Function at 0x42e3ee
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4b4
push esi
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x150], 6
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x2bc], 0xfffffff6
mov dword [ebp - 0xdc], 0
jmp 0x42e436
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x42e452
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x380], 0xfffffff9
jmp 0x42e429
cmp dword [ebp - 0x10], 0xd7c1188e
jae 0x42e467
mov dword [ebp - 0x148], 1
jmp 0x42e46e
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x10], 1
je 0x42e480
mov dword [ebp - 0x1b4], 1
jmp 0x42e487
and dword [ebp - 0x1b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax - 0x380], ecx
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jne 0x42e4b2
mov dword [ebp - 0x244], 1
jmp 0x42e4b9
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x244], eax
jge 0x42e4d0
mov dword [ebp - 0x24c], 1
jmp 0x42e4d7
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x24c], eax
je 0x42e4ee
mov dword [ebp - 0x23c], 1
jmp 0x42e4f5
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x23c]
jne 0x42e50f
mov dword [ebp - 0x1d0], 1
jmp 0x42e516
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x1d0]
jl 0x42e52d
mov dword [ebp - 0x250], 1
jmp 0x42e534
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
add eax, dword [ebp - 0x250]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2bc], eax
push 0x1161
push 0
call fcn.0043de24
pop ecx
pop ecx
mov dword [ebp - 4], 0xfffffffe
mov dword [ebp - 0x12c], 0xfffffff7
mov dword [ebp - 0x270], 1
mov dword [ebp - 0xd4], 0
jmp 0x42e59a
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x42e5b6
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x13c], 0x63588c55
jmp 0x42e58d
mov eax, dword [ebp - 4]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 4]
imul ecx, dword [ebp - 4], 0x1880
imul eax, ecx
cmp eax, dword [ebp - 4]
jg 0x42e5f5
cmp dword [ebp - 4], 0
je 0x42e5f5
mov dword [ebp - 0x2c4], 1
jmp 0x42e5fc
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x3a0], eax
mov eax, 0x9fe57f6c
cmp eax, 0x4956e74e
jb 0x42e626
mov dword [ebp - 0x158], 1
jmp 0x42e62d
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x158], eax
jl 0x42e644
mov dword [ebp - 0x310], 1
jmp 0x42e64b
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1d8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp + eax - 0x13c], ecx
cmp dword [ebp - 0x1d8], 0
je 0x42e73d
mov dword [ebp - 0x3b0], 0
mov dword [ebp - 0x3b8], 0x283d1f0d
mov dword [ebp - 0x3c0], 1
mov dword [ebp - 0x3c8], 7
push 3
lea ecx, [ebp - 0x330]
call fcn.0042bc99
mov dword [ebp - 0xc], 0
jmp 0x42e6c2
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x42e6d8
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x4a4], 0xfffffff7
jmp 0x42e6bb
mov dword [ebp - 0xc], 0
jmp 0x42e6e8
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x42e6fe
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x498], 0xca4d9a54
jmp 0x42e6e1
push 0
push 0x6ce2
push 0x74cf
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x330]
push eax
call fcn.0043104c
add esp, 0x14
lea eax, [ebp - 0x330]
push eax
push 0
call fcn.00430a47
pop ecx
pop ecx
lea ecx, [ebp - 0x330]
call fcn.0042bd6b
jmp 0x42e974
mov dword [ebp - 0x88], 0x510b2d4a
mov dword [ebp - 0x2c8], 3
mov dword [ebp - 4], 1
jmp 0x42e761
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x42e966
mov dword [ebp - 0xc8], 0
jmp 0x42e784
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x42e7a0
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x3e0], 0x6367afff
jmp 0x42e777
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x13c], 0xffffffff
jg 0x42e82b
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x88]
cmp dword [ebp + eax*4 - 0x13c], ecx
jg 0x42e7cb
mov dword [ebp - 0x160], 1
jmp 0x42e7d2
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
add eax, 0x4630
cmp eax, dword [ebp - 0x88]
jge 0x42e7f1
mov dword [ebp - 0x218], 1
jmp 0x42e7f8
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x218], eax
jge 0x42e80f
mov dword [ebp - 0x168], 1
jmp 0x42e816
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 1
jle 0x42e82b
mov dword [ebp - 0x1e0], 1
jmp 0x42e832
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 1
jl 0x42e847
mov dword [ebp - 0x128], 1
jmp 0x42e84e
and dword [ebp - 0x128], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x128]
mov dword [ebp + eax - 0x3e0], ecx
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x128], eax
jle 0x42e87b
mov dword [ebp - 0x324], 1
jmp 0x42e882
and dword [ebp - 0x324], 0
xor eax, eax
cmp eax, 0x3da7
ja 0x42e897
mov dword [ebp - 0x2b4], 1
jmp 0x42e89e
and dword [ebp - 0x2b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13c]
mov dword [ebp - 0x3d0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e0]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 4]
imul ecx, dword [ebp - 0x88], 7
cmp dword [ebp + eax*4 - 0x13c], ecx
jg 0x42e8e3
mov dword [ebp - 0x170], 1
jmp 0x42e8ea
and dword [ebp - 0x170], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x170]
sub ecx, dword [ebp + eax - 0x13c]
cmp ecx, dword [ebp - 0x12c]
jne 0x42e911
mov dword [ebp - 0x238], 1
jmp 0x42e918
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x238], eax
jne 0x42e932
mov dword [ebp - 0x178], 1
jmp 0x42e939
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 3
jne 0x42e94e
mov dword [ebp - 0x1e8], 1
jmp 0x42e955
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x2c8], eax
jmp 0x42e75a
push 0
push 0x4d76
call fcn.00437da1
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x12c]
push eax
call fcn.0044f430
pop ecx
pop ecx
mov byte [ebp - 0x124], 7
mov byte [ebp - 0x123], 0x69
mov byte [ebp - 0x122], 0xc
mov byte [ebp - 0x121], 0x70
mov byte [ebp - 0x120], 2
mov byte [ebp - 0x11f], 0x68
mov byte [ebp - 0x11e], 8
mov byte [ebp - 0x11d], 0x70
mov byte [ebp - 0x11c], 1
mov byte [ebp - 0x11b], 0x6b
mov byte [ebp - 0x11a], 5
mov byte [ebp - 0x119], 0x71
mov byte [ebp - 0x118], 6
mov byte [ebp - 0x117], 0x74
mov byte [ebp - 0x116], 0xd
mov byte [ebp - 0x115], 0x7d
mov byte [ebp - 0x114], 0x12
mov byte [ebp - 0x113], 0xae
mov byte [ebp - 0x112], 0x18
mov byte [ebp - 0x111], 0xbe
mov byte [ebp - 0x110], 0xcf
mov byte [ebp - 0x10f], 0x83
mov byte [ebp - 0x10e], pe_nt_image_headers32
mov byte [ebp - 0x10d], 0xce
mov byte [ebp - 0x10c], 0xa3
mov byte [ebp - 0x10b], 0x3b
mov byte [ebp - 0x10a], 0x5c
mov byte [ebp - 0x109], 0xad
mov byte [ebp - 0x108], 0x4f
mov byte [ebp - 0x107], 0x9a
mov byte [ebp - 0x106], 0x4f
mov byte [ebp - 0x105], 0xde
mov byte [ebp - 0x104], 0xd8
mov byte [ebp - 0x103], 0xe6
mov byte [ebp - 0x102], 3
mov byte [ebp - 0x101], 0x75
mov byte [ebp - 0x100], 0x14
mov byte [ebp - 0xff], 0x88
mov byte [ebp - 0xfe], 0x15
mov byte [ebp - 0xfd], 0x8b
mov byte [ebp - 0xfc], 0x10
mov byte [ebp - 0xfb], 0x88
mov byte [ebp - 0xfa], 0x12
mov byte [ebp - 0xf9], 0x8c
mov byte [ebp - 0xf8], 0x11
mov byte [ebp - 0xf7], 0x8d
mov byte [ebp - 0xf6], 0x19
mov byte [ebp - 0xf5], 0x97
mov byte [ebp - 0xf4], 0x17
mov byte [ebp - 0xf3], 0x97
mov byte [ebp - 0xf2], 0xa
mov byte [ebp - 0xf1], 0x8c
mov byte [ebp - 0xf0], 0x18
mov byte [ebp - 0xef], 0x9c
mov byte [ebp - 0xee], 4
mov byte [ebp - 0xed], 0x8a
mov byte [ebp - 0xec], 0x13
mov byte [ebp - 0xeb], 0x9b
mov byte [ebp - 0xea], 0
mov byte [ebp - 0xe9], 0x8a
mov byte [ebp - 0xe8], 0xb
mov byte [ebp - 0xe7], 0x97
mov byte [ebp - 0xe6], 9
mov byte [ebp - 0xe5], 0x97
mov byte [ebp - 0xe4], 0xf
mov byte [ebp - 0xe3], 0x9f
mov byte [ebp - 0xe2], 0xe
mov byte [ebp - 0xe1], 0xa0
mov byte [ebp - 0xe0], 0x16
mov byte [ebp - 0xdf], 0xaa
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x364], 2
mov dword [ebp - 0x360], 2
mov dword [ebp - 0x35c], 2
mov dword [ebp - 0x358], 2
mov dword [ebp - 0xc0], 0
jmp 0x42ebb6
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 4
jge 0x42ebd2
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x4b4], 0xffffffff
jmp 0x42eba9
mov dword [ebp - 0x78], 0
jmp 0x42ebe2
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jg 0x42ee17
mov dword [ebp - 0x14], 9
mov dword [ebp - 0x14], 0
jmp 0x42ec03
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x42ed94
mov dword [ebp - 0x90], 0xb8ce3e63
mov dword [ebp - 0x90], 3
jmp 0x42ec30
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x42ed8f
push 1
lea ecx, [ebp - 0x2e4]
call fcn.0042bc99
lea eax, [ebp - 0x2e4]
push eax
push 0
lea eax, [ebp - 0x424]
push eax
call fcn.0043067f
add esp, 0xc
push 0
lea ecx, [ebp - 0x2e4]
call fcn.0042bd87
and dword [eax], 0
jmp 0x42ec98
push 0
lea ecx, [ebp - 0x2e4]
call fcn.0042bd87
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x180]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2e4]
call fcn.0042bd87
cmp dword [eax], 3
jg 0x42ed7f
push 2
lea ecx, [ebp - 0x2d4]
call fcn.0042bc99
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x42c]
push eax
push 0
push 0x6e57
call fcn.0043baa6
add esp, 0x10
mov byte [ebp - 0x3f], 0
push 0xaab
push 0x1c49
push 0x4599
push 0x466d
push 0x2e0f
push 0x7619
push 0
lea eax, [ebp - 0x3f]
push eax
call fcn.00430747
add esp, 0x20
push 1
lea ecx, [ebp - 0x2d4]
call fcn.0042bd87
mov dword [eax], 3
jmp 0x42ed41
push 1
lea ecx, [ebp - 0x2d4]
call fcn.0042bd87
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x220]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x2d4]
call fcn.0042bd87
cmp dword [eax], 0
jl 0x42ed6f
mov dword [ebp - 0x278], 0xfffffff6
lea eax, [ebp - 0x278]
push eax
push 0
call fcn.00445bf7
pop ecx
pop ecx
jmp 0x42ed1d
lea ecx, [ebp - 0x2d4]
call fcn.0042bd6b
jmp 0x42ec74
lea ecx, [ebp - 0x2e4]
call fcn.0042bd6b
jmp 0x42ec23
jmp 0x42ebfc
mov dword [ebp - 0x14], 0
jmp 0x42eda4
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x42ee12
mov dword [ebp - 0x320], 0x56540f21
push 0x3b7e
push 0
push 0x3208
push 1
push 0x6625
call fcn.00438a83
add esp, 0x14
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x410], eax
xor eax, eax
inc eax
jne 0x42ede9
mov dword [ebp - 0x130], 1
jmp 0x42edf0
and dword [ebp - 0x130], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax - 0x364], ecx
mov eax, dword [ebp - 0x130]
inc eax
inc eax
mov dword [ebp - 0x320], eax
jmp 0x42ed9d
jmp 0x42ebdb
and dword [ebp - 0x18], 0
and dword [ebp - 0x230], 0
jmp 0x42ee2c
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x46
jae 0x42f5aa
mov dword [ebp - 0xd0], 2
mov dword [ebp - 0xd0], 0x15
jmp 0x42ee59
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xffffffe2
jle 0x42ef48
mov dword [ebp - 0x98], 0
mov byte [ebp - 0x42], 0
push 0
push 0x7ea
lea eax, [ebp - 0x42]
push eax
call fcn.0044d98c
add esp, 0xc
mov dword [ebp - 0x98], 0x15
jmp 0x42eea0
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x12
jge 0x42ef43
push 3
lea ecx, [ebp - 0x3f0]
call fcn.0042bc99
mov dword [ebp - 0x378], 0xfffffffb
push 2
lea ecx, [ebp - 0x33c]
call fcn.0042bc99
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x280]
push eax
push 0x1229
push 0
call fcn.004344e4
add esp, 0x10
push 0x2165
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x33c]
push eax
push 0
push 0
call fcn.0043615b
add esp, 0x14
push 0x1508
push 0x6fed
lea eax, [ebp - 0x33c]
push eax
push 0
call fcn.0043af54
add esp, 0x10
lea ecx, [ebp - 0x33c]
call fcn.0042bd6b
lea ecx, [ebp - 0x3f0]
call fcn.0042bd6b
jmp 0x42ee93
jmp 0x42ee4c
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x124]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x42f2d0
mov dword [ebp - 0xa0], 0xe6e83846
mov dword [ebp - 0x2d8], 0xa421e0be
mov dword [ebp - 0x198], 0xbf35dd75
mov dword [ebp - 0x288], 0x1b05
mov dword [ebp - 0x388], 0xd3b51a
cmp dword [ebp - 0xa0], 0
jne 0x42efcf
cmp dword [ebp - 0xa0], 0xfffffffc
jne 0x42efb3
mov dword [ebp - 0x188], 1
jmp 0x42efba
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0x8f21
jle 0x42efcf
and dword [ebp - 0x1f0], 0
jmp 0x42efd9
mov dword [ebp - 0x1f0], 1
mov eax, dword [ebp - 0x1f0]
inc eax
je 0x42effe
mov byte [ebp - 0x2e], 0
push 0x681
lea eax, [ebp - 0x2e]
push eax
push 0
call fcn.00431f56
add esp, 0xc
jmp 0x42f1ec
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x1c0], 0xb6cd04cd
mov dword [ebp - 0xd8], 0
jmp 0x42f028
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jge 0x42f044
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x400], 0xfffffff6
jmp 0x42f01b
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x34], eax
jle 0x42f05b
mov dword [ebp - 0x190], 1
jmp 0x42f062
and dword [ebp - 0x190], 0
cmp dword [ebp - 0x190], 1
je 0x42f077
mov dword [ebp - 0x248], 1
jmp 0x42f07e
and dword [ebp - 0x248], 0
imul eax, dword [ebp - 0x248], 0xfffe
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x198], eax
jge 0x42f0a8
mov dword [ebp - 0x1f8], 1
jmp 0x42f0af
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x1f8]
jne 0x42f0c6
mov dword [ebp - 0x228], 1
jmp 0x42f0cd
and dword [ebp - 0x228], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x400]
dec eax
mov dword [ebp - 0x1a0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp + eax - 0x400], ecx
mov eax, dword [ebp - 0x1a0]
cmp eax, dword [ebp - 0x228]
jne 0x42f10e
mov dword [ebp - 0x1a8], 1
jmp 0x42f115
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x1a8]
jg 0x42f12f
mov dword [ebp - 0x200], 1
jmp 0x42f136
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x200], eax
jle 0x42f153
mov eax, 0xfd47
test eax, eax
jne 0x42f153
and dword [ebp - 0x1b0], 0
jmp 0x42f15d
mov dword [ebp - 0x1b0], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1b0], eax
jle 0x42f174
mov dword [ebp - 0x240], 1
jmp 0x42f17b
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x240], eax
jg 0x42f192
mov dword [ebp - 0x1b8], 1
jmp 0x42f199
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
inc eax
cmp eax, dword [ebp - 0x34]
jg 0x42f1b1
mov dword [ebp - 0x208], 1
jmp 0x42f1b8
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0x7186
push 0
push 0x1302
push 1
lea eax, [ebp - 0x288]
push eax
call fcn.00443658
add esp, 0x1c
push 0
lea eax, [ebp - 0x230]
push eax
call fcn.00430bdf
pop ecx
pop ecx
mov dword [ebp - 0x48], 0x9c28ade1
mov dword [ebp - 0xcc], 0
jmp 0x42f21c
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x42f238
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x318], 0
jmp 0x42f20f
mov dword [ebp - 0x48], 0
jmp 0x42f248
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x42f25e
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x318], 0x29be
jmp 0x42f241
push 0
lea eax, [ebp - 0x48]
push eax
call fcn.00430903
pop ecx
pop ecx
push 0
push 0x5697
push 0x1d28
push 0x5241
lea eax, [ebp - 0x18]
push eax
call fcn.0044a6cd
add esp, 0x14
mov dword [ebp - 0x390], 2
mov byte [ebp - 0x3e], 0
push 0x6245
push 0
push 0x3cb3
push 0x57c0
lea eax, [ebp - 0x3e]
push eax
push 0
push 0x378f
call fcn.004313c3
add esp, 0x1c
mov byte [ebp - 0x41], 0
lea eax, [ebp - 0x41]
push eax
push 0
call fcn.0044f0f2
pop ecx
pop ecx
jmp 0x42ee24
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0x6c], 0xffffffe3
jmp 0x42f2e7
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x15
je 0x42f342
mov dword [ebp - 0xa8], 0
jmp 0x42f306
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x42f322
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x450], 0x1dbeccce
jmp 0x42f2f9
push 0
push 0x5bcf
call fcn.00430369
pop ecx
pop ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6c]
mov dword [ebp + eax - 0x450], ecx
jmp 0x42f2e0
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x123]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x230]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x54], 0xac204e2d
mov dword [ebp - 0xc4], 0xfffffff7
mov dword [ebp - 0x7c], 0
jmp 0x42f381
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x42f397
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x374], 0xfffffffa
jmp 0x42f37a
mov dword [ebp - 0x54], 0xffffffe3
jmp 0x42f3a7
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffea
jne 0x42f53c
mov dword [ebp - 0x70], 6
mov dword [ebp - 0x15c], 4
mov dword [ebp - 0xb0], 0
jmp 0x42f3db
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x42f3f7
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x474], 0
jmp 0x42f3ce
cmp dword [ebp - 0x70], 0
je 0x42f402
jmp 0x42f53c
cmp dword [ebp - 0x70], 0
jne 0x42f42b
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x374]
cmp dword [ebp + eax - 0x374], ecx
jne 0x42f42b
and dword [ebp - 0x1c8], 0
jmp 0x42f435
mov dword [ebp - 0x1c8], 1
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x1c8]
jg 0x42f44c
mov dword [ebp - 0x144], 1
jmp 0x42f453
and dword [ebp - 0x144], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x374]
cmp dword [ebp - 0x70], eax
jle 0x42f471
mov dword [ebp - 0x134], 1
jmp 0x42f478
and dword [ebp - 0x134], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x134]
mov dword [ebp + eax - 0x474], ecx
cmp dword [ebp - 0x134], 4
jne 0x42f49f
mov dword [ebp - 0x290], 1
jmp 0x42f4a6
and dword [ebp - 0x290], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x374], 0x6dd2cc91
jg 0x42f4c5
mov dword [ebp - 0x210], 1
jmp 0x42f4cc
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x144], eax
je 0x42f4fb
cmp dword [ebp - 0xc4], 0
je 0x42f4fb
mov dword [ebp - 0x14c], 1
jmp 0x42f502
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
neg eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x70], eax
jle 0x42f524
mov dword [ebp - 0x154], 1
jmp 0x42f52b
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x15c], eax
jmp 0x42f3a0
push 0
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x54]
push eax
push 0x30b4
push 0x7498
call fcn.00431aa7
add esp, 0x14
push 0
push 0x4be3
push 0x6bb3
push 0x1c2c
push 0x12f6
lea eax, [ebp - 0x164]
push eax
push 0x4bfa
call fcn.00432099
add esp, 0x1c
push 0
call fcn.004359bf
pop ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x124]
mov cl, byte [ebp - 0x164]
mov byte [ebp + eax - 0x490], cl
jmp 0x42ee24
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x1c], 7
push 1
lea ecx, [ebp - 0x2f4]
call fcn.0042bc99
mov dword [ebp - 0xb8], 0
jmp 0x42f5de
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x42f600
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x2f4]
call fcn.0042bd87
mov dword [eax], 0x74c7af5a
jmp 0x42f5d1
push 0
push 0x1c95
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.00438bdf
add esp, 0x14
mov dword [ebp - 0x1c], 0
jmp 0x42f62e
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x42f892
mov dword [ebp - 0x264], 0xc25c5395
mov dword [ebp - 0x50], 0
jmp 0x42f652
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x42f885
mov dword [ebp - 0x80], 0
jmp 0x42f66c
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x42f682
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x260], 5
jmp 0x42f665
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x260], 0
jmp 0x42f6b0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x260]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x260], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x260], 0
jl 0x42f880
mov dword [ebp - 0x64], 0xb372ba29
mov dword [ebp - 0x64], 0
jmp 0x42f6db
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x42f87b
push 8
pop eax
test eax, eax
je 0x42f756
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x2f4]
call fcn.0042bd87
cmp dword [eax], 0
jne 0x42f715
xor eax, eax
inc eax
sub eax, dword [ebp - 0x1c]
cmp eax, 0x8adc705
jge 0x42f715
and dword [ebp - 0x16c], 0
jmp 0x42f71f
mov dword [ebp - 0x16c], 1
cmp dword [ebp - 0x16c], 0x9829
je 0x42f737
mov dword [ebp - 0x174], 1
jmp 0x42f73e
and dword [ebp - 0x174], 0
cmp dword [ebp - 0x174], 0xffff
ja 0x42f756
mov dword [ebp - 0x2e8], 1
jmp 0x42f75d
and dword [ebp - 0x2e8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x260]
mov dword [ebp - 0x38c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
push 4
pop ecx
imul ecx, ecx, 3
add eax, dword [ebp + ecx - 0x260]
cmp eax, 0xffffffff
jg 0x42f7ab
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x260], 0
je 0x42f7ab
mov dword [ebp - 0x17c], 1
jmp 0x42f7b2
and dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 0xfffffffb
jne 0x42f7c7
mov dword [ebp - 0x184], 1
jmp 0x42f7ce
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x184], eax
je 0x42f7e5
mov dword [ebp - 0x18c], 1
jmp 0x42f7ec
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0x18c], eax
jge 0x42f806
mov dword [ebp - 0x194], 1
jmp 0x42f80d
and dword [ebp - 0x194], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x260]
cmp dword [ebp - 0x194], eax
jg 0x42f82e
mov dword [ebp - 0x19c], 1
jmp 0x42f835
and dword [ebp - 0x19c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x260]
cmp dword [ebp - 0x19c], eax
jle 0x42f856
mov dword [ebp - 0x1a4], 1
jmp 0x42f85d
and dword [ebp - 0x1a4], 0
mov esi, dword [ebp - 0x1a4]
sub esi, 0xa
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x2f4]
call fcn.0042bd87
mov dword [eax], esi
jmp 0x42f6d4
jmp 0x42f695
jmp 0x42f64b
cmp dword [ebp - 0x50], 0
je 0x42f88d
jmp 0x42f892
jmp 0x42f627
lea ecx, [ebp - 0x2f4]
call fcn.0042bd6b
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x490], 0
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x468]
call fcn.00407d13
mov dword [ebp - 0x3e4], 0xffffffff
push 0x68bf
push 0
push 0x7c25
call fcn.00440862
add esp, 0xc
push 0
push 0x6268
call fcn.00442652
pop ecx
pop ecx
and dword [ebp - 0x84], 0
jmp 0x42f8ff
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1b
jae 0x42f918
mov eax, dword [ebp - 0x84]
mov byte [ebp + eax - 0x490], 0
jmp 0x42f8f2
push 2
lea ecx, [ebp - 0x348]
call fcn.0042bc99
mov dword [ebp - 0x74], 3
mov dword [ebp - 0x2f8], 0xfffffffa
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x140], 0x4677319
push 0x3f56
push 0
push 0x16d4
lea eax, [ebp - 0x348]
push eax
lea eax, [ebp - 0x394]
push eax
push 1
call fcn.00436102
add esp, 0x18
mov dword [ebp - 0x74], 0
jmp 0x42f97b
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jg 0x42faca
push 1
lea ecx, [ebp - 0x304]
call fcn.0042bc99
mov dword [ebp - 0x2a0], 0xdd66408
push 0
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x304]
push eax
call fcn.0043a3c6
add esp, 0xc
push 0
lea ecx, [ebp - 0x304]
call fcn.0042bd87
and dword [eax], 0
jmp 0x42f9ea
push 0
lea ecx, [ebp - 0x304]
call fcn.0042bd87
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1ac]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x304]
call fcn.0042bd87
cmp dword [eax], 1
jg 0x42faba
mov dword [ebp - 0x30c], 0xffffffff
mov dword [ebp - 0x60], 0x3d2f5512
lea eax, [ebp - 0x348]
push eax
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x2f8]
push eax
push 0
lea eax, [ebp - 0x74]
push eax
call fcn.00434a6e
add esp, 0x24
mov dword [ebp - 0x5c], 0x1a
jmp 0x42fa5a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x1d
jle 0x42fab5
mov dword [ebp - 0x2a8], 0xffff
mov dword [ebp - 0x60], 1
jmp 0x42fa7a
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x42fab3
lea eax, [ebp - 0x140]
push eax
push 0
push 0x78a7
lea eax, [ebp - 0x2a8]
push eax
push 0x6383
push 1
push 0x684c
call fcn.004313c3
add esp, 0x1c
push 0
call fcn.00440730
pop ecx
jmp 0x42fa73
jmp 0x42fa53
jmp 0x42f9c6
lea ecx, [ebp - 0x304]
call fcn.0042bd6b
jmp 0x42f974
lea ecx, [ebp - 0x348]
call fcn.0042bd6b
push 0xa92e3a
lea ecx, [ebp - 0x444]
call fcn.00407d13
mov dword [ebp - 0x4c], 0xffff
mov dword [ebp - 0x8c], 0
jmp 0x42fb05
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x42fb1e
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x24], 0xe8cff0ea
jmp 0x42faf8
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x24], 0x13
jmp 0x42fb43
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x24], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0x1b
jge 0x42fb6c
mov dword [ebp - 0x314], 3
push 0
lea eax, [ebp - 0x314]
push eax
call fcn.004326f6
pop ecx
pop ecx
jmp 0x42fb2e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x39c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
push 0xfffffffffffffffd
pop edx
sub edx, dword [ebp + ecx - 0x24]
push 4
pop ecx
imul ecx, ecx, 0
add edx, dword [ebp + ecx - 0x24]
cmp dword [ebp + eax - 0x24], edx
jle 0x42fbab
mov dword [ebp - 0x1bc], 1
jmp 0x42fbb2
and dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 0xc924
jle 0x42fbd0
mov eax, 0x1145
test eax, eax
jne 0x42fbd0
and dword [ebp - 0x1c4], 0
jmp 0x42fbda
mov dword [ebp - 0x1c4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp eax, dword [ebp - 0x1c4]
jne 0x42fbf8
mov dword [ebp - 0x2b0], 1
jmp 0x42fbff
and dword [ebp - 0x2b0], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 9
jbe 0x42fc18
mov dword [ebp - 0x308], 1
jmp 0x42fc1f
and dword [ebp - 0x308], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x3f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
je 0x42fce6
mov dword [ebp - 0x94], 0xe2db80eb
mov dword [ebp - 0x3a4], 0
push 0
call fcn.0043279f
pop ecx
mov dword [ebp - 0x94], 0xffffffff
jmp 0x42fc75
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x16
jne 0x42fce1
mov dword [ebp - 0x9c], 0x5537c57f
mov dword [ebp - 0x408], 0x335900b0
mov dword [ebp - 0x9c], 0x13
jmp 0x42fcab
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x12
jle 0x42fcdf
push 0
lea eax, [ebp - 0x4c]
push eax
call fcn.00432191
pop ecx
pop ecx
mov byte [ebp - 0x3d], 0
push 0x54a6
lea eax, [ebp - 0x3d]
push eax
push 0
push 0x15e
call fcn.00431d16
add esp, 0x10
jmp 0x42fc9e
jmp 0x42fc68
jmp 0x42fe32
mov dword [ebp - 0x68], 0x1636
mov dword [ebp - 0x4c], 0xfffffff9
jmp 0x42fcfd
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x28
jle 0x42fe32
mov dword [ebp - 0x1dc], 1
mov dword [ebp - 0x31c], 0x3af8ef5d
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x404], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x68], 0x49d9
jl 0x42fd55
mov dword [ebp - 0x1cc], 1
jmp 0x42fd5c
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x1cc]
jne 0x42fd73
mov dword [ebp - 0x1d4], 1
jmp 0x42fd7a
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
add eax, 8
cmp eax, dword [ebp - 0x1dc]
jg 0x42fd97
mov dword [ebp - 0x1e4], 1
jmp 0x42fd9e
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x1e4], eax
jg 0x42fdb5
mov dword [ebp - 0x1ec], 1
jmp 0x42fdbc
and dword [ebp - 0x1ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x1ec], eax
jl 0x42fdda
mov dword [ebp - 0x2b8], 1
jmp 0x42fde1
and dword [ebp - 0x2b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x414], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x41c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0x31c], 0
jmp 0x42fcf6
lea ecx, [ebp - 0x444]
call fcn.00403e02
cmp eax, dword [ebp + 0xc]
je 0x4301de
mov dword [ebp - 0x1f4], 0x2c03342e
mov dword [ebp - 0x26c], 0x34b0b4ef
mov dword [ebp - 0x274], 0x5755261f
mov dword [ebp - 0x284], 0x8e3bf118
mov dword [ebp - 0x268], 0xfff7
push 1
lea ecx, [ebp - 0x354]
call fcn.0042bc99
mov dword [ebp - 0x27c], 0x3be41b0c
mov dword [ebp - 0x2c0], 0xb172abf7
lea eax, [ebp - 0x354]
push eax
push 0x471a
push 0
lea eax, [ebp - 0x3cc]
push eax
push 0x4e6a
call fcn.004345ed
add esp, 0x14
push 0
push 0x3445
lea eax, [ebp - 0x1f4]
push eax
call fcn.0044359a
add esp, 0xc
push 0
lea eax, [ebp - 0x354]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x1f4]
push eax
call fcn.0043137f
add esp, 0x24
lea ecx, [ebp - 0x354]
call fcn.0042bd6b
lea eax, [ebp - 0x2ac]
push eax
push 0
lea eax, [ebp - 0x468]
push eax
call fcn.0044fe53
add esp, 0xc
mov dword [ebp - 0x28c], 0xfffffffe
mov dword [ebp - 8], 1
mov dword [ebp - 0x3c], 0xb07fb07d
mov dword [ebp - 0x58], 0x9583e358
mov dword [ebp - 0x294], 1
mov dword [ebp - 0xa4], 0
jmp 0x42ff78
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x42ff91
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x2c], 1
jmp 0x42ff6b
push 0x6655
push 0x53b2
push 0x6816
push 0x4951
push 0x340b
push 0x374b
push 0
lea eax, [ebp - 0x58]
push eax
push 0x635
push 0x3a7b
push 0x3761
push 0x2b77
push 0x61fd
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0x1169
call fcn.004351f7
add esp, 0x48
mov dword [ebp - 0x3c], 0
jmp 0x430001
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x4301ba
mov dword [ebp - 0x1fc], 0xffffffff
mov dword [ebp - 8], 0
jmp 0x430025
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jg 0x4301b5
mov dword [ebp - 0x29c], 0x4fdaf0db
mov byte [ebp - 0x2d], 0
push 0
push 0x75a7
push 0x2382
lea eax, [ebp - 0x2d]
push eax
call fcn.00431a7e
add esp, 0x10
mov dword [ebp - 0x58], 0
jmp 0x430065
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jg 0x4301b0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x1fc], eax
jg 0x430089
mov dword [ebp - 0x204], 1
jmp 0x430090
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x1fc]
imul eax, dword [ebp - 0x204]
cmp eax, 3
jle 0x4300ae
mov dword [ebp - 0x20c], 1
jmp 0x4300b5
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x20c]
jne 0x4300cc
mov dword [ebp - 0x214], 1
jmp 0x4300d3
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x2c]
cmp dword [ebp - 0x214], eax
jge 0x4300f5
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x2c], 0
jne 0x4300f5
and dword [ebp - 0x21c], 0
jmp 0x4300ff
mov dword [ebp - 0x21c], 1
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x2c]
cmp eax, dword [ebp - 0x21c]
jne 0x43011a
mov dword [ebp - 0x224], 1
jmp 0x430121
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 0xc17f
jg 0x430139
mov dword [ebp - 0x22c], 1
jmp 0x430140
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0
jbe 0x430155
mov dword [ebp - 0x2a4], 1
jmp 0x43015c
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x2c]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp + ecx*4 - 0x2c]
cmp dword [ebp + eax*4 - 0x2c], ecx
jl 0x430188
cmp dword [ebp - 0x3c], 0
jne 0x430188
and dword [ebp - 0x234], 0
jmp 0x430192
mov dword [ebp - 0x234], 1
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x2c], ecx
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x2c], 0
je 0x4301ab
jmp 0x4301b0
jmp 0x43005e
jmp 0x43001e
jmp 0x42fffa
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x468]
push eax
push 0
call fcn.00430598
add esp, 0x10
jmp 0x42fe32
mov dword [ebp - 0xac], 0xb26bdde0
mov dword [ebp - 0xac], 0
jmp 0x430201
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xfffffffa
jg 0x43031d
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 0
jmp 0x430225
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 9
jle 0x4302f8
mov dword [ebp - 0xb4], 0
jmp 0x430248
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x430264
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0xbc], 0
jmp 0x43023b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xbc], 0
jmp 0x430292
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xbc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbc], 0xffffffeb
jl 0x4302d6
mov byte [ebp - 0x40], 0
push 0x3df5
push 0
push 0x43ca
lea eax, [ebp - 0x40]
push eax
push 0x18be
call fcn.00432859
add esp, 0x14
mov byte [ebp - 0x35], 0
push 0
lea eax, [ebp - 0x35]
push eax
call fcn.00430a28
pop ecx
pop ecx
jmp 0x430277
push 1
push 0x1704
push 1
push 0
push 0x685b
push 0x2219
call fcn.0044c9a1
add esp, 0x18
jmp 0x43021e
mov dword [ebp - 0x28], 0
jmp 0x430308
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffff6
je 0x430318
push 0
call fcn.00440ad2
pop ecx
jmp 0x430301
jmp 0x4301f4
lea eax, [ebp - 0x444]
push eax
mov ecx, dword [ebp + 8]
call fcn.00402efd
lea ecx, [ebp - 0x444]
call fcn.00402f56
lea ecx, [ebp - 0x468]
call fcn.00402f56
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret