - 0xb00], eax
mov eax, dword [ebp - 0xc1c]
mov dword [ebp - 0x980], eax
mov eax, dword [ebp - 0xc24]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0xc2c]
mov dword [ebp - 0xc3c], eax
mov eax, dword [ebp - 0xc34]
movzx eax, byte [eax]
test eax, eax
je 0x43779c
mov eax, dword [ebp - 0xc3c]
mov dword [ebp - 0xc5c], eax
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0xc64], eax
mov eax, dword [ebp - 0xc4c]
mov dword [ebp - 0xc6c], eax
mov eax, dword [ebp - 0xc54]
mov dword [ebp - 0xc74], eax
mov eax, dword [ebp - 0xc5c]
mov dword [ebp - 0xc7c], eax
mov eax, dword [ebp - 0xc64]
mov dword [ebp - 0x87c], eax
mov eax, dword [ebp - 0xc6c]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0xc74]
mov dword [ebp - 0x718], eax
mov eax, dword [ebp - 0x360]
cmp dword [eax], 0x3196e86f
je 0x4376b7
mov eax, dword [ebp - 0x718]
cmp dword [eax], 0
jne 0x4376b7
and dword [ebp - 0x850], 0
jmp 0x4376c1
mov dword [ebp - 0x850], 1
mov eax, dword [ebp - 0x718]
mov eax, dword [eax]
cmp dword [ebp - 0x850], eax
jne 0x4376dd
mov dword [ebp - 0x858], 1
jmp 0x4376e4
and dword [ebp - 0x858], 0
mov eax, dword [ebp - 0x360]
cmp dword [eax], 0
jne 0x437701
mov eax, 0xffff
test eax, eax
jne 0x437701
and dword [ebp - 0x860], 0
jmp 0x43770b
mov dword [ebp - 0x860], 1
mov eax, dword [ebp - 0x858]
cmp eax, dword [ebp - 0x860]
jge 0x437725
mov dword [ebp - 0x868], 1
jmp 0x43772c
and dword [ebp - 0x868], 0
mov eax, dword [ebp - 0x868]
inc eax
mov ecx, dword [ebp - 0x87c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x87c]
cmp dword [eax], 0
je 0x437766
mov eax, 0x2f55
test eax, eax
je 0x437766
mov eax, dword [ebp - 0x360]
cmp dword [eax], 0
je 0x437766
mov dword [ebp - 0x884], 1
jmp 0x43776d
and dword [ebp - 0x884], 0
cmp dword [ebp - 0x884], 0xffffffff
jge 0x437782
mov dword [ebp - 0x88c], 1
jmp 0x437789
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0xc7c]
mov ecx, dword [ebp - 0x88c]
mov dword [eax], ecx
jmp 0x4407d4
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0xaec], eax
mov eax, dword [ebp - 0xb00]
mov dword [ebp - 0xbd4], eax
mov eax, dword [ebp - 0x980]
mov dword [ebp - 0x830], eax
mov eax, dword [ebp - 0x928]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0xaec]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x19c], 0x283d1f0d
mov dword [ebp - 0x158], 0xe2ad21dd
mov dword [ebp - 0x120], 0x2130bec3
mov dword [ebp - 0x4c], 0
jmp 0x437809
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x43781f
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x428], 0xa8eac8b1
jmp 0x437802
mov dword [ebp - 0x4c], 0
jmp 0x43782f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x437842
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x2c], 0xffffffff
jmp 0x437828
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2c], 0
jmp 0x437867
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2c], 2
jg 0x437a83
mov dword [ebp - 0x118], 0xfffffffa
mov dword [ebp - 0x248], 0
jmp 0x43789b
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x4378b7
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x3c0], 0xfffffffb
jmp 0x43788e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp + eax*4 - 0x428], 0xb8f3d421
jne 0x4378da
mov dword [ebp - 0x92c], 1
jmp 0x4378e1
and dword [ebp - 0x92c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov eax, dword [ebp + eax*4 - 0x428]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2c]
sub eax, dword [ebp + ecx*4 - 0x428]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2c]
cmp eax, dword [ebp + ecx*4 - 0x428]
je 0x437922
mov dword [ebp - 0x894], 1
jmp 0x437929
and dword [ebp - 0x894], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x894], eax
jne 0x437947
mov dword [ebp - 0x89c], 1
jmp 0x43794e
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x1018], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov eax, dword [ebp + eax*4 - 0x428]
mov dword [ebp - 0x100c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax - 0x3c0], ecx
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3c0]
cmp dword [ebp + eax - 0x2c], ecx
jg 0x4379b5
mov dword [ebp - 0xcd0], 1
jmp 0x4379bc
and dword [ebp - 0xcd0], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x10ec], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1014], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1214], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov eax, dword [ebp + eax*4 - 0x428]
mov dword [ebp - 0x101c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov eax, dword [ebp + eax*4 - 0x428]
mov dword [ebp - 0x10fc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov eax, dword [ebp + eax*4 - 0x428]
mov dword [ebp - 0x1024], eax
cmp dword [ebp - 0x118], 0x9a48
jg 0x437a3d
mov dword [ebp - 0x848], 1
jmp 0x437a44
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x848]
sub eax, 0x60bae246
je 0x437a6d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c0], 0
je 0x437a6d
mov dword [ebp - 0x934], 1
jmp 0x437a74
and dword [ebp - 0x934], 0
mov dword [ebp - 0x118], 0xf22a1efe
jmp 0x437852
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2c], 0
je 0x437c1f
cmp dword [ebp - 0x158], 0
jne 0x437bd2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x428], 0
je 0x437ac6
mov eax, 0x6367
test eax, eax
je 0x437ac6
mov dword [ebp - 0x460], 1
jmp 0x437acd
and dword [ebp - 0x460], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x460], eax
jne 0x437aef
xor eax, eax
je 0x437aef
mov dword [ebp - 0x454], 1
jmp 0x437af6
and dword [ebp - 0x454], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x428]
cmp dword [ebp - 0x454], eax
jg 0x437b16
mov dword [ebp - 0x67c], 1
jmp 0x437b1d
and dword [ebp - 0x67c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x67c], eax
je 0x437b3b
mov dword [ebp - 0x45c], 1
jmp 0x437b42
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x19c]
imul eax, dword [ebp - 0x45c]
cmp eax, 0xda79815c
jb 0x437b62
mov dword [ebp - 0xaf4], 1
jmp 0x437b69
and dword [ebp - 0xaf4], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x11cc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov dword [ebp - 0x102c], eax
xor eax, eax
inc eax
imul eax, eax, 0xffff
test eax, eax
jb 0x437bb4
cmp dword [ebp - 0x158], 0
je 0x437bb4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2c], 0
je 0x437bb4
mov dword [ebp - 0x790], 1
jmp 0x437bbb
and dword [ebp - 0x790], 0
imul eax, dword [ebp - 0x790], 0xc16
test eax, eax
jne 0x437bd2
and dword [ebp - 0x464], 0
jmp 0x437bdc
mov dword [ebp - 0x464], 1
cmp dword [ebp - 0x464], 0x8e87
jle 0x437bf4
mov dword [ebp - 0x684], 1
jmp 0x437bfb
and dword [ebp - 0x684], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c]
add eax, dword [ebp - 0x684]
cmp dword [ebp - 0x19c], eax
jg 0x437c1f
mov dword [ebp - 0x368], 1
jmp 0x437c26
and dword [ebp - 0x368], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x368]
mov dword [ebp + eax - 0x2c], ecx
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x120], eax
jl 0x437c66
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2c], 0
jne 0x437c66
and dword [ebp - 0x46c], 0
jmp 0x437c70
mov dword [ebp - 0x46c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x428]
imul eax, dword [ebp - 0x46c]
test eax, eax
je 0x437cb9
mov dword [ebp - 0x120], 0
jmp 0x437ca1
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xf
jle 0x437cb7
cmp dword [ebp - 0x158], 0
je 0x437cb5
jmp 0x437cb7
jmp 0x437c94
jmp 0x437cce
push 1
push 1
push 0
push 0x1b94
push 1
call fcn.00410b63
add esp, 0x14
mov dword [ebp - 0x3f0], 0
mov dword [ebp - 0x794], 0x657689a
mov dword [ebp - 0x17c], 0xa519d814
mov dword [ebp - 0x4a4], 0x145c1747
mov dword [ebp - 0x74], 0x688
mov dword [ebp - 0x110c], 1
mov dword [ebp - 0x274], 0
jmp 0x437d20
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 3
jge 0x437d3c
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x10e8], 0xafd061a6
jmp 0x437d13
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x1034], eax
cmp dword [ebp - 0x3f0], 0
jne 0x437d71
mov dword [ebp - 0x794], 1
mov eax, 0xaa29
sub eax, dword [ebp - 0x794]
jne 0x437d71
and dword [ebp - 0x474], 0
jmp 0x437d7b
mov dword [ebp - 0x474], 1
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x474], eax
jne 0x437d95
mov dword [ebp - 0x68c], 1
jmp 0x437d9c
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x4a4]
cmp dword [ebp - 0x68c], eax
jl 0x437db6
mov dword [ebp - 0x47c], 1
jmp 0x437dbd
and dword [ebp - 0x47c], 0
imul eax, dword [ebp - 0x47c], 0xfffa
test eax, eax
jne 0x437ddd
cmp dword [ebp - 0x3f0], 0
jne 0x437ddd
and dword [ebp - 0x370], 0
jmp 0x437de7
mov dword [ebp - 0x370], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x370]
mov dword [ebp + eax - 0x10e8], ecx
cmp dword [ebp - 0x370], 0
je 0x437f80
mov dword [ebp - 0x48c], 8
mov dword [ebp - 0x484], 0x6982b35
mov dword [ebp - 0x824], 0x416c28cb
mov dword [ebp - 0x17c], 0x14
jmp 0x437e3e
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x26
jne 0x437f7e
mov dword [ebp - 0x8a0], 0xfffffffe
mov dword [ebp - 0x49c], 0x11ca4b38
mov dword [ebp - 0x1a4], 0
jmp 0x437e78
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x437e94
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0xf1c], 0x8770ce40
jmp 0x437e6b
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x1238], eax
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0
je 0x437ed6
mov eax, 0x39d3cd36
test eax, eax
je 0x437ed6
mov dword [ebp - 0x694], 1
jmp 0x437edd
and dword [ebp - 0x694], 0
imul eax, dword [ebp - 0x694], 0
test eax, eax
jne 0x437efa
cmp dword [ebp - 0x48c], 0
jne 0x437efa
and dword [ebp - 0x79c], 0
jmp 0x437f04
mov dword [ebp - 0x79c], 1
cmp dword [ebp - 0x79c], 0xfffffffb
jae 0x437f19
mov dword [ebp - 0x494], 1
jmp 0x437f20
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x74], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10e8]
cmp dword [ebp - 0x74], eax
jne 0x437f47
mov dword [ebp - 0x69c], 1
jmp 0x437f4e
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x824], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x824]
mov dword [ebp + eax - 0xf1c], ecx
jmp 0x437e31
jmp 0x437ff9
mov dword [ebp - 0x93c], 0xfffd
mov dword [ebp - 0x74], 0xffffffed
jmp 0x437f9a
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x13
jg 0x437ff9
mov dword [ebp - 0x944], 0x1111919b
mov dword [ebp - 0xc20], 4
lea eax, [ebp - 0x74]
push eax
push 1
push 0
push 0
push 1
push 1
push 0x1477
push 1
lea eax, [ebp - 0x93c]
push eax
lea eax, [ebp - 0xc20]
push eax
lea eax, [ebp - 0x4a4]
push eax
push 0x6df1
lea eax, [ebp - 0x944]
push eax
push 0x5b1a
call fcn.0041dfef
add esp, 0x38
jmp 0x437f93
push 2
lea ecx, [ebp - 0x10f8]
call fcn.00406726
mov dword [ebp - 0x1ac], 0x506d4441
mov dword [ebp - 0x2dc], 0
jmp 0x438029
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 2
jge 0x43804b
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x10f8]
call fcn.00406814
mov dword [eax], 0x57fd5464
jmp 0x43801c
mov dword [ebp - 0x1ac], 1
jmp 0x438064
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jl 0x438278
mov dword [ebp - 0x27c], 0xfffffffb
mov dword [ebp - 0x27c], 1
jmp 0x438094
mov eax, dword [ebp - 0x27c]
dec eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
jl 0x438273
mov dword [ebp - 0x6a4], 0x6b95
mov dword [ebp - 0xafc], str.swongngc_anttabrxt_idxe_vqrpqse_vjx_brjxhtl_ucxk_qatemmx_ekfsogdm
cmp dword [ebp - 0x6a4], 0x6bd7
jle 0x4381c1
and dword [ebp - 0x1b4], 0
jmp 0x4380db
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x42ca
jge 0x4381c1
and dword [ebp - 0x33c], 0
jmp 0x438101
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x75db
jge 0x4381bc
and dword [ebp - 0x1bc], 0
jmp 0x438127
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x403c
jge 0x4381b7
and dword [ebp - 0x284], 0
jmp 0x43814d
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x3cc
jge 0x4381b2
mov eax, dword [ebp - 0x1b4]
and eax, dword [ebp - 0x33c]
and eax, dword [ebp - 0x1bc]
xor eax, dword [ebp - 0x284]
cdq
mov dword [ebp - 0xb34], eax
mov dword [ebp - 0xb30], edx
push dword [ebp - 0xb30]
push dword [ebp - 0xb34]
lea ecx, [ebp - 0x12d4]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.004063c6
push eax
call fcn.004a68c7
pop ecx
lea ecx, [ebp - 0x12d4]
call fcn.004063bc
jmp 0x438140
jmp 0x43811a
jmp 0x4380f4
jmp 0x4380ce
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x4381f5
push 0
push 0x788f
push 0x5479
push 0
push 0x75bb
push 1
push 0x644e
call fcn.0044a643
add esp, 0x1c
and dword [ebp - 4], 0
cmp dword [ebp - 0x6a4], 0x6860
jge 0x438211
push dword [ebp - 0xafc]
call fcn.004a68c7
pop ecx
jmp 0x43822d
or dword [ebp - 4], 0xffffffff
jmp 0x438237
mov byte [ebp - 0xb5], 0
lea eax, [ebp - 0xb5]
push eax
push 0
push 0x878
push 1
push 0x58e1
push 0x51ad
push 1
push 0x4720
push 0x4286
push 1
call fcn.0040ecce
add esp, 0x28
jmp 0x438087
jmp 0x438057
lea ecx, [ebp - 0x10f8]
call fcn.004067f8
push 3
lea ecx, [ebp - 0x354]
call fcn.00406726
mov dword [ebp - 0xd4], 1
push 0xb88
lea eax, [ebp - 0x354]
push eax
lea eax, [ebp - 0x184]
push eax
push 0
call fcn.0044100f
add esp, 0x10
mov dword [ebp - 0x184], 0
jmp 0x4382d0
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 4
jge 0x4382ec
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x1294], 0x5d5f8d9a
jmp 0x4382c3
xor eax, eax
jne 0x43832d
push 0
lea ecx, [ebp - 0x354]
call fcn.00406814
cmp dword [eax], 0
jne 0x43832d
push 2
lea ecx, [ebp - 0x354]
call fcn.00406814
mov esi, eax
push 0
lea ecx, [ebp - 0x354]
call fcn.00406814
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x43832d
and dword [ebp - 0x4ac], 0
jmp 0x438337
mov dword [ebp - 0x4ac], 1
push 0
lea ecx, [ebp - 0x354]
call fcn.00406814
mov ecx, dword [ebp - 0x4ac]
cmp ecx, dword [eax]
je 0x438369
push 1
lea ecx, [ebp - 0x354]
call fcn.00406814
cmp dword [eax], 0
jne 0x438369
and dword [ebp - 0x7a4], 0
jmp 0x438373
mov dword [ebp - 0x7a4], 1
push 0
lea ecx, [ebp - 0x354]
call fcn.00406814
mov ecx, dword [ebp - 0x7a4]
cmp ecx, dword [eax]
jg 0x438396
mov dword [ebp - 0x4b4], 1
jmp 0x43839d
and dword [ebp - 0x4b4], 0
push 0
lea ecx, [ebp - 0x354]
call fcn.00406814
mov ecx, dword [ebp - 0x4b4]
cmp ecx, dword [eax]
jge 0x4383c0
mov dword [ebp - 0x6ac], 1
jmp 0x4383c7
and dword [ebp - 0x6ac], 0
push 0
lea ecx, [ebp - 0x354]
call fcn.00406814
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6ac]
jg 0x4383ea
mov dword [ebp - 0x4bc], 1
jmp 0x4383f1
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 0xffff
je 0x438418
push 1
lea ecx, [ebp - 0x354]
call fcn.00406814
cmp dword [eax], 0
jne 0x438418
and dword [ebp - 0x864], 0
jmp 0x438422
mov dword [ebp - 0x864], 1
imul eax, dword [ebp - 0x864], 0xb979
mov dword [ebp - 0xd4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd4]
mov dword [ebp + eax - 0x1294], ecx
mov dword [ebp - 0xd4], 0
jmp 0x43845e
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xffffffe9
jl 0x4384e2
mov dword [ebp - 0x3c8], 0x8e503485
cmp dword [ebp - 0x3c8], 0
je 0x4384ad
push 0
lea ecx, [ebp - 0x354]
call fcn.00406814
cmp dword [eax], 0
je 0x43848e
jmp 0x4384e2
push 1
push 0x5b96
push 0x6ac9
push 0
push 1
push 0x40b0
call fcn.0041532d
add esp, 0x18
jmp 0x4384cf
push 0x15a9
push 0
push 0x4fa3
push 0xae2
lea eax, [ebp - 0x3c8]
push eax
push 0
call fcn.004542cf
add esp, 0x18
cmp dword [ebp - 0x3c8], 0
je 0x4384dd
jmp 0x438451
jmp 0x438451
lea ecx, [ebp - 0x354]
call fcn.004067f8
mov dword [ebp - 0xca0], 0x8a59
mov dword [ebp - 0x6b4], 6
push 2
lea ecx, [ebp - 0xe60]
call fcn.00406726
mov dword [ebp - 0x111c], 1
push 2
lea ecx, [ebp - 0xe48]
call fcn.00406726
mov dword [ebp - 0x94], 0xdfe012d2
mov dword [ebp - 0x1c4], 0x9d9e62b5
mov dword [ebp - 0x70], 0xffff
mov dword [ebp - 0x1044], 0
push 0x103c
push 1
push 0
push 1
push 1
lea eax, [ebp - 0xe60]
push eax
lea eax, [ebp - 0x94c]
push eax
push 0x60a1
call fcn.00427e45
add esp, 0x20
push 1
push 0x17ca
push 0x709
push 0x6d32
push 0x21
push 0x46a4
push 0x5616
push 1
push 0x4277
push 0x5b33
push 0x24e2
push 0x7f95
push 0
push 1
lea eax, [ebp - 0x94c]
push eax
push 1
lea eax, [ebp - 0xe48]
push eax
push 0x73d3
push 0x1898
push 0
push 0x2b6c
push 0x7ef6
call fcn.00416d14
add esp, 0x58
mov byte [ebp - 0x84], 0
movzx eax, byte [ebp - 0x84]
test eax, eax
je 0x4385f4
push 0x1db2
call dword [sym.imp.USER32.dll_MessageBeep]
cmp dword [ebp - 0xca0], 0xffffffff
jg 0x438609
mov dword [ebp - 0x4cc], 1
jmp 0x438610
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x6b4], 0
je 0x438639
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0x1c4]
inc ecx
mov dword [ebp - 0x1c4], ecx
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 9
jl 0x438652
mov dword [ebp - 0x4c4], 1
jmp 0x438659
and dword [ebp - 0x4c4], 0
cmp dword [ebp - 0x4c4], 0xfffffff7
jg 0x43866e
mov dword [ebp - 0x954], 1
jmp 0x438675
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x11dc], eax
mov esi, dword [ebp - 0x94]
push 0
lea ecx, [ebp - 0xe48]
call fcn.00406814
imul esi, dword [eax]
add esi, dword [ebp - 0x6b4]
mov eax, dword [ebp - 0x4cc]
sub eax, esi
je 0x438765
mov dword [ebp - 0xb04], 0xffffffff
mov dword [ebp - 0x70], 0
jmp 0x4386c5
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jg 0x438763
mov dword [ebp - 0x104c], 0xb256cd21
mov dword [ebp - 0x112c], 0x3d2cf3e
mov dword [ebp - 0x94], 0
jmp 0x4386fc
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jg 0x43875e
mov dword [ebp - 0x1054], 0xfffffff9
push 0
push 0x31a2
push 0x3acd
push 0x15c1
push 0
call fcn.0044c848
add esp, 0x14
push 0x2e09
push 0x5fd7
push 1
push 1
lea eax, [ebp - 0xb04]
push eax
push 0
push 0x221f
push 0x1f83
push 0x1e34
push 1
push 0
call fcn.00414f0d
add esp, 0x2c
jmp 0x4386ef
jmp 0x4386be
jmp 0x43879b
push 1
lea eax, [ebp - 0x70]
push eax
push 0x4007
push 0x144d
push 0
push 1
push 0x3aef
push 0x3808
push 0x251e
push 0
push 1
lea eax, [ebp - 0xe60]
push eax
call fcn.00452eff
add esp, 0x30
lea ecx, [ebp - 0xe48]
call fcn.004067f8
lea ecx, [ebp - 0xe60]
call fcn.004067f8
mov dword [ebp - 0x2a4], 0x283d1f0d
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0x5c], 0x6715f0ed
push 3
lea ecx, [ebp - 0xcec]
call fcn.00406726
mov dword [ebp - 0x121c], 0x135443c7
mov dword [ebp - 0x105c], 0x8ff0
push 1
push 0x1218
push 0x7d1b
push 0x6692
lea eax, [ebp - 0xcec]
push eax
push 1
push 1
push 0x2ece
lea eax, [ebp - 0x124]
push eax
push 0
push 0x77d2
push 0
push 0x1faf
call fcn.0041a74b
add esp, 0x34
mov dword [ebp - 0x124], 0
jmp 0x438844
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 3
jge 0x438860
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x12f8], 0x26771399
jmp 0x438837
mov dword [ebp - 0x5c], 0x144a
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x5c], eax
jl 0x43887e
mov dword [ebp - 0x7ac], 1
jmp 0x438885
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x7ac]
jg 0x4388a6
mov dword [ebp - 0x4d4], 1
jmp 0x4388ad
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x4d4]
jne 0x4388c7
mov dword [ebp - 0x6bc], 1
jmp 0x4388ce
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x6bc], eax
jne 0x43894c
mov dword [ebp - 0x95c], 0x7e7308f4
mov dword [ebp - 0xc28], 0xcff8ee1d
mov dword [ebp - 0x4dc], 0x2eb2fc25
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x95c]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xc28]
push eax
push 0
push 0x44cc
push 0
lea eax, [ebp - 0x5c]
push eax
push 0
push 0x60fd
call fcn.0042837f
add esp, 0x28
push 0
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0044ad41
add esp, 0xc
jmp 0x438a47
mov dword [ebp - 0x964], 0x6917
mov dword [ebp - 0xb0c], 1
mov dword [ebp - 0x113c], 0x1372625a
mov dword [ebp - 0x1064], 0x32d49acb
mov dword [ebp - 0x11ec], 0xea8edf9
mov dword [ebp - 0x2ec], 0
jmp 0x438997
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 3
jge 0x4389b3
mov eax, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0x1340], 2
jmp 0x43898a
mov dword [ebp - 0x5c], 0xa4127a8e
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xf08], eax
cmp dword [ebp - 0x5c], 1
jne 0x4389d5
mov dword [ebp - 0x82c], 1
jmp 0x4389dc
and dword [ebp - 0x82c], 0
push 0
lea ecx, [ebp - 0xcec]
call fcn.00406814
mov ecx, dword [ebp - 0x82c]
add ecx, dword [eax]
mov eax, dword [ebp - 0x9c]
lea eax, [ecx + eax - 0x8cd1]
cmp eax, dword [ebp - 0x964]
jge 0x438a12
mov dword [ebp - 0x378], 1
jmp 0x438a19
and dword [ebp - 0x378], 0
push 1
lea ecx, [ebp - 0xcec]
call fcn.00406814
mov ecx, dword [ebp - 0x378]
mov dword [eax], ecx
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0xb0c], eax
push 0
lea eax, [ebp - 0x5c]
push eax
call fcn.0044c21f
pop ecx
pop ecx
lea ecx, [ebp - 0xcec]
call fcn.004067f8
mov dword [ebp - 0x148], 0xe2ad21dd
mov dword [ebp - 0x1cc], 0
push 2
lea ecx, [ebp - 0xc8c]
call fcn.00406726
push 0x6eca
push 0x3045
lea eax, [ebp - 0xc8c]
push eax
push 0x1680
push 0x27c2
lea eax, [ebp - 0x130]
push eax
push 0x1c8
push 0
push 0xd6f
push 1
push 0
push 0x2bb8
push 0x49bf
push 0x6e7f
push 1
call fcn.0044b5db
add esp, 0x3c
mov dword [ebp - 0x130], 0
jmp 0x438ad7
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jge 0x438af3
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0xcd8], 1
jmp 0x438aca
push 0x53f5
push 0x76b1
push 1
push 1
push 0xd1c
push 0x4dbd
push 0x78ca
push 0x6990
push 0x58d5
push 0
push 1
push 1
call fcn.00415e72
add esp, 0x30
cmp dword [ebp - 0x1cc], 0xed06
jg 0x438b40
mov dword [ebp - 0x4e4], 1
jmp 0x438b47
and dword [ebp - 0x4e4], 0
imul esi, dword [ebp - 0x4e4], 5
sub esi, dword [ebp - 0x1cc]
push 1
lea ecx, [ebp - 0xc8c]
call fcn.00406814
mov dword [eax], esi
push 1
lea ecx, [ebp - 0xc8c]
call fcn.00406814
mov ecx, dword [ebp - 0x1cc]
cmp dword [eax], ecx
jle 0x438b86
mov dword [ebp - 0x6c4], 1
jmp 0x438b8d
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x6c4], eax
jg 0x438ba7
mov dword [ebp - 0x4ec], 1
jmp 0x438bae
and dword [ebp - 0x4ec], 0
cmp dword [ebp - 0x4ec], 0xcecb4571
je 0x438bc6
mov dword [ebp - 0x7b4], 1
jmp 0x438bcd
and dword [ebp - 0x7b4], 0
cmp dword [ebp - 0x7b4], 0x34688073
jg 0x438c02
push 0x41bd
push 0
push 0x1c69
push 0x62b8
push 0x1259
push 0
push 0x5b6f
push 0
call fcn.004451e6
add esp, 0x20
jmp 0x438c43
mov dword [ebp - 0x96c], 0x9ed8
mov eax, dword [ebp - 0x96c]
mov dword [ebp - 0x4f4], eax
push 1
lea ecx, [ebp - 0xc8c]
call fcn.00406814
mov ecx, dword [ebp - 0x4f4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4f4]
sub eax, 4
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xcd8], eax
lea ecx, [ebp - 0xc8c]
call fcn.004067f8
mov dword [ebp - 0x398], 0x2130bec3
mov dword [ebp - 0x44], 4
mov dword [ebp - 0xb14], 0xb27fa3df
mov dword [ebp - 0x44], 2
jmp 0x438c79
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 7
jl 0x438e05
push 1
lea ecx, [ebp - 0x8ec]
call fcn.00406726
mov dword [ebp - 0x504], 0x6b42be19
mov dword [ebp - 0x97c], 0x4ab653b1
push 0
push 0x281b
push 1
push 0
push 0x2b96
push 0x9ad
lea eax, [ebp - 0x8ec]
push eax
push 1
lea eax, [ebp - 0x170]
push eax
push 0x97
push 0x13b
push 0x3e3d
push 0x6228
push 0x4a66
call fcn.0042265a
add esp, 0x38
mov dword [ebp - 0x170], 0
jmp 0x438d03
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x438d1f
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x888], 0xfffffffb
jmp 0x438cf6
push 0
lea ecx, [ebp - 0x8ec]
call fcn.00406814
cmp dword [eax], 0
jne 0x438d3d
mov dword [ebp - 0x6cc], 1
jmp 0x438d44
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x44]
inc eax
imul eax, dword [ebp - 0x6cc]
cmp eax, dword [ebp - 0x44]
je 0x438d60
mov dword [ebp - 0x974], 1
jmp 0x438d67
and dword [ebp - 0x974], 0
push 0
lea ecx, [ebp - 0x8ec]
call fcn.00406814
push 0
lea ecx, [ebp - 0x8ec]
call fcn.00406814
mov eax, dword [eax]
sub eax, dword [ebp - 0x44]
jne 0x438d97
cmp dword [ebp - 0x44], 0
jne 0x438d97
and dword [ebp - 0x4fc], 0
jmp 0x438da1
mov dword [ebp - 0x4fc], 1
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0xb14], eax
push 0
lea ecx, [ebp - 0x8ec]
call fcn.00406814
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x888]
mov dword [ebp - 0xf10], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x888]
mov dword [ebp - 0xf68], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x97c], eax
lea ecx, [ebp - 0x8ec]
call fcn.004067f8
jmp 0x438c72
mov dword [ebp - 0xf70], 0x624039b6
mov byte [ebp - 0x9d], 0
push 0x18dc
push 0
lea eax, [ebp - 0x9d]
push eax
call fcn.00444b4c
add esp, 0xc
mov byte [ebp - 0x86], 0
push 0
push 0
push 0x3923
lea eax, [ebp - 0x86]
push eax
push 1
push 0
push 0x7ade
push 0x34a1
push 0x4a73
call fcn.004429db
add esp, 0x24
mov dword [ebp - 0x58], 0
jmp 0x438e6e
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x438e84
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x400], 0xa8eac8b1
jmp 0x438e67
push 3
lea ecx, [ebp - 0xd70]
call fcn.00406726
mov dword [ebp - 0x138], 1
push 1
lea ecx, [ebp - 0xec0]
call fcn.00406726
push 0
push 0
push 0x4406
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xd70]
push eax
push 1
push 0x270a
push 0x585a
push 1
call fcn.0040e1ff
add esp, 0x24
mov dword [ebp - 0xcc], 0
jmp 0x438eee
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x438f0a
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0xf28], 0x53072226
jmp 0x438ee1
push 0
push 0x704b
lea eax, [ebp - 0xcc]
push eax
push 0xf9c
push 0x56d0
push 1
lea eax, [ebp - 0xec0]
push eax
push 0
call fcn.0041b2c2
add esp, 0x20
mov dword [ebp - 0x138], 2
jmp 0x438f4e
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jl 0x43928d
mov dword [ebp - 0xfc], 0x1a9565e0
mov dword [ebp - 0x7bc], 0x218e9934
mov dword [ebp - 0x98c], 0x8d7c584e
mov dword [ebp - 0x984], 0xffffffff
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xf28], 0xfffffff7
mov dword [ebp - 0xfc], 0
jmp 0x438fad
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jg 0x439288
push 3
lea ecx, [ebp - 0x904]
call fcn.00406726
mov dword [ebp - 0xf78], 0x3997b09b
mov dword [ebp - 0xb1c], 0x8f62c4df
push 0
push 0x4aca
push 0
push 0
lea eax, [ebp - 0xf80]
push eax
lea eax, [ebp - 0x904]
push eax
push 0x467
push 0x347e
call fcn.00452446
add esp, 0x20
push 2
lea ecx, [ebp - 0x904]
call fcn.00406814
mov dword [eax], 2
jmp 0x43903f
push 2
lea ecx, [ebp - 0x904]
call fcn.00406814
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6d4]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x904]
call fcn.00406814
cmp dword [eax], 0
jl 0x439278
or dword [ebp - 0xdc4], 0xffffffff
or dword [ebp - 0xdc0], 0xffffffff
or dword [ebp - 0xdbc], 0xffffffff
or dword [ebp - 0xdb8], 0xffffffff
lea ecx, [ebp - 0x3d9]
call fcn.00406823
push eax
lea eax, [ebp - 0xdb4]
push eax
lea eax, [ebp - 0xdc4]
push eax
lea ecx, [ebp - 0x126c]
call fcn.00406826
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd10]
call fcn.004067d2
push 1
lea ecx, [ebp - 0xd40]
call fcn.00406726
push 0x24ea
push 0x6ad1
push 0x4193
push 1
push 0x32ed
push 0x7761
lea eax, [ebp - 0xf88]
push eax
push 0
push 0x3ed3
lea eax, [ebp - 0xd40]
push eax
push 0x525
push 0
push 1
call fcn.00411466
add esp, 0x34
push 0
lea ecx, [ebp - 0xd10]
call fcn.00406814
mov dword [eax], 2
jmp 0x43912d
push 0
lea ecx, [ebp - 0xd10]
call fcn.00406814
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x50c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x50c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xd10]
call fcn.00406814
cmp dword [eax], 0
jl 0x4391e7
mov dword [ebp - 0xc30], 0x7b722ba7
lea eax, [ebp - 0x7bc]
push eax
push 0x5a25
push 0
push 0x100c
push 0
push 1
lea eax, [ebp - 0xc30]
push eax
push 0x493e
call fcn.0044deb5
add esp, 0x20
push 0x318e
push 0x7bb9
push 0x6332
push 0x971
push 0x6635
lea eax, [ebp - 0xd70]
push eax
push 0x3ee7
push 0x7da9
push 0x70e6
push 0x3f8a
lea eax, [ebp - 0xfc]
push eax
push 0x7aa9
push 0x835
push 0x89f
push 0x65de
push 0
lea eax, [ebp - 0xd40]
push eax
push 1
push 1
push 1
push 0
push 1
call fcn.0042134d
add esp, 0x58
jmp 0x439109
push 0x2a46
push 1
push 0
push 0x242
lea eax, [ebp - 0x984]
push eax
push 0
push 0x126c
lea eax, [ebp - 0x904]
push eax
lea eax, [ebp - 0xfc]
push eax
push 0x2b67
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0xec0]
push eax
push 1
push 0x30e0
push 0x230f
lea eax, [ebp - 0xb1c]
push eax
lea eax, [ebp - 0x98c]
push eax
push 0x63
lea eax, [ebp - 0xd70]
push eax
lea eax, [ebp - 0x7bc]
push eax
lea eax, [ebp - 0xd40]
push eax
call fcn.0041975c
add esp, 0x54
lea ecx, [ebp - 0xd40]
call fcn.004067f8
lea ecx, [ebp - 0xd10]
call fcn.004067f8
jmp 0x43901b
lea ecx, [ebp - 0x904]
call fcn.004067f8
jmp 0x438fa0
jmp 0x438f41
lea ecx, [ebp - 0xec0]
call fcn.004067f8
lea ecx, [ebp - 0xd70]
call fcn.004067f8
mov dword [ebp - 0x58], 0
jmp 0x4392b3
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x4392c6
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x34], 0xffffffff
jmp 0x4392ac
mov dword [ebp - 0x28c], 0x5540d7f8
mov dword [ebp - 0xf90], 1
mov dword [ebp - 0xf98], 0
mov dword [ebp - 0x2f4], 0x21324561
push 1
lea ecx, [ebp - 0x1108]
call fcn.00406726
mov dword [ebp - 0xfa0], 0
mov dword [ebp - 0x994], 1
push 1
push 1
push 0
push 0x768d
push 0x1807
push 0x4ac1
push 0
push 0x302a
push 0x236a
push 0x6e8d
push 0x66d1
lea eax, [ebp - 0x1108]
push eax
push 0x578b
lea eax, [ebp - 0xfa8]
push eax
push 0x301c
push 0x1208
push 0x7afe
call fcn.00436519
add esp, 0x44
mov dword [ebp - 0x28c], 0
jmp 0x43937d
mov eax, dword [ebp - 0x28c]
dec eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0xffffffe3
jne 0x43962d
mov dword [ebp - 0x1e4], 0x13dce9d0
mov dword [ebp - 0xfb0], 1
mov dword [ebp - 0xfb8], 0
mov dword [ebp - 0x514], 0x4d6d
mov dword [ebp - 0xcb0], str.fmwkxl_yeuvo_exd
cmp dword [ebp - 0x514], 0x4f53
jle 0x439476
and dword [ebp - 0x1dc], 0
jmp 0x4393e2
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x7590
jge 0x439476
and dword [ebp - 0x1d4], 0
jmp 0x439408
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x76e7
jge 0x439471
and dword [ebp - 0x31c], 0
jmp 0x43942a
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0x7df9
jge 0x43946f
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x31c]
sar eax, cl
and eax, dword [ebp - 0x1dc]
cdq
mov dword [ebp - 0xb40], eax
mov dword [ebp - 0xb3c], edx
push dword [ebp - 0xb3c]
push dword [ebp - 0xb40]
mov ecx, 0xace058
call fcn.004063d1
jmp 0x43941d
jmp 0x4393fb
jmp 0x4393d5
mov dword [ebp - 0x294], 0
jmp 0x43948f
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x4394ab
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0xf34], 0x21ec2184
jmp 0x439482
mov dword [ebp - 4], 2
cmp dword [ebp - 0x514], 0x4a98
jge 0x4394ce
mov edx, dword [ebp - 0xcb0]
mov ecx, 0xace058
call fcn.00409042
jmp 0x4394ea
or dword [ebp - 4], 0xffffffff
jmp 0x4394f4
mov dword [ebp - 0x1e4], 0
jmp 0x43950d
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x1d
jge 0x439628
mov dword [ebp - 0xfc0], 1
mov dword [ebp - 0xfc8], 0xfffffffd
mov dword [ebp - 0xfd0], 0x1ea66e58
mov dword [ebp - 0xfd8], 0
mov dword [ebp - 0xfe0], 0x69161d59
mov dword [ebp - 0xfe8], 0x4c3f4f88
mov dword [ebp - 0xff0], 0xfffffff8
mov dword [ebp - 0xff8], 1
push 3
lea ecx, [ebp - 0xe9c]
call fcn.00406726
push 0x5e1
push 0
push 0x1c08
push 1
push 0x22b0
push 0x74d8
push 0
lea eax, [ebp - 0x1000]
push eax
push 1
push 0x445c
push 1
push 1
lea eax, [ebp - 0xe9c]
push eax
push 0x16c4
push 0x5092
push 0x3d21
push 0x4f8a
push 0x4188
push 0x674b
call fcn.0042c591
add esp, 0x4c
push 1
push 0
lea eax, [ebp - 0x994]
push eax
push 0x15fa
push 1
push 0
push 0x180b
push 0x1df0
push 0x7728
call fcn.004429db
add esp, 0x24
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf34], 0
je 0x439618
lea ecx, [ebp - 0xe9c]
call fcn.004067f8
jmp 0x439628
lea ecx, [ebp - 0xe9c]
call fcn.004067f8
jmp 0x439500
jmp 0x439370
mov dword [ebp - 0x2f4], 0
jmp 0x439646
mov eax, dword [ebp - 0x2f4]
dec eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0xfffffffa
jle 0x43968d
mov byte [ebp - 0xc5], 0
push 0x4981
push 0x1aac
push 0
push 0x2a9e
push 0x40ce
push 1
push 0x1a88
push 0x7bff
lea eax, [ebp - 0xc5]
push eax
push 0
push 1
call fcn.0040cd9c
add esp, 0x2c
jmp 0x439639
lea ecx, [ebp - 0x1108]
call fcn.004067f8
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x34], 0
jmp 0x4396bd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x34], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34], 2
jg 0x43a2d4
push 1
lea ecx, [ebp - 0x1118]
call fcn.00406726
mov dword [ebp - 0x188], 0x4a12b57e
lea eax, [ebp - 0x1118]
push eax
push 0
lea eax, [ebp - 0x1008]
push eax
call fcn.0044f7d3
add esp, 0xc
mov dword [ebp - 0x188], 0
jmp 0x439716
mov eax, dword [ebp - 0x188]
dec eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jl 0x439738
mov byte [ebp - 0x88], 0
lea eax, [ebp - 0x88]
push eax
push 0
call fcn.0044de3f
pop ecx
pop ecx
jmp 0x439709
push 1
push 0
push 0x3569
push 0x5bd4
push 0x859
push 0
call fcn.00413ccc
add esp, 0x18
lea ecx, [ebp - 0x1118]
call fcn.004067f8
mov dword [ebp - 0xdc], 0xfffffffa
push 1
push 1
push 0
push 0x632f
push 0x202b
push 0
push 0x73c1
push 0x26df
call fcn.0042b075
add esp, 0x20
push 1
lea ecx, [ebp - 0x440]
call fcn.00406726
mov dword [ebp - 0x140], 0xd45b0e82
mov dword [ebp - 0x3d0], 0x413e458c
push 1
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x440]
push eax
push 0x22e8
push 0x2c47
push 0x474e
push 0x26fb
push 0x2a60
push 0x4d09
push 0x4df4
push 0x218
push 0x2f1d
push 0x1faf
push 0x6698
push 0
push 1
push 1
push 0x43f2
push 1
push 0x1749
call fcn.0042b68e
add esp, 0x50
mov dword [ebp - 0x160], 0
jmp 0x439829
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jge 0x439845
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0xd28], 0xc6f1bf50
jmp 0x43981c
push 4
pop eax
shl eax, 1
lea eax, [ebp + eax - 0xd28]
mov dword [ebp - 0x6dc], eax
push 0
lea ecx, [ebp - 0x440]
call fcn.00406814
mov ecx, dword [ebp - 0x6dc]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x6dc]
cmp dword [eax], 0
je 0x439b59
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0xd28]
push 0
lea ecx, [ebp - 0x440]
call fcn.00406814
sub esi, dword [eax]
jne 0x4398f1
push 0
lea ecx, [ebp - 0x440]
call fcn.00406814
mov eax, dword [eax]
add eax, 3
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x8364
jne 0x4398ca
mov dword [ebp - 0xb24], 1
jmp 0x4398d1
and dword [ebp - 0xb24], 0
mov esi, dword [ebp - 0x140]
push 0
lea ecx, [ebp - 0x440]
call fcn.00406814
cmp esi, dword [eax]
jne 0x4398f1
and dword [ebp - 0x51c], 0
jmp 0x4398fb
mov dword [ebp - 0x51c], 1
cmp dword [ebp - 0x51c], 0x34d0
jne 0x439913
mov dword [ebp - 0x3f4], 1
jmp 0x43991a
and dword [ebp - 0x3f4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp + eax - 0xd28], ecx
push 0
lea ecx, [ebp - 0x440]
call fcn.00406814
mov ecx, dword [ebp - 0x3f4]
cmp ecx, dword [eax]
jle 0x439b59
mov dword [ebp - 0x1ec], 0xed99ea7e
push 1
lea ecx, [ebp - 0x1128]
call fcn.00406726
push 1
push 0x3078
push 0x37fa
push 0x4ba6
push 0x420f
push 0x68f3
lea eax, [ebp - 0x1010]
push eax
push 1
push 0x23fe
lea eax, [ebp - 0x1128]
push eax
push 0x44f2
push 0x25a5
push 1
push 1
push 0x21f7
push 0
push 0x6030
push 0x668a
push 0x2858
push 1
push 0x33e4
push 0x73be
call fcn.00416d14
add esp, 0x58
push 0xfbd
push 0
push 0x6aae
push 0xb22
push 0x4b4b
push 0x4699
lea eax, [ebp - 0x3d0]
push eax
push 1
push 0
call fcn.0041f595
add esp, 0x24
mov dword [ebp - 0x1ec], 0
jmp 0x439a0d
mov eax, dword [ebp - 0x1ec]
dec eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0xfffffff0
jge 0x439b49
mov dword [ebp - 0x834], 0x48de
mov dword [ebp - 0x99c], str.tgebyh_fjijpzzc_jwd_vxsek_ykrtztaa_hycr
cmp dword [ebp - 0x834], 0x48f5
jle 0x439ab1
and dword [ebp - 0x29c], 0
jmp 0x439a50
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0xb05
jge 0x439ab1
and dword [ebp - 0x1f4], 0
jmp 0x439a72
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x152
jge 0x439aaf
mov eax, dword [ebp - 0x29c]
and eax, dword [ebp - 0x1f4]
cdq
mov dword [ebp - 0xb4c], eax
mov dword [ebp - 0xb48], edx
push dword [ebp - 0xb48]
push dword [ebp - 0xb4c]
mov ecx, 0xace058
call fcn.004063d1
jmp 0x439a65
jmp 0x439a43
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x439afb
push 0
push 0x4ca9
push 1
push 1
push 0x3b58
push 0x1f7f
push 0x1549
push 0x1764
push 0x7cb8
push 0x3dfa
push 0
push 0x1921
call fcn.00444bb9
add esp, 0x30
mov dword [ebp - 4], 4
cmp dword [ebp - 0x834], 0x4780
jge 0x439b1e
mov edx, dword [ebp - 0x99c]
mov ecx, 0xace058
call fcn.00409042
jmp 0x439b3a
or dword [ebp - 4], 0xffffffff
jmp 0x439b44
jmp 0x439a00
lea ecx, [ebp - 0x1128]
call fcn.004067f8
jmp 0x439e1b
mov dword [ebp - 0x380], 1
mov dword [ebp - 0x54c], 0xaf47dfb0
mov dword [ebp - 0x6fc], 0x86b464bb
mov dword [ebp - 0x334], 0
jmp 0x439b90
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 1
jge 0x439ba9
mov eax, dword [ebp - 0x334]
mov dword [ebp + eax*4 - 0x64], 0x2a4f2a6c
jmp 0x439b83
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0xee0], eax
push 0
lea ecx, [ebp - 0x440]
call fcn.00406814
cmp dword [eax], 0xfffffffc
jne 0x439bd7
mov dword [ebp - 0x524], 1
jmp 0x439bde
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x3d0]
imul eax, dword [ebp - 0x524]
test eax, eax
je 0x439bfa
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
push 0xfffffffffffffffc
pop eax
sub eax, 4
cmp dword [ebp - 0x140], eax
jge 0x439c14
mov dword [ebp - 0x6e4], 1
jmp 0x439c1b
and dword [ebp - 0x6e4], 0
push 0
lea ecx, [ebp - 0x440]
call fcn.00406814
mov ecx, dword [ebp - 0x6e4]
cmp ecx, dword [eax]
jg 0x439c3e
mov dword [ebp - 0x52c], 1
jmp 0x439c45
and dword [ebp - 0x52c], 0
push 0
lea ecx, [ebp - 0x440]
call fcn.00406814
mov ecx, dword [ebp - 0x52c]
cmp ecx, dword [eax]
jge 0x439c68
mov dword [ebp - 0x7c4], 1
jmp 0x439c6f
and dword [ebp - 0x7c4], 0
imul eax, dword [ebp - 0x7c4], 0xfffb
test eax, eax
je 0x439c96
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
je 0x439c96
mov dword [ebp - 0x534], 1
jmp 0x439c9d
and dword [ebp - 0x534], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x534], eax
jg 0x439cbb
mov dword [ebp - 0x6ec], 1
jmp 0x439cc2
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0xd28]
cmp eax, 0x257b06f8
jle 0x439cf3
mov dword [ebp - 0x53c], 1
jmp 0x439cfa
and dword [ebp - 0x53c], 0
cmp dword [ebp - 0x53c], 0x6691cfe0
jl 0x439d18
cmp dword [ebp - 0x380], 0
jne 0x439d18
and dword [ebp - 0x86c], 0
jmp 0x439d22
mov dword [ebp - 0x86c], 1
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x86c], eax
jle 0x439d3c
mov dword [ebp - 0x544], 1
jmp 0x439d43
and dword [ebp - 0x544], 0
cmp dword [ebp - 0x544], 4
jbe 0x439d58
mov dword [ebp - 0x6f4], 1
jmp 0x439d5f
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0
jne 0x439d84
push 3
pop eax
test eax, eax
jne 0x439d84
and dword [ebp - 0x7cc], 0
jmp 0x439d8e
mov dword [ebp - 0x7cc], 1
mov eax, dword [ebp - 0x7cc]
inc eax
cmp eax, dword [ebp - 0x140]
jne 0x439da9
mov dword [ebp - 0x554], 1
jmp 0x439db0
and dword [ebp - 0x554], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x1020], eax
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x6fc], eax
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x1028], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x1030], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0xffff
ja 0x439e04
mov dword [ebp - 0x55c], 1
jmp 0x439e0b
and dword [ebp - 0x55c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x55c]
mov dword [ebp + eax - 0x64], ecx
lea ecx, [ebp - 0x440]
call fcn.004067f8
mov dword [ebp - 0x1fc], 0
jmp 0x439e3f
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 1
jge 0x439e5b
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x388], 0xfffffffb
jmp 0x439e32
mov dword [ebp - 0xc38], 7
mov dword [ebp - 0x54], 0
jmp 0x439e75
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x439e8b
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x410], 0xcb457102
jmp 0x439e6e
mov dword [ebp - 0x54], 0
jmp 0x439e9b
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x439eb1
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xd9c], 0xbc00eadd
jmp 0x439e94
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x410], 0
je 0x439f94
mov eax, dword [ebp - 0xc38]
mov dword [ebp - 0x1038], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x410]
mov dword [ebp - 0x1040], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x410], 5
jae 0x439f00
mov dword [ebp - 0x83c], 1
jmp 0x439f07
and dword [ebp - 0x83c], 0
cmp dword [ebp - 0x83c], 0
jb 0x439f1c
mov dword [ebp - 0x564], 1
jmp 0x439f23
and dword [ebp - 0x564], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x410]
cmp eax, dword [ebp - 0x564]
jl 0x439f44
mov dword [ebp - 0x704], 1
jmp 0x439f4b
and dword [ebp - 0x704], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x410]
cmp dword [ebp - 0x704], eax
je 0x439f6c
mov dword [ebp - 0x56c], 1
jmp 0x439f73
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
sub eax, 0x7d612770
imul eax, eax, 0xc8d
test eax, eax
je 0x439f94
mov dword [ebp - 0x7d4], 1
jmp 0x439f9b
and dword [ebp - 0x7d4], 0
push 4
pop eax
shl eax, 0
imul ecx, dword [ebp - 0x7d4], 0xffffffff
cmp dword [ebp + eax - 0x410], ecx
je 0x439fbd
mov dword [ebp - 0x574], 1
jmp 0x439fc4
and dword [ebp - 0x574], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x574]
mov dword [ebp + eax - 0x410], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd9c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd9c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp + eax*4 - 0x400], 0xb8f3d421
jne 0x43a015
mov dword [ebp - 0x9a4], 1
jmp 0x43a01c
and dword [ebp - 0x9a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
mov eax, dword [ebp + eax*4 - 0x400]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
sub eax, dword [ebp + ecx*4 - 0x400]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
cmp eax, dword [ebp + ecx*4 - 0x400]
je 0x43a05d
mov dword [ebp - 0x70c], 1
jmp 0x43a064
and dword [ebp - 0x70c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x70c], eax
jne 0x43a082
mov dword [ebp - 0x57c], 1
jmp 0x43a089
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1048], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
mov eax, dword [ebp + eax*4 - 0x400]
mov dword [ebp - 0x1050], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdc]
mov dword [ebp + eax - 0x388], ecx
mov dword [ebp - 0x180], 0xfffffff6
mov dword [ebp - 0x9ac], 0xffffffff
mov dword [ebp - 0xb2c], 0xfffffff6
push 1
lea ecx, [ebp - 0x1138]
call fcn.00406726
push 0x5d79
push 0x68b2
push 0x1f6d
push 0xab3
push 0x6f93
push 0xb4b
push 0x22fc
push 0x531c
lea eax, [ebp - 0x1138]
push eax
push 0x637e
push 0xee3
push 0x6245
lea eax, [ebp - 0x1058]
push eax
push 0x66d2
push 0x3f08
push 1
push 0x1c7d
push 1
push 1
push 0
push 1
push 1
call fcn.0042134d
add esp, 0x58
push 0
push 0x1853
push 0x6a76
lea eax, [ebp - 0xb2c]
push eax
push 0x5970
lea eax, [ebp - 0x180]
push eax
push 1
push 0
push 0x67d1
lea eax, [ebp - 0x9ac]
push eax
call fcn.00412467
add esp, 0x28
mov dword [ebp - 0x180], 0
jmp 0x43a1ae
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
jg 0x43a1d6
push 0
push 0x5df2
push 0x6b50
push 0x5494
push 1
push 1
call fcn.0041add0
add esp, 0x18
jmp 0x43a1a1
lea ecx, [ebp - 0x1138]
call fcn.004067f8
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x388]
cmp dword [ebp + eax - 0x34], ecx
jg 0x43a206
mov dword [ebp - 0xce0], 1
jmp 0x43a20d
and dword [ebp - 0xce0], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1060], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x1068], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x1070], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
mov eax, dword [ebp + eax*4 - 0x400]
mov dword [ebp - 0x1078], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
mov eax, dword [ebp + eax*4 - 0x400]
mov dword [ebp - 0x1080], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
mov eax, dword [ebp + eax*4 - 0x400]
mov dword [ebp - 0x1088], eax
cmp dword [ebp - 0xdc], 0x9a48
jg 0x43a28e
mov dword [ebp - 0x898], 1
jmp 0x43a295
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x898]
sub eax, 0x60bae246
je 0x43a2be
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x388], 0
je 0x43a2be
mov dword [ebp - 0x9b4], 1
jmp 0x43a2c5
and dword [ebp - 0x9b4], 0
mov dword [ebp - 0xdc], 0xf22a1efe
jmp 0x4396a8
push 0
push 0
push 1
call fcn.0042e6c9
add esp, 0xc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34], 0
je 0x43a47e
cmp dword [ebp - 0x148], 0
jne 0x43a431
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x400], 0
je 0x43a325
mov eax, 0x6367
test eax, eax
je 0x43a325
mov dword [ebp - 0x584], 1
jmp 0x43a32c
and dword [ebp - 0x584], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x584], eax
jne 0x43a34e
xor eax, eax
je 0x43a34e
mov dword [ebp - 0x714], 1
jmp 0x43a355
and dword [ebp - 0x714], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x400]
cmp dword [ebp - 0x714], eax
jg 0x43a375
mov dword [ebp - 0x58c], 1
jmp 0x43a37c
and dword [ebp - 0x58c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x58c], eax
je 0x43a39a
mov dword [ebp - 0x7dc], 1
jmp 0x43a3a1
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x2a4]
imul eax, dword [ebp - 0x7dc]
cmp eax, 0xda79815c
jb 0x43a3c1
mov dword [ebp - 0xb38], 1
jmp 0x43a3c8
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x1090], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
mov dword [ebp - 0x1098], eax
xor eax, eax
inc eax
imul eax, eax, 0xffff
test eax, eax
jb 0x43a413
cmp dword [ebp - 0x148], 0
je 0x43a413
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34], 0
je 0x43a413
mov dword [ebp - 0x594], 1
jmp 0x43a41a
and dword [ebp - 0x594], 0
imul eax, dword [ebp - 0x594], 0xc16
test eax, eax
jne 0x43a431
and dword [ebp - 0x71c], 0
jmp 0x43a43b
mov dword [ebp - 0x71c], 1
cmp dword [ebp - 0x71c], 0x8e87
jle 0x43a453
mov dword [ebp - 0x59c], 1
jmp 0x43a45a
and dword [ebp - 0x59c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34]
add eax, dword [ebp - 0x59c]
cmp dword [ebp - 0x2a4], eax
jg 0x43a47e
mov dword [ebp - 0x404], 1
jmp 0x43a485
and dword [ebp - 0x404], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x404]
mov dword [ebp + eax - 0x34], ecx
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x398], eax
jl 0x43a4c5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34], 0
jne 0x43a4c5
and dword [ebp - 0x844], 0
jmp 0x43a4cf
mov dword [ebp - 0x844], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x400]
imul eax, dword [ebp - 0x844]
test eax, eax
je 0x43a8e8
mov dword [ebp - 0x3d8], 0x67e307b5
push 3
lea ecx, [ebp - 0xeb4]
call fcn.00406726
mov dword [ebp - 0x9c4], 9
mov dword [ebp - 0x5a4], 0x227b
mov dword [ebp - 0x9bc], str.fhofwv_zalq_afaz_ngzusfs_vjfub_khw_rukj
cmp dword [ebp - 0x5a4], 0x2345
jle 0x43a5fa
and dword [ebp - 0x204], 0
jmp 0x43a546
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x1043
jge 0x43a5fa
and dword [ebp - 0x2fc], 0
jmp 0x43a56c
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x5d8
jge 0x43a5f5
and dword [ebp - 0x20c], 0
jmp 0x43a58e
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x6652
jge 0x43a5f0
mov eax, dword [ebp - 0x204]
imul eax, dword [ebp - 0x2fc]
mov ecx, dword [ebp - 0x20c]
sar eax, cl
cdq
mov dword [ebp - 0xb58], eax
mov dword [ebp - 0xb54], edx
push dword [ebp - 0xb54]
push dword [ebp - 0xb58]
lea ecx, [ebp - 0x1370]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.004063c6
push eax
call fcn.004a68c7
pop ecx
lea ecx, [ebp - 0x1370]
call fcn.004063bc
jmp 0x43a581
jmp 0x43a55f
jmp 0x43a539
mov dword [ebp - 4], 6
cmp dword [ebp - 0x5a4], 0x2010
jge 0x43a619
push dword [ebp - 0x9bc]
call fcn.004a68c7
pop ecx
jmp 0x43a635
or dword [ebp - 4], 0xffffffff
jmp 0x43a63f
push 0xff
push 1
push 0
lea eax, [ebp - 0x10a0]
push eax
push 0x68b1
push 0x4430
push 0x67f5
push 1
push 0x6183
lea eax, [ebp - 0xeb4]
push eax
call fcn.0041839c
add esp, 0x28
mov dword [ebp - 0x724], 0x4976
mov dword [ebp - 0xc40], str.xuszsm_upfowzzr_xheupv_gcelzjmrb_ydxzh_zgaro_sjpm
cmp dword [ebp - 0x724], 0x4b62
jle 0x43a773
push 0x21e7
push 0x1be7
push 0
call dword [sym.imp.USER32.dll_DeleteMenu]
and dword [ebp - 0x2ac], 0
jmp 0x43a6c0
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x4e05
jge 0x43a773
and dword [ebp - 0x214], 0
jmp 0x43a6e6
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x3013
jge 0x43a76e
and dword [ebp - 0x324], 0
jmp 0x43a708
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0x4003
jge 0x43a769
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [ebp - 0x214]
sar eax, cl
xor eax, dword [ebp - 0x324]
cdq
mov dword [ebp - 0xb64], eax
mov dword [ebp - 0xb60], edx
push dword [ebp - 0xb60]
push dword [ebp - 0xb64]
lea ecx, [ebp - 0x12ec]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.004063c6
push eax
call fcn.004a68c7
pop ecx
lea ecx, [ebp - 0x12ec]
call fcn.004063bc
jmp 0x43a6fb
jmp 0x43a6d9
jmp 0x43a6b3
mov dword [ebp - 4], 8
cmp dword [ebp - 0x724], 0x45ad
jge 0x43a792
push dword [ebp - 0xc40]
call fcn.004a68c7
pop ecx
jmp 0x43a7ae
or dword [ebp - 4], 0xffffffff
jmp 0x43a7b8
cmp dword [ebp - 0x3d8], 0x9869ec42
je 0x43a7d0
mov dword [ebp - 0x5ac], 1
jmp 0x43a7d7
and dword [ebp - 0x5ac], 0
cmp dword [ebp - 0x5ac], 0xc4185a1f
jbe 0x43a7ef
mov dword [ebp - 0x7e4], 1
jmp 0x43a7f6
and dword [ebp - 0x7e4], 0
cmp dword [ebp - 0x7e4], 0xfffffffc
jge 0x43a80b
mov dword [ebp - 0x5b4], 1
jmp 0x43a812
and dword [ebp - 0x5b4], 0
cmp dword [ebp - 0x3d8], 0xffffffff
jl 0x43a827
mov dword [ebp - 0x390], 1
jmp 0x43a82e
and dword [ebp - 0x390], 0
push 1
lea ecx, [ebp - 0xeb4]
call fcn.00406814
mov ecx, dword [ebp - 0x390]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5b4]
sub eax, dword [ebp - 0x390]
je 0x43a866
cmp dword [ebp - 0x3d8], 0
je 0x43a866
mov dword [ebp - 0x72c], 1
jmp 0x43a86d
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x9c4], eax
mov byte [ebp - 0x8a], 0
movzx eax, byte [ebp - 0x8a]
test eax, eax
je 0x43a8b2
push 0x424c
push 1
push 0x75ed
push 0x516
push 0xf87
push 0
push 0x5d30
push 0
call fcn.004451e6
add esp, 0x20
lea ecx, [ebp - 0xeb4]
call fcn.004067f8
push 1
push 0x13c8
push 1
lea eax, [ebp - 0x398]
push eax
push 0
lea eax, [ebp - 0x148]
push eax
push 0x4e4a
call fcn.0042b3cd
add esp, 0x1c
jmp 0x43ac09
mov dword [ebp - 0x10a8], 0x4aa0d722
mov dword [ebp - 0x10b0], 0
mov dword [ebp - 0x10b8], 0x28abf8b2
mov dword [ebp - 0x5bc], 0x509c
push 1
lea ecx, [ebp - 0xd58]
call fcn.00406726
mov dword [ebp - 0x168], 0
jmp 0x43a936
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 1
jge 0x43a952
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x10c0], 9
jmp 0x43a929
lea eax, [ebp - 0x168]
push eax
push 0x1117
lea eax, [ebp - 0xd58]
push eax
push 0x2563
push 0x705d
push 0xaa4
push 0
push 0
push 1
call fcn.0044278b
add esp, 0x24
mov dword [ebp - 0x5bc], 1
mov esi, dword [ebp - 0x5bc]
push 0
lea ecx, [ebp - 0xd58]
call fcn.00406814
mov dword [eax], esi
mov dword [ebp - 0x878], 0xdee
mov dword [ebp - 0xb44], str.ndpqfjdk_iimsdwpv_uxesv_wkoazxka_uxyics_bqanhjfg_slmilg_ckircwief_fihhtbhm_sehbjy_bkc_sxux_ueto
cmp dword [ebp - 0x878], 0x1188
jle 0x43aaa8
and dword [ebp - 0x21c], 0
jmp 0x43a9db
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x23a1
jge 0x43aaa8
and dword [ebp - 0x2b4], 0
jmp 0x43aa01
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x15bb
jge 0x43aaa3
and dword [ebp - 0x224], 0
jmp 0x43aa27
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x48f8
jge 0x43aa9e
and dword [ebp - 0x304], 0
jmp 0x43aa49
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x61d4
jge 0x43aa99
mov esi, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x2b4]
shl esi, cl
mov eax, dword [ebp - 0x224]
cdq
idiv dword [ebp - 0x304]
or esi, edx
mov eax, esi
cdq
mov dword [ebp - 0xb70], eax
mov dword [ebp - 0xb6c], edx
push dword [ebp - 0xb6c]
push dword [ebp - 0xb70]
mov ecx, 0xace058
call fcn.004063d1
jmp 0x43aa3c
jmp 0x43aa1a
jmp 0x43a9f4
jmp 0x43a9ce
lea eax, [ebp - 0xd58]
push eax
push 1
push 0
push 0
call fcn.0044ce49
add esp, 0x10
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x878], 0xdbb
jge 0x43aae0
mov edx, dword [ebp - 0xb44]
mov ecx, 0xace058
call fcn.00409042
jmp 0x43aafc
or dword [ebp - 4], 0xffffffff
jmp 0x43ab06
lea ecx, [ebp - 0xd58]
call fcn.004067f8
mov byte [ebp - 0x75], 0
mov dword [ebp - 0x5c4], 0xfffffff6
mov dword [ebp - 0x9cc], 0xffffffff
mov dword [ebp - 0xccc], 0xfffffff6
push 1
lea ecx, [ebp - 0x1148]
call fcn.00406726
push 0x476e
push 1
push 0x4662
push 0x8ba
push 1
push 1
push 0x1e74
push 0x45b5
lea eax, [ebp - 0x1148]
push eax
lea eax, [ebp - 0x10c8]
push eax
push 0x37e6
push 0
call fcn.004269c3
add esp, 0x30
lea eax, [ebp - 0x9cc]
push eax
push 0x39ad
push 1
push 0x23ad
push 0
lea eax, [ebp - 0x5c4]
push eax
push 0
lea eax, [ebp - 0xccc]
push eax
push 0x495c
call fcn.0041193f
add esp, 0x24
push 0x613e
lea eax, [ebp - 0x5c4]
push eax
push 0x494e
push 0xbf1
push 0
call fcn.00445364
add esp, 0x14
lea ecx, [ebp - 0x1148]
call fcn.004067f8
push 0x5a65
push 0x1938
push 0x13e3
push 0x18fc
push 0
lea eax, [ebp - 0x75]
push eax
push 1
push 0x67c5
push 0
push 0x4ce7
call fcn.0042837f
add esp, 0x28
mov dword [ebp - 0xe4], 0x62e08974
mov dword [ebp - 0x9d4], 0x66fe
mov dword [ebp - 0x11c], 0xcb0b
push 1
lea ecx, [ebp - 0x8e0]
call fcn.00406726
mov dword [ebp - 0x104], 0xffffffff
push 0x1f15
push 0
push 0x1a48
push 0
push 0x794f
lea eax, [ebp - 0x8e0]
push eax
push 1
push 0x7675
lea eax, [ebp - 0x10d0]
push eax
push 1
call fcn.0040ecce
add esp, 0x28
lea eax, [ebp - 0xe4]
push eax
push 0x615b
push 0x4823
lea eax, [ebp - 0x8e0]
push eax
push 0
lea eax, [ebp - 0x9d4]
push eax
push 0x79f1
push 0
lea eax, [ebp - 0x11c]
push eax
push 0x3c9e
push 1
push 0x240c
push 0x2c61
call fcn.00441327
add esp, 0x34
cmp dword [ebp - 0x11c], 0
je 0x43ae95
mov dword [ebp - 0xb50], 0x3a21b78c
mov dword [ebp - 0xc48], 0x32da3bb1
mov dword [ebp - 0x11c], 0
jmp 0x43acf2
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jg 0x43ae93
mov dword [ebp - 0x9dc], 0xa2e255bb
mov dword [ebp - 0xe4], 0
jmp 0x43ad22
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jg 0x43ae30
push 4
lea ecx, [ebp - 0xcf8]
call fcn.00406726
push 0x359e
push 0
push 0x6cfc
push 0x7c3d
push 0x5a23
push 0
lea eax, [ebp - 0xcf8]
push eax
lea eax, [ebp - 0x10d8]
push eax
push 1
push 0xf99
push 0x40e5
push 0x3a8c
push 1
call fcn.0041f10f
add esp, 0x34
push 0x6fad
lea eax, [ebp - 0x8e0]
push eax
push 0
push 0
lea eax, [ebp - 0x104]
push eax
push 0x1e83
lea eax, [ebp - 0xe4]
push eax
push 0
push 0x2e9f
push 0x5c36
lea eax, [ebp - 0xb50]
push eax
push 0x7d2a
push 0xee6
push 1
push 0x5baa
push 1
push 0x6b4e
push 0x23f5
lea eax, [ebp - 0xcf8]
push eax
push 0x7c26
lea eax, [ebp - 0x9dc]
push eax
push 0x6419
lea eax, [ebp - 0xc48]
push eax
push 0x7549
push 0x6553
call fcn.0045062d
add esp, 0x64
push 0
lea ecx, [ebp - 0x8e0]
call fcn.00406814
cmp dword [eax], 0
je 0x43ae20
lea ecx, [ebp - 0xcf8]
call fcn.004067f8
jmp 0x43ae30
lea ecx, [ebp - 0xcf8]
call fcn.004067f8
jmp 0x43ad15
mov byte [ebp - 0x77], 0
push 0x5404
push 1
push 0x3c1b
push 0x7d35
push 1
push 0x204f
push 0x1523
lea eax, [ebp - 0x77]
push eax
push 0
push 0x4543
push 0xbc1
push 0x6721
push 0x1388
push 1
push 0x598e
push 0x2b6f
push 0x54f
push 0x5f0a
push 0x7fd4
call fcn.0042c141
add esp, 0x4c
jmp 0x43ace5
jmp 0x43aee1
mov dword [ebp - 0x104], 0
jmp 0x43aeae
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jge 0x43aee1
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x8e0]
push eax
push 0x3d8
push 0
push 0x57ad
push 0
push 1
push 1
call fcn.00428774
add esp, 0x20
jmp 0x43aea1
lea ecx, [ebp - 0x8e0]
call fcn.004067f8
cmp dword [ebp - 0x3cc], 0
jle 0x4407d4
push 2
lea ecx, [ebp - 0xecc]
call fcn.00406726
push 0x896
push 0x72bf
push 0
push 0x5780
lea eax, [ebp - 0x1210]
push eax
lea eax, [ebp - 0xecc]
push eax
push 0
push 1
push 0x3de0
push 1
push 0
push 1
call fcn.0044a118
add esp, 0x30
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x43af74
push 1
push 0x429e
push 0x39a4
push 0xe8c
push 0
push 0x4b42
push 0
push 0x48b
push 0x4d95
call fcn.0042ea04
add esp, 0x24
lea eax, [ebp - 0xecc]
push eax
push 0
call fcn.00455d17
pop ecx
pop ecx
lea ecx, [ebp - 0xecc]
call fcn.004067f8
mov dword [ebp - 0xd0], 0x62e08974
mov dword [ebp - 0x6c], 2
mov dword [ebp - 0x414], 0xe3e7631
mov dword [ebp - 0xec], 1
mov dword [ebp - 0xb68], 0xfc53d8b3
push 3
lea ecx, [ebp - 0xe24]
call fcn.00406726
push 0xc62
push 0x725e
push 0
push 0x62ef
push 0
push 0x6f79
push 1
lea eax, [ebp - 0xe24]
push eax
lea eax, [ebp - 0x1218]
push eax
push 1
call fcn.00421d31
add esp, 0x28
mov dword [ebp - 0x734], 0x74ac
mov dword [ebp - 0x9e4], str.uchjfeq_opw_krkq_ncn_wjf_jisxz_ylxm_qecqz
cmp dword [ebp - 0x734], 0x76cf
jle 0x43b0c9
and dword [ebp - 0x22c], 0
jmp 0x43b037
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x45f2
jge 0x43b0c9
and dword [ebp - 0x2bc], 0
jmp 0x43b05d
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0xb74
jge 0x43b0c4
and dword [ebp - 0x234], 0
jmp 0x43b07f
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x4318
jge 0x43b0c2
mov eax, dword [ebp - 0x22c]
add eax, dword [ebp - 0x2bc]
sub eax, dword [ebp - 0x234]
cdq
mov dword [ebp - 0xb7c], eax
mov dword [ebp - 0xb78], edx
push dword [ebp - 0xb78]
push dword [ebp - 0xb7c]
mov ecx, 0xace058
call fcn.004063d1
jmp 0x43b072
jmp 0x43b050
jmp 0x43b02a
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x734], 0x73bf
jge 0x43b0ec
mov edx, dword [ebp - 0x9e4]
mov ecx, 0xace058
call fcn.00409042
jmp 0x43b108
or dword [ebp - 4], 0xffffffff
jmp 0x43b112
push 0x6469
push 0x4f75
push 0x5e88
push 1
push 0x289e
push 0
push 1
push 1
call fcn.00428774
add esp, 0x20
mov eax, 0x693009c
test eax, eax
je 0x43b152
mov eax, dword [ebp - 0x6c]
neg eax
je 0x43b152
mov dword [ebp - 0xb5c], 1
jmp 0x43b159
and dword [ebp - 0xb5c], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1220], eax
cmp dword [ebp - 0x6c], 0xffffffff
jne 0x43b175
xor eax, eax
jne 0x43b175
and dword [ebp - 0x5cc], 0
jmp 0x43b17f
mov dword [ebp - 0x5cc], 1
mov eax, dword [ebp - 0x414]
imul eax, dword [ebp - 0x5cc]
cmp eax, 0xa9da
jle 0x43b19f
mov dword [ebp - 0x7ec], 1
jmp 0x43b1a6
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x414]
cmp dword [ebp - 0x7ec], eax
jle 0x43b1c0
mov dword [ebp - 0x5d4], 1
jmp 0x43b1c7
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x5d4]
je 0x43b1e4
cmp dword [ebp - 0x6c], 0
je 0x43b1e4
mov dword [ebp - 0x73c], 1
jmp 0x43b1eb
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x73c]
jl 0x43b202
mov dword [ebp - 0x5dc], 1
jmp 0x43b209
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x5dc]
je 0x43b22c
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x123c], eax
mov dword [ebp - 0xec], 0x6986d6
jmp 0x43b34d
mov dword [ebp - 0xcbc], 0xfffffff6
mov dword [ebp - 0x9ec], 0x9b4ccc41
mov dword [ebp - 0xec], 0xffffffe3
jmp 0x43b259
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xfffffffa
jge 0x43b34d
push 3
lea ecx, [ebp - 0xea8]
call fcn.00406726
mov dword [ebp - 0x9f4], 0xffffffff
push 1
push 0x7e1f
push 0
push 0x5984
lea eax, [ebp - 0xea8]
push eax
push 0
push 0x3a0
push 0x59e1
lea eax, [ebp - 0x1244]
push eax
push 0x7a3b
push 0x63f4
push 0x9fc
call fcn.00456fba
add esp, 0x30
lea eax, [ebp - 0xe24]
push eax
push 0x1171
push 0x2a5d
push 0xd4a
push 0x6c35
push 0
push 0x659d
lea eax, [ebp - 0xea8]
push eax
lea eax, [ebp - 0x9ec]
push eax
lea eax, [ebp - 0xcbc]
push eax
push 0x14d6
push 0x3517
push 1
push 1
lea eax, [ebp - 0x9f4]
push eax
push 0x777c
push 0x48a4
push 1
push 0xcc
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0xb68]
push eax
lea eax, [ebp - 0xec]
push eax
push 0
push 0x4537
call fcn.00451db1
add esp, 0x60
lea ecx, [ebp - 0xea8]
call fcn.004067f8
jmp 0x43b24c
lea ecx, [ebp - 0xe24]
call fcn.004067f8
mov dword [ebp - 0xcc4], 0x66fe
mov dword [ebp - 0x344], 0
jmp 0x43b37b
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 3
jge 0x43b397
mov eax, dword [ebp - 0x344]
mov dword [ebp + eax*4 - 0xd04], 0xe1757117
jmp 0x43b36e
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xd04], 0
jmp 0x43b3c2
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd04]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xd04], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd04], 0xffffffef
je 0x43b46d
mov dword [ebp - 0x23c], 9
mov dword [ebp - 0x23c], 0xffffffe3
jmp 0x43b3f8
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xffffffe9
jge 0x43b468
mov dword [ebp - 0x9fc], 0
mov dword [ebp - 0x9fc], 0
push 0x5b99
push 0x2a28
push 0x6e38
push 0x63ed
push 0x3c0d
push 0x4a96
push 0x420a
push 0x2ecd
push 0x7608
push 0x2e83
push 1
push 0
push 0
push 0x2b16
push 0x29fa
push 1
push 0x17bc
call fcn.00428d52
add esp, 0x44
jmp 0x43b3eb
jmp 0x43b3a9
mov dword [ebp - 0x10c], 0xcb0b
mov dword [ebp - 0x68], 3
mov dword [ebp - 0x604], 0x70d2
mov dword [ebp - 0x754], 0xffffffff
mov dword [ebp - 0xa14], 0x22525a52
mov dword [ebp - 0xb80], 0
mov dword [ebp - 0xa1c], 1
mov dword [ebp - 0xcdc], 1
mov dword [ebp - 0x68], 0
jmp 0x43b4ca
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xa
jg 0x43b81e
mov dword [ebp - 0x60], 1
mov dword [ebp - 0xc50], 0x951e
mov dword [ebp - 0x5f4], 0
mov dword [ebp - 0x124c], 0xb39d2057
mov dword [ebp - 0xa04], 2
mov dword [ebp - 0x60], 0
jmp 0x43b513
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xe
jg 0x43b7fe
mov dword [ebp - 0x3a0], 0xffffffff
mov dword [ebp - 0x84c], 1
mov dword [ebp - 0xa0c], 1
mov dword [ebp - 0x2c4], 0
jmp 0x43b554
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 3
jge 0x43b570
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0x1158], 0xfffffffd
jmp 0x43b547
cmp dword [ebp - 0xc50], 0x6e58d020
jge 0x43b588
mov dword [ebp - 0x5ec], 1
jmp 0x43b58f
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x84c], eax
cmp dword [ebp - 0x84c], 0
jne 0x43b5c2
mov eax, 0x8d303f02
test eax, eax
jne 0x43b5c2
and dword [ebp - 0x5e4], 0
jmp 0x43b5cc
mov dword [ebp - 0x5e4], 1
cmp dword [ebp - 0x5e4], 0xb9c2
jle 0x43b5e4
mov dword [ebp - 0x744], 1
jmp 0x43b5eb
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x744]
imul eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x60]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x1158]
cmp dword [ebp - 0x5ec], eax
je 0x43b61c
mov dword [ebp - 0x7f4], 1
jmp 0x43b623
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x7f4]
je 0x43b675
push 0x402
lea eax, [ebp - 0x5f4]
push eax
push 0x56f9
push 1
push 0x12a1
push 0x186b
push 0x12db
push 0xa58
push 0xbdc
push 0x5cf9
push 0x15b8
push 0
push 0
call fcn.004165db
add esp, 0x34
jmp 0x43b7b5
mov dword [ebp - 0x244], 0
jmp 0x43b68e
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 3
jge 0x43b6aa
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x1168], 1
jmp 0x43b681
push 0x6752
push 0
push 0
lea eax, [ebp - 0x3a0]
push eax
push 0
lea eax, [ebp - 0xa04]
push eax
push 0x7519
push 1
call fcn.0041ff78
add esp, 0x20
mov eax, 0xd860
test eax, eax
je 0x43b6f0
cmp dword [ebp - 0x604], 0
je 0x43b6f0
mov dword [ebp - 0x74c], 1
jmp 0x43b6f7
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x74c], eax
jg 0x43b70e
mov dword [ebp - 0xb74], 1
jmp 0x43b715
and dword [ebp - 0xb74], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1204], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1168], 0
je 0x43b740
cmp dword [ebp - 0x60], 0
je 0x43b740
mov dword [ebp - 0x3e0], 1
jmp 0x43b747
and dword [ebp - 0x3e0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp + eax - 0x1158], ecx
cmp dword [ebp - 0x3e0], 0xa60c437f
jbe 0x43b772
mov dword [ebp - 0x5fc], 1
jmp 0x43b779
and dword [ebp - 0x5fc], 0
cmp dword [ebp - 0x5fc], 0xc8e4
jle 0x43b79e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1168], 0
jne 0x43b79e
and dword [ebp - 0x890], 0
jmp 0x43b7a8
mov dword [ebp - 0x890], 1
imul eax, dword [ebp - 0x890], 0xffffffff
mov dword [ebp - 0xa0c], eax
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x43b7f9
push 0x55b1
push 0x675e
push 0
push 0x2cb8
push 0x4f99
push 1
push 1
push 0x6b56
push 0
push 0x16f6
push 0x1201
push 0x7c0b
call fcn.004204bf
add esp, 0x30
jmp 0x43b50c
push 0xf37
lea eax, [ebp - 0x754]
push eax
push 0x52d8
push 0
call fcn.00453ef6
add esp, 0x10
jmp 0x43b4c3
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x604]
push eax
lea eax, [ebp - 0xcdc]
push eax
lea eax, [ebp - 0xa14]
push eax
push 0x1e48
push 0xdfc
push 0x72df
lea eax, [ebp - 0xb80]
push eax
push 0x5e95
lea eax, [ebp - 0xa1c]
push eax
push 0x5384
lea eax, [ebp - 0x754]
push eax
push 0x6af7
push 0x4e07
push 0x4607
push 1
push 0x1ca1
push 0
push 1
push 1
push 1
push 0
call fcn.0042134d
add esp, 0x58
push 1
lea ecx, [ebp - 0x8f8]
call fcn.00406726
mov dword [ebp - 0xd8], 0xffffffff
mov dword [ebp - 0x114], 0xd313dd33
mov dword [ebp - 0xf4], 0x85f1871d
mov dword [ebp - 0x634], 0x177c4186
mov dword [ebp - 0x408], 0xfffffffb
mov dword [ebp - 0xd8c], 0
mov dword [ebp - 0xd88], 0
mov dword [ebp - 0xd84], 0
mov dword [ebp - 0xd80], 0
mov dword [ebp - 0x114], 0x1a
jmp 0x43b90d
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xffffffe8
jl 0x43bfa5
mov dword [ebp - 0x1c], 0xfe01bd97
mov dword [ebp - 0x2cc], 1
mov dword [ebp - 0xb8c], 9
mov dword [ebp - 0xf0c], 0x8c37f2e4
mov dword [ebp - 0xeec], 1
mov dword [ebp - 0x30c], 0
jmp 0x43b962
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 2
jge 0x43b97e
mov eax, dword [ebp - 0x30c]
mov dword [ebp + eax*4 - 0xd94], 0xfb361f3d
jmp 0x43b955
mov dword [ebp - 0x1c], 0
jmp 0x43b98e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1a
jle 0x43bfa0
push 4
lea ecx, [ebp - 0x434]
call fcn.00406726
mov dword [ebp - 0x3e8], 0x7bbda73a
mov dword [ebp - 0xf48], 0x2f400034
push 0x67f0
push 0xb3a
lea eax, [ebp - 0xef8]
push eax
push 0
push 1
push 0x2f4a
lea eax, [ebp - 0x434]
push eax
push 0x6cff
push 0
call fcn.0044be62
add esp, 0x24
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xf50], eax
cmp dword [ebp - 0x1c], 0
je 0x43bb19
push 3
lea ecx, [ebp - 0x434]
call fcn.00406814
mov eax, dword [eax]
sub eax, 0x77f17245
cmp eax, dword [ebp - 0x1c]
jle 0x43ba21
mov dword [ebp - 0x60c], 1
jmp 0x43ba28
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x60c], eax
jle 0x43ba3f
mov dword [ebp - 0x7fc], 1
jmp 0x43ba46
and dword [ebp - 0x7fc], 0
cmp dword [ebp - 0x7fc], 0xa66fa4bc
ja 0x43ba5e
mov dword [ebp - 0x614], 1
jmp 0x43ba65
and dword [ebp - 0x614], 0
cmp dword [ebp - 0x614], 3
jge 0x43ba7a
mov dword [ebp - 0x75c], 1
jmp 0x43ba81
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x75c], eax
jle 0x43ba9b
mov dword [ebp - 0x61c], 1
jmp 0x43baa2
and dword [ebp - 0x61c], 0
push 3
lea ecx, [ebp - 0x434]
call fcn.00406814
mov ecx, dword [ebp - 0x61c]
cmp ecx, dword [eax]
jne 0x43bac5
mov dword [ebp - 0x3a8], 1
jmp 0x43bacc
and dword [ebp - 0x3a8], 0
push 3
lea ecx, [ebp - 0x434]
call fcn.00406814
mov ecx, dword [ebp - 0x3a8]
mov dword [eax], ecx
mov eax, 0xbd9
imul eax, eax, 0xba92
cmp eax, 0xffffffff
jb 0x43bafd
mov dword [ebp - 0x854], 1
jmp 0x43bb04
and dword [ebp - 0x854], 0
cmp dword [ebp - 0x854], 0xfffffff8
je 0x43bb19
mov dword [ebp - 0xc58], 1
jmp 0x43bb20
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xf04], eax
mov eax, dword [ebp - 0x3e8]
cmp dword [ebp - 0x1c], eax
jge 0x43bb40
mov dword [ebp - 0x624], 1
jmp 0x43bb47
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x3e8]
cmp dword [ebp - 0x624], eax
jle 0x43bb61
mov dword [ebp - 0x764], 1
jmp 0x43bb68
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x764], eax
je 0x43bb7f
mov dword [ebp - 0x62c], 1
jmp 0x43bb86
and dword [ebp - 0x62c], 0
cmp dword [ebp - 0x62c], 0
je 0x43bba4
cmp dword [ebp - 0xf4], 0
je 0x43bba4
mov dword [ebp - 0x804], 1
jmp 0x43bbab
and dword [ebp - 0x804], 0
cmp dword [ebp - 0x804], 0x7390
jl 0x43bbc3
mov dword [ebp - 0xa24], 1
jmp 0x43bbca
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xf58], eax
push 0xfffffffffffffff8
pop eax
cmp eax, 1
jb 0x43bc2d
mov dword [ebp - 0xf4], 0
jmp 0x43bbf7
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x2b
jg 0x43bc28
push 1
push 0x2150
lea eax, [ebp - 0x2cc]
push eax
push 1
push 1
push 0
push 0x53ca
push 0x1b7f
call fcn.0043497e
add esp, 0x20
jmp 0x43bbea
jmp 0x43bf75
mov dword [ebp - 0x3b8], 0x3c57
mov dword [ebp - 0x24c], 0
jmp 0x43bc50
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x43bc6c
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x1258], 0x9de470d1
jmp 0x43bc43
cmp dword [ebp - 0x2cc], 0
jne 0x43bcaf
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x2cc], 0xfff7
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x634], eax
jg 0x43bcaf
and dword [ebp - 0x76c], 0
jmp 0x43bcb9
mov dword [ebp - 0x76c], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x76c], eax
jle 0x43bcd0
mov dword [ebp - 0x63c], 1
jmp 0x43bcd7
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 0x2674d907
jge 0x43bcef
mov dword [ebp - 0x880], 1
jmp 0x43bcf6
and dword [ebp - 0x880], 0
mov esi, dword [ebp - 0xf4]
push 0
lea ecx, [ebp - 0x434]
call fcn.00406814
add esi, dword [eax]
cmp esi, dword [ebp - 0x880]
jg 0x43bd1f
mov dword [ebp - 0x3b0], 1
jmp 0x43bd26
and dword [ebp - 0x3b0], 0
push 1
lea ecx, [ebp - 0x434]
call fcn.00406814
mov ecx, dword [ebp - 0x3b0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x644], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x644]
mov dword [ebp + eax - 0xd8c], ecx
cmp dword [ebp - 0x644], 0
je 0x43bf1f
mov dword [ebp - 0x254], 0
jmp 0x43bd80
cmp dword [ebp - 0x254], 2
jge 0x43bd9c
mov byte [ebp - 0x7d], 0
push 0x7250
push 0x117c
lea eax, [ebp - 0x7d]
push eax
push 0
push 0
push 0x518a
push 0x37c7
push 0x5517
push 0x60ee
push 1
call fcn.00436ce6
add esp, 0x28
push 0
lea eax, [ebp - 0xb8c]
push eax
push 0x4e6c
push 0x448
push 0
push 0x43e7
call fcn.00441eba
add esp, 0x18
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd94]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xd94], eax
lea ecx, [ebp - 0x434]
call fcn.004067f8
jmp 0x43b987
jmp 0x43b900
mov dword [ebp - 0x85c], 0x3170
mov dword [ebp - 0xa2c], str.jipwa_yapoqegsd_uhzzx_monvzg_juwqiuo_ukel
cmp dword [ebp - 0x85c], 0x34e5
jle 0x43c061
and dword [ebp - 0x32c], 0
jmp 0x43bfdf
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x592e
jge 0x43c061
and dword [ebp - 0x25c], 0
jmp 0x43c001
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x4ba6
jge 0x43c05c
mov eax, dword [ebp - 0x32c]
mov ecx, dword [ebp - 0x25c]
shl eax, cl
cdq
mov dword [ebp - 0xb88], eax
mov dword [ebp - 0xb84], edx
push dword [ebp - 0xb84]
push dword [ebp - 0xb88]
lea ecx, [ebp - 0x1310]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.004063c6
push eax
call fcn.004a68c7
pop ecx
lea ecx, [ebp - 0x1310]
call fcn.004063bc
jmp 0x43bff4
jmp 0x43bfd2
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x85c], 0x2e2f
jge 0x43c080
push dword [ebp - 0xa2c]
call fcn.004a68c7
pop ecx
jmp 0x43c09c
or dword [ebp - 4], 0xffffffff
jmp 0x43c0a6
mov dword [ebp - 0x2d4], 0x7f6af112
mov dword [ebp - 0xf60], 0xea41449c
mov dword [ebp - 0x2d4], 0
jmp 0x43c0d3
mov eax, dword [ebp - 0x2d4]
dec eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0xffffffed
jge 0x43c1e5
push 3
lea ecx, [ebp - 0xe3c]
call fcn.00406726
push 3
lea ecx, [ebp - 0xe84]
call fcn.00406726
push 0
lea eax, [ebp - 0x150]
push eax
push 0x2970
push 0x3743
push 0x1531
push 0x4ea8
push 1
push 0x2b6e
push 0
lea eax, [ebp - 0xe3c]
push eax
call fcn.00420276
add esp, 0x28
mov dword [ebp - 0x150], 0
jmp 0x43c148
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jge 0x43c167
push dword [ebp - 0x150]
lea ecx, [ebp - 0xe84]
call fcn.00406814
or dword [eax], 0xffffffff
jmp 0x43c13b
mov byte [ebp - 0x7f], 0
push 1
push 0
lea eax, [ebp - 0x7f]
push eax
push 0x7514
push 0x6fe6
push 0
push 0x28f4
push 0x795
push 0
call fcn.0040e1ff
add esp, 0x24
push 0x6c8d
push 0x48b1
push 1
push 0x28db
push 0x3658
push 0
lea eax, [ebp - 0xe3c]
push eax
lea eax, [ebp - 0xe84]
push eax
push 0x7f0b
push 1
push 1
call fcn.0040cd9c
add esp, 0x2c
lea ecx, [ebp - 0xe84]
call fcn.004067f8
lea ecx, [ebp - 0xe3c]
call fcn.004067f8
jmp 0x43c0c6
lea eax, [ebp - 0x106c]
push eax
push 0x1a27
push 0x5e59
push 0
push 0x5188
push 0
lea eax, [ebp - 0x8f8]
push eax
push 0x2e3a
push 0x62ae
call fcn.0044e26e
add esp, 0x24
push 0
call fcn.00441c6d
pop ecx
lea eax, [ebp - 0x8f8]
push eax
push 0
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xcc4]
push eax
lea eax, [ebp - 0xd0]
push eax
push 0x4e49
push 1
push 0
call fcn.00429f32
add esp, 0x20
cmp dword [ebp - 0x10c], 0
je 0x43cc09
mov dword [ebp - 0xa3c], 0x3a21b78c
mov dword [ebp - 0xb98], 0x32da3bb1
mov dword [ebp - 0x10c], 0
jmp 0x43c289
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jg 0x43cc04
mov dword [ebp - 0xc60], 0xa2e255bb
mov dword [ebp - 0xd0], 0
jmp 0x43c2b9
cmp dword [ebp - 0xd0], 0
jg 0x43c719
push 4
lea ecx, [ebp - 0xd1c]
call fcn.00406726
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x264], 0
jmp 0x43c2f6
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 2
jge 0x43c312
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xf40], 0xfffffff8
jmp 0x43c2e9
mov dword [ebp - 0x178], 0
jmp 0x43c32b
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jge 0x43c347
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0xf40], 1
jmp 0x43c31e
mov byte [ebp - 0x81], 0
push 0
push 0x169e
lea eax, [ebp - 0x81]
push eax
push 0
push 0x5f22
push 0x413
push 0
push 0x3f60
push 0x13d7
push 0x4114
push 0x1ec7
push 0x66b4
push 0x59f4
push 1
push 1
push 0x2f5b
push 0x5503
push 0x6079
push 0x6ed9
call fcn.00435302
add esp, 0x4c
lea eax, [ebp - 0xf14]
push eax
push 0
lea eax, [ebp - 0xd1c]
push eax
push 0x1a2c
push 1
push 0
push 0
push 0x53d0
call fcn.0040dbfc
add esp, 0x20
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x314], 0
jmp 0x43c3f3
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 1
jge 0x43c40f
mov eax, dword [ebp - 0x314]
mov dword [ebp + eax*4 - 0xa34], 0xfffc
jmp 0x43c3e6
mov dword [ebp - 0x128], 0
jmp 0x43c428
cmp dword [ebp - 0x128], 0
jg 0x43c4c4
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x26c], 0
jmp 0x43c458
mov byte [ebp - 0x85], 0
push 0x6d25
lea eax, [ebp - 0x85]
push eax
push 0
push 0x64b8
push 0x53e6
push 0x46f6
push 1
push 1
push 0x426c
push 1
push 0
push 1
call fcn.0044a118
add esp, 0x30
lea eax, [ebp - 0xb98]
push eax
push 0x69a5
push 0x101a
push 0
push 0x6002
push 0x116d
push 0x4e3b
push 1
push 0
push 0x2ef
push 1
push 0x774d
lea eax, [ebp - 0xa3c]
push eax
push 1
push 0x5349
push 0
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x8f8]
push eax
lea eax, [ebp - 0xc60]
push eax
lea eax, [ebp - 0xd1c]
push eax
call fcn.0044e700
add esp, 0x54
mov dword [ebp - 0x784], 0xf9c28ade
mov dword [ebp - 0x664], 1
mov dword [ebp - 0xa4c], 0xfffffff7
mov dword [ebp - 0xa5c], 0xfffffffe
mov dword [ebp - 0xa44], 0x310c13fe
mov dword [ebp - 0xba4], 0x8e9646b8
mov dword [ebp - 0xdd8], 0x8555145c
mov dword [ebp - 0xdd4], 0x8555145c
mov dword [ebp - 0xdd0], 0x8555145c
mov dword [ebp - 0xdcc], 0x8555145c
lea ecx, [ebp - 0x3e1]
call fcn.00406823
push eax
lea eax, [ebp - 0xdc8]
push eax
lea eax, [ebp - 0xdd8]
push eax
lea ecx, [ebp - 0x1284]
call fcn.00406826
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1178]
call fcn.004067d2
mov dword [ebp - 0x114c], 1
mov dword [ebp - 0xa54], 0xffff
mov dword [ebp - 0xcd4], 0
mov dword [ebp - 0xbb0], 2
push 0x332f
lea eax, [ebp - 0x664]
push eax
push 0x431f
push 0x7759
push 1
push 0x626d
push 0
lea eax, [ebp - 0x784]
push eax
push 1
push 0x16d0
call fcn.00419ea6
add esp, 0x28
push 0x5688
push 0
lea eax, [ebp - 0xa44]
push eax
push 0x76e
lea eax, [ebp - 0x664]
push eax
push 0
lea eax, [ebp - 0xba4]
push eax
push 0x2329
lea eax, [ebp - 0x1178]
push eax
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xcd4]
push eax
push 1
push 0x27f2
push 1
lea eax, [ebp - 0xa54]
push eax
push 1
lea eax, [ebp - 0xbb0]
push eax
push 0x14bf
push 0x3166
lea eax, [ebp - 0x784]
push eax
push 1
push 0x7188
lea eax, [ebp - 0xa5c]
push eax
call fcn.00445883
add esp, 0x5c
lea ecx, [ebp - 0x1178]
call fcn.004067f8
push 0
lea ecx, [ebp - 0x8f8]
call fcn.00406814
cmp dword [eax], 0
je 0x43c709
mov dword [ebp - 0xc68], 0xfffffffd
mov dword [ebp - 0x914], 0xffffffff
mov dword [ebp - 0xf20], 1
mov dword [ebp - 0x1074], 0x58bac04e
mov dword [ebp - 0xf2c], 0xfffffffb
mov dword [ebp - 0x1248], 0x3707822e
mov dword [ebp - 0xf38], 0xffffffff
mov dword [ebp - 0x107c], 0xf5f49900
mov dword [ebp - 0xf44], 0xfdcba86b
mov dword [ebp - 0x115c], 4
push 2
lea ecx, [ebp - 0x1188]
call fcn.00406726
mov dword [ebp - 0xf4c], 0xffffffff
mov dword [ebp - 0x1084], 0x41022496
mov dword [ebp - 0xbbc], 0x2e5f58cd
mov dword [ebp - 0x48], 0
jmp 0x43c7b8
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x43c7ce
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x131c], 0xffffffff
jmp 0x43c7b1
mov dword [ebp - 0x48], 0
jmp 0x43c7de
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x43c7fa
push dword [ebp - 0x48]
lea ecx, [ebp - 0x1188]
call fcn.00406814
mov dword [eax], 0xfffffff7
jmp 0x43c7d7
mov eax, dword [ebp - 0xc68]
mov dword [ebp - 0x914], eax
push 0x7ee5
push 0x5870
push 0x74fd
push 0
lea eax, [ebp - 0xbbc]
push eax
push 0x5860
push 0x673
push 0
push 0xa4b
push 0xb14
push 0x46d2
push 0
push 1
call fcn.00411466
add esp, 0x34
lea ecx, [ebp - 0x1188]
call fcn.004067f8
mov byte [ebp - 0x87], 0
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x43cbff
push 3
lea ecx, [ebp - 0x11a8]
call fcn.00406726
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0xf54], 0xb1891f78
mov dword [ebp - 0x11fc], 0xfffffff9
push 1
lea ecx, [ebp - 0x1198]
call fcn.00406726
mov dword [ebp - 0xf5c], 0x439cb61d
push 4
lea ecx, [ebp - 0xe90]
call fcn.00406726
mov dword [ebp - 0x66c], 0x145
mov dword [ebp - 0xa6c], str.ovdwhs_dztglja_gbzdxz_ofjiokrhe_lkq_ikludsknr_itomgbssp_umjapygue_auqltd
cmp dword [ebp - 0x66c], 0x401
jle 0x43c9e4
and dword [ebp - 0x198], 0
jmp 0x43c8ef
cmp dword [ebp - 0x198], 0xa3f
jge 0x43c9d8
and dword [ebp - 0x1a0], 0
jmp 0x43c915
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
mov dword [ebp - 0x40], 0
jmp 0x43c9f4
cmp dword [ebp - 0x40], 3
jge 0x43ca10
push dword [ebp - 0x40]
lea ecx, [ebp - 0x11a8]
call fcn.00406814
mov dword [eax], 0xfffffff6
jmp 0x43c9ed
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x66c], 0xfffffdd1
jge 0x43ca2f
jmp 0x43c27c
jmp 0x43d2fb
mov dword [ebp - 0x1c8], 0x398070ad
mov dword [ebp - 0x38], 0x1e3ff14e
mov dword [ebp - 0x78c], 0
mov dword [ebp - 0x35c], 0x38009552
mov dword [ebp - 0x364], 0x299f
mov dword [ebp - 0xa7c], 1
mov dword [ebp - 0x1c0], 0
jmp 0x43cc5b
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jge 0x43cc77
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0xa74], 0x36de0184
jmp 0x43cc4e
mov byte [ebp - 0x8b], 0
push 0x5cea
push 0x219e
push 0x1630
push 0x20a1
push 0xf9a
push 0x3418
push 0x7e18
lea eax, [ebp - 0x8b]
push eax
push 0x328d
push 0
call fcn.004464c0
add esp, 0x28
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x1c8], eax
jne 0x43ccd1
mov dword [ebp - 0x478], 1
jmp 0x43ccd8
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x108c], eax
xor eax, eax
neg eax
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0xf64], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x116c], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
jle 0x43cd19
or eax, 0xffffffff
je 0x43cd19
mov dword [ebp - 0x674], 1
jmp 0x43cd20
and dword [ebp - 0x674], 0
cmp dword [ebp - 0x674], 1
jg 0x43cd35
mov dword [ebp - 0x44c], 1
jmp 0x43cd3c
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x44c]
mov dword [ebp - 0x35c], eax
je 0x43cd71
cmp dword [ebp - 0x35c], 0
je 0x43cd71
cmp dword [ebp - 0x38], 0
je 0x43cd71
cmp dword [ebp - 0x364], 0
je 0x43cd71
mov dword [ebp - 0x450], 1
jmp 0x43cd78
and dword [ebp - 0x450], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa74], 0xffffffff
cmp dword [ebp - 0x450], 0xffffffff
jle 0x43cd9e
mov dword [ebp - 0x458], 1
jmp 0x43cda5
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x458]
jge 0x43cdbc
mov dword [ebp - 0x448], 1
jmp 0x43cdc3
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xc1477a14
jbe 0x43cde1
mov dword [ebp - 0xbc8], 1
jmp 0x43cde8
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0xf6c], eax
mov eax, 0xf3b0
cmp eax, 0x8797
jge 0x43ce0c
mov dword [ebp - 0x468], 1
jmp 0x43ce13
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
sub eax, dword [ebp - 0x364]
je 0x43ce30
cmp dword [ebp - 0x38], 0
jne 0x43ce30
and dword [ebp - 0x470], 0
jmp 0x43ce3a
mov dword [ebp - 0x470], 1
cmp dword [ebp - 0x470], 0xfffffffe
je 0x43ce4f
mov dword [ebp - 0x480], 1
jmp 0x43ce56
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0x480]
jle 0x43ce7c
lea ecx, [ebp - 0x8f8]
call fcn.004067f8
mov dword [ebp - 0xf7c], 0x624039b6
mov byte [ebp - 0x8d], 0
push 1
push 0x7abb
push 0x1a6e
push 0x498a
push 0x6be3
push 0x51e3
push 0x42de
push 0x6f26
push 0x9ff
push 0x30ea
push 0x7395
lea eax, [ebp - 0x8d]
push eax
push 0x768e
push 0x1fa
push 1
push 0
push 0
push 0x2d1d
push 1
push 0x7c1a
call fcn.0042b68e
add esp, 0x50
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x43d3b5
push 0x266b
push 0x65bd
push 1
push 0x79c6
push 0x7caf
push 1
push 0x7d9a
push 0x977
push 0x2d20
push 0
push 1
call fcn.0040cd9c
add esp, 0x2c
push 4
push 0x1000
push dword [ebp - 0x3cc]
mov eax, dword [ebp - 0x830]
mov ecx, dword [ebp - 0xbd4]
add ecx, dword [eax + 0xc]
push ecx
push 0x3e5e
push 0x5d84
call fcn.0049727f
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x3d4]
mov dword [ecx], eax
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xa94], 0xfffffffe
mov dword [ebp - 0xbec], 0x1b6b
push 2
lea ecx, [ebp - 0xe54]
call fcn.00406726
mov dword [ebp - 0xbe0], 0xac6914f0
mov dword [ebp - 0xa9c], 0xfff9
mov dword [ebp - 0xaa4], 0x361ae7d5
mov dword [ebp - 0xc78], 7
lea eax, [ebp - 0xe54]
push eax
push 0
push 0x284d
push 0x21bc
push 1
push 0x70c8
push 1
push 0x723b
push 0x42db
push 0x7efd
push 1
lea eax, [ebp - 0x109c]
push eax
call fcn.00426e2a
add esp, 0x30
mov dword [ebp - 0xe0], 0xfffffffe
jmp 0x43d495
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x1a
jne 0x43d580
mov dword [ebp - 0xa8c], 0xd21dfe4b
mov dword [ebp - 0x4e0], 0xfffffffe
mov dword [ebp - 0xf84], 0xffffffff
push 3
lea ecx, [ebp - 0x11c8]
call fcn.00406726
mov dword [ebp - 0x1234], 0xbb32
mov dword [ebp - 0x1230], 0xbb32
mov dword [ebp - 0x122c], 0xbb32
mov dword [ebp - 0x1228], 0xbb32
mov dword [ebp - 0xcb8], 0xaa9c1c73
push 0
lea eax, [ebp - 0x117c]
push eax
lea eax, [ebp - 0x11c8]
push eax
push 0x7fb9
push 0x1355
call fcn.00441f51
add esp, 0x14
lea eax, [ebp - 0xe0]
push eax
push 0
lea eax, [ebp - 0xa8c]
push eax
lea eax, [ebp - 0x4e0]
push eax
call fcn.0044d447
add esp, 0x10
push 0x26e3
push 1
push 0x22ca
push 0
push 0x23fa
push 0
push 0x286b
lea eax, [ebp - 0x4e0]
push eax
lea eax, [ebp - 0xcb8]
push eax
call fcn.0044d4d8
add esp, 0x24
lea ecx, [ebp - 0x11c8]
call fcn.004067f8
jmp 0x43d488
lea eax, [ebp - 0xa94]
push eax
push 0x2408
push 1
push 1
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xbe0]
push eax
lea eax, [ebp - 0xa9c]
push eax
lea eax, [ebp - 0xc78]
push eax
push 0
push 0
push 0xd9f
push 0x3f4
push 0x1060
lea eax, [ebp - 0xaa4]
push eax
lea eax, [ebp - 0xbec]
push eax
lea eax, [ebp - 0xe54]
push eax
push 0x602b
call fcn.004103cd
add esp, 0x44
lea ecx, [ebp - 0xe54]
call fcn.004067f8
mov dword [ebp - 0x374], 1
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x4f8], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xf8c], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jge 0x43d624
mov dword [ebp - 0x4e8], 1
jmp 0x43d62b
and dword [ebp - 0x4e8], 0
cmp dword [ebp - 0x4e8], 0x9ae4f78d
ja 0x43d643
mov dword [ebp - 0x4f0], 1
jmp 0x43d64a
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f8], eax
imul eax, dword [ebp - 0x4f8], 0x72c0
cmp eax, dword [ebp - 0x14]
jg 0x43d671
mov dword [ebp - 0x500], 1
jmp 0x43d678
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0x31615e82
je 0x43d690
mov dword [ebp - 0x508], 1
jmp 0x43d697
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x508]
cmp eax, 0xfaf07207
jb 0x43d6b3
mov dword [ebp - 0x510], 1
jmp 0x43d6ba
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
neg eax
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
je 0x43d6d6
mov dword [ebp - 0x518], 1
jmp 0x43d6dd
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x518], eax
jne 0x43d6f4
jmp 0x440b70
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0xac8], eax
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0xa80], eax
mov eax, dword [ebp - 0xa50]
mov dword [ebp - 0xa68], eax
mov eax, dword [ebp - 0xa58]
mov dword [ebp - 0xa78], eax
mov eax, dword [ebp - 0xa60]
mov dword [ebp - 0xa70], eax
mov dword [ebp - 0x840], 0x420e
mov dword [ebp - 0xae8], str.huduoje_uzgpx_hrxci
cmp dword [ebp - 0x840], 0x44f3
jle 0x4408f6
call dword [sym.imp.USER32.dll_DestroyCaret]
and dword [ebp - 0x318], 0
jmp 0x440861
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0x6e7d
jge 0x4408f6
and dword [ebp - 0x320], 0
jmp 0x440887
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x38e9
jge 0x4408f1
and dword [ebp - 0x328], 0
jmp 0x4408a9
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x5ead
jge 0x4408ef
mov eax, dword [ebp - 0x318]
cdq
idiv dword [ebp - 0x320]
and edx, dword [ebp - 0x328]
mov eax, edx
cdq
mov dword [ebp - 0xc00], eax
mov dword [ebp - 0xbfc], edx
push dword [ebp - 0xbfc]
push dword [ebp - 0xc00]
mov ecx, 0xace058
call fcn.004063d1
jmp 0x44089c
jmp 0x44087a
jmp 0x440854
mov eax, dword [ebp - 0xa68]
movzx eax, byte [eax]
test eax, eax
je 0x440ab5
mov eax, dword [ebp - 0xa70]
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp - 0xa78]
mov dword [ebp - 0xa90], eax
mov eax, dword [ebp - 0xa80]
mov dword [ebp - 0xa98], eax
mov eax, dword [ebp - 0xa88]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0xa90]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0xaa0], eax
mov dword [ebp - 0x838], 0x24ad
mov dword [ebp - 0xab8], str.xny_pqueizrdo_wbcw_umoy_ace
cmp dword [ebp - 0x838], 0x25b5
jle 0x440a4f
and dword [ebp - 0x340], 0
jmp 0x440989
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x376
jge 0x440a4f
and dword [ebp - 0x330], 0
jmp 0x4409af
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0x5d37
jge 0x440a4a
and dword [ebp - 0x338], 0
jmp 0x4409d5
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0xe24
jge 0x440a45
and dword [ebp - 0x348], 0
jmp 0x4409f7
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0xdc1
jge 0x440a43
mov ecx, dword [ebp - 0x330]
imul ecx, dword [ebp - 0x338]
mov eax, dword [ebp - 0x340]
shl eax, cl
or eax, dword [ebp - 0x348]
cdq
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], edx
push dword [ebp - 0xc08]
push dword [ebp - 0xc0c]
mov ecx, 0xace058
call fcn.004063d1
jmp 0x4409ea
jmp 0x4409c8
jmp 0x4409a2
jmp 0x44097c
mov eax, dword [ebp - 0xaa0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xaa8]
mov ecx, dword [ecx]
sub ecx, dword [eax + 0x34]
mov eax, dword [ebp - 0xab0]
mov dword [eax], ecx
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x838], 0x2130
jge 0x440a8d
mov edx, dword [ebp - 0xab8]
mov ecx, 0xace058
call fcn.00409042
jmp 0x440aa9
or dword [ebp - 4], 0xffffffff
jmp 0x440ab3
jmp 0x440b27
mov eax, dword [ebp - 0xac0]
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0xac8]
mov dword [ebp - 0xad8], eax
mov eax, dword [ebp - 0xad0]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0xad8]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0x174]
mov dword [eax], 0
jmp 0x440b04
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x174]
mov dword [ecx], eax
mov eax, dword [ebp - 0x174]
cmp dword [eax], 3
jge 0x440b27
mov eax, dword [ebp - 0x174]
push dword [eax]
mov ecx, dword [ebp - 0xae0]
call fcn.00406814
or dword [eax], 0xffffffff
jmp 0x440af3
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x840], 0x414a
jge 0x440b4a
mov edx, dword [ebp - 0xae8]
mov ecx, 0xace058
call fcn.00409042
jmp 0x440b66
or dword [ebp - 4], 0xffffffff
jmp 0x440b70
jmp 0x440b9a
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0xaf0], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xaf8], eax
push dword [ebp - 0xaf0]
push dword [ebp - 0xaf8]
push 1
call fcn.00418a28
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret